Abstract:Software-defined measurement (SDM) is a simple and efficient way to deploy measurement tasks and collect measurement data. With SDM, it is convenient for operators to implement fine-grained network-wide measurements at the flow level, from which many important functions can benefit. The prior work provides mechanisms to distribute flows to monitors, such that each monitor can identify its non-overlapped subset of flows to measure, and a certain global performance criterion is optimized, such as load balance or flow coverage. Many applications of network management can benefit from a function that can find large flows efficiently, such as congestion control by dynamically scheduling large flows, caching of forwarding table entries, and network capacity planning. However, the current network-wide measurements neglect the diversity of different flows as they treat large flows and small flows equally. In this paper, we present a mechanism of accuracy-aware collaborative monitoring (ACM) to improve the measurement accuracies of large flows in network-wide measurements at the flow level. The structure of the sketch is an approximate counting algorithm, and a high-measurement accuracy can be achieved by merging the results from multiple monitors with sketches, which is termed as collaborative monitoring. The core idea of our method is to allocate more monitors to large flows and achieve the load balance to provide accuracy-aware monitoring. We modeled our problem as an integer–linear programming problem, which is NP-hard. Thus, we propose an approximation algorithm, named the improved longest processing time algorithm (iLPTA); we proved that its approximation ratio is (12+nl). We propose a two-stage online distribution algorithm (TODA). Moreover, we proved that its approximation ratio is (1+nl−1). The iLPTA is an offline approximation algorithm used to assign monitors for each flow, which prove the validity and feasibility of the core idea. The TODA is an online algorithm that attempts to achieve the load balance by selecting the monitor with the smallest load to a large flow. Our extensional experiment results verify the effectiveness of our proposed algorithms.

Distributed Collaborative Monitoring in Software Defined Networks

Flow Anomaly Telemetry Driven by Programmable Data Plane

Safe Reconfiguring Data Plane Via Supervision over Resource and Flow States

ACM: Accuracy-Aware Collaborative Monitoring for Software-Defined Network-Wide Measurement

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

An Efficient Sampling And Classification Approach For Flow Detection In Sdn-Based Big Data Centers

Floware: Balanced Flow Monitoring in Software Defined Networks

Collaborative Detection and Mitigation of Distributed Denial-of-Service Attacks on Software-Defined Network

DDoS Attack Detection under SDN Context

Optimal Deployment of Distributed Passive Measurement Monitors.

Per-Flow Network Measurement With Distributed Sketch

Dynamic Cluster-Based Flow Management for Software Defined Networks

P4-Based Proactive Monitoring Scheme in Software-Defined Networks

FSDM: Fast Recovery Saturation Attack Detection and Mitigation Framework in SDN

Towards Software Defined Measurement in Data Centers: A Comparative Study of Designs, Implementation, and Evaluation

DHYMON: a Continuous Decentralized Hybrid Monitoring Architecture for MANETs

Balancing Flow Table Occupancy and Link Utilization in Software-Defined Networks

Collaborative detection and mitigation of DDoS in software-defined networks

Ddp: Distributed Network Updates In Sdn

Software-Defined Latency Monitoring In Data Center Networks

A Dynamic Flow Table Management Method Based on Real-time Traffic Monitoring