Multi-Agent Based Autonomic Network Management Architecture

Arzo, Sisay Tadesse; Bassoli, Riccardo; Granelli, Fabrizio; Fitzek, Frank H. P.

doi:10.1109/tnsm.2021.3059752

Cited by 41 publications

(17 citation statements)

References 73 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The agent is used to provide security agency service for data plane devices, and it is directly connected with each SR switching device [31]. There is no direct connection channel between agents, to prevent malicious nodes from bypassing trust plane supervision and direct communication.…”

Section: Agentmentioning

confidence: 99%

ZbSR: A Data Plane Security Model of SR-BE/TE based on Zero-Trust Architecture

Wang

et al. 2022

Preprint

View full text Add to dashboard Cite

Facing the untrusted threats of network elements and PKI/CA faced by SR-BE/TE(Segment Routing-BE/TE) data plane in the zero-trust network environment, firstly, this paper refines it into eight specific security issues. Secondly, an SR-BE/TE data plane security model ZbSR(ZTA-based SR) based on zero-trust architecture is proposed, which reconstructs the original SR control plane into a "trust-agent" two-layer plane based on 4 components of the controller, agent, cryptographic center and information base. On one hand, we distinguish between the two segment list generation modes and proposes corresponding data exchange security algorithms, by introducing north-south security verification based on identity authentication, trust evaluation, and key agreement before the terminal device establishes an east-west access connection, so reliable data exchange between terminal devices can be realized. On the other hand, for the network audit lacking SR-BE/TE, a network audit security algorithm based on solid authentication is proposed. By auditing the fields, behaviors, loops, labels, paths, and SIDs of messages, threats such as stream path tampering, SID tampering, DoS attacks, and loop attacks can be effectively detected. Finally, through the simulation test, the proposed model can provide security protection for the SR data plane with a 19.3% average incremental delay overhead for various threat scenarios.

show abstract

Section: Agentmentioning

confidence: 99%

ZbSR: A Data Plane Security Model of SR-BE/TE based on Zero-Trust Architecture

Wang

et al. 2022

Preprint

View full text Add to dashboard Cite

show abstract

“…A multi-agent system is also another alternative to have a decomposed management system. Since we are focusing on a microservice-based decomposition technique, we will limit our discussion to only microservices instead of multi-agent approaches, which is discussed in detail in [22].…”

Section: Microservice Architecturementioning

confidence: 99%

MSN: A Playground Framework for Design and Evaluation of MicroServices-Based sdN Controller

et al. 2021

Self Cite

View full text Add to dashboard Cite

Software-defined networking decouples control and data plane in softwarized networks. This allows for centralized management of the network, but complete centralization of the controller functions raises potential issues related to failure, latency, and scalability. Distributed controller deployment is adopted to optimize scalability and latency problems. However, existing controllers are monolithic, resulting in code inefficiency for distributed deployment. Some seminal ongoing efforts have been proposed with the idea of disaggregating the SDN controller architecture into an assembly of various subsystems, each of which can be responsible for a certain controller task. These subsystems are typically implemented as microservices and deployed as virtual network functions, in particular as Docker Containers. This enables flexible deployment of controller functions. However, these proposals (e.g., $$\mu$$ μ ONOS) are still in their early stage of design and development, so that a full decomposition of the SDN controller is not been available yet. To fill that gap, this article derives some important design guidelines to decompose an SDN controller into a set of microservices. Next, it also proposes a microservices-based decomposed controller architecture, foreseeing communications issues between the controller sub-functions. These design and performance considerations are also proven via the implementation of the proposed architecture as a solution, called Micro-Services based SDN controller (MSN), based on the Ryu SDN controller. Moreover, MSN includes different network communication protocols, such as gRPC, WebSocket, and REST-API. Finally, we show experimental results that highlight the robustness and latency of the system on a networking testbed. Collected results prove the main pros and cons of each network communication protocol and an evaluation of our proposal in terms of system resilience, scalability and latency.

show abstract

“…IETF's Autonomic Networking Integrated Model and Approach (ANIMA) [28] working group explores autonomic networking of managed devices with the goal to provide the self-x properties, however, control loops are currently not covered. Some proposals include learning ( [22], [29]- [33]), for example [22] uses agents to implement cognitive control loops, and [33] proposes a multi-agent network automation architecture that follows the Generic Autonomic Network Architecture (GANA) reference model from the European Telecommunication Standards Institution (ETSI) [34]. The failure to deploy autonomic network management in the past is discussed and reconsidered in light of new enabler technologies in [24].…”

Section: B Autonomic Network Managementmentioning

confidence: 99%

“…(knowledge_intent, result) At the platform level 7−10 is generated (lines[30][31][32][33][34][35] to start the plan execution through 1.1 , a child of Executer1 . Policy 7−10 is an imperative policy that specifies the configuration changes for the new LSP paths for demand D3.…”

mentioning

confidence: 99%