Uploaded by Mc Agbanlog

Key Deployments & Use Cases of SDN and OpenFlow

advertisement
Key Deployments & Use Cases of
SDN and OpenFlow
Agbanlog, Mc Joseph
Software Defined Networks and Virtualization
February 2024
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
Table of Contents
List of Figures ........................................................................................................................................ 3
Introduction ........................................................................................................................................... 4
Identification of Deployments ............................................................................................................... 6
Big Switch Networks ......................................................................................................................... 6
Cisco ONE ......................................................................................................................................... 6
Infoblox and Erlang Solutions ........................................................................................................... 7
NEC Corporation ............................................................................................................................... 7
NTT Communications' Enterprise Cloud ......................................................................................... 7
NTT Data............................................................................................................................................ 8
In-Depth Analysis SND, and OpenFlow Use Cases ............................................................................ 9
Optimizing Hyper-Converged Infrastructure Systems .................................................................... 9
How SDN and OpenFlow optimize HCI ..................................................................................... 10
Role of SDN Controller in HCI Systems..................................................................................... 11
Benefits of SDN, and OpenFlow in HCI Systems ...................................................................... 11
Cloud Multi-Tenancy Security ........................................................................................................ 11
How SDN and OpenFlow secure Cloud Environments ............................................................ 12
Benefits of SDN, and OpenFlow in Multi-tenancy in Cloud Environments [19] ...................... 12
Critical Evaluation and Future Trends ................................................................................................ 13
Strengths and Weaknesses of SDN............................................................................................... 13
Strengths and Weaknesses of OpenFlow ..................................................................................... 13
The future of SDN and OpenFlow .................................................................................................. 14
Conclusion ........................................................................................................................................... 15
References .......................................................................................................................................... 16
2
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
List of Figures
Figure 1 An SDN Network .................................................................................................................... 4
Figure 2 Cisco ONE Enterprise Networks Architecture ..................................................................... 6
Figure 3 NTT Comm's Enterprise Cloud Architecture........................................................................ 8
Figure 4 Example of an HCI ................................................................................................................. 9
Figure 5 OpenFlow Switch example .................................................................................................. 10
3
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
Introduction
In this paper, we will discuss about Software Defined Networking (SDN) and
OpenFlow. These are two central concepts in the computer networking.
SDN is a new type of network management (see Figure 1). It simplifies the control
and transformation of data paths in a network. It allows you to control the configuration of
each part from a single stand, rather than having to do it manually. This makes everything
more structured and also dynamic [1].
Figure 1 An SDN Network
OpenFlow forms a component of SDN. It is like a set of direction that directs the
network on how to transport data. It enables the network to deal better with different types
4
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
of information and ensures that every information flows accordingly. Some networks can
handle large amounts of data and adjust well to new requirements using the OpenFlow
[2].
We will see how SDN and OpenFlow are used in practice, what benefits they bring
to us today and where we find ourselves with them closer. Indeed, these technologies are
improving and simplifying the operation of networks, which is a crucial factor considering
that we use our internet in more ways every day [3]. This paper shows practical
applications of Software-Defined Networking (SDN) and OpenFlow by exploring key
deployments and use cases.
5
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
Identification of Deployments
In this section, we will look at some real-world deployments of SDN and OpenFlow,
exploring their scale, purpose, and the challenges they address. Each deployment
showcases how SDN and OpenFlow are making a difference in various industries and
settings.
Big Switch Networks
As a part of the new BigSecure Architecture by Big Switch Networks,
enhancements were announced for its SDN offerings which include monitoring fabric and
many more. This architecture seeks to preserve data centers from large-scale DDoS
attacks by using the underlying network as well as pooled x86-based computing power
[4]. Major elements include the Big Monitoring Fabric, a network packet broker, and
BigSecure Architecture which provides an elastic attack mitigation infrastructure. This
deployment aims to strengthen the security of the data center against massive attacks.
Cisco ONE
The Cisco ONE [5] announcement also shows how the company is developing its
network programmability approach. One of the major strategy adopted by Cisco ONE is
that it provides a flexible and wide range approach for network programmability being
focused on trends such as cloud, mobility, social networking and video. It encompasses
a wide variety of platform APIs, agents and controllers as well as overlay network
technologies (see Figure 2). Cisco strives to deliver application-driven personalization of
network infrastructures, designed to improve the rate of service delivery and efficient
utilization as well as accelerating monetization by new services.
Figure 2 Cisco ONE Enterprise Networks Architecture
6
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
Infoblox and Erlang Solutions
This implementation entails the development of an OpenFlow 1.2-compliant switch,
which would be a big milestone in network management and control [6]. This would
improve the functionality and performance of SDN environments by addressing issues in
high-performance, scalable network architectures.
NEC Corporation
NEC Corporation implemented a new network system for Kanazawa University
Hospital, using their OpenFlow and SDN control technologies. This solution based on
NEC’s UNIVERGE programmable flow controllers and switches, is supposed to solve the
problem of controlling a complicated hospital network [7]. It offers the overall network
visualization and allows easy reconfiguration of the networks. It leads to effective
operations management, minimization of human error, and smooth integration of new
medical equipment into the network.
NTT Communications' Enterprise Cloud
NTT Communications’ Enterprise Cloud, released in 2012 is their pioneering
infrastructure-as-a service (IaaS) offering incorporating open flow network virtualization
technology [8]. Originally deployed in data centers of Japan and Hong Kong, it was further
rolled out to the US, UK, Singapore Australia Malaysia Thailand. This service was formed
with the aim of minimizing ICT expenses and assisting multinational firms in their
7
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
international activities. Among the main characteristics, it is possible to list flexibility of
cloud services with virtualized servers and networks, free broadband connections
available upon demand for backup operations; resource optimization as well as a userfriendly online portal (see Figure 3). The deployment focused on shortening the lead times
involved with system expansion and modifications, improving business agility in fastmoving markets.
Figure 3 NTT Comm's Enterprise Cloud Architecture
NTT Data
NTT Data’s deployment in OpenFlow/SDN is oriented at developing dynamic
network architectures for their business partners. They have created their own virtual
network controller that puts an emphasis on a quick customization, starting small and high
reliability [9]. The controller consists of two types of software: NOS (NetworkOS) which is
the core controller software that manages network resources and decision-making; NOSAP (NetworkOS Application) refers to applications that operate on top of NOS, providing
specific network functions and services [9], providing effective network control with
support for gradual OpenFlow introduction that is especially valuable in migrating existing
networks.
8
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
In-Depth Analysis SND, and OpenFlow Use Cases
Software-Defined Networking (SDN) and OpenFlow have emerged as disruptive
forces, poised to revolutionize the way we manage and leverage network infrastructure.
Their built-in features of flexibility, automated processes and granular control tap an
enormous opportunity to enhance performance, security and productivity in a whole
range of networks [10]. To gain a deeper understanding of their transformative impact,
below is an in-depth analysis of two distinct use cases of the said technologies.
Optimizing Hyper-Converged Infrastructure Systems
Software-Defined Network (SDN) with OpenFlow in Hyper Controller Infrastructure
(HCI) presents as a transformative solution to the management of complex network traffic
[12]. The HCI integrated ecosystem of compute, storage, and networking usually
encounters barriers in traffic management (see Figure 4), specifically due to the
increasing volumes of data traffic as well as application demands [13]. Conventional
network methods are not effective in terms of visibility and control, so it causes
performance inadequacies and security weak points.
Figure 4 Example of an HCI
9
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
How SDN and OpenFlow optimize HCI
These issues are overcome by the integration of SDN to HCI environments through
the OpenFlow protocol. Implementation of SDN improves storage performance by
enabling dynamic traffic routing using underlying application requirements that minimize
latency and enhance input/output operations [12]. This method also guarantees efficient
use of network resources by dynamically adjusting allocations based on current demand
for traffic, thus improving the overall system effectiveness.
Technically, this solution can be defined as implementing OpenFlow switches (see
Figure 2) in the HCI that connects compute nodes to memory resources. These switches
are communicated with the SDN controller and thereby traffic flow is managed by
formulation of certain specific flow rules [15]. The OpenFlow protocol is instrumental in
programming these switch behaviors. Also, the integration of other HCI management tools
and protocols may be necessary to ensure smooth operations.
Figure 5 OpenFlow Switch example
10
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
Role of SDN Controller in HCI Systems
The tasks of the SDN controller are diverse since it monitors activities on the
network, analyzes traffic patterns, and dynamically creates flow rules for OpenFlow
switches [11]. It also enforces strict security policies and adjusts resource allocations for
superior storage performance.
Benefits of SDN, and OpenFlow in HCI Systems
Here are the benefits of these technologies in HCI Systems [16]:
1. The process of lowering latency and increasing I/O throughput results in faster data
access and better application responsiveness.
2. The network resource allocation attempts to maximize performance at a minimum
cost.
3. Security is granted with the granular control over data flows within the HCI system
that allows controlling sensitive information.
4. SDN enables dynamic configuration of the network, which in turn obviates manual
intervention and makes the overall management of HCI system easier.
In general, the employment of SDN alongside OpenFlow in HCI systems showcases
an advanced manner to overcome traditional storage network issues whereby brings into
focus the potential of SDN in improving efficacy, safety and operations within complicated
networks.
Cloud Multi-Tenancy Security
In traditional cloud environments, isolation of tenants is done through virtual
network that is still operated manually [17]. This makes it difficult to ensure complete
isolation and to implement rigid security policies. Logically isolated network segments for
each tenant are created using SDN with OpenFlow which makes secure multi-tenancy
possible. The SDN controller is dynamically configuring switches to apply tenant-specific
security policies and traffic flow rules. This ensures the following [18]:
1. A tenant corresponds to a customer using a particular virtual network;
11
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
2. Tenants may belong to different administrative domains;
3. Tenants expect network isolation of their domain;
4. Physical resource sharing is fully abstracted, with tenants unaware of other
neighbours;
5. Tenants may create multiple distinct virtual network instances and topologies.
How SDN and OpenFlow secure Cloud Environments
In the network type, switches fall into virtual networks that stand in for individual
tenants or clients. These are the virtual networks that are managed by an SDN controller
and ensure isolation. By deploying OpenFlow, tenant-specific flow rules are programmed
on switches. Other protocols such as OpenStack may be employed to support cloud
orchestration. Lastly, the controller controls the provisioning and configuration of virtual
networks as well, enforces tenant policies throughout these operations to deny
unauthorized users access, and monitors activity for potential security threats [11].
Benefits of SDN, and OpenFlow in Multi-tenancy in Cloud Environments [19]
1. SDN enhances VLAN and firewall control in cloud environments with multiple
tenants, improving response to attacks
2. SDN implemented on OpenFlow offers centralized control for greater visibility and
resource optimization in cloud networks
3. SDN centralizes resource control, reducing hardware and management costs,
while improving network performance and security through OpenFlow switches
and applications
These are just the two ways in which SDN and OpenFlow can solve real-life network
problems. With the growing maturity of technology, we would be able to witness new
innovative applications not only in different industries but also the networking
environment.
12
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
Critical Evaluation and Future Trends
Software-Defined Networking (SDN) and OpenFlow are innovative technologies
that have been developed to bring programmability, flexibility, and centralized control in
network management [1]. Although they have achieved great progress, a critical analysis
reveals strengths and weaknesses alongside emerging trends that define their future
development according to a study [20].
Strengths and Weaknesses of SDN
In SDN the Global Network View has a broad perspective of the entire network that
greatly improves security measures. Besides, SDN has Self-Healing Mechanisms that
allow the network to automatically detect and rectify certain problems. Additionally, it
provides Administrators with Increased Control Capabilities, providing for greater
accuracy and efficiency in management of the network. This level of control not only
fortifies network security but also enhances general operational effectiveness.
In contrast, however, SDN is vulnerable to new threats and attacks aimed at the
forwards, control, or the links between them. It is difficult to come up with effective
countermeasures against such threats.
Strengths and Weaknesses of OpenFlow
As an SDN standard, OpenFlow makes optimal use of the security benefits offered
by SDN, such as gathering traffic metrics and adopting a flow-driven forwarding
technique. On the other hand, OpenFlow that implements a number of SDN’s advantages
is limited in several ways. It does not require that the switches support conditional rules,
which limits the self-healing ability of the SDN.
Furthermore, there are no well-defined instructions regarding the placement and
choice of replicated controllers and master control and these elements remain largely
unattended. Another major issue is that in the OpenFlow controller-switch communication
channel, encryption is optional, and might lead to the exploitation of certain security
loopholes. These problems pinpoint essential points where OpenFlow requires additional
development to fully actualize its potential in SDN haunts.
13
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
The future of SDN and OpenFlow
1. Addressing New Security Concerns: As SDN evolves, there will be a
continuous need to tackle emerging security challenges [20].
2. Ongoing Improvement and Standardization: There are persistent efforts to
enhance and standardize SDN, signifying its evolving nature and the need for
further development [20].
3. Integration with 5G Networks: SDN is set to play a crucial role in the
burgeoning 5G networks, with an emphasis on managing the connectivity of a
projected 100 billion devices by 2030 [19].
4. Focus on Diverse Network Environments: Future SDN technologies will
prioritize enhancing security, resilience, robustness, privacy, trust, and data
integrity in various functional network settings [19].
To wrap things up, SDN and OpenFlow indicate substantial prospects in terms of
network management and automation. Yet in order to ensure that security issues are
adequately addressed, interoperability is secured, and the skill gap is bridged, there will
be a wider adoption of this technology. New trends that can be found in the future are
quite exciting with the inclusion of artificial intelligence and intent-based networking which
will have a major contribution to improving the strength as well as the value proposition of
SDN thus perpetuating its place in the dynamic niches.
14
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
Conclusion
Software-Defined Networking (SDN) and OpenFlow became trendy innovations
revolutionizing network control into a dynamic framework programmable. The tangible
results of their application in different industries are enhanced performance, better safety
and efficient utilization of the resources.
However, the critical analysis demonstrates certain limitations worth noting.
Security hazards, interoperability issues, lack of skills and integration challenges prevent
wide approval. The future SDN and OpenFlow seems bright with such positive trends as
security integration, intent-based networking, and AI/ML to be revolutionized. Such trends
can guarantee the position of SDN as a solution for dynamic and efficient network
management.
In conclusion, despite all the opportunities SDN and OpenFlow provide; there is
still a need to consider current limitations as well as change in future trends to fully realize
its success. The advancement of maturity in this technology will guarantee that its merits
are harmony everywhere over different networking terrain.
15
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
References
[1] Marc, “The basics of SDN and the OpenFlow Network Architecture,” NoviFlow, Oct.
03, 2013. https://noviflow.com/the-basics-of-sdn-and-the-openflow-network-architecture/
(accessed Feb. 01, 2024).
[2] D. Pitt, “Key Benefits of OpenFlow-Based SDN - Open Networking Foundation,”
Open Networking Foundation, Jul. 11, 2012. https://opennetworking.org/news-andevents/blog/key-benefits-of-openflow-based-sdn/ (accessed Feb. 01, 2024).
[3] S. Greengard, “Deltion College Turns to SDN to Boost Performance | CIO Insight,”
CIO Insight, Jun. 22, 2015. https://www.cioinsight.com/infrastructure/deltion-collegeturns-to-sdn-to-boost-performance/ (accessed Feb. 02, 2024).
[4] “Big Switch Networks Tackles SDN Security -- Virtualization Review,” Virtualization
Review, 2016. https://virtualizationreview.com/articles/2016/12/06/bigswitchsecurity.aspx (accessed Feb. 02, 2024).
[5] “Cisco Announces Open Network Environment to Unleash Application-Driven
Network Programmability,” @cisco, Jun. 13, 2012.
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2012/m06/cisco-announces-opennetwork-environment-to-unleash-application-driven-network-programmability.html
(accessed Feb. 02, 2024).
[6] “Erlang, Infoblox Build OpenFlow 1.2 Switch,” Lightreading.com, Jun. 14, 2012.
https://www.lightreading.com/sdn/erlang-infoblox-build-openflow-1-2-switch (accessed
Feb. 02, 2024).
[7] “NEC’s Programmable Flow Utilized by Kanazawa University Hospital’s New Network:
Press Releases | NEC,” Nec.com, 2024.
https://www.nec.com/en/press/201206/global_20120611_01.html (accessed Feb. 02,
2024).
[8] “News June 11, 2012: NTT Com to Launch New Enterprise Cloud World’s First to be
Integrated with Network Virtualization | docomo business | NTT Communications About
Us,” Ntt.com, 2024. https://www.ntt.com/en/about-us/pressreleases/news/article/2012/20120611.html (accessed Feb. 02, 2024).
16
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
[9] “NTT DATA’s Efforts for OpenFlow/SDN | NTT Technical Review,” Ntt-review.jp,
2024. https://www.ntt-review.jp/archive/ntttechnical.php?contents=ntr201211fa9.html
(accessed Feb. 02, 2024).
[10] D. Pitt, “The Case For OpenFlow - Open Networking Foundation,” Open Networking
Foundation, Aug. 12, 2015. https://opennetworking.org/news-and-events/blog/the-casefor-openflow/ (accessed Feb. 02, 2024).
[11] “Real Life OpenFlow Use Cases - www.ipSpace.net,” Ipspace.net, 2019.
https://www.ipspace.net/Real_Life_OpenFlow_Use_Cases (accessed Feb. 02, 2024).
[12] James Alan Miller, “10 top tips to maximize hyper-converged infrastructure
benefits,” Data Center, 2019. https://www.techtarget.com/searchdatacenter/feature/10top-tips-to-maximize-hyper-converged-infrastructure-benefits (accessed Feb. 02, 2024).
[13] “What is Hyperconverged Infrastructure (HCI)? | VMware,” VMware, Jan. 12, 2024.
https://www.vmware.com/products/hyper-converged-infrastructure.html (accessed Feb.
02, 2024).
[14] https://techcommunity.microsoft.com/t5/user/viewprofilepage/user-id/1294660,
“Azure Stack HCI - Network configuration design with SDN,”
TECHCOMMUNITY.MICROSOFT.COM, Dec. 05, 2023.
https://techcommunity.microsoft.com/t5/azure-stack-blog/azure-stack-hci-networkconfiguration-design-with-sdn/bap/3817175#:~:text=Software%20defined%20networking%20(SDN)%20provides,load%2
0balancing%20in%20your%20datacenter. (accessed Feb. 02, 2024).
[15] Huawei.com, 2024.
https://support.huawei.com/enterprise/en/doc/EDOC1100196737 (accessed Feb. 02,
2024).
[16] R. Sheldon, “How software-defined networking layers work with HCI,” Data Center,
2018. https://www.techtarget.com/searchdatacenter/tip/How-software-definednetworking-layers-work-with-HCI (accessed Feb. 02, 2024).
[17] T. Nolle, “Operational strategies for isolation in cloud computing,” Cloud
Computing, 2021. https://www.techtarget.com/searchcloudcomputing/tip/Operationalstrategies-for-isolation-in-cloud-computing (accessed Feb. 02, 2024).
17
Mc Joseph C. Agbanlog
Key Deployments & Use Cases of SDN and OpenFlow
[18] N. Paladi and C. Gehrmann, “Towards Secure Multi-tenant Virtualized Networks.”
Accessed: Feb. 02, 2024. [Online]. Available: https://www.divaportal.org/smash/get/diva2:1041286/FULLTEXT01.pdf
[19] “(PDF) Security in OpenFlow Enabled Cloud Environment,” ResearchGate, 2017,
doi: https://doi.org/10.14569//IJACSA.2017.080721.
[20] M. Dabbagh, B. Hamdaoui, M. Guizani, and A. Rayes, "Software-Defined Networking
Security: Pros and Cons," IEEE Communications Magazine, vol. 53, no. 6, pp. 73-79,
2015, doi:10.1109/MCOM.2015.7120048.
18
Download