WSS/EDFA-based optimization strategies for software defined optical networks

New and emerging use cases, such as the interconnection of geographically distributed data centers (DCs), are drawing attention to the requirement for dynamic end-to-end service provisioning, spanning multiple and heterogeneous optical network domains. This heterogeneity is, not only due to the diverse data transmission and switching technologies, but also due to the different options of control plane techniques. In light of this, the problem of heterogeneous control plane interworking needs to be solved, and in particular, the solution must address the specific issues of multi-domain networks, such as limited domain topology visibility, given the scalability and confidentiality constraints. In this article, some of the recent activities regarding the Software-Defined Networking (SDN) orchestration are reviewed to address such a multi-domain control plane interworking problem. Specifically, three different models, including the single SDN controller model, multiple SDN controllers in mesh, and multiple SDN controllers in a hierarchical setting, are presented for the DC interconnection network with multiple SDN/ OpenFlow domains or multiple OpenFlow/ Generalized Multi-Protocol Label Switching (GMPLS) heterogeneous domains. In addition, two concrete implementations of the orchestration architectures are detailed, showing the overall feasibility and procedures of SDN orchestration for the end-to-end service provisioning in multi-domain data center optical networks.

Software Defined Network (SDN) Technology made tremendous changes in networking field by controlling the hardware with remote software by decoupling data plane and control plane. The focus here is on the controller which is part of control plane. A controller is a central part of SDN; it is an intermediary between Data plane and Forwarding plane. It takes prime place in SDN architecture like Operating System in Computers. SDN Controller is a software which directs the packets using flow rules and also contains statistical information of network. The controller orchestrates the networking devices such as switches and routers by channelizing the packets. SDN controller has different flavor based on the commercial requirement achieved by including new pluggable module. This paper discusses some of the SDN Controller with their feature; the controllers are POX, NOX, Floodlight, ODL, Open Contrail. This paper also compares the characteristic of centralized and distributed controller by focusing on performance, bandwidth and round-trip time of Floodlight and Open Daylight (ODL) controller. The simulation is conducted using Mininet.

Software Defined Networking (SDN) is widely used in many practical contexts and provides a method for managing networks by separating the data plane from the control plane. However, because of its centralized control logic, SDN is particularly susceptible to Distributed Denial of Service (DDoS) attacks. In numerous studies, methods based on Machine Learning (ML) have been proposed to identify DDoS attacks in the context of SDN. However, the proposed methods are resource intensive and unreliable in a large-scale SDN where a huge amount of traffic data is produced from control and data planes. This may exhaust computational resources, deteriorate the performance of the network, or even result in the shutdown of network systems as a result of resource exhaustion. To deal with the above issues, this paper presents a real-time DDoS detection and mitigation method in a multi-controller SDN environment using cloud computing. We propose to run the Machine Learning development cycle on a secured server in a virtual machine. Then we deploy back the trained model into the SDN controllers. All the exchanges between the virtual machine and the controllers are secured. In this way, we configure these controllers to detect and mitigate DDoS in SDN in real-time. Through useful experiments, we demonstrate that our method is secure, reliable, and efficient.

Driven by the requirement of increasing performance and flexibility, networks are being softwarized by paradigms such as software-defined networking (SDN) and network function virtualization (NFV). These solutions reduce the complexity and the specialization of hardware devices, by extracting the inherently distributed control plane of forwarding network elements such as switches and routers, to a logically centralized control plane (referred as controller in SDN). The control plane acts as a broker between the network applications (e.g. monitoring, traffic engineering) and the data plane (i.e. physical network infrastructure). For scalability and robustness, the logically centralized control plane is implemented by physically distributing different controllers throughout the network. This chapter presents different solutions to increase the reliability of both planes: data and control planes. The reliability of the data plane can be increased by considering survivable virtual network embedding solutions. This chapter proposes a survivable embedding against single and double failures at either links or nodes. Furthermore, in order to provide a programmable and resilient data plane, BPFabric has been proposed for SDN which supports high performance functions suitable for detecting attacks. On the other hand, the reliability of the control plane applied to SDN can be addressed by considering enhanced controller placement solutions providing redundancy against uncorrelated as well as targeted failures while coping with latency and capacity requirements. Furthermore, a solution to increase the security and robustness of the control channel is also addressed in this chapter.

Software-defined networking (SDN) is a network approach achieved by decoupling of the control and data planes. The control plane is logically centralized and the data plane is distributed across the network elements. The real-time network is in need of the incorporation of distributed controllers to maintain distributed state information of the traffic flows. Software-based solutions aid distributed SDN controllers to handle fluctuating network traffic and the controller’s configurations are dynamically programmed in real time. In this study, SDN controllers were programmed with a stateful firewall application to provide firewall functionalities without the support of committed hardware. A stateful firewall filtered traffic based on the complete context of incoming packets; it continuously evaluated the entire context of traffic flows, looking for network entry rather than specific traffic flows. In addition, a flow-based scheduling module was implemented in the distributed controllers to improve network scalability. A network cluster was configured with three distributed controllers and we experimented with three independent network topologies. The performance of the proposed network model was evaluated by measuring and analyzing metrics such as network throughput (kbps), delay (ms) and network overhead (pkt/ms) for various combinations of controllers and topologies. The results of the analysis were determined using the mininet emulator. The findings of the performance evaluation indicate that the distributed SDN controllers performs better than a centralized controller. When comparing distributed SDN with two controllers and distributed SDN with three controllers the overall network throughput is increased by 64%, the delay is decreased by 43% and network overhead is reduced by 39%.

The nature of computer network flash crowd traffic, which is generated by legitimate users accessing servers or other network resources are similar to the traffic generated by Distributed Denial of Service (DDoS) like attacks. With advancement in spoof packet generation tools, attacker may generate Multi-source Multi-destination Multi-protocol (MMM) traffic; characteristics of such traffic are very similar to on-going genuine/ flash crowd traffic in the network. In the case of Software Defined Network (SDN), attacker’s target is controller plane. Controller plane in SDN is a centralized processing unit of the underlying network, which manages several data planes. Controller plane frames the policies and pushes forwarding rules to the data planes. Data planes just maintain the forwarding rules. Thus by overloading the SDN controller, functionality of complete computer network will be hampered. In this paper, we have proposed Media Access Control (MAC) address based Model to Differentiate Flash crowd and Malicious traffic in SDN (MDFMS). Novelty of the proposed model is to detect, locate and mitigate the source of Traditional DDoS (T-DDoS) and MMMDDoS traffic. MDFSM has been implemented on separate machine to avoid any additional computing load on SDN controller. It also preserves the original design of the SDN architecture. Proposed model has been evaluated under various scenarios and encouraging results have been obtained to differentiate T-DDoS and MMM-DDoS from benign flash crowd traffic.

Considering the problem that the SDN controller can not fully resolve the virtual network function during the Software Defined Network (SDN) and Network Function Virtualization (NVF) collaborative deployment in the satellite network, a SDN/NFV coordination based on the three-layer satellite network is designed. The framework extends the SDN controller function and proposes the SDN controller function extension method (SDN-FE) based on LightGBM algorithm. SDN-FE has extended the functions of the original SDN controller in three aspects. One is based on LightGBM to establish a classification model for intelligent forwarding of SDN controller data packets. The second is to learn and predict VNF modification of data packets through logistic regression. The third is to design an idle state monitoring mechanism. The above method effectively enhances the control capability of the SDN controller to the network. In terms of SDN packet forwarding classification, SDN-FE is compared with existing well-known machine learning classification algorithms such as SVM, random forest, LSTM. Simulation experiments show that the SDN packet forwarding classification problem is predictable. The average accuracy of the LightGBM model in multi-classification problems is over 69%, which is better than machine learning models such as SVM and random forest. The next step is to conduct an in-depth study of the packet rule learning algorithm in VNF.

Software-defined network (SDN) radically changes the network architecture by decoupling the network logic from the underlying forwarding devices. This architectural change rejuvenates the network-layer granting centralized management and reprogrammability of the networks. From a security perspective, SDN separates security concerns into control and data plane, and this architectural recomposition brings up exciting opportunities and challenges. The overall perception is that SDN capabilities will ultimately result in improved security. However, in its raw form, SDN could potentially make networks more vulnerable to attacks and harder to protect. In this paper, we provide a comprehensive review of SDN security domain while focusing on its data plane, which is one of the least explored but most critical aspects in securing this technology. We review the most recent enhancements in SDNs, identify the main vulnerabilities of SDNs, and provide a novel attack taxonomy for SDNs. Thereafter, we provide a comprehensive analysis of challenges involved in protecting SDN data plane and control plane and provide an in-depth look into available solutions with respect to the identified threats and identify their limitations. To highlight the importance of securing the SDN platform, we also review the numerous security services built on top of this technology. We conclude the paper by offering future research directions.

In the past few years there has been a tremendous increase in network attacks especially the Denial of Service and Distributed Denial of Service attacks. The attacker tries to send a number of packets to the victim site so as to make it unavailable to provide any service. Nowadays DoS attacks can be performed using IoT enabled devices too. The traditional network architecture is unable to handle such attacks which gave rise to Software Defined Network(SDN) as a solution. Software-defined networking is a network technology that provides central control over the network and thus manages network behavior dynamically through software via open interfaces. SDN plays a role to retain the heterogeneity in networks and objects by integrating into them a control solution that interacts with the SDN controllers. Although SDN provides promising solutions to many security problems, it is also exposed to new attacks targeting the data plane, control plane or the link connecting the two planes. This paper aims at the integration of IoT with SDN technology, the study of OpenFlow Protocol, different DoS attacks occurring on the layered SDN structure and the possible mitigation strategies to weaken the impact of those attacks on the network. For this purpose, we will be using a mininet simulator, OpenVSwitch(OVS) and Floodlight SDN controller.

Super-channel (or multi-carrier) transmission is today one of the most promising techniques for the support of high line rates, which are required to satisfy the massive increase of Internet traffic. Moreover, flex-grid optical networks seem to be the candidates for backbone networks by enabling high spectral efficiency thanks to the adoption of the ITUT flex-grid. Such networks may suffer from spectrum fragmentation, which can prevent the establishment of new connections. For this reason, defragmentation techniques (i.e., reoptimization) have been widely studied, especially considering single-carrier transmission. Inparallel, the software defined networking (SDN) paradigm and the active stateful path computation element (PCE) are emerging as candidates for the control of next-generation optical networks. Such architectures are also particularly suitable in the case of defragmentation since they enable the controller to trigger reoptimization procedures. In this paper, we investigate defragmentation in the presence of super-channels, at both the control and data planes. We propose and experimentally demonstrate a technique based on a periodically poled lithium niobate waveguide to achieve both frequency conversion and defragmentation in elastic (or flex-grid) optical networks. Its peculiarity is that it is suitable for super-channels because it avoids detrimental subcarrier overlapping during a frequency shift. SDN with the OpenFlow protocol is discussed for the control of such operations, as well as the active stateful PCE and generalized multi-protocol label switching (GMPLS). The frequency conversion and defragmentation techniques are demonstrated in a lab trial considering a 200 Gb/s super-channel and extended OpenFlow for the control plane. No loss of data is experienced.

It is known that the design of the control plane (CP) is vital in the network planning for software-defined networking (SDN), while to improve throughput and enlarge geographical coverage, optical networks are commonly used as the physical infrastructure of SDN. However, physical-layer attacks can disrupt the operation of an optical network and thus complicate the CP design. In this work, we consider planned physical-layer attacks when designing the CP of an SDN that uses an optical network as its physical infrastructure. We first show that the CP design problem should be modeled as a bilevel optimization, where the network planner designs the CP with the minimum vulnerability to physical-layer attacks (i.e., the upper-level optimization), while the attacker plans and launches attacks to disrupt the designed CP (i.e., the lower-level optimization). Then, the bilevel mode is transformed into a mixed integer linear programming (MILP) model, which can solve the CP design problem exactly. We also propose a heuristic to tackle the problem time-efficiently.

The traditional networks, with the control and data plane integrated into the same network devices, do not provide a global view of the network performance like degree of congestion, bandwidth utilization, etc. Software defined network (SDN) is an approach towards this problem which separates the control plane of the switch from its data plane and provide a centralized control plane so as to get a global view of the network performance and thus make decisions of how to regulate flows. In SDN, network monitoring can be achieved more efficiently than traditional networks using OpenFlow statistics. SDN controller can keep track of available bandwidth on each link and thus estimate end-to-end available bandwidth of a path simply by composing individual link bandwidths thus avoiding end-to-end probing. We have made two contributions in this paper: (i) proposed and validated a method to estimate end-to-end available bandwidth on any given path by composing link-wise available bandwidths (ii) proposed a method to measure link capacity using OpenFlow protocol. We compared our results to the ones obtained using the state-of-the-art bandwidth measurement tool, Yaz.

The flexibility and programmability offered by Software Defined Networking (SDN) emerge as an approach to resolve some of the main challenges that the Internet of Things (IoT) deployments expose. In the present article, we explore the application of SDN components onto IoT deployments, together with the decoupling of typical gateway functions in two realms; the physical one and the virtual at the edge. This disengagement is a novel approach necessary since the computation resources on the physical part of the infrastructure are limited. Thus, the more resource-consuming processes are transferred to the edge of the network, in the virtual counterpart of the gateway. Additionally, within this infrastructure, different network applications can be running at the top of the SDN controller, in the control plane, for example, QoS policies application, management of network parameters, etc. Providing a holistic view of the IoT deployment. Between its advantages, this work focus on the ease of creation of an IoT infrastructure with the gateway and SDN architecture, and the behaviour of the IoT system. For validation, a small setup scenario and a use case is created where heterogeneous IoT sensors communicate with the physical part of the gateway, implemented with a Raspberry Pis and this, with its virtual part at the edge of the network, so finally sent the data to an IoT platform (FIWARE-ORION) at the core network managed by a virtual Switch (OpenVSwitch) and a RYU-based SDN controller.

In this paper optical transport networks (OTN) and different control planes approaches are presented. For the Software Defined Networks (SDN) configurations and mode of operations such as implicit and explicit are discussed. The path latencies of two control plane approaches are examined and numerical results are presented on the path metric. The results are derived from a simple network simulation interconnected two data centers into different locations using SDN controller. In addition, a comparison between SDN and MPLS/PCE are presented.

The Internet has reached a breaking point, enabling ubiquitous accessibility to all digital demands. Though people have accelerated their use of overall digital demands due to the convenience of the Internet, where nearly everything is connected and accessible, it is becoming increasingly difficult to manage and modify networks. It is always a challenge to meet the emerging needs of network industry. SDN framework was proposed to overcome traditional network architecture (TNA) restrictions in order to cope with contemporary network management in terms of flexibility, agility, responding to faults, and dynamic changes. SDN assists network operators by uncoupling the control plane from its underlying ternary content-addressable memory (TCAM) hardware often called as forwarding plane by allowing the networks to programme as per the anticipated network functionality. Now, switching from traditional to software-defined networking styles, it is worth to check the robustness of the open flow (south bound interface)-based controller platform and the capability of its fault tolerance attribute to approach the successful SDN implementation. The performance of SDN open flow controllers plays a vital role in SDN implementation, which is meant for the separation between control and data plane to leverage the life of network industry. This paper comprehensively surveys the contrast between traditional network architecture (TNA) and software-defined network architecture. This research work discusses about the best feasible SDN implementation, as well as the selection of a useful controller platform for overcoming traditional network constraints and the performance assessment criteria for SDN open flow controllers. Further, the survey is continued with possible literature or work done by various researchers on performance analysis and evaluation of open flow-based SDN controllers as well as in a group of two or more controllers with respect to multifarious network condition, network criteria/parameter/metric, scaling of network load resources with most important varying network topology design. Ultimately, it strives to point ongoing research omission with respect to controller’s performance bottleneck benchmark suggesting optimized solution when it is well experimented.KeywordsTraditional network architecture (TNA)Software-defined networking (SDN)SDN open flow controllersOpen flow protocolPerformance evaluation/analysis