SDN and ForCES based optimal network topology discovery

Tarnaras, George; Haleplidis, Evangelos; Denazis, Spyros

doi:10.1109/netsoft.2015.7116181

Cited by 32 publications

(28 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Once all LLDP packets are received, the controller identifies the new links and store them in the Topology Map. Note that by using P ORT ST AT U S messages as trigger to learn new links, the controller doesn't need to periodically send discovery packets and switches do not need to be too smart to determine the new links (as in [19]) or to store them locally.…”

Section: How Softdp Workmentioning

confidence: 99%

sOFTDP: Secure and efficient OpenFlow topology discovery protocol

Azzouni¹,

Boutaba²,

Trang³

et al. 2018

NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

Topology discovery is one of the most critical tasks of Software-Defined Network (SDN) controllers. Current SDN controllers use the OpenFlow Discovery Protocol (OFDP) as the de-facto protocol for discovering the underlying network topology. In a previous work, we have shown the functional, performance and security limitations of OFDP. In this paper, we introduce and detail a novel protocol called secure and efficient OpenFlow Discovery Protocol sOTDP. sOFTDP requires minimal changes to OpenFlow switch design, eliminates major vulnerabilities in the topology discovery process and improves its performance. We have implemented sOFTDP as a topology discovery module in Floodlight for evaluation. The results show that our implementation is more secure than OFDP and previous security workarounds. Also, sOFTDP reduces the topology discovery time several orders of magnitude compared to the original OFDP and existing OFDP improvements.

show abstract

Section: How Softdp Workmentioning

confidence: 99%

sOFTDP: Secure and efficient OpenFlow topology discovery protocol

Azzouni¹,

Boutaba²,

Trang³

et al. 2018

NOMS 2018 - 2018 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

show abstract

“…Tarnaras et al [17] and Haleplidis et al [18] they propose through SDN an alternative of programmable networks based on the separation of the planes of control and forwarding. Providing a dynamic and optimized way, capable of dealing with network traffic in constant growth.…”

Section: Related Workmentioning

confidence: 99%

Design and implementation of a prototype of the entity Control Element (CE) of the Architecture ForCES

Ramirez

Cordero

Lloret

et al. 2018

NPA

View full text Add to dashboard Cite

This paper presents the designed an implementation of a prototype with the Forwarding and Control Element Separation (ForCES) Architecture. That is to say, which allows each of the elements to be improved separately and then interconnected through the ForCES protocol, even in remote locations. The Control Element (CE) is the logical entity that is part of the control plane and is responsible for managing Forwarding Elements (FE) of the data plane. The ForCES architecture allows you to see these two elements (the CE and the FE through the ForCES protocol) as a single Network Element (NE), even if they are located in remote sites each. To demonstrate this principle, a network testbed scenario was implemented, based on two Local Area Networks (LAN). The LAN 1, for the CEs and the LAN 2 for the FEs, once communicated through the ForCES protocol, the different LFBs configurations of the ARP, SNMP, RIP protocols were used to demonstrate their operation.

show abstract

“…The controller extracts LLDP packet and finds Chassis ID and Port on which this packet begins. The controller updates link database with a link from where LLDP packet starts its journey to PACKET IN source where LLDP packet tour finishes (step 5) . Pakzad et al propose a simple yet effective version of topology discovery.…”

Section: Introductionmentioning

confidence: 99%

TILAK: A token‐based prevention approach for topology discovery threats in SDN

Nehra

Tripathi

Gaur

et al. 2018

Int J Communication

View full text Add to dashboard Cite

Software-defined networks (SDNs) decouple the data plane from the control plane. Thus, it provides logically centralized visibility of the entire networking infrastructure to the controller. It enables the applications running on top of the control plane to innovate through network management and programmability. To envision the centralized control and visibility, the controller needs to discover the networking topology of the entire SDN infrastructure. However, discovering and maintaining a global view of the underlying network topology is a challenging task because of (i) frequently changing network topology caused by migration of the virtual machines in the data centers, mobile, end hosts and change in the number of data plane switches because of technical faults or network upgrade; (ii) lack of authentication mechanisms and scarcity in SDN standards; and (iii) availability of security solutions during topology discovery process. To this end, the aim of this paper is threefold. First, we investigate the working methodologies used to achieve global view by different SDN controllers, specifically, POX, Ryu, OpenDaylight, Floodlight, Beacon, ONOS, and HPEVAN. Second, we identify vulnerabilities that affect the topology discovery process in the above controller implementation. In particular, we provide a detailed analysis of the threats namely link layer discovery protocol (LLDP) poisoning, LLDP flooding, and LLDP replay attack concerning these controllers. Finally, to countermeasure the identified risks, we propose a novel mechanism called TILAK which generates random MAC destination addresses for LLDP packets and use this randomness to create a flow entry for the LLDP packets. It is a periodic process to prevent LLDP packet-based attacks that are caused only because of lack of verification of source authentication and integrity of LLDP packets. The implementation results for TILAK confirm that it covers targeted threats with lower resource penalty. KEYWORDSflooding, link layer discovery protocol (LLDP), replay attack, route poisoning, software-defined networking (SDN), topology discovery

show abstract

SDN and ForCES based optimal network topology discovery

Cited by 32 publications

References 7 publications

sOFTDP: Secure and efficient OpenFlow topology discovery protocol

sOFTDP: Secure and efficient OpenFlow topology discovery protocol

Design and implementation of a prototype of the entity Control Element (CE) of the Architecture ForCES

TILAK: A token‐based prevention approach for topology discovery threats in SDN

Contact Info

Product

Resources

About