Software Defined Networking OpenFlow Research Articles

A Queue Monitoring System in OpenFlow Software Defined Networks

Real-time trac characteristic is dierent and it is very sensitive to delay. To meet trac specications in real time, monitoring systems are used as an important part of networking. Many monitoring systems are deployed to have an update view of the network QoS parameters and performance. Most of these systems are implemented to measure QoS parameters in links. Here, in this paper, a system for monitoring queues in each link by means of Software Defined Networks is proposed. The monitoring system is implemented by extending Floodlight controller, which uses OpenFlow as southbound protocol. The controller has a centralized view of the network. By the help of OpenFlow it also can provide flow level statistics. Using these advantages, the proposed system can monitor delay and available bandwidth of a queue on a link or path. Despite of monitoring systems in traditional networks, the proposed monitoring system makes a low overhead in network thanks to OpenFlow protocol messages. It is also integrated into the network controller, which enables QoS and trac engineering applications to use the system's reports for automatic trac management and QoS setup. The experimental results show a 99% accuracy of the proposed system for monitoring of both bandwidth and delay.

A comprehensive survey on software‐defined networking for smart communities

SummaryThe need to provide services closer to the end‐user proximity leads to the exchange of a large volume of data generated from the smart devices deployed at different geo‐distributed sites. The massive amount of data generated from the smart devices need to be transmitted, analyzed, and processed. This requires seamless data exchanges among geo‐separated nodes, which results in a considerable burden on the underlying network infrastructure and can degrade the performance of any implemented solution. Therefore, a dynamic, agile, and programmable network management paradigm is required. To handle the challenges mentioned above, software‐defined networking (SDN) gained much attention from academia, researchers, and industrial sectors. Shifting the computational load from forwarding devices to a logically centralized controller is a dream of every network operator who wants to have complete control and global visibility of the network. Also, the concept of network functions virtualization (NFV) in SDN controller is required to increase resource utilization efficiency. Thus, in this paper, a comprehensive survey on SDN for various smart applications is presented. This survey covers the infrastructural details of SDN hardware and OpenFlow switches, controllers, simulation tools, programming languages, open issues, and challenges in SDN implementation with advanced technologies such as 5G and microservices. In addition, the challenges on the control plane and data plane are highlighted in detail, such as fault tolerance, routing, scheduling of flows, and energy consumption on OpenFlow switches. Finally, various open issues and challenges future scope of SDN are discussed and analyzed in the proposal.

Optimized load balancing using software-defined networking (SDN)

In a cloud environment, handling user service requests and providing the requested resources fairly is critical. Load balancing is important to distribute service requests fairly to an unloaded server and to dynamically maintain load balancing across server farms. In conventional internet protocol (IP) networks, maintaining load balancing is a stubborn and non-adaptable task due to the forwarders' lack of global topology representation. Software-Defined Networking (SDN) provides centralized decision-making for any topological changes to manage changes dynamically. To solve the above problem, we propose a new server-side load balancing strategy that provides an efficient and effective server management scheme for SDN Open Flow networks. Experiments were done on the Ryu controller and the Mininet emulator showed that the performance was better than what was already available.

Software-Defined Networking (Sdn) In Modern Network Management

Modern computer network implements tasks from routing, monitoring traffic, accessing control and balancing server load. Software-Defined Networking (SDN) has become a new radical model where the network is programmable. The network can be simplified and managed through network programmability. In addition, SDN offers a very good interface between networking devices and the software that control this activity. This paper presents the SDN architecture, ForCES, and OpenFlow protocol to allocate information exchange. Oracle and HP is presented as an organization that built SDN product by having different architecture. Always as a new solution for computer network has been proposed, it still has challenges for researcher to solve the SDN issues that has been raised. Keywords: Software-Defined Networking (SDN) , programmable networks , ForCES , OpenFlow

Software-Defined Networking (Sdn) In Modern Network Management

Modern computer network implements tasks from routing, monitoring traffic, accessing control and balancing server load. Software-Defined Networking (SDN) has become a new radical model where the network is programmable. The network can be simplified and managed through network programmability. In addition, SDN offers a very good interface between networking devices and the software that control this activity. This paper presents the SDN architecture, ForCES, and OpenFlow protocol to allocate information exchange. Oracle and HP is presented as an organization that built SDN product by having different architecture. Always as a new solution for computer network has been proposed, it still has challenges for researcher to solve the SDN issues that has been raised. Keywords: Software-Defined Networking (SDN), programmable networks, ForCES, OpenFlow

Generation and collection of data for normal and conflicting flows in software defined network flow table

<a name="_Hlk31039004"></a><span lang="EN-US">In terms of network simplification and regulation, Software Defined Networking (SDN) is a new form of infrastructure that offers greater adaptability and flexibility. SDN, however, is an invention that is logically centralized. </span><span>In addition, the optimization of the control plane and data plane in SDN has become an area deserving of more attention. The flow in OpenFlow has been one of the essential parameters in the SDN standards, in which every individual flow includes packet matching fields, flow priority, separate counters, instructions for packet forwarding, flow timeouts and a cookie. This research work is conducted in order to produce and collect flows from the OpenFlow switch in two scenarios; in normal flows and when conflict policy rules are enforced in the network. In this article, the throughput is required to review and evaluate the conflict impact on two protocols as a performance metric; the Transmission Control Protocol (TCP) and the User Datagram Protocol (UDP) that flows via a forwarded plane. During the simulation of the SDN OpenFlow network, the metrics are tested using MININET. The results demonstrate that the existence of SDN conflict rules allows TCP and UDP to have a significant average change in bandwidth that eventually affects the network and operations performance.</span>

The impact of firewall on TCP and UDP throughput in an openflow software defined network

Software Defined Networking (SDN) is an emerging networking paradigm that provides more flexibility and adaptability in terms of network definition and control. However, SDN is a logically centralized technology. Therefor the control plane (i.e. controller) scalability in SDN in particular, is also one of the problems that needs further focus. OpenFlow is one of the protocol standards in SDN, which allow the separation of the controller from the forwarding plane. The control plane has an SDN embedded firewall and is able to enforce and monitor the network activity. This firewall can be used to control the throughput. However, it may affect SDN performance. In this paper, throughput will be used as a performance metric to evaluate and assess the firewall impact on two protocols; Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) that passes through the forwarding planes. The evaluations have been verified through simulating the SDN OpenFlow network using MININET. The results show that an implementation of firewall module in SDN creates a significant 36% average drop for TCP and 87% average drop for UDP in the bandwidth which eventually affect the quality of the network and applications.

POX Controller and Open Flow Performance Evaluation in Software Defined Networks (SDN) Using Mininet Emulator

Growing popularity of Internet demands for the agility as well as the flexibility of computer networks. Traditional networking system is unable to satisfy recent computing needs. Proprietary devices configured manually create an error-prone situation in addition they are incapable to fully utilize the capability of physical network infrastructure. This has resulted in the paradigm shift in the networking industry and it is known as Software defined networking. Advantages such as programmability, task virtualization and easy management of the network can be provided by employing SDN platform, on the other hand POX is defined as a Python based open source OpenFlow SDN Controller mainly used for faster development and prototyping of new network applications basically comes pre-installed with the mininet virtual machine. POX controller can turn dumb OpenFlow devices into hub, switch, load balancer and firewall devices. In this paper Performance metrics such as service Delay, utilized bandwidth, received packets and bytes were measured and recorded using network monitoring tools like iperf and D-ITG in order to analyze the functionality of the POX controller as well as to evaluate the operation performance of POX controller for SDN environment. The results of this research were the recommendation of using POX controller in for rapid development and prototyping of network control systems as well as being the framework for the interaction with Open Flow switches.

Analysing the Performance of SDN/OpenFlow Controllers in VANET

One of the key enablers of the evolving 5G technology are Vehicular Ad hoc Networks (VANETs) and Software Defined Networking (SDN). The development of next generation intelligent vehicular networks includes integration of SDN in Vehicular Ad hoc Networks (VANETs). Researchers have focused on the development of the integrated technology including architecture and benefits of SDN based VANET services. In this paper we have simulated the Vehicular Ad hoc Networks (VANETs) using Mininet-wifi. The VANET is incorporated with SDN controller. The performance is evaluated by varying the speed of vehicles. We have evaluated the performance in two ways: performance evaluation of V2V communication in same RSU and performance evaluation of V2V communication from different RSU. We have evaluated the proposed system for POX and RYU SDN OpenFlow controllers. As demonstrated in the results the RYU controller of SDN performs better as compared to POX controller in terms of average delay and throughput.

Deploying a Fast Detection and Eviction Mechanism of Invalid Connection-Oriented Flow-Entries in SDNs: A Scalability Approach

As a new paradigm of network architecture, Software Defined Networking (SDN) has been used in a large number of scenarios because it realizes flexible and efficient fine-grained flow control of the network, and promotes the evolution of the network to a programmable and scalable direction. However, the transition of the traditional networking model to SDN architectures poses scalability issues due to the limitation of the flow-table in size. Facing the traffic explosion on future networks with resource-constrained architectures, the storage space of the flow-table is not enough to bear so many flow-entries so that it not only causes performance degradation in data delivery but also results in scalability and cost-efficiency issues. To address this issue, in this article, we propose a solution to expedited evict the invalid flow-entries by detecting the disconnect messages of connection-oriented protocols such as Transmission Control Protocol (TCP) and Stream Control Transmission Protocol (SCTP) based on SDN controller and OpenFlow or programming protocol-independent packet processors (P4) switches. The behavior of detection is achieved by adding a specific SDN ruleset within the transport-layer in between the controller and switches. Different from the original timeout solutions, our scheme can delete invalid flow-entries in time according to the transmission layer disconnection instead of relying on the original timeout mechanism. Through a series of simulation results. we also demonstrate the superiority of our proposed solution in reducing the flow-entries occupancy and control overhead on controller, and improving the table-miss rate.

Software Defined Network (SDN) and OpenFlow Protocol in 5G Network

The world is moving at a high speed in the implementation and innovations of new systems and gadgets. 3G and 4G networks support currently wireless network communications. However, the networks are deemed to be slow and fail to receive signals or data transmission to various regions as a result of solving the problem. This paper will analyze the use of Software Defined Network (SDN) in a 5G (fifth generation) network that can be faster and reliable. Further, in Mobile IP, there exist triangulation problems between the sending and receiving nodes along with latency issues during handoff for the mobile nodes causing huge burden in the network. With Cloud Computing and ecosystem for Virtualization developed for the Core and Radio Networks SDN OpenFlow seems to be a seamless solution for determining signal flow between mobiles. There have been a lot of researches going on for deploying SDN OpenFlow with the 5G Cellular Network. The current paper performs benchmarks as a feasibility need for implementing SDN OpenFlow for 5G Cellular Network. The Handoff mechanism impacts the scalability required for a cellular network and simulation results can be further used to be deployed the 5G Network.

SEAL2: An SDN‐enabled all‐Layer2 packet forwarding network architecture for multitenant datacenter networks

SummaryThis paper presents the design and development of a new network virtualization scheme to support multitenant datacenter networking (MT‐DCN) based on software‐defined networking (SDN) technologies. Effective multitenancy supports are essential and challenging for datacenter networking designs. In this study, we propose a new network virtualization architecture framework for efficient packet forwarding in MT‐DCN. Traditionally, an internet host uses IP addresses for both host identification and location information, which causes mobile IP problems whenever the host is moved from one IP subnet to another. Unfortunately, virtual machine (VM) mobility is inevitable for cloud computing in datacenters for reasons such as server consolidation and network traffic flow optimization. To solve the problems, we decouple VM identification and location information with two independent values neither by IP addresses. We redefine the semantics of Ethernet MAC address to embed tenant ID information to the MAC address field without violating its original functionality. We also replace traditional Layer2/Layer3 two‐stage routing schemes (MAC/IP) with an all‐Layer2 packet forwarding mechanism that combines MAC addresses (for VM identification and forwarding in local server groups under an edge switch gateway) and multiprotocol label switching (MPLS) labels (for packet transportation between edge switch gateways across the core label switching network connecting all the edge gateways). To accommodate conventional IP packet architecture in a multitenant environment, SDN (OpenFlow) technology is used to handle all this complex network traffics. We verified the design concepts by a simple system prototype in which all the major system components were implemented. Based on the prototype system, we evaluated packet forwarding efficiency under the proposed network architecture and compared it with conventional IP subnet routing approaches. We also evaluated the incurred packet processing overhead caused by each of the packet routing components.

A Real-Time Software Defined Networking Framework for Next-Generation Industrial Networks

Industry 4.0 brings in a whole set of new requirements to engineering industrial systems, with notorious impact at the networking layer. A key challenge posed by Industry 4.0 is the operational flexibility needed to support on-the-fly reconfiguration of production cells, stations, and machines. At the networking layer, this flexibility implies dynamic packet handling, scheduling, and dispatching. SoftwareDefined Networking (SDN) provides this level of flexibility in the general Local Area Network (LAN) domain. However, its application in the industry has been hindered by a lack of support for real-time services. This paper addresses this limitation, proposing an extended SDN OpenFlow framework that includes realtime services, leveraging existing real-time data plane Ethernet technologies. We show the OpenFlow enhancements, a real-time SDN controller, and experimental validation and performance assessment. Using a proof-of-concept prototype with 3 switches and cycles of 250μs, we could achieve 1μs jitter on timetriggered traffic and a reconfiguration time between operational modes below 10ms.

Enhancing network resources utilization and resiliency in multi-domain bandwidth on demand service provisioning using SDN

This paper presents a solution to increase bandwidth utilization and to reduce the time necessary to recover from network failures in multi-domain bandwidth on demand service provisioning. The proposed solution is based on software-defined networking (SDN) in order to implement novel traffic engineering (TE) techniques. In fact, most standards development organizations and researchers agree that the logically centralized control plane and high programmability of SDN can revolutionize TE with novel and powerful strategies. In this context, the dynamic path computation (DynPaC) framework, relies on the OpenFlow SDN protocol to provide resilient layer 2 services with bandwidth guarantees within OpenFlow domains. In order to make DynPaC support multi-domain service provisioning, it has been extended with an additional operational mode and REST API calls, making it fully compliant with the Network Services Interface-Connection Service protocol. In this way, DynPaC can behave as a network resource manager (NRM) in the network services framework. As a result, the presented solution is the first OpenFlow-enabled NRM with resiliency capabilities that implements novel TE strategies that enhance the utilization of network resources. In order to validate the proposal, it has been implemented using the ONOS network operating systems and several tests have been conducted using diverse service demand patterns. The obtained results show that DynPaC is suitable to be used as an NRM and that the number of accepted services increases thanks to the flow reallocation mechanism included in the framework, achieving in this way a better utilization of network resources.

A Secured OpenFlow Protocol Using Elliptic Curves Cryptographic for Software Defined Networks

A Software-Defined Network (SDN) architecture was proposed to enhance the performance, flexibility and scalability of networks. However, SDN features such as centralized controlling, network programmability and virtualization present new security challenges to networks. This article will address security challenges related to SDN connection data transfer channels (i.e., control layer and infrastructure layer) and propose a novel connection data transfer channels architecture based on an OpenFlow protocol. Existing SDN OpenFlow protocols rely on higher layer secure mechanisms such as TLS (Transport Layer Security) / SSL (Secure Sockets Layer) sessions. It is concluded that the transfer of secured data using elliptical curve encryption provides a more efficient SDN network. The proposed architecture was implemented in a testbed and its security features were analyzed.

Secure Monitoring of Patients With Wandering Behavior in Hospital Environments

Today there is considerable interest for making use of the latest technological advancements for several healthcare applications. However, there are several challenges for making use of different technologies for healthcare applications. In particular, there is a need to ensure that the healthcare related services receive priority during events, such as legitimate failures of devices, congestion, and attacks in the networks. In this paper, we discuss some of the requirements for making use of technology for healthcare applications and propose techniques for secure monitoring of patients with wandering behavior in a hospital or elderly care environment. One of the aims of our work is to use technology for secure monitoring of patients with wandering behavior to keep them away from danger, or detect if the behavior of the patient violates the policies of the hospital, or even violates privacy policies of other patients. Our approach makes use of software defined networking (SDN), Wireless LAN (WLAN), and wearable devices for the patients. Our approach incurs low cost since WLAN is widely deployed. However, there are some challenges for making use of WLAN for monitoring dementia patients, since it is primarily used for accessing the Internet and its open nature is vulnerable to different types of security attacks. Hence we make use of SDN to solve some of these challenges and provide priority for the monitoring services. We have developed a security application for an SDN controller that can be used to enforce fine granular policies for communication between the hosts, real time location tracking of the patients, and deal with attacks on the hospital networks. The policy-based security enforcement helps to differentiate healthcare related traffic from other traffic and provide priority to the healthcare traffic. The real time location tracking detects wandering by patients and if necessary can raise alarms to the staff. The attack detection component makes use of attack signatures and behavior-based intrusion detection to deal with attacks on hospital networks. We will also present the prototype implementation of our model using ONOS SDN controller and OpenFlow Access Points.

SSDS: A Smart Software-Defined Security Mechanism for Vehicle-to-Grid Using Transfer Learning

Nowadays, vehicle-to-grid (V2G) is a very important component for smart cities, which provide a novel energy storage and scheduling approach. However, security threats currently disturb the normal operations of V2G. There are two challenges for the security of V2G. On one hand, existing security schemes for V2G just consider the static security strategy, which cannot deal well with the problem of high dynamics and advanced persistent threat in V2G. On the other hand, existing V2G lacks a unified information modeling approach, which results in the difficulties of security and communications. To address above challenges, this paper proposes a smart software-defined security mechanism, SSDS, for V2G using transfer learning and IEC 61850 standards. First, as next generation networking technology, software-defined networking (SDN) is adopted to establish a dynamic security protection architecture for V2G, which can provide dynamic security strategy configuration capability. Second, IEC 61850 is introduced to model SSDS, including SDN controller and OpenFlow switch. Third, transfer learning-based security strategy constructing scheme is proposed for the security strategy updating dynamically. Simulation results in terms of network performance and security strategy constructing verify the efficiency as well as feasibility of the proposed security mechanism.

Two-tier dynamic load balancing in SDN-enabled Wi-Fi networks

This work proposes a Software Defined Networking (SDN) solution to address Wi-Fi congestion due to an unevenly distributed load among access points (APs). The conventional methods generally let client stations learn of APs’ load status and select APs distributively. However, such a client-driven approach lacks a global view to make precise load balancing decisions and may result in repeated changes in client-AP association. Although several studies proposed more efficient network-controlled methods to carry out Wi-Fi load balancing, some of them are distributed methods incurring excessive message exchange among customized APs, while the rest centralized methods are found to burden the central controller with unnecessary AP association decisions. In contrast, our solution adopts standardized OpenFlow protocol and SDN controller technology to Wi-Fi networks, organizing the SDN controller and the APs into a two-tier architecture so that the controller can evaluate the degree of load balancing among the APs and decide up to which load level the APs can accept association requests without consulting the controller. From our experiment results, our solution improves Wi-Fi’s load balancing degree by 34–41%, and yields an improvement of 28–36% in Wi-Fi’s re-association time over generic centralized load balancing methods with positive control.

SGuard: A lightweight SDN safe-guard architecture for DoS attacks

Software Defined Networking (SDN) is a revolutionary networking paradigm towards the future network, experiencing rapid development nowadays. However, its main characteristic, the separation of control plane and data plane, also brings about new security challenges, i.e., Denial-of-Service (DoS) attacks specific to OpenFlow SDN networks to exhaust the control plane bandwidth and overload the buffer memory of OpenFlow switch. To mitigate the DoS attacks in the OpenFlow networks, we design and implement SGuard, a security application on top of the NOX controller that mainly contains two modules: Access control module and Classification module. We employ novel six-tuple as feature vector to classify traffic flows, meanwhile optimizing classification by feature ranking and selecting algorithms. All the modules will cooperate with each other to complete a series of tasks such as authorization, classification and so on. At the end of this paper, we experimentally use Mininet to evaluate SGuard in a software environment. The results show that SGuard works efficiently and accurately without adding more overhead to the SDN networks.

A stochastic model for transit latency in OpenFlow SDNs

Software defined networks (SDNs) introduced the concept of decoupling control and data planes which is a paradigm shift. The OpenFlow protocol is one of a number of technologies that enables this decoupling and, in effect, commodifies network equipment. As of now, there is still limited work that has been done towards modeling the transit delay across OpenFlow switches experienced by network traffic. In this work we develop a stochastic model for the path latency in Open vSwitch (used together with a POX controller) based on measurements made in experiments performed on three different platforms which include 1) Mininet, 2) MikroTik RouterBoard 750GL and 3) GENI testbed softswitch. We propose a log-normal mix model (LNMM) and show that it offers a R2 value of greater than 0.90 for most of our experiments. We also demonstrate how the M/M/1 models proposed in earlier studies is a poor fit.