KeySFC: Traffic steering using strict source routing for dynamic and efficient network orchestration

Dominicini, Cristina K.; Vassoler, Gilmar L.; Valentim, Rodolfo V.; Villaça, Rodolfo da Silva; Ribeiro, Moisés R. N.; Martinello, Magnos; Zambon, Eduardo

doi:10.1016/j.comnet.2019.106975

Cited by 22 publications

(19 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…KeySet relies on a residual system to quickly calculate routing paths. A further elaboration of this concept, KeySFC [26], uses simple label-based SR in edge software switches to classify, encapsulate, forward, and decapsulate flows, along with core table-less switches that forward packets based on simple modulo operations over the labels. Finally, [25] proposes an algorithmic-based SR forwarding making use of a high-performance forwarding mechanism based on XOR operations.…”

Section: Related Workmentioning

confidence: 99%

Stateless Flow-Zone Switching Using Software-Defined Addressing

Gonzalez-Diaz

Marks²,

Rojas

et al. 2021

IEEE Access

View full text Add to dashboard Cite

The trend toward cloudification of communication networks and services, with user data and applications stored and processed in data centers, pushes the limits of current Data Center Networks (DCNs), requiring improved scalability, resiliency, and performance. Here we consider a DCN forwarding approach based on software-defined addressing (SDA), which embeds semantics in the Medium Access Control (MAC) address and thereby enables new forwarding processes. This work presents Flow-Zone Switching (FZS), a loop-free location-based source-routing solution that eliminates the need for forwarding tables by embedding routing instructions and flow identifiers directly in the flow-zone software-defined address. FZS speeds the forwarding process, increasing the throughput and reducing the latency of QoSsensitive flows while reducing the capital and operational costs of switching. This paper presents details of FZS and a performance evaluation within a complete DCN.INDEX TERMS flow-zone switching (FZS), data center network (DCN), software-defined addressing (SDA), Layer 2, MAC address, routing, forwarding, QoS, Clos, stateless

show abstract

Section: Related Workmentioning

confidence: 99%

Stateless Flow-Zone Switching Using Software-Defined Addressing

Gonzalez-Diaz

Marks²,

Rojas

et al. 2021

IEEE Access

View full text Add to dashboard Cite

show abstract

“…At this moment the encapsulation information is checked again to find the address of the next SF and this loop proceeds until the chain terminates, when the packet is decapsulated and delivered to destination. However, there are fundamental problems in this approach that compromise efficient network orchestration: (i) the commonly adopted underlying routing mechanisms cannot represent all the possible paths between two endpoints due to limited capacity of switch forwarding tables [Jyothi et al 2015]; (ii) as they are based on per-hop table lookup, the overhead to dynamically change a path is high, because it may involve modifications in all the nodes in the path [Dominicini et al 2020]; and (iii) traffic engineering decisions are made in a decoupled way considering placement, chaining, and routing [Quinn et al 2018]. On the other hand, emerging networking architectures and equipment are allowing for softwarization of DCNs and flexible dataplane programmability at line rate, both at the switch and the network interfaces, opening up unprecedented opportunities for the development of innovative networking solutions [McCauley et al 2019].…”

Section: Problem and Motivationmentioning

confidence: 99%

“…• Algorithmic forwarding can replace forwarding tables in the design of scalable SFC solutions. Differently from table-based methods, it defines the output port using a fixed logic based on information about the current and destination nodes [Dominicini et al 2020], and can reduce the number of forwarding states. • Strict source routing (SSR) allows to specify any underlay path between SFs and design agile, and expressive SFC solutions.…”

Section: Hypotheses Proposal and Contributionsmentioning

confidence: 99%

“…VirtPhy [Dominicini et al 2017] is an example of this approach that uses a high performance forwarding mechanism based on XOR operations, but it does not allow the full specification of underlay paths. SFC approaches that use RNS-based SSR are also examples of this approach, as proposed by CRT-Chain [Ren et al 2018] and KeySFC [Dominicini et al 2020]. In CRT-Chain, the authors proposed a scheme for SFC using one label for routing in the physical layer, and one for routing between the SFs in an overlay layer.…”

Section: Sfcmentioning

confidence: 99%

“…In CRT-Chain, the authors proposed a scheme for SFC using one label for routing in the physical layer, and one for routing between the SFs in an overlay layer. However, their simulated results focused only on reducing the labels length, their proposal has performance limitations, and they did not specify how to implement data and control planes [Dominicini et al 2020].…”

Section: Sfcmentioning

confidence: 99%

See 2 more Smart Citations

Programmable, Expressive, Scalable, and Agile Service Function Chaining for Edge Data Centers

Dominicini¹,

Martinello²,

Ribeiro³

2020

Anais Estendidos Do Simpósio Brasileiro De Redes De Computadores E Sistemas Distribuídos (SBRC Estendido 2020)

Self Cite

View full text Add to dashboard Cite

Edge computing transfers processing power from large remote data centers (DCs) to distributed DCs at the edge of the network. This shift requires the ability to provide network functions virtualization (NFV) solutions that can efficiently manage and combine a large number of dynamic services in a resource-constrained DC. However, the routing mechanisms of traditional data center networks are not adequate for the dynamic composition of these services, because they are complex, rigid, subject to large delays in the propagation of control information, and limited by the size of switches' routing tables. In addition, traditional service function chaining (SFC) solutions in the service overlay are often decoupled from routing decisions in the network underlay, and restrict path selection options by traffic engineering. In this way, the NFV orchestrator cannot explore the full capacity of the network to provide composite services. To tackle these issues, this thesis investigated a programmable, expressive, scalable, and agile SFC proposal that allows dynamic and efficient orchestration of the network infrastructure of edge DCs with commodity network equipment. The proposal exploits virtualization and programmability technologies of DC networks, server-centric DCs, fabric networks, and a source routing mechanism based on the residue number system (RNS). As proof-of-concept, we developed prototypes with production DC technologies, such as OpenFlow, OpenStack, Open vSwitch and P4. The results of functional and performance tests showed that the proposed SFC scheme provides mechanisms to the NFV orchestrator that allow traffic engineering to make optimized decisions in the selection of network paths. This thesis also paves the way for exploring RNS-based source routing properties in SFC schemes, which can provide features such as fast failure reaction and forwarding without packet rewrite. In a broader analysis, the student published 22 papers in journals and conferences, contributed to funding initiatives, worked on international and national research projects, supervised undergraduate students, and leaded initiatives with innovation impacts.

show abstract

Countering crossfire DDoS attacks through moving target defense in SDN networks using OpenFlow traffic modification

Hyder,

Fatima,

Khan

et al. 2023

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Software‐Defined Networking (SDN) is an evolving networking technique due to its flexibility and programmability. OpenFlow is the primary protocol behind SDN. Moving Target Defense (MTD) is an emerging security technique to counter attacks by dynamically changing the attack surface. SDN‐based MTD security solutions are gaining popularity due to the centralized control and monitoring capabilities of the SDN control plane. Crossfire is a type of indirect Distributed Denial of Service (DDoS) attack intending to impact the neighbors of the actual target. Crossfire DDoS attacks are gaining momentum in recent times. In this paper, a mechanism for the protection of crossfire DDoS attacks is proposed by exploiting OpenFlow‐based traffic modifications. We employed the Moving Target Defense scheme to redirect the traffic from the actual host to the shadow host to counter the crossfire DDoS attack and from the default domain name system port to another predefined port. Traffic redirection helps in diverting the attacker to shadow host and thus getting the incorrect network path and subsequently crossfire attack was unable to be executed properly. The proposed scheme utilized the ONOS cluster with Mininet. The results showed successful traffic redirection for countering the Crossfire DDoS attacks at a low computational cost.

show abstract

KeySFC: Traffic steering using strict source routing for dynamic and efficient network orchestration

Cited by 22 publications

References 18 publications

Stateless Flow-Zone Switching Using Software-Defined Addressing

Stateless Flow-Zone Switching Using Software-Defined Addressing

Programmable, Expressive, Scalable, and Agile Service Function Chaining for Edge Data Centers

Countering crossfire DDoS attacks through moving target defense in SDN networks using OpenFlow traffic modification

Contact Info

Product

Resources

About