SDI: a multi-domain SDN mechanism for fine-grained inter-domain routing

In recent years, SDN has evolved as a promising alternative to the traditional networking paradigm. This is because the traditional network is decentralized, making it difficult to manage and provide trouble-shooting. SDN is an approach to network management whereby the forwarding process of the data plane (DP) is disassociated from the control plane (CP). The CP is responsible for decision-making. SDN centrally control the network infrastructure and make it programmable. Communication between the two planes (data and control) is carried out by the OpenFlow (OF) protocol. The deployment of SDN was initiated by Mr. Matrin Casado and his research team in 2008. The original projects developed at Stanford University were SANE and ETHANE. Security reports and web articles suggest that SDN (Software Defined Network) has the caliber to defend DDoS attacks. The year 2017 has been declared as the year of SDN adaption and DDoS mitigation. The initial effort in the direction of compiling the detection and mitigation approaches has been done in (Dayal et al., 2016). Recently a similar effort has been done in (Rochak et al., 2019). The CP of SDN has a complete visibility of the network which makes traffic monitoring feasible. Moreover, SDN open flow switches contain forwarding logic only; decision-making capability is softwarized at 58controller. This helps the controller to instruct and configure the switches with new flow rules which the switches follow. This facilitates the network admins to detect and mitigate these attacks easily. SDN have gained momentum among the possible solutions of DDoS attacks due to its decentralized nature of network management, but solutions come with its repercussions. The centralization and open architecture framework makes SDN difficult for widespread adaptation. The chapter begins with an introduction to DDoS attacks and its classification such as volumetric attack, protocol exploitation attack and application attack. In the next section, we discuss the possible DDoS attacks over SDN framework. We have categorized the vulnerability into three classes: DDoS attack on data, control, and application planes (APs). The DDoS attack on DP can further be classified into TCAM exhaustion, switch DDoS, ICMP flood, TCP flood, TCP_SYN flood, etc. We would discuss Resource depletion, OF bandwidth exhaustion, amplification attacks in DDoS attack over CP. HTTP flooding and Slowloris attack has been discussed in DDoS attack over AP. The next section highlights the working of attack tools used in performing DDoS attacks. Various DDoS tools have been widely exploited to render DDoS attacks and facilitate attackers to carry out dangerous attack on target; here target may be network resources, server resources, or applications. The fourth section focuses on the state-of-the-art for detection and mitigation approaches of DDoS attacks. Detection approaches are classified into statistical, policy, and machine learning-based approaches. DDoS mitigation OF switches, including Alcatel Lucent’s OmniSwitch, Brocade’s MLXe series routers, and applications such as DefensePro by Radware that are available in market; also depend on the statistical threshold to detect the DDoS attack. In addition, this section also incorporates a brief analysis of the previous defense mechanism of the last 10 years and analyzes and compares the products of different security vendors like Cloudflare, Radware, Akamai, Arbor, Nexusguard, etc.

Currently innovative approaches based on technology of software defined networks (SDN) are very popular in the field of information technology and computer networks. SDN allow providing a flexible approach to managing of data flows in computer networks (CN) by separation of the control plane and data plane. Using of SDN approach allow organization of different virtual program structures (slices) that included the most often interaction with each other SDN objects. The aim of this work is the developing of algorithm and software of virtual slices formation in software defined networks based on the data of base network and links connectivity information. This work is focused on the application of the proposed approach for solving the problem of adaptive routing in SDN based on the OpenFlow protocol. To validate the correctness of the proposed algorithm we have performed a comparative analysis and experimental study of the developed software.

The use of Software-Defined Networking (SDN) has created a huge leap in the management of computer networks. SDN offers flexibility and the ability to dynamically manage networks, but along with its advantages, it also brings significant challenges in managing quality of service (QoS). QoS is critical to maintaining performance and user experience in increasingly complex and distributed network environments. The research method uses Solution Development to address a quality of service (QoS) management challenge and solution in Software Defined Networking with the approach of designing and developing practical solutions to address QoS management issues and challenges in SDN environments. Control Separation and Data Plane are centralized network control at the SDN controller, while the data plane reside in the networks hardware, both capable of maintaining QoS and a challenges in SDN with a computer network approach that separates the control layer from the data layer, enabling more flexible and centralized network management. Research conclusions related to SDN Software Defined Networking quality of service management problems and solutions, focusing on the problem of separating management and data levels. The separations of control and data plane concept in SDN has great potential to improve flexibility, scalability and more efficient network management.

Software Defined Networking (SDN) is the more reliable and flexible networking architecture. Due to its programmable nature, it is getting more popular in every research domain of Computing. Moreover, Named Data Networking (NDN) architecture is also more beneficial and emerging technology of Internet. NDN focuses on the content name instead of its location and replaces the usage of IP addresses. Lot of research has been made to integrate SDN and NDN due to their benefits of better management-ability, flexibility, less complexity, centralized control, decoupled control and data planes etc. Mobile Ad Hoc Network (MANET) is also getting more popular due to huge advancement in Mobile communication devices. Combining SDN and NDN in MANET will resolve lots of problems (i.e. forwarding, mobility, management etc.) which are difficult to tackle with single architecture. Broadcast Storm is always a challenging issue in Ad Hoc networks like MANET. In this paper, we proposed a Controller based Selective Forwarding (CSF) scheme by merging SDN, NDN and MANET to overcome the Broadcast Storm Problem (BSP) and other issues caused by BSP. CSF is evaluated using different simulation parameters which shows superiority over the Native ND-MANET in reference to BSP.

Along with the widespread development of Internet and mobile applications, the demand for more flexible and dynamic networking services increases. It becomes a new challenge for many carriers to deploy a variety of new services by effective provisioning of network resources. Software-Defined Networking (SDN) is a novel approach to make networks reconfigurable and extensible such that new services can be deployed with existing network devices. By decoupling the controller plane from the data plane in network devices, SDN brings networks programmability of the data plane and centralization of the controller plane. Conventional Operations Support Systems (OSSs) were developed to manage networks in a standard fashion with Simple Network Management Protocol (SNMP) or proprietary protocols. SDN provides a new framework in managing SDN-enabled devices. A new issue for carriers is how SDN-enabled networks and devices can be monitored and controlled by current OSSs. This paper focuses on performance management and aims to develop an efficient scheme to collect traffic statistics data via the SDN controller plane. Similar to Bulkstat, an SNMP-based mechanism for periodic collection and transfer of MIB objects, the proposed scheme for bulk traffic statistics collection is developed in the controller plane and provides a northbound interface for upper network management applications. Instead of using SNMP and MIBs, the scheme is implemented by periodically gathering statistics information of flow tables from SDN-enabled switches via the OpenFlow protocol.

In order to provide various services with different quality requirements, the current Internet is expected to turn into a QoS based Internet under the Differentiated Service (DiffServ) architecture. A variety of works have been done in the field of constraint based routing to provide QoS guaranteed or assured services by developing novel routing protocols and algorithms. However, most of these efforts focus on intra-domain routing rather than inter-domain routing. In this paper, we discuss issues of finding routes with QoS requirements among multiple domains, called inter-domain QoS routing. We first investigate the needs and problems faced when introducing inter-domain QoS routing into the Internet. Then, we present a model for inter-domain QoS routing and describe its building blocks. Finally, we present five mechanisms for operating inter-domain QoS routing in DiffServ networks.KeywordsResource InformationBorder Gateway ProtocolSignaling EntityRout EntityRoute ComputationThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Software-defined network (SDN) radically changes the network architecture by decoupling the network logic from the underlying forwarding devices. This architectural change rejuvenates the network-layer granting centralized management and reprogrammability of the networks. From a security perspective, SDN separates security concerns into control and data plane, and this architectural recomposition brings up exciting opportunities and challenges. The overall perception is that SDN capabilities will ultimately result in improved security. However, in its raw form, SDN could potentially make networks more vulnerable to attacks and harder to protect. In this paper, we provide a comprehensive review of SDN security domain while focusing on its data plane, which is one of the least explored but most critical aspects in securing this technology. We review the most recent enhancements in SDNs, identify the main vulnerabilities of SDNs, and provide a novel attack taxonomy for SDNs. Thereafter, we provide a comprehensive analysis of challenges involved in protecting SDN data plane and control plane and provide an in-depth look into available solutions with respect to the identified threats and identify their limitations. To highlight the importance of securing the SDN platform, we also review the numerous security services built on top of this technology. We conclude the paper by offering future research directions.

Network management is challenging. To operate, maintain, and secure a communication network, network operators must grapple with low-level vendor-specific configuration to implement complex high-level network policies. Despite many previous proposals to make networks easier to manage, many solutions to network management problems amount to stop-gap solutions because of the difficulty of changing the underlying infrastructure. The rigidity of the underlying infrastructure presents few possibilities for innovation or improvement, since network devices have generally been closed, proprietary, and vertically integrated. A new paradigm in networking, software defined networking (SDN), advocates separating the data plane and the control plane, making network switches in the data plane simple packet forwarding devices and leaving a logically centralized software program to control the behavior of the entire network. SDN introduces new possibilities for network management and configuration methods. In this article, we identify problems with the current state-of-the-art network configuration and management mechanisms and introduce mechanisms to improve various aspects of network management. We focus on three problems in network management: enabling frequent changes to network conditions and state, providing support for network configuration in a highlevel language, and providing better visibility and control over tasks for performing network diagnosis and troubleshooting. The technologies we describe enable network operators to implement a wide range of network policies in a high-level policy language and easily determine sources of performance problems. In addition to the systems themselves, we describe various prototype deployments in campus and home networks that demonstrate how SDN can improve common network management tasks.

The development of information technology and the digitalization of higher education demand a more efficient, flexible, and secure network infrastructure. Software Defined Networking (SDN) offers a new paradigm in network management by separating the control plane and data plane, enabling more centralized and adaptive network management. This study aims to analyze the implementation of SDN in campus networks, specifically at Ichsan Sidenreng Rappang University, and identify its benefits, challenges, and implementation strategies. The method used is a systematic literature review of 15 scientific publications from 2020-2025 that discuss the implementation of SDN in the context of campus networks. The results show that SDN provides significant network performance improvements, with a decrease in latency from 37.7 ms to 18 ms, jitter from 40.3 ms to 2.7 ms, and an increase in throughput from 95 Mbps to 98.2 Mbps compared to conventional networks. SDN also increases flexibility through centralized management and automation, strengthens security with adaptive firewall integration, and improves service redundancy and availability. Key implementation challenges include the need for human resource training, the development of comprehensive security policies, and testing on more complex topologies. This study concludes that implementing SDN on campus networks is strategic for supporting the digitalization of higher education, with recommendations for thorough planning, ongoing human resource training, and the development of policies that holistically integrate technical and security aspects.

Software Defined Networking (SDN) is believed to be a promising networking practice in facing the challenges of ever-increasing traffic demand and network growth. With wider deployment of SDN enabled network infrastructures, the conventional network virtualization problem will gradually evolve into an SDN virtualization problem, in which both virtual data plane and control plane entities are instantiated from their physical network counterparts. In this paper, we first argue that the delay constrained virtual SDN embedding problem is in general different from the conventional virtual network (VN) embedding problem. This paper tries to define the delay constrained vSDN embedding problem space, followed by a potential network architecture that supports SDN virtualization. This study then formulates the delay constrained vSDN embedding problem with the objective of maximizing request acceptance ratio and proposes a set of heuristics to tackle the embedding problem. Our results show that both the control plane placement and data plane mapping are restricted by a strict controller-to-switch (C2S) delay constraint. When the delay constraint is relaxed over a certain value, the acceptance ratio is dominated by control plane resources or data plane resources. Certainly, with different resource configurations and substrate network diameters, the tolerances of C2S delay constraint are distinct.

Popularity of Software Defined Network (SDN) technology is spreading rapidly and corporate networks are deploying to take advantages of its features. Control & Data planes are segregated in SDN and simple forwarding devices enabled with OpenFlow protocol is used to forward data planes. The responsibility of control planes are taken by controller into SDN network. The data packets are generated by source host and forwarded to destination host by seeing destination address of such packet without validating source host address. Flow of data packets is controlled by controller setting up required flow entries into flow table of forwarding devices. Initially forwarding devices do not have any security & control and they are not able to forward traffic generated by attached hosts. Data packets of attached hosts are sent to the controller by forwarding devices for generation of control packets and setup necessary flow entries into device flow table. Source IP spoofed attacks may be setup by attacker in this situation and perform different type of attacks. There are some techniques for prevention and mitigation from such attacks. In this study, we offer an analysis of available source address validation techniques for SDN environment. The study discussed various features, limitations and gaps of source address validation solutions and provided various areas in SDN Security for future research.

Software Defined Networking (SDN) is a new networking paradigm, with a great potential to increase network efficiency, ease the complexity of network control and management, and accelerate the rate of technology innovation. One of the core concepts of SDN is the separation of the network's control and data plane. The intelligence and the control of the network operation and management, such as routing, is removed from the forwarding elements (switches) and is concentrated in a logically centralised component, i.e. the SDN controller. In order for the controller to configure and manage the network, it needs to have up-to-date information about the state of the network, in particular its topology. Consequently, topology discovery is a critical component of any Software Defined Network architecture. In this paper, we evaluate the cost and overhead of the de facto standard approach to topology discovery currently implemented by the major SDN controller frameworks, and propose simple and practical modifications which achieve a significantly improved efficiency and reduced control overhead. We have implemented our new topology discovery approach on the widely used POX controller platform, and have evaluated it for a range of network topologies via experiments using the Mininet network emulator. Our results show that our proposed modifications achieve an up to 45% reduction in controller load compared to the current state-of-the-art approach, while delivering identical discovery functionality.

The proposed Internet paradigm The Flying Ad Hoc Network (FANET), Named Data Network (NDN), and Software Defined Network (SDN) have attracted the interest of the scientific community. The TCP/IP protocol is the present Internet standard, while NDN is the future internet architecture that builds on it. Data availability is improved via NDN, which substitutes named data for the nodes' addresses. SDN is a good option for communicating effectively, utilizing resources effectively, and supporting developing technologies. The SDN has attracted interest because of its high-level programmability and flexibility. Numerous applications in the military, business, and civil sectors make extensive use of FANE T. The broadcast characteristic of NDN causes an issue known as a broadcast storm in dense FANET environments. The issue is caused by duplicate packets, which raises the overall amount of traffic and retransmissions. FANET has a problem with the timely and quick transmission of essential packets. In this paper, we suggested a new scheme named "Novel Adaptive Broadcast Storm Avoidance (NABA)" for SDN and NDN-enabled FANET, which uses a controller to lessen the broadcast issue. Our scheme made use of the SDN controller's effective flow management to regulate the broadcast storm and facilitate packet transfers. Additionally, we divided up the packet into categories based on priority. The priority of the packet is determined by the naming criterion. In terms of the overall number of Interests and content retrieval time, the findings show that NAB A performs better than native NDN floods.

The software defined networking (SDN) is a networking technique to disintegrate control plane and data (forwarding) plane in the network, allows use of open protocols to control network switches and routers using software controls and abstract infrastructure as per application and network services requirements. This makes it possible to implement network management and control through software. Word software means that network devices are programmable but software is not controlling everything centrally. This approach helps to achieve network and infrastructure manageability, control plane modularity, cost-effectiveness, generalized data planes and adaptable network, making virtualization easy to implement, as per need of an hour. The SDN yields a network infrastructure which will be programmable. This inherently qualifies for control to be shifted to software and network flow with network devices to be operated by software programs. A network engineer must now be able to re-program instead of re-build the network infrastructure manually. The following sections explain terminologies, working, and operations related to SDN. This paper helps readers to gain understanding and overview of SDN.

Software‐defined networking (SDN) is a relatively new approach in network management that proposes to separate the network control (Control plane) and the forwarding process (Data plane) to optimize the network infrastructure and improve network performance, controllability, manageability and flexibility. However, like every technology, SDN has brought its own new challenges in terms of security and scalability which are very important aspects that should be considered to design and build a resilient architecture in order to meet carrier grade network requirements. In this paper, we propose a secure SDN architecture with IEEE 802.1X port‐based authentication where we also consider the controller's scalability issue by devolving the access control capability to the data plane. In this way, we reduce the high demand and the workload on the SDN controller. Our proposed model presents a novel SDN network architecture and logical network segmentation which provides an optimal and secure network access with low latency. We have implemented and tested our architecture to show its performance (authentication delays). Copyright © 2016 John Wiley & Sons, Ltd.