Software defined networking

Software Defined Networking (SDN) is a recent networking technology that promises important advantages in IP networking, related to flexibility at network and application level, together with powerful management and control. However, the SDN specific centralization creates scalability problems in large network environments. Multi-controller implementation of the SDN control plane for large networks can solve the scalability and reliability issues introduced by the SDN centralized logical control principle. There are still open research issues related to controllers placement, static or dynamic assignment of the network forwarding nodes to controllers, especially when network nodes/links and/or controllers failures appear or some constraints are imposed. This paper contains an analysis of some solutions proposed in the literature followed by a work in progress, on multi-criteria optimization methods applicable to the controller placement problem.

Software Defined Networking (SDN) is a challenging chapter in today's networking era. It is a network design approach that engages the framework to be controlled or 'altered' adroitly and halfway using programming applications. SDN is a serious advancement that assures to provide a better strategy than displaying the Quality of Service (QoS) approach in the present correspondence frameworks. SDN etymologically changes the lead and convenience of system instruments using the single high state program. It separates the system control and sending functions, empowering the network control to end up specifically. It provides more functionality and more flexibility than the traditional networks. A network administrator can easily shape the traffic without touching any individual switches and services which are needed in a network. The main technology for implementing SDN is a separation of data plane and control plane, network virtualization through programmability. The total ...

The advent of services on the Internet has led to an increased demand for enhanced data rates and connectivity throughout the world. Mobile communication is a complex phenomenon which involves multiple entities working towards increasing the data rates and improving the performance of the cellular networks. Software-defined networking (SDN) is one such paradigm which focuses on decoupling of the data and control planes in order to enable the direct programmability of the network and its corresponding functionalities. The power of SDN is used to fuel the upcoming generation of 5G cellular networks. A detailed study is made with respect to the recent research that has been conducted on the use of SDN in 5G cellular networks. The details of the test beds that are currently available for experimenting with SDN and 5G technologies are mentioned, along with the organizations that are currently working on SDN for 5G. Furthermore, the development of 5G in the Indian scenario is also described.

Information technology fields are now more dominated by artificial intelligence, as it is playing a key role in terms of providing better services. The inherent strengths of artificial intelligence are driving the companies into a modern, decisive, secure, and insight-driven arena to address the current and future challenges. The key technologies like cloud, internet of things (IoT), and software-defined networking (SDN) are emerging as future applications and rendering benefits to the society. Integrating artificial intelligence with these innovations with scalability brings beneficiaries to the next level of efficiency. Data generated from the heterogeneous devices are received, exchanged, stored, managed, and analyzed to automate and improve the performance of the overall system and be more reliable. Although these new technologies are not free of their limitations, nevertheless, the synthesis of technologies has been challenged and has put forth many challenges in terms of scalability and reliability. Therefore, this paper discusses the role of artificial intelligence (AI) along with issues and opportunities confronting all communities for incorporating the integration of these technologies in terms of reliability and scalability. This paper puts forward the future directions related to scalability and reliability concerns during the integration of the above-mentioned technologies and enable the researchers to address the current research gaps.

The original design of the Internet did not take
network security aspects into consideration, instead it aimed
to facilitate the process of information exchange between endhosts.
Consequently, many protocols that are part of the Internet
infrastructure expose a set of vulnerabilities that can be exploited
by attackers. To reduce these vulnerabilities, several security
approaches were introduced as a form of add-ons to the existing
Internet architecture. However, these approaches have their
drawbacks (e.g., lack of centralized control, and automation).
In this paper, to address these drawbacks, the features provided
by Software Defined Networking (SON) such as network-visibility,
centralized management and control are considered for developing
security applications. Although the SON architecture provides
features that can aid in the process of network security, it has
some deficiencies when it comes to using SON for security. To
address these deficiencies, several architectural requirements are
derived to adapt the SON architecture for security use cases.
For this purpose, OrchSec, an Orchestrator-based architecture
that utilizes Network Monitoring and SDN Control functions to
develop security applications is proposed. T he functionality of
the proposed architecture is demonstrated, tested, and validated
using a security application.

The novel coronavirus disease-19 (COVID-19) infection has altered the society, economy, and entire healthcare system. Whilst this pandemic has presented the healthcare system with unprecedented challenges, it has rapidly promoted the adoption of telemedicine to deliver healthcare at a distance. Telemedicine is the use of Information and Communication Technology (ICT) for collecting, organizing, storing, retrieving, and exchanging medical information. But it is faced with the limitations of conventional IP-based protocols which makes it challenging to provide Quality of Service (QoS) for telemedicine due to issues arising from network congestion. Likewise, medical professionals adopting telemedicine are affected with low QoS during health consultations with outpatients due to increased internet usage. Therefore, this study proposes a Software-Defined Networking (SDN) based telemedicine architecture to provide QoS during telemedicine health consultations. This study utilizes secondary data from existing research works in the literature to provide a roadmap for the application of SDN to improve QoS in telemedicine during and after the COVID-19 pandemic. Findings from this study present a practical approach for applying SDN in telemedicine to provide appropriate bandwidth and facilitate real time transmission of medical data.

Network Function Virtualization (NFV), reduces the deployment and operating cost and
increases the manageability and innovation in service space of the network function. It
offers a new way to design, deploy and manage networking services. by decoupling the
network functions from proprietary hardware appliances, so they can run in software.
Service providers are looking to use network functions to build dynamic, virtualized
networks with application and content awareness so they can deliver new and innovative
services to subscribers. Since many such implementations of network functions are
available, it is equally important to identify performance of these implementations.
We have designed a monitoring engine that will generate various performance metric
by analyzing off-line logs. In this report we will see various application layer metric
obtained by our monitoring engine and analyze them to identify the bottleneck in the
system.
For now, our monitoring engine is only applicable to one of the VNF prototype, namely,
Project Clearwater. We will be building a software-based DPI tool, providing advanced
traffic analysis and extensive reporting that will be applicable to any VNF prototype.

Software-Defined Networking (SDN) provides a highly flexible flow management platform through a logically centralized controller that exposes network capabilities to the applications. However, most applications do not natively use SDN. An external entity is thus responsible for defining the corresponding flow management policies. Usually network operators prefer to control the flow management policies, rather than granting full control to the applications. Although IP addresses and port numbers can suffice to identify users and applications in ISP networks and determine the policies applicable to their flows, such an assumption does not hold strongly in cloud environments. IP addresses are allocated dynamically to the users, while port numbers can be freely chosen by users or cloud-based applications. These applications, like computing or storage framework, use diverse port numbers which amplifies this phenomenon. This paper introduces higher-level abstractions for defining user-and application-specific policies. These policies are then automatically mapped to OpenFlow rules by retrieving flow-based information of active users and applications in real-time. We implemented this framework and evaluated its practicality by measuring the underlying overhead.

The Internet has led to the creation of a digital society, where (almost) everything is connected and is accessible from anywhere. However, despite their widespread adoption, traditional IP networks are complex and very hard to manage. It is both difficult to configure the network according to pre- defined policies, and to reconfigure it to respond to faults, load and changes. To make matters even more difficult, current networks are also vertically integrated: the control and data planes are bundled together. Software-Defined Networking (SDN) is an emerging paradigm that promises to change this state of affairs, by breaking vertical integration, separating the network’s control logic from the underlying routers and switches, promoting (logical) centralization of network control, and introducing the ability to program the network. The separation of concerns introduced between the definition of network policies, their implementation in switching hardware, and the forwarding of traffic, is key to the desired flexibility: by breaking the network control problem into tractable pieces, SDN makes it easier to create and introduce new abstractions in networking, simplifying network management and facilitating network evolution.
In this paper we present a comprehensive survey on SDN. We start by introducing the motivation for SDN, explain its main concepts and how it differs from traditional networking, its roots, and the standardization activities regarding this novel paradigm. Next, we present the key building blocks of an SDN infrastructure using a bottom-up, layered approach. We provide an in-depth analysis of the hardware infrastructure, southbound and north- bound APIs, network virtualization layers, network operating systems (SDN controllers), network programming languages, and network applications. We also look at cross-layer problems such as debugging and troubleshooting. In an effort to anticipate the future evolution of this new paradigm, we discuss the main ongoing research efforts and challenges of SDN. In particular, we address the design of switches and control platforms – with a focus on aspects such as resiliency, scalability, performance, security and dependability – as well as new opportunities for carrier transport networks and cloud providers. Last but not least, we analyze the position of SDN as a key enabler of a software-defined environment.

Smart city brings enormous opportunities and exciting challenges. In a smart city, operations and services such as traffic, transport, electric power, and water distribution are monitored, operated, and controlled through ICT based infrastructure, smartly. This allows efficient management of resources and facilitates smooth access to services. However, it also induces stringent requirements and challenges for uninterrupted operation and execution of ICT-based monitoring and controlled infrastructure. Cybersecurity is one of the foremost challenges in a smart city network. That is, protecting the smart city application services from cyber-attacks and ensuring continuity of services is utmost desirable. As smart city services typically comprised of web based applications, application level distributed denial of service (AL-DDoS) attack is a major cybersecurity threat that can have catastrophic impact on an extremely critical smart city network. This paper presents an efficient framewo...

The continuous growth of the vehicles number, together with associated problems encountered in transportation systems have driven significant developments in the framework of Intelligent Transport System (ITS). Recently, an advanced solution-Internet of Vehicles (IoV) is proposed, seen as a part of Future Internet and specifically of Internet of Things (IoT), aiming to offer novel advanced commercial and technical capabilities. IoV will integrate the previous Vehicular Ad Hoc Networks (VANET) and also functionalities already developed in ITS. However, the architectural aspects of the IoV are still open research issues. This paper attempts a comparative critical study of several functional architectures proposed for IoV, including recent ones based on Cloud/Fog computing and Software defined networking (SDN)-control.

The International Journal of Computer Networks & Communications (IJCNC) is a bi monthly open access peer-reviewed journal that publishes articles which contribute new results in all areas of Computer Networks & Communications.The journal focuses on all technical and practical aspects of Computer Networks & data Communications. The goal of this journal is to bring together researchers and practitioners from academia and industry to focus on advanced networking concepts and establishing new collaborations in these areas.

In this paper, we propose a Voronoi diagram based spatio-temporal data redundancy elimination approach for RFID systems having multiple readers so that every RFID tag will be read by only one reader depending on the distance between the tag and the center of the Minimum Enclosing Circle (MEC) of the Voronoi cell which the reader belongs to. Thus, the spatial redundancy in the gathered data is completely eliminated. Temporal redundancy is also minimized by reading the RFID tags at regular time intervals larger than an appropriately chosen threshold value. Existing methods of reducing data redundancy in RFID systems are often associated with loss of data, false positive errors and false negative errors. In contrast to this, our proposed technique is free from any false positive and false negative errors with no loss of data and every tag being read by only one single reader. Simulation of our proposed approach also establishes its superiority to the existing techniques in terms of these performance parameters.

Internet of things (IoT) is realized by the idea of free flow of information amongst various low-power embedded devices that use the Internet to communicate with one another. It is predicted that the IoT will be widely deployed and will find applicability in various domains of life. Demands of IoT have lately attracted huge attention, and organizations are excited about the business value of the data that will be generated by deploying such networks. On the contrary, IoT has various security and privacy concerns for the end users that limit its proliferation. In this paper, we have identified, categorized, and discussed various security challenges and state-of-the-art efforts to resolve these challenges.

The International Journal of Computer Networks & Communications (IJCNC) is a bi monthly open access peer-reviewed journal that publishes articles which contribute new results in all areas of Computer Networks & Communications. The journal focuses on all technical and practical aspects of Computer Networks & data Communications. The goal of this journal is to bring together researchers and practitioners from academia and industry to focus on advanced networking concepts and establishing new collaborations in these areas.Wireless Network

The Internet of Vehicles is a novel development trend in vehicular networking. Its driving factor is, on one part, the high growth of the vehicles number, including the intelligent ones and the need to solve numerous problems encountered in transportation systems related to safety, traffic management, information and entertainment services, autonomic vehicles challenges and so on. Internet of Vehicles extends the capabilities of the traditional Intelligent Transport System technologies but also takes benefit from new technologies used in Future Internet. It is considered by many authors as a sub-domain of Future Internet and specifically of Internet of Things. Internet of Vehicles will integrate the previous Vehicular Networks and also functionalities already developed in ITS. However, there is no unique definition of what Internet of Vehicles exactly is; some concepts and architectural aspects are still open research issues. This paper is not an exhaustive survey; it attempts a comparative critical analysis of several functional architectures and systems proposed for Internet of Vehicles. Recent approaches Fog/Edge computing – based systems and Software Defined Networking are also considered. An enriched SDN/Fog based architecture is proposed.

The continuous growth of the vehicles number, together with associated problems encountered in transportation systems have driven significant developments in the framework of Intelligent Transport System (ITS). Recently, an advanced solution-Internet of Vehicles (IoV) is proposed, seen as a part of Future Internet and specifically of Internet of Things (IoT), aiming to offer novel advanced commercial and technical capabilities. IoV will integrate the previous Vehicular Ad Hoc Networks (VANET) and also functionalities already developed in ITS. However, the architectural aspects of the IoV are still open research issues. This paper attempts a comparative critical study of several functional architectures proposed for IoV, including recent ones based on Cloud/Fog computing and Software defined networking (SDN)-control.

Software defined networking is an emerging network architecture with promising future in network field. It is dynamic, manageable, cost effective, and adaptable networking where control and data plane are decoupled, and control plane is centrally located to control application and dataplanes. OpenFlow is an example of Software Defined Networking (SDN) Southbound, which provides an open standard based interface between the SDN controller and data plane to control how data packets are forwarded through the network. As a result of rapid changes in networking, network program-ability and control logic centralization capabilities introduces new fault and easily attack planes, that open doors for threats that did not exist before or harder to exploit. This paper proposed SDN architecture with some level of security control, this will provide secured SDN paradigm with machine learning white/black list, where users application can be easily test and group as malicious attack or legitimate packet.

Keyword - Software Defined Networking (SDN); OpenFow; Flow table; Security control; white/black list

http://sites.google.com/site/ijcsis/
ISSN 1947-5500

Since Software-Defined Networking (SDN) technologies have been commonly used in networking components for designing Future Internet, the multi-path routing becomes a fundamental requirement in network deployment. This paper present a prototype of weighted multi-path routing based on OpenFlow protocol. For a stable network operation, in consideration of various factors, it is necessary to select the best path. Bandwidth, load, delay and reliability will be key factors to define the priority of the multi-path.

Software Defined Networking (SDN) is a novel approach
to allow configuration of networks in real time and a centralized
manner. Likewise to legacy network architectures,
security mechanisms are used to protect the network and
the end-hosts within the network against attacks. While the
properties of SDN allow to implement sophisticated security
mechanism as extension of the centralized controllers, they
also make the controllers and any extensions of its functionality
a valuable target for attackers. This motivates to analyze
the security of security applications for SDN. In this
paper, two security applications namely, OpenFlow-Random
Host Mutation and Resonance, are analyzed using STRIDE.
It is shown that most threats for the two security applications
can be mitigated by using existing security mechanisms. Furthermore, general suggestions that should be considered when designing security applications for SDN are derived.

Software-Defined Networking (SDN) memberikan peluang kemudahan manajemen jaringan dan mengurangi biaya operasional bagi penggunanya. SDN menghindarkan penggunanya dari ketergantungan terhadap satu operator Wide Area Network (WAN) maupun Internet Service Provider. Perusahaan pengguna teknologi SDN dapat memanfaatkan berbagai operator yang ada menyesuaikan dengan ketersediaan jaringan operator yang dianggap baik pada lokasi kantor cabangnya selama kantor pusat atau pusat datanya dapat terhubung ke internet ataupun ke WAN.

Fleksibilitas, kemudahan pengelolaan jaringan dan berbagai kelebihan teknologi SDN lainnya memiliki sistem kontrol terpusat. Hal ini menyebabkan adanya potensi resiko keamanan yang lebih besar dibandingkan dengan sistem kontrol tersebar di seluruh cabang pengguna. Penelitian ini hanya akan memeriksa dampak keamanan SDN yang berhubungan dengan serangan Denial of Service pada pusat data atau sistem kontrol SDN. Diharapkan bahwa hasil penelitian yang berupa arsitektur pertahanan terhadap serangan Denial of Service, dapat bermanfaat bagi penyedia maupun pengguna teknologi SDN. Arsitektur pertahanan ini mampu mendeteksi serangan dan memungkinkan reaksi yang cepat dan spesifik untuk mengatasi serangan tersebut.

Keyword : Software-Defined Networking, Denial of Service, security.

Today’s data networks are steadily growing in size and complexity. Especially in enterprise networks, these development lead to the requirement of a central network administration. With Software Defined Networking (SDN), this requirement can be fulfilled. However, new security considerations such as the protection of the central component must be taken into account. Motivated by the new security requirements that security should play a key role in SDN architectures. This paper chooses some architectures, namely, the Path Computation Element (PCE), 4D, and the Secure Architecture for the Networked Enterprise (SANE). These architectures are analyzed with respect to its security capabilities using Microsoft’s threat modeling technique, STRIDE. The analysis shows that architectures such as PCE and 4D are vulnerable to tampering and information disclosure as
well as Denial of Service attacks. The detected threats can
be mitigated by using standard technologies such as TLS and
IPsec for securing the communication between interactors.

"Network management is becoming increasingly challenging with the relentless growth in network size, traffic volume, and the diversity in QoS requirements. Traditionally, the concept of predefined Service Level Agreements (SLAs) has been utilized to establish QoS parameters. However, state-of-the-art technologies in this area are both proprietary and inflexible. To this end, Software Defined Networking (SDN) has the potential to make network management tasks flexible and scalable, and to provide an open platform to encourage innovation. In this paper, we present PolicyCop – an open, flexible, and vendor agnostic QoS policy management framework targeted towards OpenFlow based SDN. PolicyCop provides an interface for specifying QoS-based SLAs and enforces them using the OpenFlow API. It monitors the
network and autonomically readjusts network parameters to satisfy customer SLAs. We present experimental results to demonstrate PolicyCop’s effectiveness in ensuring throughput, latency, and reliability guarantees."

The Software Defined Networking (SDN) decouples control and routing of data, offering high programmability and a global view of the network. The adoption of this approach is growing in enterprise networks, data centers and other critical network infrastructures. However, it is still a challenge not only provide security in these next generation networks as well as to allow a network attack to be susceptible of an incident and forensic treatment procedure. In this context, this paper proposes a network architecture exploring the new SDN paradigm by creating a detection and protection mechanism to deal with security threats. In general, the network security architecture proposed implements a protection mechanism using hardening and detection techniques that reacts to security threats using an Intrusion Detection System-IDS, exploring new empowered by the SDN networks and providing resources to perform intrusion analysis and attacks.

Software Defined Networking (SDN) is seen as one
way to solve some problems of the Internet including security,
managing complexity, multi-casting, load balancing, and energy
efficiency. SDN is an architectural paradigm that separates the
control plane of a networking device (e.g., a switch / router)
from its data plane, making it feasible to control, monitor, and
manage a network from a centralized node (the SDN controller).
However, today there exists many SDN controllers including
POX, FloodLight, and OpenDaylight. The question is, which
of the controllers is to be selected and used? To find out the
answer to this question, a decision making template is proposed
in this paper to help researchers choose the SDN controller
that best fits their needs. The method works as follows; first,
several existing open-source controllers are analyzed to collect
their properties. For selecting the suitable controller based on
the derived requirements (for example, a “Java” interface must
be provided by the controller), a matching mechanism is used to
compare the properties of the controllers with the requirements.
Additionally, for selecting the best controller based on optional
requirements (for example, GUI will be extremely preferred over
the age of the controller), a Multi-Criteria Decision Making
(MCDM) method named Analytic Hierarchy Process (AHP)
has been adapted by a monotonic interpolation / extrapolation
mechanism which maps the values of the properties to a value in
a pre-defined scale. By using the adapted AHP, the topmost five
controllers have been compared and “Ryu” is selected to be the
best controller based on our requirements.

The objectives for this white paper are to draw attention to the second release of ETSI NFV ISG
documents scheduled to be published in January 2015, and to provide a commentary on industry
progress on NFV since we published our last update one year ago.
This is a non-proprietary white paper authored by network operators who are participating in the
NFV ISG. It has been produced independently of the NFV ISG; it is not an NFV ISG document and
claims no endorsement by the NFV ISG.

The SIP protocol was standardized by the IETF at the application layer for initiating, managing, and terminating multimedia sessions and has been widely used as the main signaling protocol on both the Internet and VoIP networks. Most challenges in this protocol are overload and lack of proper state distribution. These challenges cause a wide range of next-generation network users to face a sharp decline in service quality. In this article, we define the state distribution problem between several nodes where the state maintenance is accompanied by considerable consumption of resources leading to overload. For the problem solution, the goal is to increase the overall throughput of calls and the availability of servers. First, we provide a framework based on software-defined networking technology, and then we formulate the problem as an optimization problem and implement and evaluate it as a module on the proposed controller. This leads to a more scalable SIP network that dynamically determines the number of SIP requests for which the server is modeled while delegating the state maintenance to its downstream server for the rest of the requests. This is in contrast to existing SIP servers because they are statically configured to be either stateless or stateful, resulting in non-optimal call throughput. Performance evaluation is performed at two levels of infrastructure and control and the results are presented.

Software defined network is emerging network architecture with promising future in network field. It is dynamic, manageable, cost effective, and adaptable networking where control and data plane are decoupled, and control plane is centrally located to control application and data planes. OpenFlow is an example of Software Defined Network (SDN) Southbound, which provides an open standard based interface between the SDN controller and data planes to control how data packets are forwarded through the network. As a result of rapid changes in networking, SDN program-ability and control logic centralization capabilities introduces new fault and easily attack planes, that open doors for threats that where not exist or harder to exploit. The paper present SDN architecture with security control level, this provide secured SDN paradigm with machine learning white/black list, where users application can be easily tested and group accordingly (malicious attack or legitimate packet).