Software defined networking architecture, traffic management, security, and placement: A survey

Czachórski

2021

Sensors

The increasing use of Software-Defined Networks brings the need for their performance analysis and detailed analytical and numerical models of them. The primary element of such research is a model of a SDN switch. This model should take into account non-Poisson traffic and general distributions of service times. Because of frequent changes in SDN flows, it should also analyze transient states of the queues. The method of diffusion approximation can meet these requirements. We present here a diffusion approximation of priority queues and apply it to build a more detailed model of SDN switch where packets returned by the central controller have higher priority than other packets.

Section: Introduction and An Overview Of Existing Resultsmentioning

confidence: 99%

Diffusion Model of Preemptive-Resume Priority Systems and Its Application to Performance Evaluation of SDN Switches

Czachórski

2021

Sensors

“…To determine the performance of the hybrid security method, we evaluated the scalability of the API. Throughput (S) and latency (L) are considered to measure API scalability [39][40][41][42]. Network throughput refers to the average data rate at which data or messages are successfully transmitted on a specific communication link.…”

Section: Methods For Security Implementation and Performance Evaluationmentioning

confidence: 99%

Applying Spring Security Framework with KeyCloak-Based OAuth2 to Protect Microservice Architecture APIs: A Case Study

Chatterjee

Prinz

2022

Sensors

In this study, we implemented an integrated security solution with Spring Security and Keycloak open-access platform (SSK) to secure data collection and exchange over microservice architecture application programming interfaces (APIs). The adopted solution implemented the following security features: open authorization, multi-factor authentication, identity brokering, and user management to safeguard microservice APIs. Then, we extended the security solution with a virtual private network (VPN), Blowfish and crypt (Bcrypt) hash, encryption method, API key, network firewall, and secure socket layer (SSL) to build up a digital infrastructure. To accomplish and describe the adopted SSK solution, we utilized a web engineering security method. As a case study, we designed and developed an electronic health coaching (eCoach) prototype system and hosted the system in the expanded digital secure infrastructure to collect and exchange personal health data over microservice APIs. We further described our adopted security solution’s procedural, technical, and practical considerations. We validated our SSK solution implementation by theoretical evaluation and experimental testing. We have compared the test outcomes with related studies qualitatively to determine the efficacy of the hybrid security solution in digital infrastructure. The SSK implementation and configuration in the eCoach prototype system has effectively secured its microservice APIs from an attack in all the considered scenarios with 100% accuracy. The developed digital infrastructure with SSK solution efficiently sustained a load of (≈)300 concurrent users. In addition, we have performed a qualitative comparison among the following security solutions: Spring-based security, Keycloak-based security, and their combination (our utilized hybrid security solution), where SSK showed a promising outcome.

“…Network energy management (NEM) is the task of determining the configuration and routing processes that could reduce a network's total power consumption while taking system configuration and traffic demand across network nodes into account [27]. Also, maintaining energy efficiency (EE) and resource allocation is critical, as it is one of the most important aspects of network design to alleviate environmental and economic constraints [35].…”

Section: Network Energy Managementmentioning

confidence: 99%

A Multi-Objective Routing Mechanism for Energy Management Optimization in SDN Multi-Control Architecture

et al. 2022

This paper proposed and implemented an energy-aware routing multi-level and mapping problem (EARMLP) algorithm to minimize the overall power consumption in Software-Defined Networking (SDN)-based core networks. To enforce network utilization toward green policies design for Data Centers (DCs), SDN leverages protocol configurations for routing available in the infrastructure. Therefore, the proposed mechanism aimed to design an optimal routing strategy that considers system configuration and traffic demand between the data and control planes in networks. The problem is then addressed from the perspective of the policy-based EARMLP technique, which is used to carefully determine the optimal assignment between controllers and their switches to optimize network energy savings. Hence, a controller placement problem (CPP) is established to select the optimal locations and number of controllers in core networks and create an optimal mapping and resource allocation between switches and controllers. Since the formulated energy-aware routing algorithm is designed as a multi-objective NP-hardness of the problem, a heuristic approach is developed to find optimal solutions for traffic routing between inter-controllers and controller-switch in terms of energy-aware consumption strategies. Consequently, the proposed optimal routing mechanism can rearrange traffic to meet provisioning criteria by utilizing the capacity-aware design. Remarkably, the energy saved in networks by our suggested method can approach up to 70% of the energy saved in SDN-based networks compared to other methods.