TimeoutX: An Adaptive Flow Table Management Method in Software Defined Networks

Zhang, Linlian; Wang, Sheng; Xu, Shizhong; Lin, Rongping; Yu, Hongfang

doi:10.1109/glocom.2015.7417563

Cited by 26 publications

(24 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Similarly, exchanges of messages between switches lack the authentication/encryption mechanism in the SDN data plane [44]. Toward addressing the aforementioned security challenges, efforts were made lately to address several SDN security attacks [46][47][48].…”

Section: Sdn Security Threat and Vulnerabilitiesmentioning

confidence: 99%

“…It may be effective to conclude as the traffic flows increase, the scheme may introduce another loophole for DoS attack, which may force switches to refuse writing rules from a legitimate source. To mitigate such a problem, Luo et al [46] proposed LRU flow entry rule eviction aimed to improve the SDN performance. The scheme can be effective with acceptable performance in fixed network with small flow table size, but in large network scale with dense flow arrival it may lead to significant communication overhead because of its architectural design of being reactive event-driven.…”

Section: Sdn Security Threat and Vulnerabilitiesmentioning

confidence: 99%

See 1 more Smart Citation

Software Defined Networking Flow Table Management of OpenFlow Switches Performance and Security Challenges: A Survey

et al. 2020

View full text Add to dashboard Cite

Software defined networking (SDN) is an emerging network paradigm that decouples the control plane from the data plane. The data plane is composed of forwarding elements called switches and the control plane is composed of controllers. SDN is gaining popularity from industry and academics due to its advantages such as centralized, flexible, and programmable network management. The increasing number of traffics due to the proliferation of the Internet of Thing (IoT) devices may result in two problems: (1) increased processing load of the controller, and (2) insufficient space in the switches’ flow table to accommodate the flow entries. These problems may cause undesired network behavior and unstable network performance, especially in large-scale networks. Many solutions have been proposed to improve the management of the flow table, reducing controller processing load, and mitigating security threats and vulnerabilities on the controllers and switches. This paper provides comprehensive surveys of existing schemes to ensure SDN meets the quality of service (QoS) demands of various applications and cloud services. Finally, potential future research directions are identified and discussed such as management of flow table using machine learning.

show abstract

Section: Sdn Security Threat and Vulnerabilitiesmentioning

confidence: 99%

Section: Sdn Security Threat and Vulnerabilitiesmentioning

confidence: 99%

Software Defined Networking Flow Table Management of OpenFlow Switches Performance and Security Challenges: A Survey

et al. 2020

View full text Add to dashboard Cite

show abstract

“…However, a TCAM has very limited capacity and capabilities as this memory is expensive and has a high‐power consumption. To address this limitation, compression techniques or methods to adaptively set a suitable timeout for each flow entry are proposed to reduce the number of flow entries on TCAMs. In addition, specialized performance tests as presented in Kuźniar, Perešín, and Kostić can help developers of controller applications and network architects to improve their designs without requiring expensive and demanding experimental setups.…”

Section: The Proposal In Practicementioning

confidence: 99%

A software‐defined networking approach to improve service provision in residential networks

et al. 2017

View full text Add to dashboard Cite

Summary Within the Internet service provider landscape, the residential gateway (RGW) plays a key role in service provision. The RGW should be an enabler for the provision of new and better services for residential users, but it is often instead an obstacle for innovation. This paper discusses how to improve the provision of innovative services and to increase the usability of residential networks by upgrading the residential gateway in alignment with the current paradigms of software‐defined networking (SDN) and network function virtualization. In this approach, SDN contributes by providing a fine‐grained control of the traffic and network function virtualization contributes by outsourcing traditional and specialized network functions running inside the RGW like routing or network address translation to the Internet service provider premises. Based on this approach, a management framework has been designed by considering 2 aspects: the involvement of the residential user in the management tasks through the provision of network management applications and the need to decouple network applications from the underlying SDN controller technology to encourage the development of innovative network applications. In addition, a virtualized management and networking domain has been defined to complement the approach and leverage cloud technologies. The advantages and challenges of this approach are analyzed based on a proof of concept development.

show abstract

“…As a result, how to use such limited cache efficiently and safely has been an active field of research. To help the switches store more flow entries without adding TCAMs, several proposals attempt to split the workload between the switches [9], [10] or aggregate redundant flow entries [11], [12]. Although these proposals are useful for normal users, they could be inefficient when attackers attempt to exhaust the switches.…”

mentioning

confidence: 99%

Mitigating the Table-Overflow Attack in Software-Defined Networking

Gao

Dong

et al. 2017

IEEE Trans. Netw. Serv. Manage.

View full text Add to dashboard Cite

Software-defined networking (SDN) is a promising network paradigm for future Internet. The centralized controller and simplified switches replace the traditional complex forwarding devices, and make network management convenient. However, the switches in SDN currently have limited ternary content addressable memory (TCAM) to store specific routing rules from the controller. This bottleneck provokes cyber attacks to overload the switches. Despite existing some countermeasures for such attacks, they are proposed based on simplified attack patterns. In this paper, we review the table-overflow attack using a sophisticated attack pattern. In the attack pattern, attack flows are targeted at their middle hops instead of endpoints. We first define potential targets in the network topology, and then we propose three specific traffic features and a monitoring mechanism to detect and locate the attackers. Further, we propose a mitigation mechanism to limit the attack rate using the token bucket model. With the control of token add rate and bucket capacity, it avoids the table overflow on the victim switch. Extensive simulations in different types of topologies and experiments in our testbed are provided to show the performance of our proposal

show abstract

TimeoutX: An Adaptive Flow Table Management Method in Software Defined Networks

Cited by 26 publications

References 10 publications

Software Defined Networking Flow Table Management of OpenFlow Switches Performance and Security Challenges: A Survey

Software Defined Networking Flow Table Management of OpenFlow Switches Performance and Security Challenges: A Survey

A software‐defined networking approach to improve service provision in residential networks

Mitigating the Table-Overflow Attack in Software-Defined Networking

Contact Info

Product

Resources

About