SDPA: Enhancing Stateful Forwarding for Software-Defined Networking

Zhu, Shuyong; Bi, Jun; Sun, Chen; Wu, Chenhui; Hu, Hongxin

doi:10.1109/icnp.2015.45

Cited by 40 publications

(24 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This includes SYN proxy and DNS reflection filter. These two actuators are motivated by (1) the functionality that Avant-Guard [16] proposed as a data plane extension to defend SYN flood and (2) the example DNS filter proposed in SDPA [38] to filter out DNS refection attack packets on OpenFlow switches.…”

Section: Intelligent Reaction Applicationsmentioning

confidence: 99%

OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

Han

Yang

Sun

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks are one of the biggest concerns for security professionals. Traditional middle-box based DDoS attack defense is lack of network-wide monitoring flexibility. With the development of software-defined networking (SDN), it becomes prevalent to exploit centralized controllers to defend against DDoS attacks. However, current solutions suffer with serious southbound communication overhead and detection delay. In this paper, we propose a cross-plane DDoS attack defense framework in SDN, called OverWatch, which exploits collaborative intelligence between data plane and control plane with high defense efficiency. Attack detection and reaction are two key procedures of the proposed framework. We develop a collaborative DDoS attack detection mechanism, which consists of a coarse-grained flow monitoring algorithm on the data plane and a finegrained machine learning based attack classification algorithm on the control plane. We propose a novel defense strategy offloading mechanism to dynamically deploy defense applications across the controller and switches, by which rapid attack reaction and accurate botnet location can be achieved. We conduct extensive experiments on a real-world SDN network. Experimental results validate the efficiency of our proposed OverWatch framework with high detection accuracy and real-time DDoS attack reaction, as well as reduced communication overhead on SDN southbound interface.

show abstract

Section: Intelligent Reaction Applicationsmentioning

confidence: 99%

OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

Han

Yang

Sun

et al. 2018

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…Although the OpenFlow specification contains multiple flow tables in the OpenFlow pipeline, it cannot maintain state information in the SDN data plane. OpenFlow also relies heavily on the SDN controller to maintain the states of all packets [104,105] . Such static nature of the OpenFlow forwarding abstraction could raise scalability, reliability and security problems in 5G network slicing because of the control channel bottleneck and pro-cessing delay imposed between the SDN controller and switches [105] .…”

Section: Traffic Management Applications For Stateful Sdn Data Planementioning

confidence: 99%

5G network slicing using SDN and NFV: A survey of taxonomy, architectures and future challenges

et al. 2020

View full text Add to dashboard Cite

a b s t r a c tThe increasing consumption of multimedia services and the demand of high-quality services from customers has triggered a fundamental change in how we administer networks in terms of abstraction, separation, and mapping of forwarding, control and management aspects of services. The industry and the academia are embracing 5G as the future network capable to support next generation vertical applications with different service requirements. To realize this vision in 5G network, the physical network has to be sliced into multiple isolated logical networks of varying sizes and structures which are dedicated to different types of services based on their requirements with different characteristics and requirements (e.g., a slice for massive IoT devices, smartphones or autonomous cars, etc.). Softwarization using Software-Defined Networking (SDN) and Network Function Virtualization (NFV)in 5G networks are expected to fill the void of programmable control and management of network resources.In this paper, we provide a comprehensive review and updated solutions related to 5G network slicing using SDN and NFV. Firstly, we present 5G service quality and business requirements followed by a description of 5G network softwarization and slicing paradigms including essential concepts, history and different use cases. Secondly, we provide a tutorial of 5G network slicing technology enablers including SDN, NFV, MEC, cloud/Fog computing, network hypervisors, virtual machines & containers. Thidly, we comprehensively survey different industrial initiatives and projects that are pushing forward the adoption of SDN and NFV in accelerating 5G network slicing. A comparison of various 5G architectural approaches in terms of practical implementations, technology adoptions and deployment strategies is presented. Moreover, we provide a discussion on various open source orchestrators and proof of concepts representing industrial contribution. The work also investigates the standardization efforts in 5G networks regarding network slicing and softwarization. Additionally, the article presents the management and orchestration of network slices in a single domain followed by a comprehensive survey of management and orchestration approaches in 5G network slicing across multiple domains while supporting multiple tenants. Furthermore, we highlight the future challenges and research directions regarding network softwarization and slicing using SDN and NFV in 5G networks.Crown (A .A . Barakabitze). tems [1,2,3] . The increasing number of smart devices (e.g., tablets and smartphones) and the growing number of bandwidth-hungry mobile applications (e.g., live video streaming, online video gaming) which demand higher spectral efficiency than that of 4G systems are posing significant challenges in 5G. The Cisco Visual Networking Index (VNI) Forecast [4] predicts that IP video traffic will be 82% of all consumer Internet traffic by 2022, up from 75% in 2017. Mobile video traffic alone will account for 78% of the global mobile data traffic. W...

show abstract

“…The new stateful datacentre architecture (SDPA) is proposed in [189] as a follow-up of the research presented in [188]. Unlike the standard match-action OpenFlow paradigm, a new "match-state-action" paradigm has been proposed in which state information is maintained within the data plane without the heavy involvement of the SDN controller.…”

Section: B Stateful Data Planementioning

confidence: 99%

A Survey on Data Plane Flexibility and Programmability in Software-Defined Networking

et al. 2019

View full text Add to dashboard Cite

Software-defined networking (SDN) attracts the attention of the research community in recent years, as evidenced by a large number of survey and review papers. The architecture of SDN clearly recognizes three planes: application, control, and data plane. The application plane executes network applications; control plane regulates the rules for the entire network based on the requests generated by network applications; and based on the set rules, the controller configures the switches in the data plane. The role of the switch in the data plane is to simply forward packets based on the instructions given by the controller. By analyzing SDN-related research papers, it is observed that research, from the very beginning, is insufficiently focused on the data plane. Therefore, this paper gives a comprehensive overview of the data plane survey with particular emphasis on the problem of programmability and flexibility. The first part of the survey is dedicated to the evaluation of actual data plane architectures through several definitions and aspects of data plane flexibility and programmability. Then, an overview of SDN-related research was presented with the aim of identifying key factors influencing the gradual deviation from the original data plane architectures given with ForCES and OpenFlow specifications, which we called the data plane evolution. By establishing a correlation between the treated problem and the problem-solving approaches, the limitations of ForCES and OpenFlow data plane architectures were identified. Based on identified limitations, a generalization of approaches to addressing the problem of data plane flexibility and programmability is made. By examining generalized approaches, open issues have been identified, establishing the grounds for future research directions proposal.

show abstract

SDPA: Enhancing Stateful Forwarding for Software-Defined Networking

Cited by 40 publications

References 13 publications

OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

OverWatch: A Cross-Plane DDoS Attack Defense Framework with Collaborative Intelligence in SDN

5G network slicing using SDN and NFV: A survey of taxonomy, architectures and future challenges

A Survey on Data Plane Flexibility and Programmability in Software-Defined Networking

Contact Info

Product

Resources

About