Consistent Control Mechanism in Software Defined Network

Yong Li,L. Su,Depeng Jin,Lieguang Zeng,Ye Zhou,Mao Yang

2014-01-01

Abstract:This document introduces a consistent control mechanism in theframework of Software Defined Network (SDN), which is one method toachieve forwarding and control element separation. In detail, thismechanism uses a centralized control element to control multipleforwarding elements.

What problem does this paper attempt to address?

Achieving Consistence for Cross-Domain WAN Control in Software-Defined Networks

Zhou Boyang,Wu Chunming,Gao Wen,Hong Xiaoyan,Jiang Ming,Chen Shuangxi

DOI: https://doi.org/10.1109/cc.2015.7315065

2015-01-01

China Communications

Abstract:When applying Software-Defined Networks (SDN) to WANs, the SDN flexibility enables the cross-domain control to achieve a better control scalability. However, the control consistence is required by all the cross-domain services, to ensure the data plane configured in consensus for different domains. Such consistence process is complicated by potential failure and errors of WANs. In this paper, we propose. a consistence layer to actively and passively snapshot the cross-domain control states, to reduce the complexities of service realizations. We implement the layer and evaluate performance in the PlanetLab testbed for the WAN emulation. The testbed conditions are extremely enlarged comparing to the real network. The results show its scalability, reliability and responsiveness in dealing with the control dynamics. In the normalized results, the active and passive snapshots are executed with the mean times of 1.873s and 105ms in 135 controllers, indicating its readiness to be used in the real network.
Safe Reconfiguring Data Plane Via Supervision over Resource and Flow States

Gao Wen,Zhou Boyang,Wu Chunming,Zhou Haifeng,Jiang Ming,Hong Xiaoyan

DOI: https://doi.org/10.1049/cje.2015.07.035

IF: 1.019

2015-01-01

Chinese Journal of Electronics

Abstract:In the Software-defined networking（SDN）,when multiple control domains are used in control services,the transient state problem can occur causing the service flow interruption when border switches are updated asynchronously. We analyze the uniqueness of this problem for SDN, and propose a light-weight protocol for safe reconfiguration of the border switches in order to improve the availability of the services running in SDN. Our solution is designed as a generic supervision layer added in the control plane to support different types of services. To demonstrate the benefits, we implement a prototype of Informationcentric networks（ICN） with the protocol, and conduct experiments using Planet Lab. The results show the ICN service can continuously serve high volume requests for contents despite the congestions built by the heavy background traffic. The performance gains in terms of the mean and standard deviation of the content retrieve delay are40.5% and 21.56%.
Controller Placement Based on Hierarchical Multi-center SDN

Dong ZHANG,Jun-jie GUO,Chun-ming WU

DOI: https://doi.org/10.3969/j.issn.0372-2112.2017.03.027

2017-01-01

Abstract:Software defined networking (SDN) is a style of computer networking that separates the control plane from the data plane,shifting the control plane to a centralized controller in order to achieve network flexibility and openness.The controller placement is a key prerequisite to successful SDN.The current study examines the hierarchically distributed control plane controller placement problem,utilizing a multi-level k-way switch partition algorithm to divide large scale network topology.We also fix the traditional SDN controller placement problem,changing zoning and intra-domain controller placement by reducing the edge-cut in order to lower the number of inter-domain flows.Simulation results show that the multilevel k-way switch partition algorithm can effectively reduce control flow overhead and flow set-up time,compared with the other traditional algorithms.
Programming network via Distributed Control in Software-Defined Networks

Boyang Zhou,Chunming Wu,Xiaoyan Hong,Ming Jiang

DOI: https://doi.org/10.1109/ICC.2014.6883789

2014-01-01

Abstract:Programming a network for innovative services or for function improvements has never been easier using Software-Defined Networking (SDN). However, the programming tasks can also be significantly complicated by the asynchrony of data plane states and complexities of service control states. In order to reduce the complexity for programming a network service in Distributed Control Plane of SDN, we propose a proGRAmming Control (GRACE) layer as a generic solution, which provides two key features, namely, reconfigurability and reusability. Their implementations deal with aforementioned challenges, thus to achieve the consistency of the data plane states and the reusability of the service control states at the distributed controllers. This paper introduces the reconfigurability and reusability with their design goals and their impact on the programmability of DCP. We further use two popular network services, ICN (Information-Centric Networking) and CDN (Content Distribution Networks) to illustrate these concepts. NS-3 simulations and PlanetLab emulations are conducted to show the advantage of using the GRACE layer for ICN and CDN. Results show that the ICN Interest delay is reduced by 19.6% and CDN request delay is reduced by 81% in extremely harsh network conditions.
Lossless Reconfiguration Protocol for Multi-Domain Data Plane in Software-Defined Networks

Boyang Zhou,Haifeng Zhou,Wen Gao,Xiaoyan Hong,Bin Wang,Chunming Wu

DOI: https://doi.org/10.1109/infcomw.2014.6849221

2014-01-01

Abstract:Software-Defined Networking (SDN) opens the configuring interfaces for the data plane to improve its flexibility[1]. In the data plane, the switches are partitioned into multiple domains. Each domain is dynamically configured by its controller. The domains are physically connected via the border switches. In the control plane, each controller supports multiple services. Each service runs the same control program at multiple controllers in a distributed manner.
Classification Based Consistent Flow Update Scheme in Software Defined Network

Zhou Ye,Yang Xu,Li Yong,Su Li,Jin De-peng,Zeng Lie-guang

DOI: https://doi.org/10.3724/sp.j.1146.2012.01431

2013-01-01

Abstract:Software Defined Network (SDN) becomes a hot topic in recent years, in which flow update is one of important issues. In this paper, a classification based consistent flow update scheme is proposed, which has the advantage of strong generality and efficiently lightening working load on controller. The logic synthesis is also used to demonstrate how the scheme maintains consistency in the whole updating process. Simulation results in multiple scenarios show that the proposed scheme achieves better generality than existing schemes in related work. In addition, the scheme reduces significantly working load on controller while only costs nearly the same time in the update process as compared schemes.
Software Defined Networking I: SDN

Deze Zeng,Lin Gu,Shengli Pan,Song Guo

DOI: https://doi.org/10.1007/978-3-030-32942-6_4

2020-01-01

Abstract:Software defined network (SDN) is a newly emerging network architecture with the core concept of separating the control plane and data plane. Centralized controller is introduced to manage and configure network equipments to realize flexible control of network traffic and provide a good platform for application-oriented network innovation. It thus be able to improve network resource utilization, simplify network management, reduce operating cost, and promote innovation and evolution. Routing is always a major concern in network management. When SDN devices (e.g., OpenFlow switches) are introduced, routing becomes different. The flow table is usually implemented in expensive and power-hungry Ternary Content Addressable Memory (TCAM), which is thus capacity-limited. How to optimize the network performance in the consideration of limited TCAM capacity is therefore significant. For example, multi-path routing (MPR) has been widely regarded as a promising method to promote the network performance. But MPR is at the expense of additional forwarding rule, imposing burden on the limited flow table. On the other hand, a logical centralized programmable controller manages the whole SDN by installing rules onto switches. It is widely regarded that one controller is restricted on both performance and scalability. To address these limitations, pioneering researchers advocate deploying multiple controllers in SDNs where each controller is in charge of a set of switches. This raises the switch-controller association problem on a switch shall be managed by which controller. In this chapter, we first investigate how to schedule MPR with joint consideration of forwarding rule placement. Then, we study a minimum cost switch-controller association (MC-SCA) problem on how to minimize the number of controllers needed in an SDN while guaranteeing the flow setup time.
A Model for Building SDN Control Plane with Multiple Controllers

Yanwei Xu,Jin Zhao

2017-01-01

Abstract:This document describes a reference model for building SDN control plane with multiple controllers. It defines the key components in the model and introduces an effective mechanism to balance the load between controllers. The design also considers the tradeoff between scalability and performance.
Consistent and fault-tolerant SDN with unmodified switches

André Mantas,Fernando M. V. Ramos

DOI: https://doi.org/10.48550/arXiv.1602.04211

2016-03-14

Abstract:In a reliable SDN environment, different controllers coordinate different switches and backup controllers can be set in place to tolerate faults. This approach increases the challenge to maintain a consistent network view. If this global view is not consistent with the actual network state, applications will operate on a stale state and potentially lead to incorrect behavior. Faced with this problem, we propose a fault-tolerant SDN controller that is able to maintain a consistent network view by using transactional semantics on both control and data plane state. Different from previous proposals, our solution does not require changes to OpenFlow or to switches, increasing the chances of quicker adoption.

Networking and Internet Architecture
Democratic Supervision Makes Controls in Software-Defined Networks More Secure

Junfei Li,Jiangxing Wu,Xin Lu

DOI: https://doi.org/10.1109/compcomm.2018.8781034

2018-01-01

Abstract:The centralized control of Software-Defined Networking (SDN) brings innovation and convenience to the network, but many current SDN controllers also have some security bugs that are easily exploited by attackers. Once the master controller which has sufficient management rights is compromised, entire network can be damaged. For this, we propose a mechanism of democratic supervision in SDN, which adds a proxy between the control plane and the data plane to monitor whether the master controller is abnormal. The proxy sends OpenFlow requests from the switch to multiple diverse controllers and collects flow entries that they respond to. Then it compares these flow entries to judge whether the behavior of the master controller is different from that of other controllers. However, flow entries with the same function may be different in number or content, so we need to analyze their forwarding semantics to compare them, instead of simply comparing their contents. The advantage of this supervision mechanism is that it allows the controller to defend against many known or unknown attacks without debugging all its vulnerabilities. Experimental results show that it is effective in detecting malicious behavior, and it is also efficient under a certain scale of networks.
Research on the SDN Consistency Problems of the Control Logic Based on Network Delay

SONG Hai-quan,GUO Jin,HOU Meng-shu,LI Sai-fei,YAN Lian-shan,WANG Dan-chen

DOI: https://doi.org/10.3969/j.issn.1001-0548.2014.05.017

2014-01-01

Abstract:This paper studies the transitional state in the software defined networking (SDN) networks during the SDN network update process. A route optimization scheme is proposed after the brief review of the logic inconsistency issues in SDN networks due to the delay in the network. In this scheme, the timing sequence of the control rules is tuned adaptively on the control plane so as to ensure that the control logic in the whole network is consistent. In addition, an objective optimization model based on the average network latency of nodes is constructed. With this model, we find the minimum-delay route while retaining the logic consistency in the SDN network. The simulation results demonstrate that the proposed scheme is feasible and effective.
An Adaptive Scheme for Data Forwarding in Software Defined Network.

Liang Xie,Zhifeng Zhao,Yifan Zhou,Gang Wang,Qianlan Ying,Honggang Zhang

DOI: https://doi.org/10.1109/wcsp.2014.6992181

2014-01-01

Abstract:Software Defined Network (SDN) is undergoing an increasingly high popularity among various schemes of networking deployment. The main advantage of SDN lies in its flexibility in controlling network traffic, which arises from decoupling the control plane and the data plane of network devices. However, despite of the valuable merits of SDN, the outage of data forwarding should not be ignored. The drawback mainly results from the length limitation of switch flow tables, the congestion between controllers and switches, and the deficiency of the controller capacity, which are all closely related to the timeout mechanism of flow table. In our study, the deficiency of SDN system will be analyzed explicitly. Moreover, we propose an adaptive control mechanism aiming at optimizing the idle timeout reset of flow tables and cooperation between controllers and switches. Our mechanism achieves higher matching ratio of flow tables as well as alleviates the congestion in the control channel, enabling more fluent data forwarding in SDN.
Software-Defined Networking: A Comprehensive Survey

Diego Kreutz,Fernando M. V. Ramos,Paulo Verissimo,Christian Esteve Rothenberg,Siamak Azodolmolky,Steve Uhlig

DOI: https://doi.org/10.48550/arXiv.1406.0440

2014-10-09

Abstract:Software-Defined Networking (SDN) is an emerging paradigm that promises to change this state of affairs, by breaking vertical integration, separating the network's control logic from the underlying routers and switches, promoting (logical) centralization of network control, and introducing the ability to program the network. The separation of concerns introduced between the definition of network policies, their implementation in switching hardware, and the forwarding of traffic, is key to the desired flexibility: by breaking the network control problem into tractable pieces, SDN makes it easier to create and introduce new abstractions in networking, simplifying network management and facilitating network evolution. In this paper we present a comprehensive survey on SDN. We start by introducing the motivation for SDN, explain its main concepts and how it differs from traditional networking, its roots, and the standardization activities regarding this novel paradigm. Next, we present the key building blocks of an SDN infrastructure using a bottom-up, layered approach. We provide an in-depth analysis of the hardware infrastructure, southbound and northbound APIs, network virtualization layers, network operating systems (SDN controllers), network programming languages, and network applications. We also look at cross-layer problems such as debugging and troubleshooting. In an effort to anticipate the future evolution of this new paradigm, we discuss the main ongoing research efforts and challenges of SDN. In particular, we address the design of switches and control platforms -- with a focus on aspects such as resiliency, scalability, performance, security and dependability -- as well as new opportunities for carrier transport networks and cloud providers. Last but not least, we analyze the position of SDN as a key enabler of a software-defined environment.

Networking and Internet Architecture
Mind the Gap: Monitoring the Control-Data Plane Consistency in Software Defined Networks.

Peng Zhang,Hao Li,Chengchen Hu,Liujia Hu,Lei Xiong,Ruilong Wang,Yuemei Zhang

DOI: https://doi.org/10.1145/2999572.2999605

2016-01-01

Abstract:How to debug large networks is always a challenging task. Software Defined Network (SDN) offers a centralized con- trol platform where operators can statically verify network policies, instead of checking configuration files device-by-device. While such a static verification is useful, it is still not enough: due to data plane faults, packets may not be forwarded according to control plane policies, resulting in network faults at runtime. To address this issue, we present VeriDP, a tool that can continuously monitor what we call control-data plane consistency, defined as the consistency between control plane policies and data plane forwarding behaviors. We prototype VeriDP with small modifications of both hardware and software SDN switches, and show that it can achieve a verification speed of 3 μs per packet, with a false negative rate as low as 0.1%, for the Stanford backbone and Internet2 topologies. In addition, when verification fails, VeriDP can localize faulty switches with a probability as high as 96% for fat tree topologies.
Dynamic control of software defined networks

Xin Jin

2016-01-01

Abstract:Network management is critical to provide fast, reliable and secure network services. Software-defined networking (SDN) is a new network architecture to simplify network management by integrating network control to a centralized control platform.
Measuring The Control-Data Plane Consistency In Software Defined Networking

Kai Lei,KeKe Li,Junlin Huang,Weichao Li,Jie Xing,Yi Wang

DOI: https://doi.org/10.1109/icc.2018.8422613

2018-01-01

Abstract:Software Defined Networking (SDN) simplifies network management by separating the control plane from the data plane in performance networks. However, the actual packet behaviors, conforming to the rules in the data plane flow tables, may violate the original policies in the controller due to the inconsistency between the data plane and control plane. To address this problem, we propose 2MVeri, a new framework for measuring the control-data plane consistency, defined as the consistency between the control plane policies and data plane rules. 2MVeri uses a Bloom filter and a two-dimensional vector as a tag which is inserted in the packet header and is updated in each switch that the packet traverses. By exploiting path information compressed in the tag, 2MVeri can verify the control-data plane consistency. Moreover, when verification fails, 2MVeri can localize the faulty switch. Evaluations conducted on a datacenter network with the fat tree topology k=4 demonstrate that 2MVeri achieves 100% accuracy in consistency verification and high fault localization performance.
Control Link Load Balancing and Low Delay Route Deployment for Software Defined Networks.

Pengzhan Wang,Hongli Xu,Liusheng Huang,Jie He,Zeyu Meng

DOI: https://doi.org/10.1109/jsac.2017.2760187

IF: 16.4

2017-01-01

IEEE Journal on Selected Areas in Communications

Abstract:Software defined networking (SDN) separates the data plane and control plane on independent devices. Since the data plane, consisting of switches, is responsible for packets forwarding, previous work often considers the different constraints (e.g., data link capacity and flow-table size) only in the data plane to provide better QoS for users. However, due to limited CPU processing power and low speed of flow-table updating on each switch, the control channels/links between switches and the controller often have very limited capacity, which will cause QoS performance (e.g., response time and throughput) degradation when the switch should handle a high traffic load. The goal of our paper is to achieve better QoS by jointly considering the control link constraint and other different constraints of the data plane in SDNs. We formally define the control link load balancing and low delay route deployment problems, and prove the NP-Hardness. We present two algorithms with bounded approximation factors for each problem and implement the proposed methods on our SDN testbed. Extensive simulation results and experimental results show that our algorithms can reduce control link load by about 50% and response time by about 60%, and increase the network throughput by 65% compared with previous methods.
A Secure and High-Performance Multi-Controller Architecture for Software-Defined Networking

Huan-zhao Wang,Peng Zhang,Lei Xiong,Xin Liu,Cheng-chen Hu

DOI: https://doi.org/10.1631/fitee.1500321

IF: 2.526

2016-01-01

Frontiers of Information Technology & Electronic Engineering

Abstract:Controllers play a critical role in software-defined networking (SDN). However, existing single-controller SDN architectures are vulnerable to single-point failures, where a controller’s capacity can be saturated by flooded flow requests. In addition, due to the complicated interactions between applications and controllers, the flow setup latency is relatively large. To address the above security and performance issues of current SDN controllers, we propose distributed rule store (DRS), a new multi-controller architecture for SDNs. In DRS, the controller caches the flow rules calculated by applications, and distributes these rules to multiple controller instances. Each controller instance holds only a subset of all rules, and periodically checks the consistency of flow rules with each other. Requests from switches are distributed among multiple controllers, in order to mitigate controller capacity saturation attack. At the same time, when rules at one controller are maliciously modified, they can be detected and recovered in time. We implement DRS based on Floodlight and evaluate it with extensive emulation. The results show that DRS can effectively maintain a consistently distributed rule store, and at the same time can achieve a shorter flow setup time and a higher processing throughput, compared with ONOS and Floodlight.
SDN Partitioning: A Centralized Control Plane for Distributed Routing Protocols

Marcel Caria,Admela Jukan,Marco Hoffmann

DOI: https://doi.org/10.1109/TNSM.2016.2585759

2016-04-16

Abstract:Hybrid IP networks that use both control paradigms - distributed and centralized - promise the best of two worlds: programmability and agility of SDN, and reliability and fault tolerance of distributed routing protocols like OSPF. The common approaches follow a division of labor concept, where SDN controls prioritized traffic and OSPF assures care-free operation of best effort traffic. We propose SDN Partitioning, which establishes centralized control over the distributed routing protocol by partitioning the topology into sub-domains with SDN-enabled border nodes, such that OSPF's routing updates have to traverse SDN border nodes to reach neighboring sub-domains. This allows the central controller to modify how sub-domains view one another, which in turn allows to steer inter-sub-domain traffic. The degree of dynamic control against simplicity of OSPF can be trade off by adjusting the size of the sub-domains. This paper explains the technical requirements, presents a novel scheme for balanced topology partitioning, and provides the models for common network management tasks. Our performance evaluation shows that - already in its minimum configuration with two sub-domains - SDN Partitioning provides significant improvements in all respects compared to legacy routing protocols, whereas smaller sub-domains provide network control capabilities comparable to full SDN deployment.

Networking and Internet Architecture
MSDN:a Mechanism for Scalable Intra-domain Control Plane in SDN

LIN Ping-ping,BI Jun,HU Hong-yu,JIANG Xiao-ke

DOI: https://doi.org/10.3969/j.issn.1000-1220.2013.09.001

2013-01-01

Abstract:Currently,the architecture of network device is closed.This is detrimental to the network innovation.Software defined networking(SDN) decouples the vertically coupled architecture.At the same time,it opens up the control plane and the protocol implementation in control plane.By this way,software defined network promotes the innovation and the rapid evolution of the network.At present the idea of software defined network is widely accepted by academic and industry researchers.OpenFlow as a typical instance of the software defined network has been deployed by many universities and research institutions all over the world.With the increasing scale of deployment,the poor scalability of the OpenFlow centralized control mode becomes more and more obvious.To solve this problem,this paper adopts the idea of load balance to solve the scalability issue in OpenFlow control plane.And it proposes and designs a high scalable mechanism named MSDN to balance the data flow initialization requests.And then those requests are parallelly processed with a shared global network view.Besides,MSDN also builds a data cluster for the network view.By this way,the scalability in control plane is completely solved.Finally,the emulation in this paper proves the feasibility of the solution.

Consistent Control Mechanism in Software Defined Network

Achieving Consistence for Cross-Domain WAN Control in Software-Defined Networks

Safe Reconfiguring Data Plane Via Supervision over Resource and Flow States

Controller Placement Based on Hierarchical Multi-center SDN

Programming network via Distributed Control in Software-Defined Networks

Lossless Reconfiguration Protocol for Multi-Domain Data Plane in Software-Defined Networks

Classification Based Consistent Flow Update Scheme in Software Defined Network

Software Defined Networking I: SDN

A Model for Building SDN Control Plane with Multiple Controllers

Consistent and fault-tolerant SDN with unmodified switches

Democratic Supervision Makes Controls in Software-Defined Networks More Secure

Research on the SDN Consistency Problems of the Control Logic Based on Network Delay

An Adaptive Scheme for Data Forwarding in Software Defined Network.

Software-Defined Networking: A Comprehensive Survey

Mind the Gap: Monitoring the Control-Data Plane Consistency in Software Defined Networks.

Dynamic control of software defined networks

Measuring The Control-Data Plane Consistency In Software Defined Networking

Control Link Load Balancing and Low Delay Route Deployment for Software Defined Networks.

A Secure and High-Performance Multi-Controller Architecture for Software-Defined Networking

SDN Partitioning: A Centralized Control Plane for Distributed Routing Protocols

MSDN:a Mechanism for Scalable Intra-domain Control Plane in SDN