关键词: 多域网络, 服务功能链, 按需适配, 安全服务策略

Abstract: The service management and provisioning mode of traditional networks is static and rigid, which makes it difficult to formulate a unified security and scheduling policy for cross-domain data flows from a global perspective, and fails to meet diversified security requirements. This paper proposes an on-demand adaptation method for multi-domain security services based on Service Function Chaining（SFC）. It uses Software Defined Network（SDN） and Network Function Virtualization（NFV）, and establishes a unified description model through multiple layers of interfaces, then it configures the required security service resources, instantiates the required security service functions, and uses SFC to combine the security service functions to achieve on-demand adaptation of security services. Finally, with the implementation of prototype, the feasibility of the proposed method is verified in different experimental scenarios.

Key words: multi-domain networks, service function chaining, on-demand adaptation, security service policy