Flow-level state transition as a new switch primitive for SDN

Moshref, Masoud; Bhargava, Apoorv; Gupta, Adhip; Yu, Minlan; Govindan, Ramesh

doi:10.1145/2619239.2631439

Cited by 45 publications

(50 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, we evaluated how the compiler's performance scales with policy size using the example programs from Table 3. Given that these programs are taken from recent papers and tools in the literature [5,21,8,36], we believe they form a fair benchmark for our evaluation. Except for TCP state machine, the example programs are similar in size and complexity to the DNS tunnel example ( §2).…”

Section: Methodsmentioning

confidence: 99%

“…We have implemented several stateful network functions (Table 3) that are typically relegated to middleboxes in SNAP. Examples were taken from the Chimera [5], FAST [21], and Bohatei [8] systems. The code can be found in the extended version [42].…”

Section: Language Expressivenessmentioning

confidence: 99%

“…In the latter case, it is possible for two different keys to hash to the same dictionary entry. However, there are applications such as load balancing and flow-size-based sampling that can tolerate such collisions [21]. (ii) Content Addressable Memories (CAMs) are typically present in today's hardware switches and can be modified by a software agent running on the switch.…”

Section: Stateful Operations In the Data Planementioning

confidence: 99%

“…Stateful switch-level mechanisms. FAST [21] and OpenState [4] propose flow-level state machines as a primitive for a single switch. SNAP offers a networkwide OBS programming model, with a compiler to distribute the programs across the network.…”

Section: Related Workmentioning

confidence: 99%

See 3 more Smart Citations

Snap

Arashloo

Koral

Greenberg

et al. 2016

Proceedings of the 2016 ACM SIGCOMM Conference

126

View full text Add to dashboard Cite

Early programming languages for software-defined networking (SDN) were built on top of the simple matchaction paradigm offered by OpenFlow 1.0. However, emerging hardware and software switches offer much more sophisticated support for persistent state in the data plane, without involving a central controller. Nevertheless, managing stateful, distributed systems efficiently and correctly is known to be one of the most challenging programming problems. To simplify this new SDN problem, we introduce SNAP. SNAP offers a simpler "centralized" stateful programming model, by allowing programmers to develop programs on top of one big switch rather than many. These programs may contain reads and writes to global, persistent arrays, and as a result, programmers can implement a broad range of applications, from stateful firewalls to fine-grained traffic monitoring. The SNAP compiler relieves programmers of having to worry about how to distribute, place, and optimize access to these stateful arrays by doing it all for them. More specifically, the compiler discovers read/write dependencies between arrays and translates one-big-switch programs into an efficient internal representation based on a novel variant of binary decision diagrams. This internal representation is used to construct a mixed-integer linear program, which jointly optimizes the placement of state and the routing of traffic across the underlying physical topology. We have implemented a prototype compiler and applied it to about 20 SNAP programs over various topologies to demonstrate our techniques' scalability.

show abstract

Section: Methodsmentioning

confidence: 99%

Section: Language Expressivenessmentioning

confidence: 99%

Section: Stateful Operations In the Data Planementioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

Snap

Arashloo

Koral

Greenberg

et al. 2016

Proceedings of the 2016 ACM SIGCOMM Conference

126

View full text Add to dashboard Cite

show abstract

“…Pioneering research in this field has focused on the following key technical aspects: Identification of new programmable switch architectures. Examples: SDPA, FAST, and OpenState . High‐level programming languages and compilers which could exploit programmable data planes.…”

Section: Introductionmentioning

confidence: 99%

A real‐time attack defense framework for 5G network slicing

et al. 2020

View full text Add to dashboard Cite

Network Slicing (NS) is a key enabler to support 5G network services on-demand. However, since NS is a result of the recent advancement in Software-Defined Networking and Network Function Virtualization, it introduces new security issues which include attacks against an NS instance within an operator network and interslice security threats. In this scenario, identifying and mitigating attacks in real-time is of paramount importance to improve security aspects. However, it is far from being straightforward. Therefore, this work proposes the FrameRTP4, a P4-based framework that aims to deliver real-time attack detection and mitigation mechanisms in 5G NS scenarios. For this, it provides a P4-based switch that implements an Service Function Chaining protocol layer, an efficient and scalable Access Control List for the detection and mitigation of known attacks, and a monitoring system aiming to reduce the overhead induced on the control channel. Furthermore, it delivers an orchestrator that aims to control all switches in order to enable lifecycle management of NS instances and P4 table rules. Besides, it also performs some autonomous tasks such as the wildcard rules generation and the detection of new threats by using machine learning algorithms. Preliminary results point to the potential benefits of FrameRTP4 to be part of a 5G NS infrastructure. K E Y W O R D S5G, bloom filter, cybersecurity, network function virtualization, network slice, P4

show abstract

References

2017

Network Function Virtualization: Concepts and Applicability in 5G Networks

View full text Add to dashboard Cite

Flow-level state transition as a new switch primitive for SDN

Cited by 45 publications

References 1 publication

Snap

Snap

A real‐time attack defense framework for 5G network slicing

References

Contact Info

Product

Resources

About