Innovation in Campus Networks Through OpenFlow Technology

OpenFlow:
Enabling Innovation in Campus Networks
101064541     
葉幸宜
ACM
 
SIGCOMM
 
Computer Communication Review 2008
2013/5/30
 
Outlines
Introduction and Motivation
OpenFlow
Goal
Concepts
Network Architecture
Flow Table Structure
Controller
More Examples
Conclusion
2013/5/30
1/14
Introduction and Motivation
Experiments we’d like to do
Mobility Management
New Naming/Addressing Schemes
Network Access Control
If we design our own prototypes …
Closed network
No way to test the prototypes
2013/5/30
2/14
Introduction and Motivation
Why Internet is closed for innovations?
Commercial vendor won’t open software and
hardware development environment
Complexity to support
Market protection & Barrier-to-entry for competitors
Existing Solutions
Software only
Performance is not good
Hardware/Software
Fanout too small
2013/5/30
3/14
OpenFlow
Goal
Open Platform
For researchers to test new ideas at scale production
networks
Without requiring vendors to expose internal workings
Bring future Internet to legacy Internet
2013/5/30
4/14
OpenFlow’s Concept
 
2013/5/30
5/14
Ethernet Switch
 
OpenFlow Protocol (SSL)
Software 
 
Control Plane
Hardware 
 
Data Plane
Control Plane
Hardware 
 
Data Plane
OpenFlow
OpenFlow Controller
OpenFlow Network Architecture
2013/5/30
6/14
OpenFlow
Controller
OpenFlow-enable
Commercial Switch
Flow
Table
Secure
Channel
PC
OpenFlow
  Protocol
SSL
HW
SW
OpenFlow Switch specification
Normal
Software
Normal
Datapath
OpenFlow Flow Table Structure
 
2013/5/30
7/14
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Rule
Action
Statistics
1.
Forward packet to port(s)
2.
Encapsulate and forward to controller
3.
Drop packet
4.
Send to normal processing pipeline
Packet + byte counters
OpenFlow Switch
HW
SW
Normal
Software
Secure
Channel
Normal
Datapath
Flow
Table
OpenFlow Flow Table Structure
 
2013/5/30
7/14
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Rule
Action
Statistics
1.
Forward packet to port(s)
2.
Encapsulate and forward to controller
3.
Drop packet
4.
Send to normal processing pipeline
Packet + byte counters
OpenFlow Switch
HW
SW
Normal
Software
Secure
Channel
Normal
Datapath
Flow
Table
OpenFlow Flow Table Example
Ethernet Switching
IP Routing
Application Firewall
2013/5/30
8/14
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
     *          *       00:2D..      *            *            *           *            *            *           *       Port5
Action
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
   *            *           *           *            *            *           *            *            *           22      Drop
   *            *            *           *            *            *     140.114..    *            *           *       Port3
OpenFlow Controller
Centralized intelligential agency
Allow multiple researchers create their accounts
to control the flows independently
Add or remove flow-entries
NOX is an open-source OpenFlow Controller
2013/5/30
9/14
OpenFlow Switch
OpenFlow Switch
OpenFlow Switch
N
OX
 Controller
Secure Channel
SSL Connection
Controller discovery protocol
Encapsulate packets for controller
Send link/port state to controller
2013/5/30
10/14
OpenFlow Operation Example
2013/5/30
11/14
Controller
PC
Amy
Access
Control
Scheme!
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Rules
Rules
Rules
Rules
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Amy
Amy
Access
Control
Scheme!
11/14
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Amy
Amy
Access
Control
Scheme!
11/14
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Amy
Amy
Access
Control
Scheme!
11/14
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Amy
Amy
Access
Control
Scheme!
11/14
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Amy
Amy
Access
Control
Scheme!
11/14
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Amy
Amy
Access
Control
Scheme!
11/14
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
Bob
Amy
Access
Control
Scheme!
11/14
OpenFlow Operation Example
2013/5/30
Controller
PC
If Rule = x, send to port 4
If Rule = y, drop it
If Rule = ?, send to controller
Else, send to normal pipeline
Flow
Table
Flow
Table
Flow
Table
Flow
Table
O-Flow
Table
Bob
Amy
Access
Control
Scheme!
11/14
More Examples for OpenFlow
Network Management and Access Control
Ex: Phones can only use HTTP service
VLANs
Mobile wireless VoIP clients
Allowing seamless handover
Non-IP network
OpenFlow packets could be any kinds of formats
Processing packets rather than flows
2013/5/30
12/14
Switch
Port
MAC
src
MAC
dst
Eth
type
VLAN
ID
IP
Src
IP
Dst
IP
Prot
TCP
sport
TCP
dport
Action
OpenFlow Products
 
2013/5/30
23
NEC
HP
Pronto
13/14
Conclusion
OpenFlow
Standard way to control flow-tables in commercial
switches and routers
An open development environment for all
researchers
Real environment for Future Internet Technologies
2013/5/30
14/14
Slide Note
Embed
Share

OpenFlow technology pioneered by researchers from top universities facilitates innovation in campus networks by providing an open platform for testing new ideas on production networks. It addresses the limitations of existing solutions, enabling researchers to bring the future Internet to legacy systems. The concept involves a software-defined network architecture with a flow table structure that allows for improved network control and scalability.

  • Innovation
  • Campus Networks
  • OpenFlow Technology
  • Software-Defined Networking
  • Network Architecture

Uploaded on Oct 08, 2024 | 0 Views


Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.

E N D

Presentation Transcript


  1. OpenFlow: Enabling Innovation in Campus Networks ACM SIGCOMM Computer Communication Review 2008 Nick McKeown Tom Anderson Hari Balakrishnan Stanford University University of Washington MIT Guru Parulkar Larry Peterson Jennifer Rexford Stanford University Princeton University Princeton University Scott Shenker Jonathan Turner University of California, Berkeley Washington University in St. Louis 101064541 2013/5/30

  2. Outlines Introduction and Motivation OpenFlow Goal Concepts Network Architecture Flow Table Structure Controller More Examples Conclusion 2013/5/30 1/14

  3. Introduction and Motivation Experiments we d like to do Mobility Management New Naming/Addressing Schemes Network Access Control If we design our own prototypes Closed network No way to test the prototypes 2013/5/30 2/14

  4. Introduction and Motivation Why Internet is closed for innovations? Commercial vendor won t open software and hardware development environment Complexity to support Market protection & Barrier-to-entry for competitors Existing Solutions Software only Performance is not good Hardware/Software Fanout too small 2013/5/30 3/14

  5. OpenFlow Goal Open Platform For researchers to test new ideas at scale production networks Without requiring vendors to expose internal workings Bring future Internet to legacy Internet 2013/5/30 4/14

  6. OpenFlows Concept OpenFlow Controller OpenFlow Protocol (SSL) Ethernet Switch Software Control Plane Control Plane OpenFlow Hardware Hardware Data Plane Data Plane 2013/5/30 5/14

  7. OpenFlow Network Architecture OpenFlow Switch specification OpenFlow-enable Commercial Switch PC Normal Software Secure Channel OpenFlow Controller SW Normal Datapath Flow Table HW 2013/5/30 6/14

  8. OpenFlow Flow Table Structure OpenFlow Switch Normal Software Secure Channel SW Rule Action Statistics Normal Datapath Flow Table HW Packet + byte counters 1. Forward packet to port(s) 2. Encapsulate and forward to controller 3. Drop packet 4. Send to normal processing pipeline Switch Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP TCP sport TCP dport Prot 2013/5/30 7/14

  9. OpenFlow Flow Table Structure OpenFlow Switch Normal Software Secure Channel SW Rule Action Statistics Normal Datapath Flow Table HW Packet + byte counters 1. Forward packet to port(s) 2. Encapsulate and forward to controller 3. Drop packet 4. Send to normal processing pipeline Switch Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP TCP sport TCP dport Prot 2013/5/30 7/14

  10. OpenFlow Flow Table Example Ethernet Switching Switch Port src * * 00:2D.. * * * * * * * Port5 MAC MAC dst Eth type VLAN ID IP Src IP Dst IP TCP sport TCP dport Action Prot IP Routing Switch Port * MAC src * MAC dst * * * * Eth type VLAN ID IP Src IP Dst IP TCP sport TCP dport Action Prot 140.114.. * * * Port3 Application Firewall Switch Port src * * MAC MAC dst * * * * * * * 22 Drop Eth type VLAN ID IP Src IP Dst IP TCP sport TCP dport Action Prot 2013/5/30 8/14

  11. OpenFlow Controller Centralized intelligential agency Allow multiple researchers create their accounts to control the flows independently Add or remove flow-entries NOX is an open-source OpenFlow Controller NOX Controller OpenFlow Switch OpenFlow Switch OpenFlow Switch 2013/5/30 9/14

  12. Secure Channel SSL Connection Controller discovery protocol Encapsulate packets for controller Send link/port state to controller 2013/5/30 10/14

  13. OpenFlow Operation Example Amy Access Control Scheme! Rules Rules Rules Rules Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  14. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Amy Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  15. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Amy Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  16. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Amy Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  17. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Amy Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  18. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Amy Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  19. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Amy Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  20. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Bob Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  21. OpenFlow Operation Example Amy Access Control Scheme! If Rule = x, send to port 4 If Rule = y, drop it If Rule = ?, send to controller Else, send to normal pipeline Bob Flow Table O-Flow Table OpenFlow Switch PC Controller Flow Table OpenFlow Switch OpenFlow Switch Flow Table Flow Table OpenFlow Switch 2013/5/30 11/14

  22. More Examples for OpenFlow Switch Port MAC src MAC dst Eth type VLAN ID IP Src IP Dst IP TCP sport TCP dport Action Prot Network Management and Access Control Ex: Phones can only use HTTP service VLANs Mobile wireless VoIP clients Allowing seamless handover Non-IP network OpenFlow packets could be any kinds of formats Processing packets rather than flows 2013/5/30 12/14

  23. OpenFlow Products NEC HP Pronto 2013/5/30 23 13/14

  24. Conclusion OpenFlow Standard way to control flow-tables in commercial switches and routers An open development environment for all researchers Real environment for Future Internet Technologies 2013/5/30 14/14

Related


More Related Content

giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#giItT1WQy@!-/#