Software Defined Virtual Fibre Channel On Ethernrt Traffic Control

When FCoE deployed in the virtual ethernet inside a host, which lacks the mechanism to guarantee the network QoS, the performance of the virtual storage network is likely to become the bottleneck as the number of virtual machines in a host growing. Moreover, when the traffic of various virtual machines enters the network with other traffic together, the virtualization environment is fragile if attacked by the malicious traffic, thus faced with the security problem.To solve these problems, this paper presents SDTC-FCoE(Software Defined Traffic Controller- Fibre Channel over Ethernet), which is a software defined method to control the FCoE traffic. SDTC-FCoE system contoller consists of the modules to monitor, request, compute, transfer, syncronize and the components such as FIP snooping mapping table and filter. SDTC-FCoE provides the APIs for the applications to transfer, syncronize, identify and schedule, etc. At present, the system implements the functions including: monitor the FCoE virtual storage network, control the rate of packet loss and filter malicious traffic attack.STDC-FCoE implements the IO virtualization based on vNIC. We implemented multiple virtual machines logining the FCoE switch simultaneously within a host by vNIC and made a series of tests. The result shows that SDTC-FCoE system achieves excellent performance in multiple virtual machine environments, which can forward the messages to applications on the virtual machine correctly, schedule the IO processes appropriately and reduce the packet loss rate. The FIP snooping function guarantees that even if many virtual machines attack the FCoE switch at the same time, it does not cause any security problem because the system prevents the attack reaching the FCoE switch, neither it will impact the virtual switch, controller and the FCoE initiators seriously.