Growing traffic demands and increasing security awareness is driving the need for secure services. Current solutions require manual configuration and deployment based on the customer's requirements. In this work, we present an architecture for an automatic intent-based provisioning of a secure service in a multilayer -IP, Ethernet and optical -network while choosing the appropriate encryption layer using an open-source SDN orchestrator. The approach is experimentally evaluated in a testbed with commercial equipment. Results indicate that the processing impact of secure channel creation on a controller is negligible. As the time for setting up services over WDM is varying between technologies, it needs to be taken into account in the decision process.

Tor Vergata -(2) Consortium GARR -(3) CREATE-NET -(4) ON.Lab

OSHI -Open Source Hybrid IP/SDN networking is a hybrid approach allowing the coexistence of traditional IP routing with SDN based forwarding within the same provider domain. In this demo, we will show a set of Open Source management tools for the emulation of the proposed solution over the Mininet emulator and over distributed testbeds. We refer to this suite of tools as Mantoo (Management tools). Mantoo includes an extensible web-based graphical topology designer providing different layered network "views" (e.g. from physical links to service relationships among nodes). The framework is able to validate a topology, to automatically deploy it over a Mininet emulator or a distributed SDN testbed, to access nodes by opening consoles directly via the web GUI.

This paper describes a framework application for the control plane of a network infrastructure; the objective is to feature end-user applications with the capability of requesting at any time a customised end-to-end Quality-of-Service profile in the context of dynamic Service-Level-Agreements. Our solution targets current and future real-time applications that require tight QoS parameters, such as a guaranteed end-to-end delay bound. These applications include, but are not limited to, health-care, mobility, education, manufacturing, smart grids, gaming and much more. We discuss the issues related to the previous Integrated Service and the reason why the RSVP protocol for guaranteed QoS did not take off. Then we present a new signaling and resource reservation framework based on the cutting-edge network controller ONOS. Moreover, the presented system foresees the need of considering the edges of the network, where terminal applications are connected to, to be piloted by distinct logically centralised controllers. We discuss a possible inter-domain communication mechanism to achieve the end-to-end QoS guarantee.Copyright c 201x Institute of Advanced Engineering and Science.All rights reserved.Corresponding Author: Name: Francesco Lucrezia Affiliation: Polytechnic of Turin, Italy Address. Corso Duca degli Abruzzi, 24, 10129 Torino, Italy Email: francesco.lucrezia@polito.it INTRODUCTIONInternet service providers (ISPs) are striving to innovate their network infrastructures at the pace content providers do with their services. Digital contents are consumed by smart phones and sophisticated terminal stations that continuously evolve together with the applications they host. Interestingly enough, the evolution of the OverThe-Top (OTT) services is mainly happening without the aid of network service providers, within the best-effort data traffic channel in the access networks. Recently, a new plethora of applications requiring a RTT delay of around 1ms have been grouped under the hat of tactile-internet applications: a tactile sensor reads information and a connected system reacts with actuators seen by a human within 1 ms [1]. Although we are still far from achieving end-to-end RTT of around 1ms with wireless communications, ISPs need to be ready to re-architect their software control-plane in order to fully exploit the enormous potentials offered by their infrastructures. The goal of this paper is to present the design and a prototype implementation of a control-plane network application for provisioning dynamic end-to-end QoS profiles to end-user applications. The current adoption of distributed control algorithms forces the use of the same signaling protocol (e.g. RSVP, BGP-LS) in all the data-path nodes, not taking into account the resistances inevitably present between device vendors and between administrative domains. For this reason the Service-Level-Agreements (SLAs) between a service provider and its customers or between providers are still mainly static. Moreover, the experience has shown that the scal...

Several Internet Service Providers (ISP) are planning to innovate their infrastructures through a process of network softwarisation and programmability. The Software-Defined-Network (SDN) paradigm aims at improving the design, configuration, maintenance and service provisioning agility of the network through a centralised software control plane which is in charge of managing the entire system. This is easily achievable for local area networks, typical of data centres, where the benefits of having programmable access to the entire network is not restricted by latency. However, in Wide Area Networks, a centralised control plane limits the speed of responsiveness in reaction to time-constrained network events due to unavoidable latencies caused by physical distances. A logical step towards robustness in SDN is to distribute the load of the control plane between entities, each taking care of a portion of the entire geographical network and each providing an east-west communication interface to enable programmability of the entire network. Moreover, a key objective of an SDN control plane targeting an ISP networks is the east-west interface with external domains under the control of other providers. In this article we present ICONA (Inter Cluster Onos Network Application), a tool that has the objective of enabling programmable networks to span multiple clusters of controllers within either a single or multiple administrative domains. In particular, the paper describes the architecture behind ICONA and provides an initial evaluation obtained on a preliminary version of the tool, built on top of the cutting-edge network controller ONOS, Hummingbird release.