Virtual Firewall Service Chaining in a Private Mobile Core
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 5G cellular networks face challenges in implementing a firewall solution that can effectively manage and secure the diverse network interfaces of a private mobile core without requiring additional hardware resources, especially in compact designs where traditional firewalls may not be feasible.
Innovation Solution
Deploying a virtual firewall as a third virtual machine within the private mobile core, service-chaining it with control plane and user plane functions, and establishing static routes to direct network traffic through the virtual firewall for threat analysis and security management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional firewall is deployed in a private mobile core, then security management is improved, but hardware resources and device complexity increase
Solution Approach 1:
The patent creates a virtual copy of firewall functionality through a virtual machine rather than deploying physical firewall hardware. The virtual firewall VM is instantiated on existing infrastructure, copying the essential security functions to a virtual environment that shares underlying hardware resources with other network functions.
Solution Approach 2:
The existing host server infrastructure is made multi-functional by running multiple virtual machines including the firewall function alongside other network functions. This universal infrastructure supports diverse workloads (control plane, user plane, firewall) without requiring dedicated hardware for each function.
2Reliability
If a virtual firewall is deployed as a third virtual machine, then security coverage across multiple interfaces is improved, but system complexity increases
Solution Approach 1:
The virtual firewall function is merged with the existing virtualization infrastructure by deploying it as another VM on the same host server that runs control plane and user plane functions. This consolidation allows security coverage across multiple interfaces while leveraging the existing virtualization management framework.
Solution Approach 2:
The virtual firewall VM acts as an intermediary component that sits between network interfaces and other network functions. It mediates traffic flow and security policies across multiple interfaces without requiring fundamental changes to the underlying network architecture or existing VMs.
Data Source
AI summary
Aspects of the subject disclosure may include, for example, a method that includes deploying a first virtual machine configured to implement a plurality of control plane network functions in a wireless network, deploying a second virtual machine configured to implement a user plane function in the wireless network, deploying a third virtual machine configured to implement firewall functions, and deploying the first virtual machine, the second virtual machine and the third virtual machine on an on-premises host server. Other embodiments are disclosed.