Software Defined Networking Concepts Research Articles

Analysis of micro- vs. macro-flows management in QKD-secured edge computing

Quantum Key Distribution (QKD) holds the promise of a secure exchange of cryptographic material between applications that have access to the same network of QKD nodes, interconnected through fiber optic or satellite links. Worldwide several such networks are being deployed at a metropolitan level, where edge computing is already offered by the telco operators to customers as a viable alternative to both cloud and on-premise hosting of computational resources. In this paper, we investigate the implications of enabling QKD for edge-native applications from a practical perspective of resource allocation in the QKD network and the edge infrastructure. Specifically, we consider the dichotomy between aggregating all the applications on the same source–destination path vs. adopting a more flexible micro-flow approach, inspired from Software Defined Networking (SDN) concepts. Our simulation results show that there is a fundamental trade-off between the efficient use of resources and the signaling overhead, which we managed to diminish with the use of suitable hybrid solutions.

UAV-enabled software defined data collection from an adaptive WSN

AbstractUnmanned aerial vehicle (UAV)-based data gathering from wireless sensor networks is one of the recent research topics that has currently attracted research interest. One of the challenges for the UAV-aided WSN data collection efforts is to design an energy-efficient UAV/drone communication with arbitrarily dispersed ground sensors by improving the ground network structure. This paper aims to develop a technique titled UAV Fuzzy Travel Path' that supports UAV smooth path design and enables ground network topology shifting. A comprehensive UAV-based data collection model is proposed to enable dynamic orchestration/re-orchestration of wireless ground sensors to jointly improve network performance and UAV path fluidity. This provides a more flexible ground network framework that can be restructured based on network demands and UAV optimal paths, effectively allowing for a software-defined network concept. The main contribution of this work is the implementation of the software-defined wireless sensor network on the ground network that adaptably supports the movement of the UAV and enhances the communication network’s energy efficiency with a proposed latency analytical analysis via network orchestration/re-orchestration phases. The main significance of this research is in offering a flexible span for UAV path design than being fixed in one strict route for data gathering purposes. Four various simulation tools are employed for modelling and performance evaluation, namely MATLAB, CupCarbon, Contiki-Cooja and Mission Planner. The proposed software-defined ground network system demonstrates encouraging results in terms of network performance metrics including energy consumption of UAV versus ground sensor nodes energy usage, packet delivery rate, and the communication time of the ground orchestrated or/and re-orchestrated network.

Hybrid RSA–AES-Based Software-Defined Network to Improve the Security of MANET

Abstract Software-defined networking offers a flexible and programmatically efficient network design. Security in today’s ad hoc mobile wireless network is paramount and incredibly challenging. Software-defined network is used to automatically and dynamically manage and control large network devices, network services, traffic paths, network topology, and packet management (quality of service). Recently different attackers are attacking our data when forwarding from one device to another. Therefore, software-defined networking and a Hybrid Rivest, Shamir, and Adelman (RSA)–Advanced Encryption Standard (AES) cryptography algorithm are needed to establish the concept of software-defined networking in mobile ad hoc networks to improve security and routing efficiency. The proposed Hybrid Cryptography Algorithm (HCA)-Based SDN mainly creates strong detection, prevention, and authentication mechanisms for MANET. The proposed secure data channel throughput increased by 0.4%, and the suggested system latency was 3.6% lower than the Normal MANET. It is already proved that the Hybrid cryptography algorithm also generates a key for security faster than RSA (Rivest, Shamir, and Adelman). The performance of the RSA–AES (hybrid) approach for encrypting and decrypting broad data significantly beats the RSA-Blowfish algorithm. In decrypting files, the hybrid approach (RSA–AES) outperforms the RSA-Blowfish method 11.2 times more efficiently when the file size is 32 kB; however, efficiency is increased by 77.1 times when the file size exceeds 4,096 kB. The experimental result shows that as the file size increases the hybrid RSA–AES solution outperforms RSA when the file is only 145 bytes; however, when the file is 6,460 bytes in size, the efficiency is multiplied by 61.3. As file size increases, RSA is less efficient than the hybrid encryption method. This is more preferred to be implemented for different parts of wireless networks like MANET.

Software Defined Netconomics

This paper is based on the fair analysis on the economic benefits of software defined networking. The paper will explain vividly the concept of software defined networking and its applications together with the economic advantage(s) with respect to both the client perspective and server perspective. In general, SDN provides lower hardware and operational cost in an excessive traffic load of nowadays users. It has tighter security and faster response time with improved management and planning of server controller. SDN when deployed provides better service(s) with respect to lowering cost and of course with better efficiency. Software Defined Network (SDN) is a great revolutionary idea to change IT Industry of which includes cloud computing and many others. The beauty of its architecture is the decoupling of the essential control and data planes from the application layer, thus the underlying infrastructure is abstracted but the network intelligence is logically centralized with state. This architecture gives access to the enterprise to control, program, automate, scale and secure the network according to the business needs, together with securing a safe benefit in competiveness that has risen due to fast advancement in technology. This architecture is even more important to fulfilling the demands of various clients in the current model of networking. The concept of SDN has the potential to change the current networking model. With SDN, for network services, the underlying network infrastructure can be abstracted by the administrators for many applications. In theory, it can be shown that SDN has many benefits over current IT systems but in practical systems, IT companies are reluctant to work with, tend to oppose nor are they ready to deploy SDN. In this paper, the economic benefits are explored and discussed without bias, and it will be shown that new protocol of SDN provides many economic benefits and guidance to IT companies to establish more secure and efficient network.

A Review on Efficient Energy Consumption in Software-Defined Networking Using Routing Aware Protocols

The concept of Software-Defined Networking (SDN) has been a fascinating and growing interest in the field of research. The programmable network component is allowed by the SDN’s promising characteristics and partitions the control plane together with the forwarding plane. Energy Efficiency (EE) turned out to be a vital design requisite for modern networking mechanisms since the energy costs supply hugely to the entire costs in networks. Nevertheless, as it is necessary to handle the trade-off betwixt EE and Network Performance (NP), designing energy-effective solutions is non-trivial. Thus, by utilizing Energy-Aware Routing (EAR) approaches, this paper reviews the methodologies of Energy Consumption (EC) on SDN. The latest research related to the traffic-aware solution, compacting TCAM solution, end-host aware solutions, rule placement solutions, heuristic approach-centric solution, and EAR routing protocol was highlighted by this review article in terms of optimal EC on SDN. Finally, centered on the EC metrics, the current research methodologies’ performance is assessed in the performance evaluation. By utilizing EAR routing, this type of research is helpful for future research in efficient EC in SDN.

Implementasi Konsep Software Defined Networking (SDN) Wide Area Network (WAN) Pada Mikrotik Dengan Python 3


 Software Defined Networking (SDN) is the latest network technology to address the challenges that exist in TE. The concept of Software Defined Networking (SDN) uses a centralized and more flexible way of working, SDN can significantly cut the use of communication network resources needed for the utilization of network resources as a whole. When a company wants to expand its computer network to a wider area, including connecting branch offices in remote areas with data at the head office and other offices, it is necessary to setup tens to hundreds of Routers and switches which take a long time and are expensive, not to mention if something goes wrong. human (Human Error). Therefore, virtualization technology is needed so that configuration/setup on many Routers can be done simultaneously for this reason by adopting the working concept of Software Defined Networking (SDN) which will be applied to Network Automation technology. Later this Network Automation will be applied to Mikrotik which is combined with Linux Ubuntu Server and also uses the Python 3 language. So that in handling many Routers you don't need to have trouble configuring/setting up one by one on many Routers. The result of the analysis of the implementation of the Software Defined Networking (SDN) concept in Network Automation technology is that the Jogja and Bandung Mikrotik Routers are configured simultaneously in terms of adding IP addresses

Implementation of IMS/NGN Transport Stratum Based on the SDN Concept

The paper presents the development and verification of software and a testbed aiming to demonstrate the ability of two telecommunication network concepts—Next Generation Network (NGN) and Software-Defined Networking (SDN)—to cooperate. The proposed architecture includes components of the IP Multimedia Subsystem (IMS) in its service stratum and of the SDN (controller and programmable switches) in its transport stratum, providing flexible transport resource control and management via open interfaces. One important feature of the presented solution is the inclusion of ITU-T standards for NGN networks, which are not considered in other related works. The paper includes details regarding the hardware and software architecture of the proposed solution as well as results of the performed functional tests, which confirm its proper operation.

Dynamic Weighted Round Robin Approach in Software-Defined Networks Using Pox Controller

Load balancing is important in solving over-load traffic problems in the network. Therefore, it has been among the first appealing applications in Software Defined Networking (SDN) networks. Numerous SDN-based load-balancing approaches have been recommended to enhance the performance of SDN networks. However, network control could be more manageable in large networks with hundreds of switches and routers. The SDN is a unique way of building, controlling, and developing networks to modify this unpleasant situation. The major concept of SDN contains logically centralizing network management in an SDN controller, which manages and observes the behaviour of the network. Numerous load-balancing approaches are known, such as Round Robin (RR), random policy, Weighted randomized policy (WRP), etc. Every load-balancing policy approach has some benefits and detriments. This paper developed an advanced load-balancing algorithm, a dynamic weighted round-robin (DWRR), and ran it on the top of the SDN controller. Then we calculate the result of our proposed load-balancing approach by comparing it with the current round-robin (RR) and weighted round-robin (WRR) approaches. Mininet tool is utilized for the investigation, and the controller utilized as the control plane is named the POX controller.

Performance Analysis of Automatic Hidden Ligthpaths in Multi-Layer Networks

The problem of resource provisioning in multi-layer networks is an important issue. We discuss and analyze resource provisioning in terms of the visibility of optical resources for the virtual layer in a network. In this context, we propose the diversification of the optical spectrum in such a way that some resources are hidden for the virtual layer and used when needed. We introduce and investigate automatic hidden lightpaths to improve resource utilization in multi-layer networks. Our solution uses a software-defined networking concept to automatically set up and release hidden lightpaths, which are not visible at the network layer. We evaluate and analyze two main approaches to resource provisioning in terms of the blocking probability. Future research should focus on resource diversification and the usage of the hidden elastic optical spectrum in modern networks as a promising solution.

Dynamic security of IoT network traffic using SDN

Nowadays, smart environment has increasingly become a target for emerging cyberattacks that will impact the user's privacy and potentially, security. A remote attacker can illegitimately access connected objects in our IoT environment to obtain information about personal data or access control and availability of IoT objects, which can contribute to a DDoS attack. SDN (Software Defined Network) is a new paradigm that describes a network architecture whose control plane is completely decoupled from the data plane. The SDN concept offers the possibility of testing network functionalities before integrating them, without affecting the operation of the network. This minimizes the risk of network disruption. Our contribution in this paper is the design and implementation of a new type of architecture for securing exchanges in an IoT network using the SDN concept. The main objective of this work is to improve the quality and performance of this technology to ensure data reliability and avoid any type of internal or external attack by detecting the undesirable flow by Snort. This technology will also be used to organize and unify the management processes of all models based on SDN technology.

Empowering SDN-Docker Based Architecture for Internet of Things Heterogeneity

Internet of Things (IoT), an emerging technology, connects billions of smart devices to the Internet through heterogeneous communication technologies enabling novel services and applications. This complex and variable environment encounters several challenges such as managing and controlling the network and IoT applications, programming IoT devices, responding to some specific Quality of Service requirements of certain applications. The current IoT network based on the complex, static, and closed traditional architecture represents a serious concern, especially with the amounts of data generated from the huge and heterogeneous IoT devices. In this paper, we present a new model for IoT architecture that brings together the benefits of Software Defined Networking (SDN) architecture and containerization (i.e., Docker) to address most IoT challenges and abstract the underlying communication and hardware subsystem. The SDN concept decoupled the control plane from data plane which implies a centralized global network view and provides flexibility in network configuration and resource management. Moreover, containerization technique through the docker in the device brings the portability and scalability of the applications. First, we propose, an SDN-based architecture for IoT. Then, with lightweight virtualization of IoT device supplied by Docker, we empower the functionalities and effectiveness of the SDN based architecture solution to challenge the IoT heterogeneity. Furthermore, we use the smart supermarket as a use case to validate our SDN-Docker based architecture in a real IoT scenario. The experimental results validate the architecture implementation.

An Efficient Handover Mechanism for SDN-Based 5G HetNets

Handover is crucial for data portability, real-time data generation, and data processing in mobile technology. Up to 4G, handover efficiency reached optimal stability. However, with the entrance of 5G, the cellular network has turned into a complete heterogeneous network (HetNet) with enormous diversity due to the integration of Internet of Things (IoT) devices with mobile networks. Resource-constrained IoT devices differ notably in operational features from traditional mobile devices. Those devices usually need a smaller geographical cell with better connectivity coverage than conventional large cells of the same size. Hence, to support IoT, 5G splits large geographical cell areas into small cells and allows bandwidth sharing during Device-to-Device (D2D) communication. In a nutshell, 5G infrastructures and architectures have been changed a lot from the previous generations, and handover needs to be re-thought for efficient mobility management. This paper has incorporated the concept of Software-defined Network (SDN) in a 5G cellular network to simplify HetNet and provide efficient handover management within it. We illustrate our proposed handover management concept within this simplified HetNet that utilizes idle time scanning and preauthentication to reduce handover delay. The experimental implementation shows a significant 42% delay optimization during inter-domain reactive handover with 50% less communication overhead than the existing scheme. DUJASE Vol. 6 (2) 49-58, 2021 (July)

Enhancing Network Security through Software Defined Networking (SDN)

The IoT connects many of the home appliances in the world, from intelligent thermostats to intelligent vehicles. By the end of 2015, we had 9 billion connected stuff. The Gartner forecast shows that the number of devices in the network will exceed 50 billion by 2020. Most of the connected devices in the existing network are based on obsolete security infrastructure and encryption, while many do not have provisions for remote updating of these devices. Taking into account the number of IoT devices, from off-shelf motion monitoring to machine tools, it is not possible to check which functions end up with any specific service or product. In short, this is the problem: you can't trust the integrity of the security of the device and determine exactly where the data is processed and stored. The SDN architecture is designed to increase the routing and networking performance of the existing networks by isolating the control plane from the data plane. The basic concept of Software Defined Networking can be applied to IoT Multi networks; however, the standard SDN implementations for wired networks are not directly suitable for distributed and ad-hoc mesh networks, which are common in IoT systems. However, the SDN architecture changes the pattern of communication of the IoT network, leading to a new approach to the manifestation of the Securities IoT network. Centralized data layer control and control layer not only simplifies data package management, but also increases safety. As mentioned above, the amount of data that flows into these systems is significant. Proper management of traffic and load balancing will help to simplify the data flow in some ways. The total system's power consumption may be reduced by the central station, which requires less power than the distributed control. To sum up, introducing SDN into IoT will help IoT and stimulate IoT in people's regular lives.

Effectively Handling Network Congestion and Load Balancing in Software-Defined Networking

The concept of Software-Defined Networking (SDN) evolves to overcome the drawbacks of the traditional networks with Internet Protocol (I.P.) packets sending and packets handling. The SDN structure is one of the critical advantages of efficiently separating the data plane from the control plane to manage the network configurations and network management. Whenever there are multiple sending devices inside the SDN network, the OpenFlow switches are programmed to handle the limited number of requests for their interface. When the recommendations are exceeded from the specific threshold, the load on the switches also increases. This research article introduces a new approach named LBoBS to handle load balancing by adding the load balancing server to the SDN network. Besides, it is used to maximize SDN’s reliability and efficiency. It also works in coordination with the controller to effectively handle the load balancing policies. The load balancing server is implemented to manage the switches load effectively. Results are evaluated on the NS-3 simulator for packet delivery, bandwidth utilization, latency control, and packet decision ratios on the OpenFlow switches. It has been found that the proposed method improved SDN’s load balancing by 70% compared to the previous state-of-the-art methods.

A software-defined multi-modal wireless sensor network for ocean monitoring

The software-defined networking paradigm enables wireless sensor networks as a programmable and reconfigurable network to improve network management and efficiency. However, several challenges arise when implementing the concept of software-defined networking in maritime wireless sensor networks, as the networks operate in harsh ocean environments, and the dominant underwater acoustic systems are with limited bandwidth and high latency, which render the implementation of software-defined networking central-control difficult. To cope with the problems and meet demand for high-speed data transmission, we propose a radio frequency–acoustic software-defined networking-based multi-modal wireless sensor network which leverages benefits of both radio frequency and acoustic communication systems for ocean monitoring. We first present the software-defined networking-based multi-modal network architecture, and then explore two examples of applications with this architecture: network deployment and coverage for intrusion detection with both grid-based and random deployment scenarios, and a novel underwater testbed design by incorporating radio frequency–acoustic multi-modal techniques to facilitate marine sensor network experiments. Finally, we evaluate the performance of deployment and coverage of software-defined networking-based multi-modal wireless sensor network through simulations with several scenarios to verify the effectiveness of the network.

Employing FAMTAR and AHB to Achieve an Optical Resource-Efficient Multilayer IP-Over-EON SDN Network

With the global Internet traffic continuously growing, network operators face more and more challenges related to the management of their networks. Efficient utilization of the available network resources becomes crucial to maintain the desired Quality of Service level and control the upsurge in operational expenses. The combination of the Software-Defined Networking concept with the multi-layer network architecture can simplify the process of control and management of the network, its layers, and resources. In this paper, we propose a solution to enhance resource utilization in software-defined multi-layer optical networks. The proposed solution takes the advantages of the Software-Defined Networking, Flow-Aware Multi-Topology Adaptive Routing, and Automatic Hidden Bypasses mechanisms to ensure simultaneous, multi-path data transmissions in both IP and optical layers. The Software-Defined Networking controller manages both mentioned mechanisms, selects the best possible bypass, and allocates lightpaths to ensure that the optical spectral efficiency is optimal. The evaluation shows that the proposed solution for multi-layer software-defined network increases the overall network performance and resource utilization.

Survival backup strategy for controller placement problem in Software Defined Networking

The core concept of Software Defined Networking (SDN) is to abstract the control layer from the data layer. SDN architectures can provide programmatic interfaces in communication networks that significantly simplify network management and improve utilization efficiency. Distributed multiple controller SDN environments have become the preferred solution towards better scalability of SDNs. However, there are some inevitable problems for such networks, such as network failure, especially due to the failure of controllers themselves. To further improve network performance, reliability, and survivability, one solution is to deploy backup controllers in the network to satisfy quality of service requirements. In this paper, we aim to enhance the controller placement approach by designing a reliable and survivable controller placement framework. This framework consists of two levels. The first level is to determine the number and placement of the primary controllers using the node degree, which relies on selecting the nodes with the highest degree and then generating multiple domains exploiting the Independent Dominating Set (IDS) technique to ensure efficient distribution of controllers with lowest response times. The second level aims to provide some protection for the first level through the efficient deployment of backup controllers. The approach designed at this level is called the survivable backup controller placement approach. We evaluate this framework using real topologies; the obtained results show the significant impact of integrating both levels in improving the performance of SDNs without introducing unacceptable delay times.

A SURVEY ON MACHINE LEARNING ALGORITHMS FOR SOFTWARE-DEFINED NETWORKS

With the advent of the concept of Software-Defined Networks with a centralized control plane, it became possible to collect a huge amount of information about the network, for example,
 network topology, network congestion, the state of network devices. This data can be used to train machine learning algorithms. Moreover, these algorithms can be applied for completely different purposes, such as traffic classification, quality of service, optimization of traffic transmission routes, resource management, and security. Research subject of this article consist on the different aspects of SDN operating that can be optimized with ML. Research method is an analysis of the literature on the subject. Core results are analysis and classification of the areas and methods of the ML algorithms implementation for the SDN. Practical relevance of the work is that the results can be used for optimization of different SDN characteristics.

A Software Defined Network information security risk assessment based on Pythagorean fuzzy sets

The concept of software-defined networking is introduced to the networking domain to enhance networking capabilities to cope with network resources’ fast-growing requirements. Initially, security in Software Defined Network (SDN) is not considered as a priority concern, but later many research surveys taken place for determining the security loopholes in SDN architecture. To date, no algorithm exists for determining information security in contrast to SDN architecture or SDN based architecture. Here, a mechanism is introduced to determine the information risk associated with SDN or SDN based architecture. The SDN properties influence themselves; thus, the Multi-Criteria Decision Making (MCDM) method is incorporated in the proposed algorithm as a comprehensive mechanism while determining the information risk. To be specific, this proposed algorithm is divided into three different phases wherein; the first phase incorporates the Pythagorean Fuzzy Decision-Making Trial and Evaluation Laboratory method (PFDEMATEL) for determining the influences among SDN properties and vulnerabilities. The second phase implements the Pythagorean Fuzzy Analytical Hierarchical Process (PFAHP) for evaluating the priority of the severity weights of SDN properties along with vulnerabilities. Lastly, phase 3 implements information entropy to determine the overall SDN system risk. Our proposition is introduced in the first place to help the network administrator to determine associated risk in their SDN or SDN based architecture before the actual implementation and take proper countermeasures while implementing.

FUPE: A security driven task scheduling approach for SDN-based IoT–Fog networks

Fog computing is a paradigm to overcome the cloud computing limitations which provides low latency to the users’ applications for the Internet of Things (IoT). Software-defined networking (SDN) is a practical networking infrastructure that provides a great capability in managing network flows. SDN switches are powerful devices, which can be used as fog devices/fog gateways simultaneously. Hence, fog devices are more vulnerable to several attacks. TCP SYN flood attack is one of the most common denial of service attacks, in which a malicious node produces many half-open TCP connections on the targeted computational nodes so as to break them down. Motivated by this, in this paper, we apply SDN concepts to address TCP SYN flood attacks in IoT–fog networks . We propose FUPE, a security-aware task scheduler in IoT–fog networks. FUPE puts forward a fuzzy-based multi-objective particle swarm Optimization approach to aggregate optimal computing resources and providing a proper level of security protection into one synthetic objective to find a single proper answer. We perform extensive simulations on IoT-based scenario to show that the FUPE algorithm significantly outperforms state-of-the-art algorithms. The simulation results indicate that, by varying the attack rates, the number of fog devices, and the number of jobs, the average response time of FUPE improved by 11% and 17%, and the network utilization of FUPE improved by 10% and 22% in comparison with Genetic and Particle Swarm Optimization algorithms, respectively.