A SDN Based Method of TCP Connection Handover

Binder, Andrej; Boros, Tomas; Kotuliak, Ivan

doi:10.1007/978-3-319-24315-3_2

Cited by 10 publications

(11 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Transport redirection, load balancing, traffic path optimization, and roaming are the reasons for the hand-off. Especially, hand-off appears in the area of CDN (Content Delivery Networks, where CDN architectures leverage a redirect mechanism to initiate a connection between a client and the most appropriate server [21].…”

Section: B Tcp Connection Re-establishment and Hand-off Latencymentioning

confidence: 99%

Multimedia Service Management with Virtualized Cache Migration

Kalan

Sayıt

Clayman

2020

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)

View full text Add to dashboard Cite

The demand for playing the video with the highest quality possible leads video streaming companies to utilize network-based solutions and server assistance. As being one of the popular technology in video streaming area, HTTP adaptive video streaming systems can benefit from the emerging network technologies such as SDN and NFV. Such multimedia systems require the management of network resources efficiently to be able to provide acceptable service. In this paper, we propose a multimedia service management architecture that focuses on migration one of the most crucial components of such systems, virtualized caches. SDN controller gathers underlay network statistics and based on real-time network condition determines the optimal location for virtual cache and/or migrate it when network conditions change. We focus on hand-off affects the perceptual quality when clients migrate from one cache to another. The proposed approach was evaluated using the Mininet Emulator and its performance was given comparatively. The performance results show that the combination of SAND (Server and Network Assisted DASH) features with the advantage of the NFV-SDN technology can provide good service to its users.

show abstract

Section: B Tcp Connection Re-establishment and Hand-off Latencymentioning

confidence: 99%

Multimedia Service Management with Virtualized Cache Migration

Kalan

Sayıt

Clayman

2020

2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)

View full text Add to dashboard Cite

show abstract

“…Finally, REV [36] designs a new security primitive for SDN, specifically aimed to prevent rule modification attacks. [50] Traffic classification in the data plane to offload the control plane Research implementation Leverages OpenState [16] and OPP [30] Traffic classification and control with stateful SDN [51] Traffic classification in the data plane to offload the control plane Research implementation Leverages OpenState [16] SPIDER [18] OpenFlow-like pipeline design for failure detection and fast reroute of traffic flows Research implementation Leverages OpenState [16] StateSec [19] In-switch processing capabilities to detect and mitigate DDoS attacks Research implementation Leverages OpenState [16] Load balancers evaluation [52] Evaluation of different load balancer apps Research evaluation Leverages OpenState [16] Recovery of multiple failures in SDN [53] Comparison In the specific case of enhancements of OpenFlow, an extension of Open-Flow 1.3 thanks to BOFUSS is introduced in [38], which includes two new actions (SET TCP ACK and SET TCP SEQ) to modify the ACK and SEQ values in TCP connections. Alternatively, the matching capabilities of OpenFlow have been extended in [39] to provide an optimal parsing of packets in the context of Information-Centric Networking (ICN).…”

Section: Research Implementations or Evaluationsmentioning

confidence: 99%

The Road to BOFUSS: The Basic OpenFlow User-space Software Switch

Fernandes¹,

Rojas²,

Alvarez-Horcajo³

et al. 2019

Preprint

View full text Add to dashboard Cite

Software switches are pivotal in the Software-Defined Networking (SDN) paradigm, particularly in the early phases of development, deployment and testing. Currently, the most popular one is Open vSwitch (OVS), leveraged in many production-based environments. However, due to its kernel-based nature, OVS is typically complex to modify when additional features or adaptation is required. To this regard, a simpler user-space is key to perform these modifications. In this article, we present a rich overview of BOFUSS, the basic Open-Flow user-space software switch. BOFUSS has been widely used in the research community for diverse reasons, but it lacked a proper reference document. For this purpose, we describe the switch, its history, architecture, uses cases and evaluation, together with a survey of works that leverage this switch. The main goal is to provide a comprehensive overview of the switch and its characteristics. Although the original BO-FUSS is not expected to surpass the high performance of OVS, it is a useful complementary artifact that provides some OpenFlow features missing in OVS and it can be easily modified for extended functionality. Moreover, enhancements provided by the BEBA project brought the performance from BOFUSS close to OVS. In any case, this paper sheds light to researchers looking for the trade-offs between performance and customization of BOFUSS.

show abstract

“…These SDN advantages perfectly match the requirements of traffic redirection mechanisms. For example, Binder et al [15] proposed an SDN based method for TCP connection handover in a Content Delivery Network to deliver the requests into the best server.…”

Section: Related Workmentioning

confidence: 99%

A novel SDN based stealthy TCP connection handover mechanism for hybrid honeypot systems

Fan

Fernández

2017

2017 IEEE Conference on Network Softwarization (NetSoft)

View full text Add to dashboard Cite

Abstract-Honeypots have been largely used to capture and investigate malicious behavior through deliberately sacrificing their own resources in order to be attacked. Hybrid honeypot architectures consisting of frontends and backends are widely used in the research area, specially due to the benefits of their high scalability and fidelity for detailed attacking data collection. A hybrid honeypot system often needs a facility aimed to tightly control the network traffic, for purposes such as redirecting the traffic from the frontends to the backends for in-depth attack analysis. However, the current traffic redirection approaches, particularly the TCP connection handover mechanisms, are not stealthy and they can be easily detected by attackers. This paper proposes an SDN based network data controller for hybrid honeypot systems that uses a transparent TCP connection handover mechanism and provides a traffic filtering approach based on the Snort alert functionality. The controller is implemented as an application based on the open-source Ryu SDN framework. It allows the users to configure their own network data control rules, which based on the Snort alert messages will forward or redirect the traffic to the corresponding honeypots. The experiments validate the proposed mechanism and the testing results show that the controller can efficiently perform the stealthy TCP connection handover as well.

show abstract

A SDN Based Method of TCP Connection Handover

Cited by 10 publications

References 3 publications

Multimedia Service Management with Virtualized Cache Migration

Multimedia Service Management with Virtualized Cache Migration

The Road to BOFUSS: The Basic OpenFlow User-space Software Switch

A novel SDN based stealthy TCP connection handover mechanism for hybrid honeypot systems

Contact Info

Product

Resources

About