SDN 交 換 機 核 心 技 術 - 流 量 分 類 以 及 應 用 辨 識 技 術. 黃 能 富 教 授 國 立 清 華 大 學 特 聘 教 授, 資 工 系 教 授

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "SDN 交 換 機 核 心 技 術 - 流 量 分 類 以 及 應 用 辨 識 技 術. 黃 能 富 教 授 國 立 清 華 大 學 特 聘 教 授, 資 工 系 教 授 E-mail: nfhuang@cs.nthu.edu.tw"

Transcription

1 SDN 交 換 機 核 心 技 術 - 流 量 分 類 以 及 應 用 辨 識 技 術 黃 能 富 教 授 國 立 清 華 大 學 特 聘 教 授, 資 工 系 教 授

2 Contents Introduction to SDN Networks Key Issues of SDN Switches Machine Learning Based Applications Classification Cloud + MLAC + SDN networks Demo (Video) Conclusions 2 / 41

3 Today s routers Routing, management, mobility management, access control, VPNs, Feature Feature OS Custom Hardware Million of lines of source code Billions of gates 6,000 RFCs Bloated Power Hungry Vertically integrated, complex, closed, proprietary Networking industry with mainframe mindset 3 / 41

4 What SDN really is App App App App App App App App App App App Specialized Features Specialized Control Plane Specialized Hardware Control Open Interface Control Plane Plane or or Open Interface Merchant Switching Chips Control Plane Vertically integrated Closed, proprietary Slow innovation Horizontal Open interfaces Rapid innovation 4 / 41

5 OpenFlow Switching OpenFlow Switch specification OpenFlow Switch Controller PC sw Secure Channel hw Flow Table The Stanford Clean Slate Program 5 / 41

6 Flow Table Entry Type 0 OpenFlow Switch Rule Action Stats Packet + byte counters 1. Forward packet to port(s) 2. Encapsulate and forward to controller 3. Drop packet 4. Send to normal processing pipeline Switch Port + mask MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP Prot TCP sport TCP dport The Stanford Clean Slate Program 6 / 41

7 Applications for SDN Networks QoS management Security management Network management BYOD management 7 / 41

8 Contents Introduction to SDN Networks Key Issues of SDN Switches Machine Learning Based Applications Classification Cloud + MLAC + SDN networks Demo (Video) Conclusions 8 / 41

9 Key issues in SDN switches Fast and Accurate Flow Classification Fast SDN Switching Fabric with TCAM based flow table (TACM lookup) Accurate Flow table with accurate flow signatures But only Layer-4 fields are designed in the standard flow table of OpenFlow SDN switches Good for port-based applications FTP (TCP/20-21), DNS (UDP/53), Telnet (TCP/23), Http (TCP/80) Not good enough for port-changing applications P2p sharing, On-line Games, Skype, BT, 9 / 41

10 Key issues in SDN switches We can either classify the traffic with Deep Packet Inspection (DPI) technology High Accuracy But need to maintain the signatures dynamically Unable to classify the encrypted flow Not practical for cloud based platform Or we can use Machine Learning based approach Use statistical attributes of flows to achieve high accuracy identification Without inspecting the packet payload Practical for cloud based platform as only statistical attributes are forwarded to the cloud. 10 / 41

11 Examples of Statistical Attributes MSN login HTTP GET 11 / 41

12 Contents Introduction to SDN Networks Key Issues of SDN Switches Machine Learning Based Applications Classification Cloud + MLAC + SDN networks Demo (Video) Conclusions 12 / 41

13 A Cloud based Applications Classification Service Platform with Machine Learning Algorithms for SDN Networks 基 於 機 器 學 習 演 算 法 之 雲 端 應 用 辨 識 服 務 平 台 與 SDN 網 路 應 用 13 / 41

14 14 / 41

15 Architecture of Traffic Classification Service on Cloud Machine learning virtual machine (LVM) Running training service Classifier virtual machine (CVM) Running classification service LVM management server LVM assignment and monitoring CVM management server CVM assignment and monitoring Client (PCs running the traffic classification client) Computing the statistical attributes of each flow Retrieving the training/classification service. 15 / 41

16 The used machine learning tools-weka Weka -Waikato Environment for Knowledge Analysis (running on single PC/NB) A JAVA-based open source software suite that collects machine learning algorithms for data mining tasks Four kinds of interface Explore: To see data distribution and apply ML algorithm directly. Experimenter: Batch modes for running training-testing evaluation Knowledge Flow: To combine the different ML algorithms component as graph-based processing flow CLI: Command Line Interface 16 / 41

17 The Training Procedure Service instance (server) Rule DB 6 5 Training Machine Learner VM Learner VM Management Server User s PC running training program 17 / 41

18 The Training Service Requesting the training service 1. Client LVM management server LVM assignment 2. Checking the loading and status of each service instance on the LVM 3. IP address & port number of LVM (LVM Management Server Client ) 18 / 41

19 Training The Training Service 4. Training Data (attributes of each flow to train): Client LVM 5.Training phase Training Results 6. Storing the rules (LVM Rule DB) 7. Training result (e.g. number of rules.) Attributes: Two way communications, packet size, packet number, packet time interval, download rate, upload rate,, etc 19 / 41

20 Traffic Classification Procedure Rule Service DB instance (server) 3 3 Machine Learner VM Learner VM Management Server Network Manager s PC with mirrored network traffic 20 / 41

21 Traffic Classification Procedure (cont.) Service instance (server) Rule DB Machine Learner VM Learner VM Management Server Network Manager s PC 21 / 41

22 The Traffic Classification Procedure Requesting the classification service 1. Client CVM management server CVM assignment 2. Checking the loading and status of each service instance on the CVM 3. Loading the classification rules from DB. (Rule DB CVM) 4. CVMs IP address & port number (CVM Management Server Client ) 22 / 41

23 The Traffic Classification Procedure Classification 5. Sending the attributes of flows to classify Client CVMs 6. Receiving the classification result (application id) CVMs Client 23 / 41

24 Client Program for Training 3. Flow attribute computation Flow Processing 2. Header fields & payload Signatur e/port Matching Process- Port Mapping 4. payload inspection or port number mapping 1. Network traffic Packet Decoding Training Data Management Cloud Communication 5. Training data collection 6. Training request 7. VM IP 8. Training data 9. Training result Training SaaS Learner VM Management Server Learner VM 24 / 41

25 Implementation: Client Program Modules Packet decoding module decoding the packet header fields Flow processing module computing flow attributes managing the flow table for storing the flow attributes Signature/port matching and process-port mapping modules (only for training) To identify the original background truth ( Training label). User can choose the signature/port matching or processport mapping as the module to find the original application class for each flow. 25 / 41

26 Implementation: Client Program Modules Training data management module (only for training) collecting the attributes of flows to form the training data set. The cloud communication module Client LVM/CVM Management server Client LVM/CVM 26 / 41

27 The client program (Training) 27 / 41

28 Client Program for Classification 3.. Flow attribute computation Flow Processing 2. Header fields & payload 1. Network traffic Packet Decoding Cloud Communication 4. Flow attributes 5. Classification request 6. VM IP 7. Flow attributes Classifier SaaS Classifier VM Management Server 8. Classification result Classifier VM 28 / 41

29 LVM and CVM management server (Cloud) Machine learning/classifier VM management server graphic user interface (GUI) VM monitoring/closing/opening module The cloud communication module in the LVM and CVM management server 29 / 41

30 Program modules of LVM and CVM (Cloud) The training/classification modules The cloud communication module in the LVM or CVM Grid-based machine learning tools/framework The implementation of the machine learning algorithms on grid environment. 30 / 41

31 Learning VM Management Server Machine Learning VM Management GUI Client Program for Training Learner VM Training request VM IP VM control response Cloud Commu - nication Training request VM IP VM control response VM status VM Monitoring/Closing/ Opening Learning VM Management Server 31 / 41

32 Learning VM Rule DB Store Rules Training data Rules Training Training data Client Program for Training Training result Cloud Commu nication Training result Rules Training parameters & data Grid-based Machine Learning Tools/Framework 32 / 41

33 Classifier VM Management Server Classifier VM Management GUI Classification request Client Program for Classification VM IP Classifier VM VM control response Cloud Commu - nication Classification request VM IP VM control response VM status VM Monitoring/Clo sing/opening 33 / 41

34 Classifier VM Rule DB Load Rules Flow attributes Client Program for Classification Flow application ID Cloud Commu - nication Flow attributes Rules Flow application ID Classification Flow attributes Grid-based Machine Learning Tools/Framework Flow application ID 34 / 41

35 Contents Introduction to SDN Networks Key Issues of SDN Switches Machine Learning Based Applications Classification Cloud + MLAC + SDN networks Demo (Video) Conclusions 35 / 41

36 Cloud + MLAC + SDN (Training) Rule server Cloud (Hicloud) VM Management Server Flow Classifier SDN Controller SDN Switch (Pica8) 36 / 41

37 Cloud + MLAC + SDN (Classification/Management) Rule server Cloud (Hicloud) VM Management Server Flow Classifier Flows SDN Controller Flows SDN Switch (Pica8) 37 / 41

38 Contents Introduction to SDN Networks Key Issues of SDN Switches Machine Learning Based Applications Classification Cloud + MLAC + SDN networks Demo (Video) Conclusions 38 / 41

39 Demo of Applications Training (Video) Demo of Applications Classification and Management with SDN Switch (Video) 39 / 41

40 Conclusions and future works The key issues of SDN networks include fast and accurate flow classification schemes The current SDN switches only support layer-4 flow table. A new service framework of applications classification for SDN networks Cloud based for scalability, reliability Machine Learning based for light communications Global collected application attributes (statistical signatures) database. Early stage application management Currently, this platform is still only a prototype, more training clients need to be installed (the client training software will be released later) to learn the worldwide applications as complete as possible. The accurate of the training and classification of this platform (currently around 80-98% of accuracy) needs also to be enhanced by tuning the machine learning model. 40 / 41

41 未 來 展 望 建 立 全 球 最 完 整 之 網 路 應 用 軟 體 統 計 特 徵 資 料 庫 開 放 式, 眾 志 成 城 (more PCs to run applications) 與 雲 端 平 台 業 者 組 織 合 作 佈 建 此 資 料 庫 (for millions of applications) 可 動 態 擴 增 之 雲 端 應 用 軟 體 訓 練 虛 擬 機 器 (scalable) 可 動 態 擴 增 之 雲 端 應 用 軟 體 辨 識 虛 擬 機 器 (scalable) 提 供 全 球 網 路 應 用 軟 體 即 時 辨 識 服 務 (SaaS) 搭 配 SDN 網 路 提 供 加 值 服 務 QoS, Security, Network Management,, etc 臺 灣 學 術 網 路 或 校 園 網 路 示 範 建 置 41 / 41

42

Network Virtualization Based on Flows

Network Virtualization Based on Flows TERENA NETWORKING CONFERENCE 2009 June 9, 2009 Network Virtualization Based on Flows Peter Sjödin Markus Hidell, Georgia Kontesidou, Kyriakos Zarifis KTH Royal Institute of Technology, Stockholm Outline

More information

Software Defined Networking What is it, how does it work, and what is it good for?

Software Defined Networking What is it, how does it work, and what is it good for? Software Defined Networking What is it, how does it work, and what is it good for? slides stolen from Jennifer Rexford, Nick McKeown, Michael Schapira, Scott Shenker, Teemu Koponen, Yotam Harchol and David

More information

Getting to know OpenFlow. Nick Rutherford Mariano Vallés {nicholas,mariano}@ac.upc.edu

Getting to know OpenFlow. Nick Rutherford Mariano Vallés {nicholas,mariano}@ac.upc.edu Getting to know OpenFlow Nick Rutherford Mariano Vallés {nicholas,mariano}@ac.upc.edu OpenFlow Switching 1. A way to run experiments in the networks we use everyday. A pragmatic compromise Allow researchers

More information

OpenFlow and Onix. OpenFlow: Enabling Innovation in Campus Networks. The Problem. We also want. How to run experiments in campus networks?

OpenFlow and Onix. OpenFlow: Enabling Innovation in Campus Networks. The Problem. We also want. How to run experiments in campus networks? OpenFlow and Onix Bowei Xu boweixu@umich.edu [1] McKeown et al., "OpenFlow: Enabling Innovation in Campus Networks," ACM SIGCOMM CCR, 38(2):69-74, Apr. 2008. [2] Koponen et al., "Onix: a Distributed Control

More information

OpenFlow Overview. Daniel Turull danieltt@kth.se

OpenFlow Overview. Daniel Turull danieltt@kth.se OpenFlow Overview Daniel Turull danieltt@kth.se Overview OpenFlow Software Defined Networks (SDN) Network Systems Lab activities Daniel Turull - Netnod spring meeting 2012 2 OpenFlow Why and where was

More information

Towards Software Defined Cellular Networks

Towards Software Defined Cellular Networks Towards Software Defined Cellular Networks Li Erran Li (Bell Labs, Alcatel-Lucent) Morley Mao (University of Michigan) Jennifer Rexford (Princeton University) 1 Outline Critiques of LTE Architecture CellSDN

More information

SDN AND SECURITY: Why Take Over the Hosts When You Can Take Over the Network

SDN AND SECURITY: Why Take Over the Hosts When You Can Take Over the Network SDN AND SECURITY: Why Take Over the s When You Can Take Over the Network SESSION ID: TECH0R03 Robert M. Hinden Check Point Fellow Check Point Software What are the SDN Security Challenges? Vulnerability

More information

OpenFlow: History and Overview. Demo of OpenFlow@home routers

OpenFlow: History and Overview. Demo of OpenFlow@home routers Affan A. Syed affan.syed@nu.edu.pk Syed Ali Khayam ali.khayam@seecs.nust.edu.pk OpenFlow: History and Overview Dr. Affan A. Syed OpenFlow and Software Defined Networking Dr. Syed Ali Khayam Demo of OpenFlow@home

More information

OpenFlow: Enabling Innovation in Campus Networks

OpenFlow: Enabling Innovation in Campus Networks OpenFlow: Enabling Innovation in Campus Networks Nick McKeown Stanford University Presenter: Munhwan Choi Table of contents What is OpenFlow? The OpenFlow switch Using OpenFlow OpenFlow Switch Specification

More information

Software Defined Networking

Software Defined Networking Software Defined Networking Stefano Giordano Dipartimento di Ingegneria dell Informazione Università di Pisa 3D Reference model of ISDN Hourglass reference model of a TCP/IP network Network Ossification

More information

LTE - Can SDN paradigm be applied?

LTE - Can SDN paradigm be applied? LTE - Can SDN paradigm be applied? Source of this presentation: Towards Software Defined Cellular Networks Li Erran Li (Bell Labs, Alcatel-Lucent) Morley Mao (University of Michigan) Jennifer Rexford (Princeton

More information

Digitaalne andmeülekanne IRT0150 OpenFlow /nädal 6/ Avo Ots. avo.ots@ttu.ee 12. märts 2015

Digitaalne andmeülekanne IRT0150 OpenFlow /nädal 6/ Avo Ots. avo.ots@ttu.ee 12. märts 2015 Digitaalne andmeülekanne IRT0150 OpenFlow /nädal 6/ Avo Ots avo.ots@ttu.ee 12. märts 2015 1 Various Services Virtual Networks LINP1 LINP3 LINP2 LINP1 Manager LINP2 Manager LINP3 Manager Virtual Resources

More information

Cloud Networking Disruption with Software Defined Network Virtualization. Ali Khayam

Cloud Networking Disruption with Software Defined Network Virtualization. Ali Khayam Cloud Networking Disruption with Software Defined Network Virtualization Ali Khayam In the next one hour Let s discuss two disruptive new paradigms in the world of networking: Network Virtualization Software

More information

Software Defined Networking

Software Defined Networking Software Defined Networking Dr. Nick Feamster Associate Professor In this course, you will learn about software defined networking and how it is changing the way communications networks are managed, maintained,

More information

COMPSCI 314: SDN: Software Defined Networking

COMPSCI 314: SDN: Software Defined Networking COMPSCI 314: SDN: Software Defined Networking Nevil Brownlee n.brownlee@auckland.ac.nz Lecture 23 Current approach to building a network Buy 802.3 (Ethernet) switches, connect hosts to them using UTP cabling

More information

SOFTWARE-DEFINED NETWORKING AND OPENFLOW

SOFTWARE-DEFINED NETWORKING AND OPENFLOW SOFTWARE-DEFINED NETWORKING AND OPENFLOW Freddie Örnebjär TREX Workshop 2012 2012 Brocade Communications Systems, Inc. 2012/09/14 Software-Defined Networking (SDN): Fundamental Control

More information

Software Defined Networking What is it, how does it work, and what is it good for?

Software Defined Networking What is it, how does it work, and what is it good for? Software Defined Networking What is it, how does it work, and what is it good for? Many slides stolen from Jennifer Rexford, Nick McKeown, Scott Shenker, Teemu Koponen, Yotam Harchol and David Hay Agenda

More information

Securing Local Area Network with OpenFlow

Securing Local Area Network with OpenFlow Securing Local Area Network with OpenFlow Master s Thesis Presentation Fahad B. H. Chowdhury Supervisor: Professor Jukka Manner Advisor: Timo Kiravuo Department of Communications and Networking Aalto University

More information

OpenFlow/So+ware- defined Networks. Srini Seetharaman Clean Slate Lab Stanford University July 2010

OpenFlow/So+ware- defined Networks. Srini Seetharaman Clean Slate Lab Stanford University July 2010 OpenFlow/So+ware- defined Networks Srini Seetharaman Clean Slate Lab Stanford University July 2010 Outline MoFvaFon OpenFlow - Technical details Overall ecosystem Deployments We have lost our way RouFng,

More information

基 於 SDN 與 可 程 式 化 硬 體 架 構 之 雲 端 網 路 系 統 交 換 器

基 於 SDN 與 可 程 式 化 硬 體 架 構 之 雲 端 網 路 系 統 交 換 器 基 於 SDN 與 可 程 式 化 硬 體 架 構 之 雲 端 網 路 系 統 交 換 器 楊 竹 星 教 授 國 立 成 功 大 學 電 機 工 程 學 系 Outline Introduction OpenFlow NetFPGA OpenFlow Switch on NetFPGA Development Cases Conclusion 2 Introduction With the proposal

More information

SDN, OpenFlow and the ONF

SDN, OpenFlow and the ONF SDN, OpenFlow and the ONF OpenFlow/Software-Defined Networking (SDN) OpenFlow/SDN is emerging as one of the most promising and disruptive networking technologies of recent years. It has the potential to

More information

Ethernet-based Software Defined Network (SDN) Cloud Computing Research Center for Mobile Applications (CCMA), ITRI 雲 端 運 算 行 動 應 用 研 究 中 心

Ethernet-based Software Defined Network (SDN) Cloud Computing Research Center for Mobile Applications (CCMA), ITRI 雲 端 運 算 行 動 應 用 研 究 中 心 Ethernet-based Software Defined Network (SDN) Cloud Computing Research Center for Mobile Applications (CCMA), ITRI 雲 端 運 算 行 動 應 用 研 究 中 心 1 SDN Introduction Decoupling of control plane from data plane

More information

SOFTWARE-DEFINED NETWORKING AND OPENFLOW

SOFTWARE-DEFINED NETWORKING AND OPENFLOW SOFTWARE-DEFINED NETWORKING AND OPENFLOW Eric Choi < echoi@brocade.com> Senior Manager, Service Provider Business Unit, APJ 2012 Brocade Communications Systems, Inc. EPF 7 2012/09/17 Software-Defined Networking

More information

YI-CHIH HSU & JEI-WEI CHANG @ ESTINET TECHNOLOGIES

YI-CHIH HSU & JEI-WEI CHANG @ ESTINET TECHNOLOGIES YI-CHIH HSU & JEI-WEI CHANG @ ESTINET TECHNOLOGIES A Professional Company in Software-Defined Networking Copyright 2000-2015, EstiNet Technologies Inc. All Rights Reserved. 1 About EstiNet A Professional

More information

Open Source Network: Software-Defined Networking (SDN) and OpenFlow

Open Source Network: Software-Defined Networking (SDN) and OpenFlow Open Source Network: Software-Defined Networking (SDN) and OpenFlow Insop Song, Ericsson LinuxCon North America, Aug. 2012, San Diego CA Objectives Overview of OpenFlow Overview of Software Defined Networking

More information

Software Defined Networks (SDN)

Software Defined Networks (SDN) Software Defined Networks (SDN) Nick McKeown Stanford University With: Martín Casado, Teemu Koponen, Scott Shenker and many others With thanks to: NSF, GPO, Stanford Clean Slate Program, Cisco, DoCoMo,

More information

Software Defined Networking

Software Defined Networking Software Defined Networking Richard T. B. Ma School of Computing National University of Singapore Material from: Scott Shenker (UC Berkeley), Nick McKeown (Stanford), Jennifer Rexford (Princeton) CS 4226:

More information

Introduction to Software Defined Networking. Xenofontas Dimitropoulos 21/5/2015

Introduction to Software Defined Networking. Xenofontas Dimitropoulos 21/5/2015 Introduction to Software Defined Networking Xenofontas Dimitropoulos 21/5/2015 Credits HY436 course preparation: Teaching Assistants: Dimitrios Gkounis, George Nomikos, Manos Lakiotakis, Manos Surligas

More information

OpenFlow. Ihsan Ayyub Qazi. Slides use info from Nick Mckeown

OpenFlow. Ihsan Ayyub Qazi. Slides use info from Nick Mckeown OpenFlow Ihsan Ayyub Qazi Slides use info from Nick Mckeown Why Openflow? Deployment of new experimental protocols is challenging Huge installed base of protocols and equipment Reluctance by network operators

More information

Outline. Institute of Computer and Communication Network Engineering. Institute of Computer and Communication Network Engineering

Outline. Institute of Computer and Communication Network Engineering. Institute of Computer and Communication Network Engineering Institute of Computer and Communication Network Engineering Institute of Computer and Communication Network Engineering Communication Networks Software Defined Networking (SDN) Prof. Dr. Admela Jukan Dr.

More information

Tutorial: OpenFlow in GENI

Tutorial: OpenFlow in GENI Tutorial: OpenFlow in GENI GENI Project Office The current Internet is at an impasse because new architecture cannot be deployed or even adequately evaluated [PST04] [PST04]: Overcoming the Internet Impasse

More information

OpenFlow and Software Defined Networking presented by Greg Ferro. OpenFlow Functions and Flow Tables

OpenFlow and Software Defined Networking presented by Greg Ferro. OpenFlow Functions and Flow Tables OpenFlow and Software Defined Networking presented by Greg Ferro OpenFlow Functions and Flow Tables would like to thank Greg Ferro and Ivan Pepelnjak for giving us the opportunity to sponsor to this educational

More information

Software Defined Networking and the design of OpenFlow switches

Software Defined Networking and the design of OpenFlow switches Software Defined Networking and the design of OpenFlow switches Paolo Giaccone Notes for the class on Packet Switch Architectures Politecnico di Torino December 2015 Outline 1 Introduction to SDN 2 OpenFlow

More information

Centec s SDN Switch Built from the Ground Up to Deliver an Optimal Virtual Private Cloud

Centec s SDN Switch Built from the Ground Up to Deliver an Optimal Virtual Private Cloud Centec s SDN Switch Built from the Ground Up to Deliver an Optimal Virtual Private Cloud Table of Contents Virtualization Fueling New Possibilities Virtual Private Cloud Offerings... 2 Current Approaches

More information

Chapter 11 Cloud Application Development

Chapter 11 Cloud Application Development Chapter 11 Cloud Application Development Contents Motivation. Connecting clients to instances through firewalls. Chapter 10 2 Motivation Some of the questions of interest to application developers: How

More information

Definition of a White Box. Benefits of White Boxes

Definition of a White Box. Benefits of White Boxes Smart Network Processing for White Boxes Sandeep Shah Director, Systems Architecture EZchip Technologies sandeep@ezchip.com Linley Carrier Conference June 10-11, 2014 Santa Clara, CA 1 EZchip Overview

More information

Facilitating Network Management with Software Defined Networking

Facilitating Network Management with Software Defined Networking Facilitating Network Management with Software Defined Networking Nick Feamster Georgia Tech feamster@cc.gatech.edu Steve Woodrow, Srikanth Sundaresan, Hyojoon Kim, Russ Clark Georgia Tech Andreas Voellmy

More information

Software Defined Networking (SDN) OpenFlow and OpenStack. Vivek Dasgupta Principal Software Maintenance Engineer Red Hat

Software Defined Networking (SDN) OpenFlow and OpenStack. Vivek Dasgupta Principal Software Maintenance Engineer Red Hat Software Defined Networking (SDN) OpenFlow and OpenStack Vivek Dasgupta Principal Software Maintenance Engineer Red Hat CONTENTS Introduction SDN and components SDN Architecture, Components SDN Controller

More information

Software Defined Networking (SDN) - Open Flow

Software Defined Networking (SDN) - Open Flow Software Defined Networking (SDN) - Open Flow Introduction Current Internet: egalitarian routing/delivery based on destination address, best effort. Future Internet: criteria based traffic management,

More information

OpenFlow with Intel 82599. Voravit Tanyingyong, Markus Hidell, Peter Sjödin

OpenFlow with Intel 82599. Voravit Tanyingyong, Markus Hidell, Peter Sjödin OpenFlow with Intel 82599 Voravit Tanyingyong, Markus Hidell, Peter Sjödin Outline Background Goal Design Experiment and Evaluation Conclusion OpenFlow SW HW Open up commercial network hardware for experiment

More information

Virtual private network. Network security protocols VPN VPN. Instead of a dedicated data link Packets securely sent over a shared network Internet VPN

Virtual private network. Network security protocols VPN VPN. Instead of a dedicated data link Packets securely sent over a shared network Internet VPN Virtual private network Network security protocols COMP347 2006 Len Hamey Instead of a dedicated data link Packets securely sent over a shared network Internet VPN Public internet Security protocol encrypts

More information

The Past, Present, and Future of Software Defined Networking

The Past, Present, and Future of Software Defined Networking The Past, Present, and Future of Software Defined Networking Nick Feamster University of Maryland feamster@cs.umd.edu Steve Woodrow, Srikanth Sundaresan, Hyojoon Kim, Russ Clark Georgia Tech Andreas Voellmy

More information

OpenFlow Technology Investigation Vendors Review on OpenFlow implementation

OpenFlow Technology Investigation Vendors Review on OpenFlow implementation OpenFlow Technology Investigation Vendors Review on OpenFlow implementation Ioan Turus, NORDUnet GN3 JRA1 T1&2, Copenhagen, 21.11.2012 Outline! Software Defined Networks (SDN)! Introduction to OpenFlow!

More information

Multicasting on SDN. Prof. Sunyoung Han Konkuk University syhan@cclab.konkuk.ac.kr 23 July 2015

Multicasting on SDN. Prof. Sunyoung Han Konkuk University syhan@cclab.konkuk.ac.kr 23 July 2015 Multicasting on SDN Prof. Sunyoung Han Konkuk University syhan@cclab.konkuk.ac.kr 23 July 2015 1 Contents 1. Software Defined Networking (SDN) 2. OpenFlow 3. Multicasting 4. Open vswitch 5. OpenFlow Protocol

More information

Cisco IOS Flexible NetFlow Technology

Cisco IOS Flexible NetFlow Technology Cisco IOS Flexible NetFlow Technology Last Updated: December 2008 The Challenge: The ability to characterize IP traffic and understand the origin, the traffic destination, the time of day, the application

More information

642 523 Securing Networks with PIX and ASA

642 523 Securing Networks with PIX and ASA 642 523 Securing Networks with PIX and ASA Course Number: 642 523 Length: 1 Day(s) Course Overview This course is part of the training for the Cisco Certified Security Professional and the Cisco Firewall

More information

OF 1.3 Testing and Challenges

OF 1.3 Testing and Challenges OF 1.3 Testing and Challenges May 1 st, 2014 Ash Bhalgat (Senior Director, Products), Luxoft Santa Clara, CA USA April-May 2014 1 Agenda OpenFlow : What and Why? State of OpenFlow Conformance Challenges

More information

Principle and Implementation of. Protocol Oblivious Forwarding

Principle and Implementation of. Protocol Oblivious Forwarding Principle and Implementation of Protocol Oblivious Forwarding PUBLICATION DATE DECEMBER 27, 2012 Contents Principle and Implementation of... 1 Protocol Oblivious Forwarding... 1 AUTHORS... 错 误! 未 定 义 书

More information

Software-Defined Networking for the Data Center. Dr. Peer Hasselmeyer NEC Laboratories Europe

Software-Defined Networking for the Data Center. Dr. Peer Hasselmeyer NEC Laboratories Europe Software-Defined Networking for the Data Center Dr. Peer Hasselmeyer NEC Laboratories Europe NW Technology Can t Cope with Current Needs We still use old technology... but we just pimp it To make it suitable

More information

Advanced Software Engineering. Lecture 8: Data Center by Prof. Harold Liu

Advanced Software Engineering. Lecture 8: Data Center by Prof. Harold Liu Advanced Software Engineering Lecture 8: Data Center by Prof. Harold Liu Agenda Introduction Design and Construction Management and Maintenance Hot Topics Real time traffic analysis SDN Wireless Data Center

More information

Stateful Firewalls. Hank and Foo

Stateful Firewalls. Hank and Foo Stateful Firewalls Hank and Foo 1 Types of firewalls Packet filter (stateless) Proxy firewalls Stateful inspection Deep packet inspection 2 Packet filter (Access Control Lists) Treats each packet in isolation

More information

Software Defined Networks

Software Defined Networks Software Defined Networks Damiano Carra Università degli Studi di Verona Dipartimento di Informatica Acknowledgements! Credits Part of the course material is based on slides provided by the following authors

More information

Software Defined Networking A quantum leap for Devops?

Software Defined Networking A quantum leap for Devops? Software Defined Networking A quantum leap for Devops? TNG Technology Consulting GmbH, http://www.tngtech.com/ Networking is bottleneck in today s devops Agile software development and devops is increasing

More information

OpenFlow: Concept and Practice. Dukhyun Chang (dhchang@mmlab.snu.ac.kr)

OpenFlow: Concept and Practice. Dukhyun Chang (dhchang@mmlab.snu.ac.kr) OpenFlow: Concept and Practice Dukhyun Chang (dhchang@mmlab.snu.ac.kr) 1 Contents Software-Defined Networking (SDN) Overview of OpenFlow Experiment with OpenFlow 2/24 Software Defined Networking.. decoupling

More information

NETWORK VIRTUALIZATION BASED ON SOFTWARE DEFINED NETWORK

NETWORK VIRTUALIZATION BASED ON SOFTWARE DEFINED NETWORK NETWORK VIRTUALIZATION BASED ON SOFTWARE DEFINED NETWORK Introduction Motivation Concept Open Flow Virtual Switch SOFTWARE DEFINED NETWORK We have lost our way Routing, management, mobility management,

More information

How SDN will shape networking

How SDN will shape networking How SDN will shape networking Nick McKeown Stanford University With: Martín Casado, Teemu Koponen, Sco> Shenker and many others With thanks to: NSF, GPO, Stanford Clean Slate Program, Cisco, DoCoMo, DT,

More information

Software Defined Networking (SDN)

Software Defined Networking (SDN) Software Defined Networking (SDN) Tópicos Avançados de Redes 2012/13 Pedro Brandão TAR 2012/13 - SDNs - pbrandao 2 References The slides from this presentation are a remix of external sources, namely:

More information

The Internet: A Remarkable Story. Inside the Net: A Different Story. Networks are Hard to Manage. Software Defined Networking Concepts

The Internet: A Remarkable Story. Inside the Net: A Different Story. Networks are Hard to Manage. Software Defined Networking Concepts The Internet: A Remarkable Story Software Defined Networking Concepts Based on the materials from Jennifer Rexford (Princeton) and Nick McKeown(Stanford) Tremendous success From research experiment to

More information

A Case for Overlays in DCN Virtualization Katherine Barabash, Rami Cohen, David Hadas, Vinit Jain, Renato Recio and Benny Rochwerger IBM

A Case for Overlays in DCN Virtualization Katherine Barabash, Rami Cohen, David Hadas, Vinit Jain, Renato Recio and Benny Rochwerger IBM Presenter: Vinit Jain, STSM, System Networking Development, IBM System & Technology Group A Case for Overlays in DCN Virtualization Katherine Barabash, Rami Cohen, David Hadas, Vinit Jain, Renato Recio

More information

IFIP TC6 Advanced Tutorials in Networking. Software Defined Networking! University of Kelaniya Kelaniya, Sri Lanka 23-25 June 2015

IFIP TC6 Advanced Tutorials in Networking. Software Defined Networking! University of Kelaniya Kelaniya, Sri Lanka 23-25 June 2015 IFIP TC6 Advanced Tutorials in Networking Software Defined Networking! University of Kelaniya Kelaniya, Sri Lanka 23-25 June 2015 Marilia Curado University of Coimbra, Portugal (Slides adapted with permission

More information

BROADCOM SDN SOLUTIONS OF-DPA (OPENFLOW DATA PLANE ABSTRACTION) SOFTWARE

BROADCOM SDN SOLUTIONS OF-DPA (OPENFLOW DATA PLANE ABSTRACTION) SOFTWARE BROADCOM SDN SOLUTIONS OF-DPA (OPENFLOW DATA PLANE ABSTRACTION) SOFTWARE Network Switch Business Unit Infrastructure and Networking Group 1 TOPICS SDN Principles Open Switch Options Introducing OF-DPA

More information

Introduction to OpenFlow:

Introduction to OpenFlow: Introduction to OpenFlow: Bringing Experimental Protocols to a Network Near You! Chris Tracy, Network Engineer ESnet Engineering Group Overview Fundamentals and Terminology Hardware Options for Deploying

More information

SOFTWARE DEFINED NETWORKING: A PATH TO PROGRAMMABLE NETWORKS. Jason Kleeh September 27, 2012

SOFTWARE DEFINED NETWORKING: A PATH TO PROGRAMMABLE NETWORKS. Jason Kleeh September 27, 2012 SOFTWARE DEFINED NETWORKING: A PATH TO PROGRAMMABLE NETWORKS Jason Kleeh September 27, 2012 What if you could Build your next data center optimized for highest demands in flexibility, reliability, and

More information

Catalyst 6500/6000 Switches NetFlow Configuration and Troubleshooting

Catalyst 6500/6000 Switches NetFlow Configuration and Troubleshooting Catalyst 6500/6000 Switches NetFlow Configuration and Troubleshooting Document ID: 70974 Introduction Prerequisites Requirements Components Used Conventions Background Information Configure Network Diagram

More information

Debunking the Myths: An Essential Guide to Software-Defined Networking April 17, 2013

Debunking the Myths: An Essential Guide to Software-Defined Networking April 17, 2013 Copyright 2013 Vivit Worldwide Debunking the Myths: An Essential Guide to Software-Defined Networking April 17, 2013 Brought to you by Vivit Cloud Builders Special Interest Group (SIG) Jim Murphy Cloud

More information

Limitations of Current Networking Architecture OpenFlow Architecture

Limitations of Current Networking Architecture OpenFlow Architecture CECS 572 Student Name Monday/Wednesday 5:00 PM Dr. Tracy Bradley Maples OpenFlow OpenFlow is the first open standard communications interface that enables Software Defined Networking (SDN) [6]. It was

More information

Flow Analysis Versus Packet Analysis. What Should You Choose?

Flow Analysis Versus Packet Analysis. What Should You Choose? Flow Analysis Versus Packet Analysis. What Should You Choose? www.netfort.com Flow analysis can help to determine traffic statistics overall, but it falls short when you need to analyse a specific conversation

More information

Network Virtualization and Application Delivery Using Software Defined Networking

Network Virtualization and Application Delivery Using Software Defined Networking Network Virtualization and Application Delivery Using Software Defined Networking Project Leader: Subharthi Paul Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu Keynote at

More information

ORCHESTRATING THE CLOUD USING SDN

ORCHESTRATING THE CLOUD USING SDN ORCHESTRATING THE CLOUD USING SDN Joerg Ammon Systems Engineer Service Provider 2013-09-10 2013 Brocade Communications Systems, Inc. Company Proprietary Information 1 SDN Update -

More information

SDN and OpenFlow. Naresh Thukkani (ONF T&I Contributor) Technical Leader, Criterion Networks

SDN and OpenFlow. Naresh Thukkani (ONF T&I Contributor) Technical Leader, Criterion Networks SDN and OpenFlow Naresh Thukkani (ONF T&I Contributor) Technical Leader, Criterion Networks Open 2014 Open SDN Networking India Foundation Technology Symposium, January 18-19, 2015, Bangalore Agenda SDN

More information

Internet Protocol: IP packet headers. vendredi 18 octobre 13

Internet Protocol: IP packet headers. vendredi 18 octobre 13 Internet Protocol: IP packet headers 1 IPv4 header V L TOS Total Length Identification F Frag TTL Proto Checksum Options Source address Destination address Data (payload) Padding V: Version (IPv4 ; IPv6)

More information

Cloud Computing Security: What Changes with Software-Defined Networking?

Cloud Computing Security: What Changes with Software-Defined Networking? Cloud Computing Security: What Changes with Software-Defined Networking? José Fortes Center for Cloud and Autonomic Computing Advanced Computing and Information Systems Lab ARO Workshop on Cloud Security

More information

Network Management: - SNMP - Software Defined networking

Network Management: - SNMP - Software Defined networking Internet-Technologien (CS262) Network Management: - SNMP - Software Defined networking 23.4.2014 Christian Tschudin Departement Mathematik und Informatik, Universität Basel 9-1 Chapter 9 Network Management

More information

Software Defined Networking (SDN) T-110.5111 Computer Networks II Hannu Flinck

Software Defined Networking (SDN) T-110.5111 Computer Networks II Hannu Flinck Software Defined Networking (SDN) T-110.5111 Computer Networks II Hannu Flinck What is Software Defined Network (SDN)? The aim of SDN is to provide open interfaces that enable the development of software

More information

Software-Defined Networking Architecture Framework for Multi-Tenant Enterprise Cloud Environments

Software-Defined Networking Architecture Framework for Multi-Tenant Enterprise Cloud Environments Software-Defined Networking Architecture Framework for Multi-Tenant Enterprise Cloud Environments Aryan TaheriMonfared Department of Electrical Engineering and Computer Science University of Stavanger

More information

Lecture 2-ter. 2. A communication example Managing a HTTP v1.0 connection. G.Bianchi, G.Neglia, V.Mancuso

Lecture 2-ter. 2. A communication example Managing a HTTP v1.0 connection. G.Bianchi, G.Neglia, V.Mancuso Lecture 2-ter. 2 A communication example Managing a HTTP v1.0 connection Managing a HTTP request User digits URL and press return (or clicks ). What happens (HTTP 1.0): 1. Browser opens a TCP transport

More information

SDN Applications for IXPs and Service Providers. Jason Kleeh Senior Product Manager January, 2013

SDN Applications for IXPs and Service Providers. Jason Kleeh Senior Product Manager January, 2013 SDN Applications for IXPs and Service Providers Jason Kleeh Senior Product Manager January, 2013 What if you could Build Networks Without Having to Manage an Endless List of Resource Limits Virtualize

More information

ZEN LOAD BALANCER EE v3.04 DATASHEET The Load Balancing made easy

ZEN LOAD BALANCER EE v3.04 DATASHEET The Load Balancing made easy ZEN LOAD BALANCER EE v3.04 DATASHEET The Load Balancing made easy OVERVIEW The global communication and the continuous growth of services provided through the Internet or local infrastructure require to

More information

150-420. Brocade Certified Layer 4-7 Professional 2010. Version: Demo. Page <<1/8>>

150-420. Brocade Certified Layer 4-7 Professional 2010. Version: Demo. Page <<1/8>> 150-420 Brocade Certified Layer 4-7 Professional 2010 Version: Demo Page QUESTION NO: 1 Given the command shown below, which statement is true? aaa authentication enable default radius local A.

More information

SDN CENTRALIZED NETWORK COMMAND AND CONTROL

SDN CENTRALIZED NETWORK COMMAND AND CONTROL SDN CENTRALIZED NETWORK COMMAND AND CONTROL Software Defined Networking (SDN) is a hot topic in the data center and cloud community. The geniuses over at IDC predict a $2 billion market by 2016

More information

DCB for Network Virtualization Overlays. Rakesh Sharma, IBM Austin IEEE 802 Plenary, Nov 2013, Dallas, TX

DCB for Network Virtualization Overlays. Rakesh Sharma, IBM Austin IEEE 802 Plenary, Nov 2013, Dallas, TX DCB for Network Virtualization Overlays Rakesh Sharma, IBM Austin IEEE 802 Plenary, Nov 2013, Dallas, TX What is SDN? Stanford-Defined Networking Software-Defined Networking Sexy-Defined Networking Networking

More information

FWSM introduction Intro 5/1

FWSM introduction Intro 5/1 Intro 5/0 Content: FWSM introduction Requirements for FWSM 3.2 How the Firewall Services Module Works with the Switch Using the MSFC Firewall Mode Overview Stateful Inspection Overview Security Context

More information

CS 91: Cloud Systems & Datacenter Networks Networks Background

CS 91: Cloud Systems & Datacenter Networks Networks Background CS 91: Cloud Systems & Datacenter Networks Networks Background Walrus / Bucket Agenda Overview of tradibonal network topologies IntroducBon to soeware- defined networks Layering and terminology Topology

More information

The State of OpenFlow: Advice for Those Considering SDN. Steve Wallace Executive Director, InCNTRE SDN Lab Indiana University ssw@iu.

The State of OpenFlow: Advice for Those Considering SDN. Steve Wallace Executive Director, InCNTRE SDN Lab Indiana University ssw@iu. The State of OpenFlow: Advice for Those Considering SDN Steve Wallace Executive Director, InCNTRE SDN Lab Indiana University ssw@iu.edu 2 3 4 SDN is an architecture Separation of Control and Data Planes

More information

DATA COMMUNICATOIN NETWORKING

DATA COMMUNICATOIN NETWORKING DATA COMMUNICATOIN NETWORKING Instructor: Ouldooz Baghban Karimi Course Book: Computer Networking, A Top-Down Approach, Kurose, Ross Slides: - Course book Slides - Slides from Princeton University COS461

More information

OpenStack/Quantum SDNbased network virtulization with Ryu

OpenStack/Quantum SDNbased network virtulization with Ryu OpenStack/Quantum SDNbased network virtulization with Ryu Kei Ohmura NTT May 31, 2013 Outline Introduction to Ryu OpenStack Quantum and Ryu Demo Summary 2 What is Ryu 流流 (ryu) means flow 龍龍 (ryu) means

More information

VIA CONNECT PRO Deployment Guide

VIA CONNECT PRO Deployment Guide VIA CONNECT PRO Deployment Guide www.true-collaboration.com Infinite Ways to Collaborate CONTENTS Introduction... 3 User Experience... 3 Pre-Deployment Planning... 3 Connectivity... 3 Network Addressing...

More information

CLASSIFYING NETWORK TRAFFIC IN THE BIG DATA ERA

CLASSIFYING NETWORK TRAFFIC IN THE BIG DATA ERA CLASSIFYING NETWORK TRAFFIC IN THE BIG DATA ERA Professor Yang Xiang Network Security and Computing Laboratory (NSCLab) School of Information Technology Deakin University, Melbourne, Australia http://anss.org.au/nsclab

More information

100-101: Interconnecting Cisco Networking Devices Part 1 v2.0 (ICND1)

100-101: Interconnecting Cisco Networking Devices Part 1 v2.0 (ICND1) 100-101: Interconnecting Cisco Networking Devices Part 1 v2.0 (ICND1) Course Overview This course provides students with the knowledge and skills to implement and support a small switched and routed network.

More information

The Lagopus SDN Software Switch. 3.1 SDN and OpenFlow. 3. Cloud Computing Technology

The Lagopus SDN Software Switch. 3.1 SDN and OpenFlow. 3. Cloud Computing Technology 3. The Lagopus SDN Software Switch Here we explain the capabilities of the new Lagopus software switch in detail, starting with the basics of SDN and OpenFlow. 3.1 SDN and OpenFlow Those engaged in network-related

More information

Using IPM to Measure Network Performance

Using IPM to Measure Network Performance CHAPTER 3 Using IPM to Measure Network Performance This chapter provides details on using IPM to measure latency, jitter, availability, packet loss, and errors. It includes the following sections: Measuring

More information

using OpenFlow HIDEyuki Shimonishi System Platforms Research Labs, NEC corp 11 th Feb, 2009 Page 1

using OpenFlow HIDEyuki Shimonishi System Platforms Research Labs, NEC corp 11 th Feb, 2009 Page 1 Infrastructure virtualization using OpenFlow HIDEyuki Shimonishi System Platforms Research Labs, NEC corp 11 th Feb, 2009 Page 1 Backgrounds Illusion of one fits all IP network Variety of new services

More information

NEFSIS DEDICATED SERVER

NEFSIS DEDICATED SERVER NEFSIS TRAINING SERIES Nefsis Dedicated Server version 5.2.0.XXX (DRAFT Document) Requirements and Implementation Guide (Rev5-113009) REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER Nefsis

More information

Certes Networks Layer 4 Encryption. Network Services Impact Test Results

Certes Networks Layer 4 Encryption. Network Services Impact Test Results Certes Networks Layer 4 Encryption Network Services Impact Test Results Executive Summary One of the largest service providers in the United States tested Certes Networks Layer 4 payload encryption over

More information

Teaching Networking Hardware

Teaching Networking Hardware Teaching Networking Hardware Stanford High Performance Network Group Presented By: Martin Casado Gregory Watson Martin Casado Nick McKeown June, 2005 Motivation (networking hardware experience needed in

More information

Zarząd (7 osób) F inanse (13 osób) M arketing (7 osób) S przedaż (16 osób) K adry (15 osób)

Zarząd (7 osób) F inanse (13 osób) M arketing (7 osób) S przedaż (16 osób) K adry (15 osób) QUESTION NO: 8 David, your TestKing trainee, asks you about basic characteristics of switches and hubs for network connectivity. What should you tell him? A. Switches take less time to process frames than

More information

EAGLE EYE IP TAP. 1. Introduction

EAGLE EYE IP TAP. 1. Introduction 1. Introduction The Eagle Eye - IP tap is a passive IP network application platform for lawful interception and network monitoring. Designed to be used in distributed surveillance environments, the Eagle

More information

Chapter 6 Configuring the SSL VPN Tunnel Client and Port Forwarding

Chapter 6 Configuring the SSL VPN Tunnel Client and Port Forwarding Chapter 6 Configuring the SSL VPN Tunnel Client and Port Forwarding This chapter describes the configuration for the SSL VPN Tunnel Client and for Port Forwarding. When a remote user accesses the SSL VPN

More information

Software Defined Networking (SDN)

Software Defined Networking (SDN) Software Defined Networking (SDN) Overview Traditional Switches Approaches and Issues Software Defined Networking Overview OpenFlow Controller/Network Operating Systems Traditional Switch Configuration

More information

z/os Firewall Technology Overview

z/os Firewall Technology Overview z/os Firewall Technology Overview Mary Sweat E - Mail: sweatm@us.ibm.com Washington System Center OS/390 Firewall/VPN 1 Firewall Technologies Tools Included with the OS/390 Security Server Configuration

More information