隨著網路科技的發展，為了降低網路服務的營運成本、增加服務延展性，雲端技術是目前最流行的解決方案。為了增加服務部署的彈性，各國的虛擬化服務生紛紛投入Container虛擬化技術。有別於Hypervisor技術，Container提供更輕量化、更加彈性的部署，但是共用作業系統的特性也為Container技術帶來資訊安全上面的隱憂。本論文參考歐洲通訊標準協會 (European Telecommunications Standards Institute, ETSI)所提出的網路功能虛擬化 (Network Function Virtualization, NFV)架構及Rancher 專案整合Hypervisor及Container兩種虛擬化技術，建置一個混和虛擬化雲端平台 (Integrated Virtualization Cloud, IV Cloud)平台，提供網路服務商部署虛擬網路功能 (Virtual Network Function, VNF)。本論文提出基於模糊理論的即時自動擴展機制 (Fuzzy-based Real-time mechanism for Auto-Scaling, FARS)，此機制可以提供網路服務商一個動態、快速及低成本的自動擴展的資源配置解決方案。此外本論文亦設計個安全部署機制於IV Cloud平台提供服務商針對不同層級的安全需求對VNF進行安全部署。;With the rapid development of internet technology, to reduce internet service operating expenses and increase scaling of service, cloud computing is one of a most popular solution. To increase the elasticity of service deployment and reduce cost, cloud service operator has invested a lot of research resource to container virtualization technology. Unlike hypervisor, the container provides lightweight and elastic deployment. Service security issues may appear in the container with a shared kernel. In this thesis, according to the Network Functions Virtualization (NFV) Architecture Framework proposed by European Telecommunications Standards Institute (ETSI) and Rancher project build an Integrated Virtualization Cloud (IV Cloud) with hypervisor and container technology. IV Cloud provides the Virtual Network Function (VNF) deployment。This thesis proposed a Fuzzy-based Real-time mechanism for Auto-Scaling(FARS). FARS provides a dynamic, rapid and lower-cost auto-scaling method. Moreover, we provide and implement a security deployment mechanism in IV Cloud. This mechanism provides service operator different security level of VNF deployment.
