Filters








32 Hits in 5.4 sec

FlowTags

Seyed Kaveh Fayazbakhsh, Vyas Sekar, Minlan Yu, Jeffrey C. Mogul
2013 Proceedings of the second ACM SIGCOMM workshop on Hot topics in software defined networking - HotSDN '13  
To this end, we propose FlowTags, an extended SDN architecture in which middleboxes add Tags to outgoing packets, to provide the necessary causal context (e.g., source hosts or internal cache/miss state  ...  These Tags are used on switches and (other) middleboxes for systematic policy enforcement. We discuss the early promise of minimally extending middleboxes to provide this support.  ...  Dynamic policy invocation: So far, we have discussed only pre-specified policies, even if the middlebox actions are dynamic. One could extend FlowTags to support dynamic invocation scenarios [3] .  ... 
doi:10.1145/2491185.2491203 dblp:conf/sigcomm/FayazbakhshSYM13 fatcat:mkjszsulfrenzkkbkeucluwdya

Protocols to support autonomy and control for NFV in software defined networks

Ali Mohammadkhan, Guyue Liu, Wei Zhang, K. K. Ramakrishnan, Timothy Wood
2015 2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)  
Further, there is no support to dynamically place multiple replicas of an NF in a large network. FlowTags [6] is an architecture for dynamically managing flows through middleboxes in the network.  ...  Handling downstream and temporary actions is done in a manner similar to static chains. Here, we only focus on persistent and upstream actions.  ... 
doi:10.1109/nfv-sdn.2015.7387422 dblp:conf/nfvsdn/MohammadkhanLZR15 fatcat:z5uv2yshz5bpvgcxrg7aa3hy2q

Research Challenges for Network Function Virtualization - Re-Architecting Middlebox for High Performance and Efficient, Elastic and Resilient Platform to Create New Services -

Kohei SHIOMOTO
2018 IEICE transactions on communications  
Even though there have been several survey studies in this area, this area is continuing to grow rapidly. In this paper, we present a recent survey of this area.  ...  Software-defined networking (SDN) and network function virtualization (NFV) are promising technologies for dis-aggregating vertically integrated systems into components by using "softwarization".  ...  [139] , [147] proposed FlowTags for enforcing network-wide policies in the presence of dynamic middlebox actions.  ... 
doi:10.1587/transcom.2017ebi0001 fatcat:5u722sdhsjfrxcfz6vqn3cq3yu

EnforSDN: Network policies enforcement with SDN

Yaniv Ben-Itzhak, Katherine Barabash, Rami Cohen, Anna Levin, Eran Raichstein
2015 2015 IFIP/IEEE International Symposium on Integrated Network Management (IM)  
Using emulated SDN-based data center environment, we demonstrate higher throughput and lower latency achieved with EnforSDN, as compared to a baseline SDN network.  ...  In this paper, we present EnforSDN -a new management approach that exploits SDN principles to decouple the policy resolution layer from the policy enforcement layer in network service appliances.  ...  FlowTags architecture is one of the first academic attempts in incorporating the middleboxes into the realm of SDN by extending the middleboxes with the ability to mark the data packets with information  ... 
doi:10.1109/inm.2015.7140279 dblp:conf/im/Ben-ItzhakBCLR15 fatcat:mff6gmvdljhaxewwjrvo3a6oge

Modelling cyber security for software-defined networks those grow strong when exposed to threats

Usama Ahmed, Imran Raza, Syed Asad Hussain, Amjad Ali, Muddesar Iqbal, Xinheng Wang
2015 Journal of Reliable Intelligent Environments  
handled in isolation as the case has been with conventional security mechanisms.  ...  with SDN" and "Security for SDN" to achieve the overall objective of protecting our information from cyber threats in this globally connected internetwork.  ...  FlowTags has three key dimensions highlighted in Fig. 4 : Fig. 4 Flowtag architecture [7] 2. FlowTags APIs between the FlowTags-enhanced middleboxes and controller. 3.  ... 
doi:10.1007/s40860-015-0008-0 fatcat:5uzcjwxp4bhnfbq3acw6srtmny

A Survey of Security in Software Defined Networks

Sandra Scott-Hayward, Sriram Natarajan, Sakir Sezer
2016 IEEE Communications Surveys and Tutorials  
The objective of FlowTags is to ensure consistent network policy enforcement as packet headers and contents may be dynamically modified by middleboxes.  ...  [113] - [116] introduce novel security services via SDN middleboxes. E.  ... 
doi:10.1109/comst.2015.2453114 fatcat:7d46s7rtxrg3romy2zds72e5pm

SDPA: Enhancing Stateful Forwarding for Software-Defined Networking

Shuyong Zhu, Jun Bi, Chen Sun, Chenhui Wu, Hongxin Hu
2015 2015 IEEE 23rd International Conference on Network Protocols (ICNP)  
However, OpenFlow only provides a simple "match-action" paradigm and lacks the function of stateful forwarding for SDN data plane, which limits it to support advanced network applications.  ...  We design and implement an extended OpenFlow protocol to implement the communication between the controller and FP.  ...  To support complex middlebox functions in SDN, Fayazbakhsh et al. [12] developed a FlowTags architecture. Such an approach attempts to combine traditional middleboxes with the SDN architecture.  ... 
doi:10.1109/icnp.2015.45 dblp:conf/icnp/ZhuBSWH15 fatcat:cdyqevxhfzgnff7wjojsutcmvy

Deep Packet Inspection as a Service

Anat Bremler-Barr, Yotam Harchol, David Hay, Yaron Koral
2014 Proceedings of the 10th ACM International on Conference on emerging Networking Experiments and Technologies - CoNEXT '14  
Moreover, technologies and solutions for current Software Defined Networks (SDN) (e.g., SIMPLE [41]) make it feasible to implement such a service and route traffic to and from its instances. 1 In an experiment  ...  The DPI service then passes the scan results to the appropriate middleboxes.  ...  This method is supported in current OpenFlow-based SDN networks [20] . A similar alternative is to use the FlowTags mechanism [18] .  ... 
doi:10.1145/2674005.2674984 dblp:conf/conext/Bremler-BarrHHK14 fatcat:awgubiywinfp5gvp64c2odrgmy

OpenFunction: Data Plane Abstraction for Software-Defined Middleboxes [article]

Chen Tian, Alex X. Liu, Ali Munir, Jie Yang, Yangming Zhao
2016 arXiv   pre-print
OpenFlow/P4 falls short in implementing middlebox functionalities due to the fundamental limitation in its match-action abstraction.  ...  SDM complements SDN as SDM realizes abstraction and centralization for middleboxes, whereas SDN realizes those for switches.  ...  FlowTag makes a further step by attaching tags to flow packets to enable flow tracking.  ... 
arXiv:1603.05353v1 fatcat:3efzxz6kdnah7cqghzg7xykr2e

SNAP

Mina Tahmasbi Arashloo, Yaron Koral, Michael Greenberg, Jennifer Rexford, David Walker
2016 Proceedings of the 2016 conference on ACM SIGCOMM 2016 Conference - SIGCOMM '16  
Nevertheless, managing stateful, distributed systems efficiently and correctly is known to be one of the most challenging programming problems. To simplify this new SDN problem, we introduce SNAP.  ...  Early programming languages for software-defined networking (SDN) were built on top of the simple matchaction paradigm offered by OpenFlow 1.0.  ...  Middleboxes can still use tags from FlowTags to learn about flow's original information or the context of the previous middlebox.  ... 
doi:10.1145/2934872.2934892 dblp:conf/sigcomm/ArashlooK0RW16 fatcat:4xw26mrdavgnzjksaqmeyrvujm

Towards flexible, scalable and autonomic virtual tenant slices

Mohamed Fekih Ahmed, Chamssedine Talhi, Mohamed Cheriet
2015 2015 IFIP/IEEE International Symposium on Integrated Network Management (IM)  
and currently does not handle dynamic actions.  ...  A clear disadvantage of FlowTags is the fact that it supports only pre-defined policies and does not handle dynamic actions.  ...  EA_FMT" to @mac-dst "EA_FMT" is on datapath %s inport %d and outport %d",  ... 
doi:10.1109/inm.2015.7140361 dblp:conf/im/AhmedTC15 fatcat:qcyz5zlbsvhtvjyyfy6rlytaii

SDNFV: Flexible and Dynamic Software Defined Control of an Application- and Flow-Aware Data Plane [article]

Wei Zhang, Guyue Liu, Timothy Wood, K.K. Ramakrishnan, Jinho Hwang
2016 arXiv   pre-print
Software Defined Networking (SDN) promises greater flexibility for directing packet flows, and Network Function Virtualization promises to enable dynamic management of software-based network functions.  ...  This increases the network's flexibility compared to existing SDNs where controllers often make decisions solely based on the first packet header of a flow.  ...  network-wide policies for dynamic middlebox actions.  ... 
arXiv:1606.02599v1 fatcat:l3tdnzztqnh7zgqigwjf3taahm

Secure and dependable software defined networks

Adnan Akhunzada, Abdullah Gani, Nor Badrul Anuar, Ahmed Abdelaziz, Muhammad Khurram Khan, Amir Hayat, Samee U. Khan
2016 Journal of Network and Computer Applications  
We also highlight and analyze the possible threats on each layer/interface of SDN to help design secure SDNs.  ...  Finally, in an effort to anticipate secure and dependable SDNs, we present the ongoing open security issues, challenges and future research directions.  ...  However, the Slick and FlowTags architectures have a serious limitation: they work based mainly on pre-defined policies and cannot handle dynamic operations.  ... 
doi:10.1016/j.jnca.2015.11.012 fatcat:m5ekztakunbzxgkuk6gfp23j3e

Dynamic Service Chaining with Dysco

Pamela Zave, Ronaldo A. Ferreira, Xuan Kelvin Zou, Masaharu Morimoto, Jennifer Rexford
2017 Proceedings of the Conference of the ACM Special Interest Group on Data Communication - SIGCOMM '17  
Dysco's distributed reconfiguration protocol handles the removal of proxies that terminate TCP connections, middleboxes that change the size of a byte stream, and concurrent requests to reconfigure different  ...  Dysco requires no changes to end-host and middlebox applications, host TCP stacks, or IP routing.  ...  Even for the simplest service chains, these solutions have several limitations: • They require special equipment (e.g., SDN switches) that can perform match-action processing based on multiple packet header  ... 
doi:10.1145/3098822.3098827 dblp:conf/sigcomm/ZaveFZMR17 fatcat:qeiqbybd5jhmfkwq6orvbyapfa

SNAP: Stateful Network-Wide Abstractions for Packet Processing [article]

Mina Tahmasbi Arashloo, Yaron Koral, Michael Greenberg, Jennifer Rexford, David Walker
2016 arXiv   pre-print
Early programming languages for software-defined networking (SDN) were built on top of the simple match-action paradigm offered by OpenFlow 1.0.  ...  Nevertheless, managing stateful, distributed systems efficiently and correctly is known to be one of the most challenging programming problems. To simplify this new SDN problem, we introduce SNAP.  ...  Middleboxes can still use tags from FlowTags to learn about flow's original information or the context of the previous middlebox.  ... 
arXiv:1512.00822v2 fatcat:cpjequdeovbo7d23h2wph66lam
« Previous Showing results 1 — 15 out of 32 results