Anomaly Detection and Root Cause Localization in Virtual Network Functions

Carla Sauvanaud (1) , Kahina Lazri (2) , Mohamed Kaâniche (1) , Karama Kanoun (1)

1 LAAS-TSF - Équipe Tolérance aux fautes et Sûreté de Fonctionnement informatique
2 Orange Labs [Issy les Moulineaux]

The maturity of hardware virtualization has motivated Communication Service Providers (CSPs) to apply this paradigm to network services. Virtual Network Functions (VNFs) result from this trend and raise new dependability challenges related to network softwarisation that are still not thoroughly explored. This paper describes a new approach to detect Service Level Agreements (SLAs) violations and preliminary symptoms of SLAs violations. In particular one other major objective of our approach is to help CSP administrators to identify the anomalous VM at the origin of the detected SLA violation, which should enable them to proactively plan for appropriate recovery strategies. To this end, we make use of virtual machine (VM) monitoring data and perform both a per-VM and an ensemble analysis. Our approach includes a supervised machine learning algorithm as well as fault injection tools. The experimental testbed consists of a virtual IP Multimedia Subsystem developed by the Clearwater project. Experimental results show that our approach can achieve high precision and recall, and low false alarm rate and can pinpoint the root anomalous VNF VM causing SLA violations. It can also detect preliminary symptoms of high workloads triggering SLA violations.

Mots clés: VNF; monitoring data; machine learning; fault in- jection; SLA; root cause analysis; Virtual Network Functions; Supervised and unsupervised machine learning

Domaines: Performance et fiabilité [cs.PF]

Carla Sauvanaud, Kahina Lazri, Mohamed Kaâniche, Karama Kanoun. Anomaly Detection and Root Cause Localization in Virtual Network Functions. 27th International Symposium on Software Reliability Engineering (ISSRE 2016), Oct 2016, Ottawa, Canada. pp.196 - 206, ⟨10.1109/ISSRE.2016.32⟩. ⟨hal-01419014⟩