Entry Aggregation and Early Match Using Hidden Markov Model of Flow Table in SDN

Wang, Cheng; Youn, Hee Yong

doi:10.3390/s19102341

Cited by 16 publications

(14 citation statements)

References 29 publications

(44 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The study also introduced a novel flow management project for MFTs for Open vSwitch in SDN. The memory requirement of the research shows that the Ex table requires a large memory space [11].…”

Section: Analysis and Discussionmentioning

confidence: 99%

A Review of Flow Conflicts and Solutions in Software Defined Networks (Sdn)

Khairi

Ariffin

Latiff

et al. 2021

IIUMEJ

View full text Add to dashboard Cite

Software Defined Networks (SDN) are a modern networking technology introduced to simplify network management via the separation of the data and control planes. Characteristically, flow entries are propagated between the control plane layer and application or data plane layers respectively while following flow table instructions through open flow protocol. More often than not, conflicts in flows occur as a result of traffic load and priority of instructions in the data plane. Several research works have been conducted on flow conflicts in SDN to reduce the effect of conflict. The flow conflict solutions in SDN have three main limitations. First, the OpenFlow table may still cause a defect in the security module according to the priority and action matching in the open flow in the control plane. Second, flow conflict detection requires more time for flow tracking and incremental update, whereas in such a case, delay affects the efficiency of SDN. Besides, the SDN algorithm and mechanism have substantially high memory requirement for instruction and proper functioning. Third, most of the available algorithms and detection methods used to avoid flow conflicts have not fully covered the security model policy. This study reviews these limitations and suggest solutions as future open research directions. ABSTRAK: Rangkaian Perisian Tertentu (SDN) adalah teknologi rangkaian moden yang diperkenalkan bagi memudahkan pengurusan rangkaian melalui pecahan data dan kawalan permukaan. Seperti biasa, aliran kemasukan disebar luas antara lapisan permukaan kawalan dan aplikasi atau lapisan permukaan data masing-masing, sambil mengikuti arahan meja melebar melalui protokol aliran terbuka. Kebiasaannya konflik dalam aliran berlaku disebabkan oleh beban trafik dan keutamaan arahan pada permukaan data. Beberapa kajian dibuat terhadap konflik aliran SDN bagi mengurangkan kesan konflik. Solusi konflik aliran dalam SDN mempunyai tiga kekurangan besar. Pertama, jadual Aliran Terbuka mungkin masih menyebabkan kekurangan dalam modul keselamatan berdasarkan keutamaan dan tindakan persamaan dalam aliran terbuka permukaan kawalan. Kedua, pengesanan aliran konflik memerlukan lebih masa bagi pengesanan aliran dan peningkatan kemaskini, kerana setiap penangguhan memberi kesan terhadap kecekapan SDN. Selain itu, algoritma SDN dan mekanisme memerlukan memori yang agak besar bagi memproses arahan dan berfungsi dengan baik. Ketiga, kebanyakan algoritma dan kaedah pengesanan yang digunakan bagi mengelak konflik pengaliran tidak sepenuhnya dilindungi polisi model keselamatan. Oleh itu, kajian ini meneliti kekurangan dan memberi cadangan penambahbaikan bagi arah tuju kajian masa depan yang terbuka.

show abstract

Section: Analysis and Discussionmentioning

confidence: 99%

A Review of Flow Conflicts and Solutions in Software Defined Networks (Sdn)

Khairi

Ariffin

Latiff

et al. 2021

IIUMEJ

View full text Add to dashboard Cite

show abstract

“…At present, most researches on the flow table overflow of OpenFlow switch focus on how to solve the flow table overflow problem caused by large traffic flows in a normal network environment. For example, set an appropriate timeout value of flow entries to reduce the total number of flow entries in the flow table space [25][26][27]; balance the utilization of flow table space by redirecting flows from switches with high flow table space utilization to switches with sufficient free flow table space [28][29][30]; aggregate flow entries [31][32][33]; find out the most suitable flow entry to delete when the flow table space is in its saturation status [34][35][36].…”

Section: Security and Communication Networkmentioning

confidence: 99%

A Table Overflow LDoS Attack Defending Mechanism in Software-Defined Networks

Xie

Xing

Zhang

et al. 2021

Security and Communication Networks

View full text Add to dashboard Cite

In order to achieve requirements such as fast search of flow entries and mask matching, OpenFlow hardware switches usually use TCAM to store flow entries. Limited by the capacity of TCAM, the current commercial OpenFlow switches can only support hundreds of thousands of flow entries, which makes SDN network using OpenFlow hardware switches vulnerable to the threat of flow table overflow attack. Among them, low-rate DoS (LDoS) attack against table overflow poses a serious threat to SDN networks due to its high attack efficiency and concealed flow, and it is also difficult to detect. In this regard, this paper analyzed two types of LDoS attack flow against table overflow and proposed an attack detection and defense mechanism named SAIA (Small-flow Analysis and Inport-flow Analysis) through the design of table overflow prediction and flow entries deletion strategy. Experiments conducted through the SDN network environment showed that SAIA can effectively detect and suppress LDoS attack flows in the flow table in large-scale network conditions and verified that the deployment of SAIA is lightweight. At the same time, SAIA implemented the flow entry deletion strategy based on LRU when the flow table overflows in a nonattack situation, which further enhances the stability of the network.

show abstract

“…Another solution is Agg-ExTable [27], which can be classified under the category of routing scheme-based approaches. Since OpenFlow has evolved to the usage of multiple flow tables (MFT), different solutions take advantage of this development.…”

Section: Routing Scheme Based Optimizationmentioning

confidence: 99%

“…Some works adopts mechanisms related approaches, one of these mechanisms is the use of the Parallelism-based Optimization [23][24][25], in which the performance of the controller is improved through using multi-core systems that uses parallelism multithreading in order to reduce data latency. Another mechanism is the use Routing Scheme-based Optimization [26,27], where the processed event resulted from routing decisions is reduced. These approaches aim at optimizing the routing scheme in terms of their flow tables.…”

Section: Introductionmentioning

confidence: 99%

A Review of the Control Plane Scalability Approaches in Software Defined Networking

Abuarqoub¹

2020

Future Internet

View full text Add to dashboard Cite

Recent advances in information and communications cloud-based services hold the potential to overcome the scalability and complex maintenance limitations of traditional networks. Software Defined Networking (SDN) surfaced as a promising paradigm to mitigate such limitations while offering flexible networks management. Particularly, SDN separates the control plane from the data plane to achieve abstraction of lower-level functionality, hence, allowing more efficient network management and utilization. However, SDN suffers from various performance and scalability problems leading to significant research efforts on maximizing the scalability of the control plane. This paper aims at reviewing different SDN controller scalability, topology-based and mechanism-based approaches, as well as discussing and analyzing how they attempt to solve the scalability challenge. Furthermore, this paper elaborates on the promising research trends and challenges. Our insights are also discussed to stimulate further research efforts addressing the control plane scalability in SDN.

show abstract

Entry Aggregation and Early Match Using Hidden Markov Model of Flow Table in SDN

Cited by 16 publications

References 29 publications

A Review of Flow Conflicts and Solutions in Software Defined Networks (Sdn)

A Review of Flow Conflicts and Solutions in Software Defined Networks (Sdn)

A Table Overflow LDoS Attack Defending Mechanism in Software-Defined Networks

A Review of the Control Plane Scalability Approaches in Software Defined Networking

Contact Info

Product

Resources

About