It is a hot research topic to solve the low performance of Virtual Network Function (VNF) in SDN/NFV (Software Defined Networking/Network Function Virtualization) architecture by designing hardware acceleration mechanism. After introducing the hardware acceleration resources to VNF, how to control and deploy these acceleration resources has been an urgent problem. To solve the problems above, a uniform hardware acceleration management architecture based on the accelerator cards on servers and OpenFlow switches was proposed. Based on this architecture, the model of acceleration resource deployment was built, and the evaluation indicators for the resource deployment mechanism was proposed by analyzing the impact of acceleration resources on service chain mapping. Finally, a two-stage acceleration resource deployment algorithm was designed. The experimental results show that, compared with Single-attribute Acceleration Resource Deployment algorithm (SARD) and Uniform Acceleration Resource Deployment algorithm (UARD), the proposed mechanism can optimize the deployment of the acceleration resources and improve the total traffic handled by acceleration resources and the utilization of acceleration resources by 41.4% and 14.5% respectively.

Great convenience has been brought by the centralized control plane of Software-Defined Network (SDN), but a lot of security risks have been introduced into it as well. In the light of single point failure, unknown vulnerabilities and back doors, static configuration and other security problems of the controller, a secure architecture for SDN based on Byzantine protocol was proposed, in which the Byzantine protocol was executed between controllers and each switching device was controlled by a controller view and control messages were decided by several controllers. Furthermore, the dynamics and heterogeneity were introduced into the proposed structure, so that the attack chain was broken and the capabilities of network active defense were enhanced; moreover, based on the quantification of the controller heterogeneity, a two-stage algorithm was designed to seek for the controller view, so that the availability of the network and the security of the controller view were ensured. Simulation results show that compared with the traditional structure, the proposed structure is more resistant to attacks.

Aiming at the low recovery efficiency by using the traditional re-mapping failure recovery algorithm and prolonged interruption of service, a Fault Recovery Algorithm based on Equivalent Resource (FRA-ER) was proposed. The FRA-ER converted the recovery problem to finding equivalent resource problem, achieving to recovery all or part of the fault RSCNs by once. A Network Reconfigure Algorithm (NRA) was also proposed to detect and regulate the RSCNs periodically to optimize their architectures and reduce the costs. Finally, the numerical results show that the proposed FRA-ER could achieve 15% recovery time reduction compared with conventional overall re-mapping algorithm and fast recovery algorithm. The NRA could achieve 80 band reduction on average, improving the recovery success ratio by 10%.