Challenges and solutions in Software Defined Networking: A survey

Popularity of Software Defined Network (SDN) technology is spreading rapidly and corporate networks are deploying to take advantages of its features. Control & Data planes are segregated in SDN and simple forwarding devices enabled with OpenFlow protocol is used to forward data planes. The responsibility of control planes are taken by controller into SDN network. The data packets are generated by source host and forwarded to destination host by seeing destination address of such packet without validating source host address. Flow of data packets is controlled by controller setting up required flow entries into flow table of forwarding devices. Initially forwarding devices do not have any security & control and they are not able to forward traffic generated by attached hosts. Data packets of attached hosts are sent to the controller by forwarding devices for generation of control packets and setup necessary flow entries into device flow table. Source IP spoofed attacks may be setup by attacker in this situation and perform different type of attacks. There are some techniques for prevention and mitigation from such attacks. In this study, we offer an analysis of available source address validation techniques for SDN environment. The study discussed various features, limitations and gaps of source address validation solutions and provided various areas in SDN Security for future research.

Named Data Networking is a novel network architecture for the future internet in which data is named rather than addressed. This enables routers to forward data more efficiently based on its name, outperforming IP‐based routing. Another networking architecture that divides the control plane and the data plane is software‐defined networking (SDN). In an SDN network, the control plane decides on routing while the data plane forwards data packets. This separation increases routing flexibility and scalability. Numerous techniques to improve routing can be achieved with NDN and SDN integration. This paper provides an in‐depth examination of routing approaches in NDN based on SDN, emphasizing design principles, algorithms, and performance measures. We begin by summarizing the NDN architecture and delving into its essential components. We next go into the core routing ideas in NDN and categorize and study several routing solutions based on Software Defined Networks. Finally, we highlight the need for scalable, effective, and secure routing systems that may satisfy the expanding requirements of the contemporary internet. We also suggest open research topics in NDN routing based on SDN. This review provides an extensive overview of current centralized routing approaches in NDN, including their limitations and future possibilities.

Hybrid software-defined networking (SDN) networks are intermediates between traditional networks and SDN networks. However, since the hybrid control planes are structurally different from the single control plane, updating the hybrid SDN networks lacks effective techniques. In this paper, by utilizing the segment routing (SR) mechanism to update hybrid SDN networks and formalize the application of SR during updates, we propose a cooperative consistency update algorithm that can coordinate SR, two-phase commit techniques. The algorithm is capable of preserving consistency with low overhead and excellent applicability. When a network requires updating, the algorithm leverages the SR mechanism to stitch a new path using the available path segments; thus, flows can use the new path immediately. If the update cannot be completed with the SR mechanism alone, the algorithm can utilize the two-phase commit technique to update the nodes through duplication. Notably, our experiments based on real topologies indicate that, compared to prior techniques, the proposed algorithm can greatly reduce the TCAM overhead.

It is Software defined networking (SDN) is a new network approach which allows separation of the forwarding plane from the control plane in network architecture, that aids in the efficient control of data flow and gives network administrators a software- based method for managing and configuring the networks. In contrast to SDN, which provides a centralized controller, traditional network topologies require the individual configuration of each network device. Due to a centralized control functionality, SDN is increasingly used by businesses, telecom service providers, cloud providers, and many other users, as it encourages flexibility and scalability in the network while also assisting in streamlining operations. There is significant demand of SDN for effective and adaptable networks. SDN adoption has also been rising in the campuses and corporate sectors. This paper provides a concise overview of the Software Defined Networks (SDN) topic, which is essential for comprehending the fundamental principles of SDN in order to conduct research and implement SDN in many sectors. The initial focus is on the discussion of traditional networks, including their limitations, as well as the many issues encountered by industries. The topic of Software Defined Networks is explored, encompassing their necessity, historical background, architectural structure, interfaces, and models. Next, the many applications of Software-Defined Networking (SDN) are examined. Additionally, the various SDN case studies, vendors, setup issues with SDN, and current research fields were elucidated. The discussion focuses on the role of Software-Defined Networking (SDN) in Artificial Intelligence (AI), specifically addressing the issues associated with implementing SDN in AI.

From the previous chapter, one can see that software-defined networking (SDN) can be applied to large-scale distributed datacenter networks for network control and management. When this occurs, a logically centralized and physically distributed control plane is usually required. This type of control plane consists of multiple controllers communicating with one another. The collaboration of these controllers facilitates the maintenance of a global consistent view of the entire network. However, there are many new problems that must be addressed when a distributed control plane is deployed in a large-scale network; in particular, controller placement is one key problem. Controller placement refers to selecting the proper positions of the controllers to further improve the scalability and performance of the distributed control plane. In this chapter, we propose a novel placement metric for deploying multiple controllers that measures the cost when controllers with limited capacity handle request messages from switches. Then, we formulate the optimal controller placement problem as an integer linear program (ILP) and use an effective approximation algorithm to find its solution. We conduct intensive experiments based on many real topologies. Our results demonstrate that our strategy can significantly improve performance over existing strategies in terms of both cost and load balance.

The development of information technology and the digitalization of higher education demand a more efficient, flexible, and secure network infrastructure. Software Defined Networking (SDN) offers a new paradigm in network management by separating the control plane and data plane, enabling more centralized and adaptive network management. This study aims to analyze the implementation of SDN in campus networks, specifically at Ichsan Sidenreng Rappang University, and identify its benefits, challenges, and implementation strategies. The method used is a systematic literature review of 15 scientific publications from 2020-2025 that discuss the implementation of SDN in the context of campus networks. The results show that SDN provides significant network performance improvements, with a decrease in latency from 37.7 ms to 18 ms, jitter from 40.3 ms to 2.7 ms, and an increase in throughput from 95 Mbps to 98.2 Mbps compared to conventional networks. SDN also increases flexibility through centralized management and automation, strengthens security with adaptive firewall integration, and improves service redundancy and availability. Key implementation challenges include the need for human resource training, the development of comprehensive security policies, and testing on more complex topologies. This study concludes that implementing SDN on campus networks is strategic for supporting the digitalization of higher education, with recommendations for thorough planning, ongoing human resource training, and the development of policies that holistically integrate technical and security aspects.

Computer network conditions that are dynamic and also complex make network operators often make mistakes in the configuration of a network device. However, these mistakes can be resolved by the emergence of a centralized programming approach which is now known as Software Defined Network (SDN). In addition, with the development of information technology, several services in computer networks also grabbed a lot of attention from the world, such as video streaming services. A video streaming service that is so massive is capable of having an impact on data traffic on computer networks. In SDN networks, controllers are a core component of this architecture. Currently, many different types of SDN controllers can be used, however, choosing a controller in an SDN network must be an important concern. This is related to the performance of the SDN controller which is a requirement for SDN network development. This research will analyze the performance of the video streaming service using the Real-time Transport Protocol (RTP) streaming protocol in testing two SDN controllers, namely Pox and Opendaylight. Based on the tests that have been carried out, it produces Quality of Service (QoS) values in the form of throughput, delay, and jitter. The Pox controller excels in the value of QoS delay and throughput. As for the jitter value, both Pox and Opendaylight controllers have good indexes.

In recent years, SDN has evolved as a promising alternative to the traditional networking paradigm. This is because the traditional network is decentralized, making it difficult to manage and provide trouble-shooting. SDN is an approach to network management whereby the forwarding process of the data plane (DP) is disassociated from the control plane (CP). The CP is responsible for decision-making. SDN centrally control the network infrastructure and make it programmable. Communication between the two planes (data and control) is carried out by the OpenFlow (OF) protocol. The deployment of SDN was initiated by Mr. Matrin Casado and his research team in 2008. The original projects developed at Stanford University were SANE and ETHANE. Security reports and web articles suggest that SDN (Software Defined Network) has the caliber to defend DDoS attacks. The year 2017 has been declared as the year of SDN adaption and DDoS mitigation. The initial effort in the direction of compiling the detection and mitigation approaches has been done in (Dayal et al., 2016). Recently a similar effort has been done in (Rochak et al., 2019). The CP of SDN has a complete visibility of the network which makes traffic monitoring feasible. Moreover, SDN open flow switches contain forwarding logic only; decision-making capability is softwarized at 58controller. This helps the controller to instruct and configure the switches with new flow rules which the switches follow. This facilitates the network admins to detect and mitigate these attacks easily. SDN have gained momentum among the possible solutions of DDoS attacks due to its decentralized nature of network management, but solutions come with its repercussions. The centralization and open architecture framework makes SDN difficult for widespread adaptation. The chapter begins with an introduction to DDoS attacks and its classification such as volumetric attack, protocol exploitation attack and application attack. In the next section, we discuss the possible DDoS attacks over SDN framework. We have categorized the vulnerability into three classes: DDoS attack on data, control, and application planes (APs). The DDoS attack on DP can further be classified into TCAM exhaustion, switch DDoS, ICMP flood, TCP flood, TCP_SYN flood, etc. We would discuss Resource depletion, OF bandwidth exhaustion, amplification attacks in DDoS attack over CP. HTTP flooding and Slowloris attack has been discussed in DDoS attack over AP. The next section highlights the working of attack tools used in performing DDoS attacks. Various DDoS tools have been widely exploited to render DDoS attacks and facilitate attackers to carry out dangerous attack on target; here target may be network resources, server resources, or applications. The fourth section focuses on the state-of-the-art for detection and mitigation approaches of DDoS attacks. Detection approaches are classified into statistical, policy, and machine learning-based approaches. DDoS mitigation OF switches, including Alcatel Lucent’s OmniSwitch, Brocade’s MLXe series routers, and applications such as DefensePro by Radware that are available in market; also depend on the statistical threshold to detect the DDoS attack. In addition, this section also incorporates a brief analysis of the previous defense mechanism of the last 10 years and analyzes and compares the products of different security vendors like Cloudflare, Radware, Akamai, Arbor, Nexusguard, etc.

Accurate traffic and latency measurements are the foundation of many network management tasks, including traffic engineering and network provision, network diagnosis and fault recovery. However, SNMP-based traffic measurement techniques in traditional IP networks only provide measurements for link loads, which cannot lead to accurate measurements. For link latency measurement, it has been shown that a traditional IP network needs to deploy a large number of monitors to achieve accurate measurements. The software-defined network (SDN) architecture opens up new opportunities to tackle the traffic matrix estimation and latency measurement problems. For the traffic estimation problem, the counter in a flow table entry of an SDN switch can directly measure the size of a matched flow. This dramatically increases the number and type of flows that can be measured accurately. For link latency measurement, SDN switches provide flexible routing and hence allow even non-shortest paths to be measured in the network. This routing flexibility can reduce the number of monitors deployed in the network to achieve a complete measurement of all the link latencies. But the additional measurement capabilities of SDNs also have limitations: the flow table entries added for measurements must be limited due to the high cost of ternary content-addressable memory (TCAM), and the amount of additional traffic for measurement should also be confined. Under these constraints, this research investigates the traffic matrix estimation and link latency measurement problems for a pure SDN network and a hybrid SDN network. A hybrid network, which consists of SDN switches and conventional routers, will exist for some time to come since it is economically impossible to replace every conventional router overnight. For the traffic matrix estimation problem, we propose a new estimation framework, which can be used in both SDNs and hybrid SDNs. Performance evaluation results show that the new framework can achieve highly accurate traffic measurement with a small number of TCAM entries. For the link latency measurement problem, we first present minimum monitor placement schemes in hybrid SDNs. It has been shown that our schemes not only reduce the number of required monitors but also guarantee full link measurements even when link weights change. We then present two time-stamp-based link latency measurement schemes for pure SDNs and show that the proposed schemes can minimize the number of consumed TCAM entries and the amount of traffic generated for measurement.

Network Virtualization (NV) and Software Defined Networking (SDN) bring new business opportunities for network providers allowing them to offer the network as a service over their network infrastructure. One challenge for network providers is to provision virtual SDN services for multiple tenants while satisfying QoS and traffic engineering (TE) objectives of the higher priced SDN services, allocating the network resources cost effectively and managing the virtual services that span over customer premises, wide area and cloud domains. In this paper, we describe an algorithmic framework that includes QoS management and traffic-engineering methods for managing virtual services over large SDN networks. The algorithmic framework is part of an intelligent service management architecture which employs optimization algorithms, machine learning and artificial intelligence techniques into the management of virtual services over SDN networks.

Information centric networking (ICN) and software-defined networking (SDN) are two emerging networking paradigms that promise to solve different aspects of networking problems. ICN is a clean-slate design for accommodating the ever increasing growth of the Internet traffic by regarding content as the network primitive, adopting in-network caching, and name-based routing, while SDN focuses on agile and flexible network management by decoupling network control logic from data forwarding. ICN and SDN have gained significant research attention separately in the most of the previous work. However, the features of ICN have profound impacts on the design and operation of SDN, such as in-network caching and data-centric security. Conversely, SDN provides a powerful tool for experimenting and deploying ICN architectures and can greatly facilitate ICN functionality and management. In this paper, we point out the necessity of surveying the scattered works on integrating SDN and ICN (SD-ICN) for improving operational networks. Specifically, we analyze the points of SD-ICN strengths and opportunities, and discuss the SDN enablers for deploying ICN architectures. In addition, we review and classify the recent work on improving the network management by SD-ICN and discuss the potential security benefits of SD-ICN. Finally, a number of open issues and future trends are highlighted.

Software Defined Networking (SDN) is an emerging network architecture that separates the control plane from the data plane to simplify and improve network management with a high degree of flexibility. Network optimization under traffic uncertainties is one of the most challenging topics in communication networks to optimize network performance and traffic delivery. Although the traffic optimization technology has been extensively studied in the industry, a traffic optimization solution different from the traditional network is needed in the SDN network, which can utilize global network information and traffic characteristics to control and manage traffic in a better way. In this paper, a Mixed Linear Geometric Programming Traffic Optimization Algorithm (MLGP-TOA) is proposed for the problem of traffic uncertainties in SDN. Aiming at minimizing the maximum link utilization (MLU), the initial problem is transformed into a convex optimization problem by monomial approximation and variable substitution. Then, the inner point method is used to find the global optimal solution, and the optimal split ratio at each node is obtained. Finally, the configuration information is sent to the data plane. The simulation results show that the algorithm can reduce MLU, so that the traffic can fully utilize network resources and avoid congestion.

Software Defined Networking (SDN) has a potential to address a number of networking challenges, but still presents other financial and business challenges such as budget constraints, acceptability and trust amongst network operators. A hybrid SDN deployment is a conceivable solution, because it offers the benefits of SDN and traditional network capabilities, including budget constraints adaptability, falling back on time-tested traditional tools, central network programmability and will offer an organization a smooth transition to SDN. As modern-day communication has become an imperative feature of day to day business functions, there is a need to balance the network load to achieve improved network performance, minimizing delay and reduce the time taken for network response. In this paper, we develop and study multi-path load balancing in a hybrid SDN data plane. The load balancer’s performance is tested using four different hybrid SDN topologies, namely, Fat Tree, Ring, Mesh and Torus topology with the OpenDayLight controller. The main contribution of this work is a data plane congestion and link overloading load balancing testing and analysis for deployment (before or after network failure) in hybrid SDN environments. The obtained results display an improved overall network performance and reduced network delay.

Controller-proxy: Scaling network management for large-scale SDN networks

Software Defined Networking (SDN) has emerged as a new networking paradigm that is based on the decoupling between data plane and control plane providing several benefits that include flexible, manageable, and centrally controlled networks. From a security point of view, SDNs suffer from several vulnerabilities that are associated with the nature of communication between control plane and data plane. In this context, software defined networks are vulnerable to distributed denial of service attacks. In particular, the centralization of the SDN controller makes it an attractive target for these attacks because overloading the controller with huge packet volume would result in bringing the whole network down or degrade its performance. Moreover, DDoS attacks may have the objective of flooding a network segment with huge traffic volume targeting single or multiple end systems. In this paper, we propose an entropy-based mechanism for Distributed Denial of Service (DDoS) attack detection and mitigation in SDN networks. The proposed mechanism is based on the entropy values of source and destination IP addresses of flows observed by the SDN controller which are compared to a preset entropy threshold values that change in adaptive manner based on network dynamics. The proposed mechanism has been evaluated through extensive simulation experiments.