Search

OpenFlow is a widely adopted implementation of the Software-Defined Networking (SDN) architecture. Since conventional network monitoring systems are unable to cope with OpenFlow networks, researchers have developed various monitoring systems tailored for OpenFlow networks. However, these existing systems either rely on a specific controller framework or an API, both of which are not part of the OpenFlow specification, and thus limit their applicability. This article proposes a transparent and low-overhead monitoring system for OpenFlow networks, referred to as Opimon. Opimon monitors the network topology, switch statistics, and flow tables in an OpenFlow network and visualizes the result through a web interface in real-time. Opimon monitors a network by interposing a proxy between the controller and switches and intercepting every OpenFlow message exchanged. This design allows Opimon to be compatible with any OpenFlow switch or controller. We tested the functionalities of Opimon on a virtual network built using Mininet and a large-scale international OpenFlow testbed (PRAGMA-ENT). Furthermore, we measured the performance overhead incurred by Opimon and demonstrated that the overhead in terms of latency and throughput was less than 3% and 5%, respectively.

Network resource management is one of the key technologies needed to ensure that multiple applications in edge networks provide reliable and stable performance. Although throughput has previously been seen as the primary network performance metric, recent applications do not focus on throughput alone. Instead, Quality of Experience (QoE) is attracting significant attention as an indicator of network resource management performance because it allows a wide variety of applications to be compared within a single metric. In this study, we tackle QoE measurements for a video streaming service as a way to evaluate QoE-based network management. However, there are several problems related to measuring QoE. For example, in-network components are difficult to measure because QoE is normally measured at end-points, and several properties that are deeply related to application settings are required for those calculations. Additionally, the measurements set forth in the International Telecommunication Union’s ITU-T G.1071 standard require a certain duration, which is too long for network resource management evaluations. Therefore, this paper proposes a two-staged in-network QoE estimation method for video flows that can resolve these issues. In the first stage, we focus on producing a fast and rough QoE estimate to start forwarding the arriving flow onto an appropriate route as soon as possible. Next, the second stage is designed to produce precise QoE estimations based on careful long-duration measurements. In both stages, the proposed method uses a parameter estimation process that converts in-network information to end-point information for QoE calculations by following ITU-T G. 1071 and corrects measurement errors reducing QoE calculation errors to the greatest extent possible. Through experimental evaluations, we then demonstrate that the QoEs of all flows can be maximized by selecting appropriate routes based on the predicted QoE at the first stage, and that the accuracy o

This article investigates and discusses challenges in the telecommunication field from multiple perspectives, both academic and industry sides are catered for, surveying the main points of technological transformation toward edge-cloud continuum from the view of a telco operator to show the complete picture, including the evolution of cloud-native computing, Software-Defined Networking (SDN), and network automation platforms. The cultural shift in software development and management with DevOps enabled the development of significant technologies in the telecommunication world, including network equipment, application development, and system orchestration. The effect of the aforementioned cultural shift to the application area, especially from the IoT point of view, is investigated. The enormous change in service diversity and delivery capabilities to mass devices are also discussed. During the last two decades, desktop and server virtualization has played an active role in the Information Technology (IT) world. With the use of OpenFlow, SDN, and Network Functions Virtualization (NFV), the network revolution has got underway. The shift from monolithic application development and deployment to micro-services changed the whole picture. On the other hand, the data centers evolved in several generations where the control plane cannot cope with all the networks without an intelligent decision-making process, benefiting from the AI/ML techniques. AI also enables operators to forecast demand more accurately, anticipate network load, and adjust capacity and throughput automatically. Going one step further, zero-touch networking and service management (ZSM) is proposed to get high-level human intents to generate a low-level configuration for network elements with validated results, minimizing the ratio of faults caused by human intervention. Harmonizing all signs of progress in different communication technologies enabled the use of edge computing successfully. Low-powered (f, QC 20230309

Software-Defined Networking (SDN) is becoming a native networking model for next-generation networks. However, with its decoupled architecture, SDN is susceptible to reconnaissance through time inference attacks. Attackers can use probing-based measurements and gather information such as network type and flow table size. In this paper, an automated attacker tool called RAFA is proposed to infer network type (SDN or traditional) and flow rule timeout values (hard and idle). Moreover, a lightweight defense mechanism to randomize rule timeouts with respect to network status is described. A comprehensive simulation setup with different network conditions shows that the proposed methods achieve a superior success rate in diverse settings.

The current industry trend is to replace the use of custom components with standards-based Commercially available Off-The-Shelf (COTS) based hardware and protocols. Furthermore, the emergence of new industrial paradigms, such as Industry 4.0 and the Industrial Internet of Things, sets additional requirements regarding e.g. scale, transparency, agility, flexibility and efficiency. Therefore, in these domains, application layer protocols such as Message Queuing Telemetry Transport protocol (MQTT) are gaining popularity, in result of their simplicity, scalability, low resource-usage and decoupling between end nodes. However, such protocols were not designed for real-time applications, missing key features such as determinism and latency bounds. A recent work proposed extending MQTT with real-time services, taking advantage of Software Defined Networking (SDN) to manage the network resource. These extensions allow applications to specify real-time requirements that are then captured by a resource manager and used to reserve the necessary resources at the network layer. This paper shows that such MQTT extended architecture is analyzable from a worst-case timing perspective. We derive a system model that captures the real-time features and we present a response-time analysis to assess the schedulability of the real-time traffic. Finally, we validate the analysis with a set of experimental results.

This paper provides a detailed tutorial to develop a sandbox to emulate coexistence scenarios for road and railway services in terms of sharing telecommunication infrastructure using software-defined network (SDN) capabilities. This paper provides detailed instructions for the creation of network topology using Mininet–WiFi that can mimic real-life coexistence scenarios between railways and roads. The network elements are programmed and controlled by the ONOS SDN controller. The developed SDN application can differentiate the data traffic from railways and roads. Data traffic differentiation is carried out using a VLAN tagging mechanism. Further, it also provides comprehensive information about the different tools that are used to generate the data traffic that can emulate messaging, video streaming, and critical data transmission of railway and road domains. It also provides the steps to use SUMO to represent the selected coexistence scenarios in a graphical way

Producción Científica, The current wide deployment of PON (Passive Optical Network) technologies implies that there is a wide variety of PON devices causing incompatibility problems when configuring and controlling them simultaneously. Although these devices follow the same standards, each vendor can integrate its own implementations, so there are no fully universal PON devices. SDN (Software Defined Networking) is a technology for dealing with these problem, since equipment from different vendors can be controlled simultaneously, as SDN separates the control layer from the data layer. This paper proposes the development of an SDN agent based on the OpenFlow protocol to enable and facilitate the management of PONs, as well as being compatible with legacy PONs. In fact, this SDN agent allows to translate the OpenFlow commands sent by the SDN controller into the native language of PON devices. The proposal has been experimentally tested on a commercial GPON, successfully emulating emulating the configuration of real-time Internet services from a centralised SDN controller., Consejería de Educación de la Junta de Castilla y León y FEDER (VA231P20), Ministerio de Ciencia e Innovación y Agencia Estatal de Investigación (Proyecto PID2020-112675RB-C42 financiado por MCIN/AEI/10.13039/501100011033)

Networks with a consistent software stack reduce the complexity of monitoring, testing and automation, and reduce the mental burden on operators. However, when network software is bundled with the hardware, operators face being locked into a single vendor’s hardware, when they might otherwise be able to use cheaper or more suitable hardware from another vendor. Ostensibly, Software Defined Networking (SDN) gives operators the freedom to operate hardware from different vendors using the same software stack. However, producing SDN software that controls hardware from different vendors is hampered by differences in the packet processing pipelines of the ASICs each vendor uses. This thesis presents the design and evaluation of Shoehorn, a system for improving the portability of SDN control-plane software. Shoehorn finds mappings from virtual pipelines (defining the packet processing requirements of control-plane software), to physical pipelines (defining the packet processing pipeline of a physical device). Shoehorn improves on current approaches by ensuring that the mappings are suitable for real-time translation of controlchannel instructions, by ensuring a one-to-one mapping of virtual pipeline table entries to physical pipeline table entries. This also ensures that the mappings do not significantly increase the memory usage or power consumption of the pipelines. This thesis evaluates Shoehorn by mapping 25 virtual pipelines, based on real SDN control-plane software for managing diverse networks, to a variety of physical pipelines, based on real hardware SDN implementations. The evaluation finds that all but 6 virtual pipelines are supported by multiple physical pipelines, and that in every case where Shoehorn could not find a mapping, it was due to a virtual table that no table in the physical pipeline could support.

Producción Científica, The current wide deployment of PON (Passive Optical Network) technologies implies that there is a wide variety of PON devices causing incompatibility problems when configuring and controlling them simultaneously. Although these devices follow the same standards, each vendor can integrate its own implementations, so there are no fully universal PON devices. SDN (Software Defined Networking) is a technology for dealing with these problem, since equipment from different vendors can be controlled simultaneously, as SDN separates the control layer from the data layer. This paper proposes the development of an SDN agent based on the OpenFlow protocol to enable and facilitate the management of PONs, as well as being compatible with legacy PONs. In fact, this SDN agent allows to translate the OpenFlow commands sent by the SDN controller into the native language of PON devices. The proposal has been experimentally tested on a commercial GPON, successfully emulating emulating the configuration of real-time Internet services from a centralised SDN controller., Consejería de Educación de la Junta de Castilla y León y FEDER (VA231P20), Ministerio de Ciencia e Innovación y Agencia Estatal de Investigación (Proyecto PID2020-112675RB-C42 financiado por MCIN/AEI/10.13039/501100011033)

OpenFlow is a widely adopted implementation of the Software-Defined Networking (SDN) architecture. Since conventional network monitoring systems are unable to cope with OpenFlow networks, researchers have developed various monitoring systems tailored for OpenFlow networks. However, these existing systems either rely on a specific controller framework or an API, both of which are not part of the OpenFlow specification, and thus limit their applicability. This article proposes a transparent and low-overhead monitoring system for OpenFlow networks, referred to as Opimon. Opimon monitors the network topology, switch statistics, and flow tables in an OpenFlow network and visualizes the result through a web interface in real-time. Opimon monitors a network by interposing a proxy between the controller and switches and intercepting every OpenFlow message exchanged. This design allows Opimon to be compatible with any OpenFlow switch or controller. We tested the functionalities of Opimon on a virtual network built using Mininet and a large-scale international OpenFlow testbed (PRAGMA-ENT). Furthermore, we measured the performance overhead incurred by Opimon and demonstrated that the overhead in terms of latency and throughput was less than 3% and 5%, respectively.

OpenFlow is a widely adopted implementation of the Software-Defined Networking (SDN) architecture. Since conventional network monitoring systems are unable to cope with OpenFlow networks, researchers have developed various monitoring systems tailored for OpenFlow networks. However, these existing systems either rely on a specific controller framework or an API, both of which are not part of the OpenFlow specification, and thus limit their applicability. This article proposes a transparent and low-overhead monitoring system for OpenFlow networks, referred to as Opimon. Opimon monitors the network topology, switch statistics, and flow tables in an OpenFlow network and visualizes the result through a web interface in real-time. Opimon monitors a network by interposing a proxy between the controller and switches and intercepting every OpenFlow message exchanged. This design allows Opimon to be compatible with any OpenFlow switch or controller. We tested the functionalities of Opimon on a virtual network built using Mininet and a large-scale international OpenFlow testbed (PRAGMA-ENT). Furthermore, we measured the performance overhead incurred by Opimon and demonstrated that the overhead in terms of latency and throughput was less than 3% and 5%, respectively., journal article

El paradigma de las redes definidas por software (SDN) permite desarrollar sistemas que monitorizan y controlan el tráfico de una red de forma centralizada, facilitando la implementación de sistemas basados en el aprendizaje automático que detectan y mitigan intrusiones. Este trabajo presenta un sistema inteligente capaz de decidir qué contramedidas tomar para mitigar una intrusión en una red definida por software. La interacción entre el intruso y el defensor se plantea como un juego de Markov parcialmente observado y el modelo se entrena mediante el algoritmo de aprendizaje por refuerzo MuZero. Una vez entrenado, el modelo se integra con un controlador SDN para así implementar las contramedidas elegidas por el defensor en la red real. A la hora de evaluar el rendimiento del modelo, se han enfrentado entre ellos a atacantes y defensores con pasos de entrenamiento diferentes y se han registrado las puntuaciones obtenidas por cada uno de ellos, la duración de las partidas y el ratio de partidas ganadas por cada agente. Los resultados muestran que un defensor suficientemente entrenado es capaz de decidir las contramedidas que minimizan el impacto de la intrusión, aislando al atacante y evitando que comprometa máquinas clave de la red.

[Resumo] No presente proxecto realízase un estudo actualizado das redes definidas por software (SDN), detallando as características e vantaxes que presentan fronte ás redes convencionais á hora de xestionar a conectividade dos equipos en entornos cambiantes e escalables. Nesta liña, analízanse os diferentes compoñentes que conforman as SDN e o protocolo (OpenFlow) que os comunica. Ademáis, proporciónanse tres prototipos lixeiros para que un usuario novel poida iniciarse na práctica con este novo paradigma de forma sinxela, realizando unha comparativa a nivel técnico e funcional dos mesmos. Estes prototipos están baseados en tres tipos de virtualización distintas: Mininet (virtualización de procesos), Máquinas Virtuais (virtualización basada en hipervisor) e Docker (virtualización por compartición de kernel)., [Abstract] This project provides an updated study of software-defined networks (SDN), detailing the features and advantages they present over conventional networks when managing hosts connectivity in changing and scalable environments. In this line, the different components that make up the SDN and the protocol (OpenFlow) that communicates them are analyzed. In addition, three lightweight prototypes are provided so that a novice user can get started in the practice with this new paradigm in a simple way, making a comparison at technical and functional level of them. These prototypes are based on three different types of virtualization: process virtualization (Mininet), hypervisor-based virtualization (Virtual Machines) and kernel sharing virtualization (Docker).

[ES] En este proyecto se va a analizar la seguridad en las Redes Definidas por Software (SDN). Las redes definidas por software son la evolución de las redes convencionales, y la aparición de estas SDN redes ha aportado nuevas ventajas y funcionalidades en las diferentes áreas donde se pueden aplicar. Se realizará un estudio de su evolución, centrándose en OpenFlow, protocolo utilizado en SDN, así como los principales controladores y, sobre todo, se hará un especial hincapié en la seguridad. La seguridad es una cualidad fundamental y un aspecto muy importante a tener en cuenta en la actualidad, pues las redes SDN son prácticamente nuevas, y debido a la separación del plano de control y del plano de datos se introducen nuevas vulnerabilidades y tipos de ataques. En este trabajo se explicarán diversos ataques que se pueden producir y así como las soluciones que hay para poder mejorar la seguridad de una red SDN. Existen muchas herramientas que sirven para probar y analizar la seguridad de una SDN. En este proyecto se explicarán los aspectos a tener en cuenta sobre la seguridad y su utilidad este tipo de redes., [EN] This proyect will analyze security in Software Defined Networking (SDN). Software Defined Networks are the evolution of conventional networks and the emergence of these SDN networks has brought new advantages and functionalities in the differents areas where they can be applied. A study will be made of their evolution, focusing on OpenFlow, the protocol used in SDN, as well as the main controllers and, above all, there will be a special emphasis on security. Security is a fundamental quality and a very important aspect to take into account nowadays, since SDN are practically new and due to the separation of the control plane and the data plane, new vulnerabilities and types of attacks are introduced. This paper will explain various attacks that can occur and the solutions available to improve the security of an SDN network. There are many tools that can be used to test and analyze the security of an SDN. In this proyect we will explain aspects to bear in mind about security and its usefulness of this type of networks.

[ES] En este proyecto se va a analizar la seguridad en las Redes Definidas por Software (SDN). Las redes definidas por software son la evolución de las redes convencionales, y la aparición de estas SDN redes ha aportado nuevas ventajas y funcionalidades en las diferentes áreas donde se pueden aplicar. Se realizará un estudio de su evolución, centrándose en OpenFlow, protocolo utilizado en SDN, así como los principales controladores y, sobre todo, se hará un especial hincapié en la seguridad. La seguridad es una cualidad fundamental y un aspecto muy importante a tener en cuenta en la actualidad, pues las redes SDN son prácticamente nuevas, y debido a la separación del plano de control y del plano de datos se introducen nuevas vulnerabilidades y tipos de ataques. En este trabajo se explicarán diversos ataques que se pueden producir y así como las soluciones que hay para poder mejorar la seguridad de una red SDN. Existen muchas herramientas que sirven para probar y analizar la seguridad de una SDN. En este proyecto se explicarán los aspectos a tener en cuenta sobre la seguridad y su utilidad este tipo de redes., [EN] This proyect will analyze security in Software Defined Networking (SDN). Software Defined Networks are the evolution of conventional networks and the emergence of these SDN networks has brought new advantages and functionalities in the differents areas where they can be applied. A study will be made of their evolution, focusing on OpenFlow, the protocol used in SDN, as well as the main controllers and, above all, there will be a special emphasis on security. Security is a fundamental quality and a very important aspect to take into account nowadays, since SDN are practically new and due to the separation of the control plane and the data plane, new vulnerabilities and types of attacks are introduced. This paper will explain various attacks that can occur and the solutions available to improve the security of an SDN network. There are many tools that can be used to test and analyze the security of an SDN. In this proyect we will explain aspects to bear in mind about security and its usefulness of this type of networks.

[ES] A medida que la tecnología y el desarrollo de las redes de comunicación avanza, también lo hace la complejidad en cuanto a su gestión. Es por ello que las denominadas redes SDN (software-defined networking) suponen un gran avance, ya que la separación de las capas de control y de datos ha permitido mejorar la gestión y el rendimiento de las redes. El siguiente proyecto consistirá en el análisis de OpenDaylight, uno de los controladores de las SDN más importantes debido a su gran capacidad para la gestión y monitorización de dichas redes. Para ello, se hará uso de diversas herramientas tales como MiniNet, un software que nos ofrece un entorno virtual para la creación y prueba de diferentes escenarios dentro de las SDN, los cuales se llevarán al entorno de OpenDaylight para su posterior estudio y ver qué nos ofrece este controlador. También se utilizarán herramientas que permitirán la captura del tráfico OpenFlow generado, el cual también será sujeto de análisis., [EN] As the technology and development of communication networks advances, so does the complexity in terms of their management. That is why so-called SDN networks (software-defined networking) represent a breakthrough, since the separation of the control and data layers has allowed to improve the management and the performance of the networks. The next project will consist of the analysis of OpenDaylight, one of the most important SDN controllers due to its great capacity to manage and monitor these networks. For this, various tools such as MiniNet will be used, a software that offers us a virtual environment for the creation and testing of different scenarios within the SDN, which will be taken to the OpenDaylight environment for further study and to see what this controller offers us. Tools will also be used that will allow the capture of the generated OpenFlow traffic, which will also be analyzed.

[ES] Desde la aparición de la primera red de computación de datos, ARPANET, las tendencias en diseño de estas redes no han evolucionado tanto como sí han hecho otras tecnologías que podrían considerarse cuasi hermanas, como las metodologías del desarrollo de software. Fue por ello por lo que, sobre 2008, un grupo colaborativo entre la Universidad de Stanford y la Universidad de California, presentaron el protocolo OpenFlow. Este protocolo es el núcleo de la arquitectura de SDN (Software Defined Networking), la cual surgió como un nuevo paradigma del diseño de redes de computación y ha sido el foco de atención durante la última década. SDN consiste en dotar de programabilidad a las redes, separando el CP (Control Plane) del DP (Data Plane). El CP se responsabiliza de orquestar los elementos de la red, decidiendo los caminos y enrutamientos que se tienen que generar, asignar anchos de banda, etc. Por otro lado, el DP son todos esos enlaces físicos a los que se les comunica desde el CP cuál debería ser su función, y todos son organizados por el mismo Controlador que se encuentra en el CP. Este nuevo paradigma tiene ¿ y ha tenido ¿ como uno de sus objetivos el minimizar los costes de mantenimiento, pudiendo automatizar la mayoría de sus funcionalidades. Por otro lado, el utilizar esta nueva arquitectura para desarrollar redes, porta consigo nuevas vulnerabilidades que pueden ser aprovechadas por atacantes, además de que, al hablar sobre una tecnología que surgió hace varios años, debemos preguntarnos si SDN realmente ha mejorado las redes de computación tal como las conocemos. El presente proyecto pretende dar una respuesta a la pregunta anterior, analizando y estudiando la sinergia que ofrece la tecnología SDN junto con la viabilidad de aplicarle modelos de ML (Machine Learning) para dotar de una posible solución a un problema común en las redes de computación, como puede ser la seguridad informática. Una de las grandes ventajas que ofrece SDN sobre las redes tradicion, [EN] Since the appearance of the first data computing network, ARPANET, network design trends have not evolved as much as other technologies which have a lot in common, as software develop and design methodologies. Therefore in 2008, a research collaboration between University of Stanford and University of California, could develop the OpenFlow Protocol. This protocol is the core of the SDN (Software Defined Networking) architecture, which emerge as a new paradigm for computing network design and had an attention focus for the last decade. SDN consists in giving programmability to the networks, separating CP (Control Plane) from DP (Data Plane). This CP is the responsible to manage all the devices and elements in the network, and selects paths that must be generated, assigns new bandwidths, etc. On the other hand, the DP are all these physical devices and links that communicate with the CP, where its function is notified, and all are organized by the Controller that belongs to the CP. This new concept has ¿ and always had ¿ as one of its objectives to minimize the maintenance costs, automatizing the most of its functionalities. However, using this new architecture to develop networks, has new vulnerabilities that can be exploited by attackers, and if we write about a technology that arise some years ago, we must ask ourselves if SDN has improved computing networks as we know them. The current project aims to provide an answer to the previous question, analysing and studying the synergy that SDN offers with the grant of taking some ML (Machine Learning) models and, in that way, giving a possible solution for a common problem in networks, as is cybersecurity. One of the biggest advantages of SDN is the great toolbox that offers to the network engineer to solve specific problems, and ML is one of those powerful tools that nowadays is being applied in lot of environments of IT field. For our case, we have developed simulations that feed a data frame, which is used to tr

[ES] A medida que la tecnología y el desarrollo de las redes de comunicación avanza, también lo hace la complejidad en cuanto a su gestión. Es por ello que las denominadas redes SDN (software-defined networking) suponen un gran avance, ya que la separación de las capas de control y de datos ha permitido mejorar la gestión y el rendimiento de las redes. El siguiente proyecto consistirá en el análisis de OpenDaylight, uno de los controladores de las SDN más importantes debido a su gran capacidad para la gestión y monitorización de dichas redes. Para ello, se hará uso de diversas herramientas tales como MiniNet, un software que nos ofrece un entorno virtual para la creación y prueba de diferentes escenarios dentro de las SDN, los cuales se llevarán al entorno de OpenDaylight para su posterior estudio y ver qué nos ofrece este controlador. También se utilizarán herramientas que permitirán la captura del tráfico OpenFlow generado, el cual también será sujeto de análisis., [EN] As the technology and development of communication networks advances, so does the complexity in terms of their management. That is why so-called SDN networks (software-defined networking) represent a breakthrough, since the separation of the control and data layers has allowed to improve the management and the performance of the networks. The next project will consist of the analysis of OpenDaylight, one of the most important SDN controllers due to its great capacity to manage and monitor these networks. For this, various tools such as MiniNet will be used, a software that offers us a virtual environment for the creation and testing of different scenarios within the SDN, which will be taken to the OpenDaylight environment for further study and to see what this controller offers us. Tools will also be used that will allow the capture of the generated OpenFlow traffic, which will also be analyzed.

[ES] Desde la aparición de la primera red de computación de datos, ARPANET, las tendencias en diseño de estas redes no han evolucionado tanto como sí han hecho otras tecnologías que podrían considerarse cuasi hermanas, como las metodologías del desarrollo de software. Fue por ello por lo que, sobre 2008, un grupo colaborativo entre la Universidad de Stanford y la Universidad de California, presentaron el protocolo OpenFlow. Este protocolo es el núcleo de la arquitectura de SDN (Software Defined Networking), la cual surgió como un nuevo paradigma del diseño de redes de computación y ha sido el foco de atención durante la última década. SDN consiste en dotar de programabilidad a las redes, separando el CP (Control Plane) del DP (Data Plane). El CP se responsabiliza de orquestar los elementos de la red, decidiendo los caminos y enrutamientos que se tienen que generar, asignar anchos de banda, etc. Por otro lado, el DP son todos esos enlaces físicos a los que se les comunica desde el CP cuál debería ser su función, y todos son organizados por el mismo Controlador que se encuentra en el CP. Este nuevo paradigma tiene ¿ y ha tenido ¿ como uno de sus objetivos el minimizar los costes de mantenimiento, pudiendo automatizar la mayoría de sus funcionalidades. Por otro lado, el utilizar esta nueva arquitectura para desarrollar redes, porta consigo nuevas vulnerabilidades que pueden ser aprovechadas por atacantes, además de que, al hablar sobre una tecnología que surgió hace varios años, debemos preguntarnos si SDN realmente ha mejorado las redes de computación tal como las conocemos. El presente proyecto pretende dar una respuesta a la pregunta anterior, analizando y estudiando la sinergia que ofrece la tecnología SDN junto con la viabilidad de aplicarle modelos de ML (Machine Learning) para dotar de una posible solución a un problema común en las redes de computación, como puede ser la seguridad informática. Una de las grandes ventajas que ofrece SDN sobre las redes tradicion, [EN] Since the appearance of the first data computing network, ARPANET, network design trends have not evolved as much as other technologies which have a lot in common, as software develop and design methodologies. Therefore in 2008, a research collaboration between University of Stanford and University of California, could develop the OpenFlow Protocol. This protocol is the core of the SDN (Software Defined Networking) architecture, which emerge as a new paradigm for computing network design and had an attention focus for the last decade. SDN consists in giving programmability to the networks, separating CP (Control Plane) from DP (Data Plane). This CP is the responsible to manage all the devices and elements in the network, and selects paths that must be generated, assigns new bandwidths, etc. On the other hand, the DP are all these physical devices and links that communicate with the CP, where its function is notified, and all are organized by the Controller that belongs to the CP. This new concept has ¿ and always had ¿ as one of its objectives to minimize the maintenance costs, automatizing the most of its functionalities. However, using this new architecture to develop networks, has new vulnerabilities that can be exploited by attackers, and if we write about a technology that arise some years ago, we must ask ourselves if SDN has improved computing networks as we know them. The current project aims to provide an answer to the previous question, analysing and studying the synergy that SDN offers with the grant of taking some ML (Machine Learning) models and, in that way, giving a possible solution for a common problem in networks, as is cybersecurity. One of the biggest advantages of SDN is the great toolbox that offers to the network engineer to solve specific problems, and ML is one of those powerful tools that nowadays is being applied in lot of environments of IT field. For our case, we have developed simulations that feed a data frame, which is used to tr

The Software Defined Networking (SDN) paradigm enables the development of systems that centrally monitor and manage network traffic, providing support for the deployment of machine learning-based systems that automatically detect and mitigate network intrusions. This paper presents an intelligent system capable of deciding which countermeasures to take in order to mitigate an intrusion in a software defined network. The interaction between the intruder and the defender is posed as a Markov game and MuZero algorithm is used to train the model through self-play. Once trained, the model is integrated with an SDN controller, so that it is able to apply the countermeasures of the game in a real network. To measure the performance of the model, attackers and defenders with different training steps have been confronted and the scores obtained by each of them, the duration of the games and the ratio of games won have been collected. The results show that the defender is capable of deciding which measures minimize the impact of the intrusion, isolating the attacker and preventing it from compromising key machines in the network.

[ES] En este proyecto se va a analizar la seguridad en las Redes Definidas por Software (SDN). Las redes definidas por software son la evolución de las redes convencionales, y la aparición de estas SDN redes ha aportado nuevas ventajas y funcionalidades en las diferentes áreas donde se pueden aplicar. Se realizará un estudio de su evolución, centrándose en OpenFlow, protocolo utilizado en SDN, así como los principales controladores y, sobre todo, se hará un especial hincapié en la seguridad. La seguridad es una cualidad fundamental y un aspecto muy importante a tener en cuenta en la actualidad, pues las redes SDN son prácticamente nuevas, y debido a la separación del plano de control y del plano de datos se introducen nuevas vulnerabilidades y tipos de ataques. En este trabajo se explicarán diversos ataques que se pueden producir y así como las soluciones que hay para poder mejorar la seguridad de una red SDN. Existen muchas herramientas que sirven para probar y analizar la seguridad de una SDN. En este proyecto se explicarán los aspectos a tener en cuenta sobre la seguridad y su utilidad este tipo de redes., [EN] This proyect will analyze security in Software Defined Networking (SDN). Software Defined Networks are the evolution of conventional networks and the emergence of these SDN networks has brought new advantages and functionalities in the differents areas where they can be applied. A study will be made of their evolution, focusing on OpenFlow, the protocol used in SDN, as well as the main controllers and, above all, there will be a special emphasis on security. Security is a fundamental quality and a very important aspect to take into account nowadays, since SDN are practically new and due to the separation of the control plane and the data plane, new vulnerabilities and types of attacks are introduced. This paper will explain various attacks that can occur and the solutions available to improve the security of an SDN network. There are many tools that can be used to test and analyze the security of an SDN. In this proyect we will explain aspects to bear in mind about security and its usefulness of this type of networks.

[ES] Desde la aparición de la primera red de computación de datos, ARPANET, las tendencias en diseño de estas redes no han evolucionado tanto como sí han hecho otras tecnologías que podrían considerarse cuasi hermanas, como las metodologías del desarrollo de software. Fue por ello por lo que, sobre 2008, un grupo colaborativo entre la Universidad de Stanford y la Universidad de California, presentaron el protocolo OpenFlow. Este protocolo es el núcleo de la arquitectura de SDN (Software Defined Networking), la cual surgió como un nuevo paradigma del diseño de redes de computación y ha sido el foco de atención durante la última década. SDN consiste en dotar de programabilidad a las redes, separando el CP (Control Plane) del DP (Data Plane). El CP se responsabiliza de orquestar los elementos de la red, decidiendo los caminos y enrutamientos que se tienen que generar, asignar anchos de banda, etc. Por otro lado, el DP son todos esos enlaces físicos a los que se les comunica desde el CP cuál debería ser su función, y todos son organizados por el mismo Controlador que se encuentra en el CP. Este nuevo paradigma tiene ¿ y ha tenido ¿ como uno de sus objetivos el minimizar los costes de mantenimiento, pudiendo automatizar la mayoría de sus funcionalidades. Por otro lado, el utilizar esta nueva arquitectura para desarrollar redes, porta consigo nuevas vulnerabilidades que pueden ser aprovechadas por atacantes, además de que, al hablar sobre una tecnología que surgió hace varios años, debemos preguntarnos si SDN realmente ha mejorado las redes de computación tal como las conocemos. El presente proyecto pretende dar una respuesta a la pregunta anterior, analizando y estudiando la sinergia que ofrece la tecnología SDN junto con la viabilidad de aplicarle modelos de ML (Machine Learning) para dotar de una posible solución a un problema común en las redes de computación, como puede ser la seguridad informática. Una de las grandes ventajas que ofrece SDN sobre las redes tradicion, [EN] Since the appearance of the first data computing network, ARPANET, network design trends have not evolved as much as other technologies which have a lot in common, as software develop and design methodologies. Therefore in 2008, a research collaboration between University of Stanford and University of California, could develop the OpenFlow Protocol. This protocol is the core of the SDN (Software Defined Networking) architecture, which emerge as a new paradigm for computing network design and had an attention focus for the last decade. SDN consists in giving programmability to the networks, separating CP (Control Plane) from DP (Data Plane). This CP is the responsible to manage all the devices and elements in the network, and selects paths that must be generated, assigns new bandwidths, etc. On the other hand, the DP are all these physical devices and links that communicate with the CP, where its function is notified, and all are organized by the Controller that belongs to the CP. This new concept has ¿ and always had ¿ as one of its objectives to minimize the maintenance costs, automatizing the most of its functionalities. However, using this new architecture to develop networks, has new vulnerabilities that can be exploited by attackers, and if we write about a technology that arise some years ago, we must ask ourselves if SDN has improved computing networks as we know them. The current project aims to provide an answer to the previous question, analysing and studying the synergy that SDN offers with the grant of taking some ML (Machine Learning) models and, in that way, giving a possible solution for a common problem in networks, as is cybersecurity. One of the biggest advantages of SDN is the great toolbox that offers to the network engineer to solve specific problems, and ML is one of those powerful tools that nowadays is being applied in lot of environments of IT field. For our case, we have developed simulations that feed a data frame, which is used to tr

[ES] A medida que la tecnología y el desarrollo de las redes de comunicación avanza, también lo hace la complejidad en cuanto a su gestión. Es por ello que las denominadas redes SDN (software-defined networking) suponen un gran avance, ya que la separación de las capas de control y de datos ha permitido mejorar la gestión y el rendimiento de las redes. El siguiente proyecto consistirá en el análisis de OpenDaylight, uno de los controladores de las SDN más importantes debido a su gran capacidad para la gestión y monitorización de dichas redes. Para ello, se hará uso de diversas herramientas tales como MiniNet, un software que nos ofrece un entorno virtual para la creación y prueba de diferentes escenarios dentro de las SDN, los cuales se llevarán al entorno de OpenDaylight para su posterior estudio y ver qué nos ofrece este controlador. También se utilizarán herramientas que permitirán la captura del tráfico OpenFlow generado, el cual también será sujeto de análisis., [EN] As the technology and development of communication networks advances, so does the complexity in terms of their management. That is why so-called SDN networks (software-defined networking) represent a breakthrough, since the separation of the control and data layers has allowed to improve the management and the performance of the networks. The next project will consist of the analysis of OpenDaylight, one of the most important SDN controllers due to its great capacity to manage and monitor these networks. For this, various tools such as MiniNet will be used, a software that offers us a virtual environment for the creation and testing of different scenarios within the SDN, which will be taken to the OpenDaylight environment for further study and to see what this controller offers us. Tools will also be used that will allow the capture of the generated OpenFlow traffic, which will also be analyzed.

The Software Defined Networking (SDN) paradigm enables the development of systems that centrally monitor and manage network traffic, providing support for the deployment of machine learning-based systems that automatically detect and mitigate network intrusions. This paper presents an intelligent system capable of deciding which countermeasures to take in order to mitigate an intrusion in a software defined network. The interaction between the intruder and the defender is posed as a Markov game and MuZero algorithm is used to train the model through self-play. Once trained, the model is integrated with an SDN controller, so that it is able to apply the countermeasures of the game in a real network. To measure the performance of the model, attackers and defenders with different training steps have been confronted and the scores obtained by each of them, the duration of the games and the ratio of games won have been collected. The results show that the defender is capable of deciding which measures minimize the impact of the intrusion, isolating the attacker and preventing it from compromising key machines in the network.

This study aims to examine the effects of transforming a monolithic server system into a microservice architecture, focusing on the increased latency introduced by using a microservice orchestrator. The microservice orchestrator was implemented using an OpenFlow switch controlled by the Beacon and Ryu OpenFlow controllers. These controllers, along with the round robin, random assign and a server-aware load balancing algorithm, were all compared in order to find the combination resulting in the lowest latency and highest achieved server balance in varying network environments. We show that the OpenFlow switch enforces a client-aware load balancing policy and that only the initial request is handled by the controller, effectively reducing the importance of choosing the optimal OpenFlow controller. In addition, the round robin load balancer was preferred when dealing with homogeneous requests, and a server-aware load balancer was required for heterogeneous requests. For most requests, the system would only slow down by a few microseconds using the proposed architecture. However, for 0.001\% of all requests, the slowdown was much more significant, with each of those requests being at least 100 times slower than when using a monolithic server architecture.

Software-Defined Networking is referred to as the next big thing in the field of networking. Legacy networks contain various components such as switches, routers, etc. with a variety of complex protocols. A network administrator is responsible for configuring all these various components. Apart from complex network management, network security is also a persistent issue in the field of networking. SDN promises simplicity in network management while also dramatically improving the security of networks. This paper gives an analysis of the current trends in in SDN as well as Security challenges with SDN. A bibliometric review on SDN has also been outlined in this paper. We have also mentioned some of the challenges posed by the SDN architecture and also some of the solutions to combat them

Network resource management is one of the key technologies needed to ensure that multiple applications in edge networks provide reliable and stable performance. Although throughput has previously been seen as the primary network performance metric, recent applications do not focus on throughput alone. Instead, Quality of Experience (QoE) is attracting significant attention as an indicator of network resource management performance because it allows a wide variety of applications to be compared within a single metric. In this study, we tackle QoE measurements for a video streaming service as a way to evaluate QoE-based network management. However, there are several problems related to measuring QoE. For example, in-network components are difficult to measure because QoE is normally measured at end-points, and several properties that are deeply related to application settings are required for those calculations. Additionally, the measurements set forth in the International Telecommunication Union’s ITU-T G.1071 standard require a certain duration, which is too long for network resource management evaluations. Therefore, this paper proposes a two-staged in-network QoE estimation method for video flows that can resolve these issues. In the first stage, we focus on producing a fast and rough QoE estimate to start forwarding the arriving flow onto an appropriate route as soon as possible. Next, the second stage is designed to produce precise QoE estimations based on careful long-duration measurements. In both stages, the proposed method uses a parameter estimation process that converts in-network information to end-point information for QoE calculations by following ITU-T G. 1071 and corrects measurement errors reducing QoE calculation errors to the greatest extent possible. Through experimental evaluations, we then demonstrate that the QoEs of all flows can be maximized by selecting appropriate routes based on the predicted QoE at the first stage, and that the accuracy o

One-to-many transfers in a fast and efficient manner are essential to meet the growing need for duplicating, migrating, or sharing bulk data among servers in a datacenter and across geographically distributed datacenters. Some existing works utilize multiple multicast trees for a one-to-many transfer request to increase network link utilization and its transfer throughput. However, since those schemes do not fully utilize the max-flow value of transmission from a single sender to each recipient, there is room for each recipient to retrieve data more quickly. Therefore, assuming fully-controlled networks with full-duplex links, we pose a problem to find a set of multicast flows with an allocation of block-wise transmissions by which each of multiple recipients with diverse max-flow values from the sender can utilize its own max-flow value. Based on that, assuming a sender-side coding capability on file blocks, we design a schedule of block transmissions over multiple phases by which each recipient can achieve a lower-bound of its file retrieval completion time, i.e., the file size divided by its own max-flow value. This paper presents the coded Multipath Multicast (Coded-MPMC) for one-to-many transfers with heuristic procedures to find a desired set of multicast flows on which block transmissions are scheduled. Through extensive simulations on large-scale real-world network topologies and different types of randomly-generated synthetic topologies, the proposed method is shown to design a desired schedule efficiently. A preliminary implementation on OpenFlow is also reported to show the fundamental feasibility of Coded-MPMC.

Edge Cloud (EC) is poised to brace massive machine type communication (mMTC) for 5G and IoT by providing compute and network resources at the edge. Yet, the EC being regionally domestic with a smaller scale, faces the challenges of bandwidth and computational throughput. Resource management techniques are considered necessary to achieve efficient resource allocation objectives. Software Defined Network (SDN) enabled EC architecture is emerging as a potential solution that enables dynamic bandwidth allocation and task scheduling for latency sensitive and diverse mobile applications in the EC environment. This study proposes a novel Heuristic Reinforcement Learning (HRL) based flow-level dynamic bandwidth allocation framework and validates it through end-to-end implementation using OpenFlow meter feature. OpenFlow meter provides granular control and allows demand-based flow management to meet the diverse QoS requirements germane to IoT traffics. The proposed framework is then evaluated by emulating an EC scenario based on real NSF COSMOS testbed topology at The City College of New York. A specific heuristic reinforcement learning with linear-annealing technique and a pruning principle are proposed and compared with the baseline approach. Our proposed strategy performs consistently in both Mininet and hardware OpenFlow switches based environments. The performance evaluation considers key metrics associated with real-time applications: throughput, end-to-end delay, packet loss rate, and overall system cost for bandwidth allocation. Furthermore, our proposed linear annealing method achieves faster convergence rate and better reward in terms of system cost, and the proposed pruning principle remarkably reduces control traffic in the network., 8th International Conference on Future Internet of Things and Cloud (FiCloud 2021), 23-25 August, 2021, Virtual (Online)

Network resource management is one of the key technologies needed to ensure that multiple applications in edge networks provide reliable and stable performance. Although throughput has previously been seen as the primary network performance metric, recent applications do not focus on throughput alone. Instead, Quality of Experience (QoE) is attracting significant attention as an indicator of network resource management performance because it allows a wide variety of applications to be compared within a single metric. In this study, we tackle QoE measurements for a video streaming service as a way to evaluate QoE-based network management. However, there are several problems related to measuring QoE. For example, in-network components are difficult to measure because QoE is normally measured at end-points, and several properties that are deeply related to application settings are required for those calculations. Additionally, the measurements set forth in the International Telecommunication Union’s ITU-T G.1071 standard require a certain duration, which is too long for network resource management evaluations. Therefore, this paper proposes a two-staged in-network QoE estimation method for video flows that can resolve these issues. In the first stage, we focus on producing a fast and rough QoE estimate to start forwarding the arriving flow onto an appropriate route as soon as possible. Next, the second stage is designed to produce precise QoE estimations based on careful long-duration measurements. In both stages, the proposed method uses a parameter estimation process that converts in-network information to end-point information for QoE calculations by following ITU-T G. 1071 and corrects measurement errors reducing QoE calculation errors to the greatest extent possible. Through experimental evaluations, we then demonstrate that the QoEs of all flows can be maximized by selecting appropriate routes based on the predicted QoE at the first stage, and that the accuracy o

Network resource management is one of the key technologies needed to ensure that multiple applications in edge networks provide reliable and stable performance. Although throughput has previously been seen as the primary network performance metric, recent applications do not focus on throughput alone. Instead, Quality of Experience (QoE) is attracting significant attention as an indicator of network resource management performance because it allows a wide variety of applications to be compared within a single metric. In this study, we tackle QoE measurements for a video streaming service as a way to evaluate QoE-based network management. However, there are several problems related to measuring QoE. For example, in-network components are difficult to measure because QoE is normally measured at end-points, and several properties that are deeply related to application settings are required for those calculations. Additionally, the measurements set forth in the International Telecommunication Union’s ITU-T G.1071 standard require a certain duration, which is too long for network resource management evaluations. Therefore, this paper proposes a two-staged in-network QoE estimation method for video flows that can resolve these issues. In the first stage, we focus on producing a fast and rough QoE estimate to start forwarding the arriving flow onto an appropriate route as soon as possible. Next, the second stage is designed to produce precise QoE estimations based on careful long-duration measurements. In both stages, the proposed method uses a parameter estimation process that converts in-network information to end-point information for QoE calculations by following ITU-T G. 1071 and corrects measurement errors reducing QoE calculation errors to the greatest extent possible. Through experimental evaluations, we then demonstrate that the QoEs of all flows can be maximized by selecting appropriate routes based on the predicted QoE at the first stage, and that the accuracy o, journal article

The Software Defined Networking (SDN) paradigm enables the development of systems that centrally monitor and manage network traffic, providing support for the deployment of machine learning-based systems that automatically detect and mitigate network intrusions. This paper presents an intelligent system capable of deciding which countermeasures to take in order to mitigate an intrusion in a software defined network. The interaction between the intruder and the defender is posed as a Markov game and MuZero algorithm is used to train the model through self-play. Once trained, the model is integrated with an SDN controller, so that it is able to apply the countermeasures of the game in a real network. To measure the performance of the model, attackers and defenders with different training steps have been confronted and the scores obtained by each of them, the duration of the games and the ratio of games won have been collected. The results show that the defender is capable of deciding which measures minimize the impact of the intrusion, isolating the attacker and preventing it from compromising key machines in the network.

This study aims to examine the effects of transforming a monolithic server system into a microservice architecture, focusing on the increased latency introduced by using a microservice orchestrator. The microservice orchestrator was implemented using an OpenFlow switch controlled by the Beacon and Ryu OpenFlow controllers. These controllers, along with the round robin, random assign and a server-aware load balancing algorithm, were all compared in order to find the combination resulting in the lowest latency and highest achieved server balance in varying network environments. We show that the OpenFlow switch enforces a client-aware load balancing policy and that only the initial request is handled by the controller, effectively reducing the importance of choosing the optimal OpenFlow controller. In addition, the round robin load balancer was preferred when dealing with homogeneous requests, and a server-aware load balancer was required for heterogeneous requests. For most requests, the system would only slow down by a few microseconds using the proposed architecture. However, for 0.001\% of all requests, the slowdown was much more significant, with each of those requests being at least 100 times slower than when using a monolithic server architecture.

El gran desarrollo y despliegue actual de las redes de fibra óptica en el segmento de acceso a través de tecnologías pasivas, redes PON (Passive Optical Networks), hace que exista una gran variedad de fabricantes de los dispositivos ópticos que componen este tipo de redes y que surjan problemas de incompatibilidad entre estos dispositivos a la hora de controlar su gestión y configuración de forma simultánea. Aunque estos dispositivos siguen los mismos estándares, cada fabricante añade sus propias implementaciones, haciendo que no haya dispositivos universales. Sin embargo, la tecnologías SDN (Software Defined Networking) resultan prometedoras en el campo de las redes ópticas de siguiente generación y en particular en las redes PON puesto que a través de protocolos comunes SDN se podrían gestionar de forma automática y simultánea redes de diferentes fabricantes, pues SDN propone la separación de la capa de control de la capa de datos. En este trabajo se tratará de analizar esta problemática en estas redes y de los protocolos y software utilizados en ellas para diseñar y elaborar un agente que permita salvar esas diferencias y permita la gestión y configuración SDN en este tipo de redes y que pueda ser compatible con cualquier red PON comercial., The great development and current deployment of fiber optic networks in the access segment through passive technologies, PON networks (Passive Optical Networks), means that there is a wide variety of manufacturers of the optical devices that form this type of network and also the incompatibility problems between these devices arise when controlling their management and configuration simultaneously. Although these devices follow the same standards, each manufacturer adds their own implementations, making there no universal devices. However, SDN (Software Defined Networking) technologies are promising in the field of next generation optical networks and in particular in PON networks since through common SDN protocols networks from different manufacturers could be managed automatically and simultaneously, since SDN proposes the separation of the control layer from the data layer. In this Final Project, we will try to analyze this problem in these networks and the protocols and software used in them to design and develop an agent, compatible with any PON network, which can solve these differences and allow SDN management and configuration in this type of network., Grado en Ingeniería Informática

[ES] En este trabajo, se propone la implementación de un sistema de videovigilancia IP basado en SDN cuyo encaminamiento de los paquetes se verá condicionado por el volumen del tráfico y el estado de la red. Al no disponer de los equipos necesarios para una prueba real, se realizará una simulación de la infraestructura de red mediante el simulador GNS3. En esta simulación se plantearán distintos escenarios en los que el encaminamiento de los distintos flujos de tráfico variará en función del estado de la red. Para así demostrar el dinamismo a la hora de implementar políticas de priorización y calidad del servicio mediante redes SDN. El objetivo de este proyecto consiste en priorizar el tráfico de videovigilancia IP sobre el resto, para conseguir las máximas prestaciones, de este servicio en particular, y del resto de la red en general., [EN] This work proposes an IP-surveillance system implementation based on Software-Defined Networking (SDN) technology, where packet switching depends on network traffic. Due to the fact that the equipment required for a real test is not available, a simulation of the network infrastructure will be carried out using the GNS3 simulator. In this simulation, several scenarios will be considered, where different traffic flows will vary depending on the network status, with the aim to test the flexibility given by SDN technology to implement prioritization and quality of service policies. The aim of this project is to prioritise IP-surveillance traffic over the rest, in order to achieve maximum performance for this particular service and for the rest of the network.

[ES] En este trabajo, se propone la implementación de un sistema de videovigilancia IP basado en SDN cuyo encaminamiento de los paquetes se verá condicionado por el volumen del tráfico y el estado de la red. Al no disponer de los equipos necesarios para una prueba real, se realizará una simulación de la infraestructura de red mediante el simulador GNS3. En esta simulación se plantearán distintos escenarios en los que el encaminamiento de los distintos flujos de tráfico variará en función del estado de la red. Para así demostrar el dinamismo a la hora de implementar políticas de priorización y calidad del servicio mediante redes SDN. El objetivo de este proyecto consiste en priorizar el tráfico de videovigilancia IP sobre el resto, para conseguir las máximas prestaciones, de este servicio en particular, y del resto de la red en general., [EN] This work proposes an IP-surveillance system implementation based on Software-Defined Networking (SDN) technology, where packet switching depends on network traffic. Due to the fact that the equipment required for a real test is not available, a simulation of the network infrastructure will be carried out using the GNS3 simulator. In this simulation, several scenarios will be considered, where different traffic flows will vary depending on the network status, with the aim to test the flexibility given by SDN technology to implement prioritization and quality of service policies. The aim of this project is to prioritise IP-surveillance traffic over the rest, in order to achieve maximum performance for this particular service and for the rest of the network.

[ES] En este trabajo, se propone la implementación de un sistema de videovigilancia IP basado en SDN cuyo encaminamiento de los paquetes se verá condicionado por el volumen del tráfico y el estado de la red. Al no disponer de los equipos necesarios para una prueba real, se realizará una simulación de la infraestructura de red mediante el simulador GNS3. En esta simulación se plantearán distintos escenarios en los que el encaminamiento de los distintos flujos de tráfico variará en función del estado de la red. Para así demostrar el dinamismo a la hora de implementar políticas de priorización y calidad del servicio mediante redes SDN. El objetivo de este proyecto consiste en priorizar el tráfico de videovigilancia IP sobre el resto, para conseguir las máximas prestaciones, de este servicio en particular, y del resto de la red en general., [EN] This work proposes an IP-surveillance system implementation based on Software-Defined Networking (SDN) technology, where packet switching depends on network traffic. Due to the fact that the equipment required for a real test is not available, a simulation of the network infrastructure will be carried out using the GNS3 simulator. In this simulation, several scenarios will be considered, where different traffic flows will vary depending on the network status, with the aim to test the flexibility given by SDN technology to implement prioritization and quality of service policies. The aim of this project is to prioritise IP-surveillance traffic over the rest, in order to achieve maximum performance for this particular service and for the rest of the network.

With an increase of popularity in live video streaming, there are new demands on current networks. Therefore it is interesting to explore if new architectures has what it takes. Software defined networking (SDN) is a new architecture that brings benefits in terms of control and management of networks. In this thesis we explore SDN's capabilities in terms of live streaming and put forth the question: What are the effects of using SDN-based network architecture on data streams with respect to jitter and latency? To answer this question we also need to know how to design an evaluation framework for measuring jitter and latency. We developed two iterations of a live stream, time stamping each video frame. These were used in two similar network topologies, a conventional network and an SDN-network using OpenFlow. The first iteration of the live stream depended on clock synchronization. After inconsistencies between tests we suspected that the clock synchronization was not accurate and reprogrammed the stream. The second iterations showed the same inconsistencies in latency meaning our results were inconclusive due to randomness in operative systems and inconsistencies in time stamping. This work shows several considerations to take into account when measuring latency on an application level in a network environment. Our most distinctive result shows that SDN and conventional networks have comparable jitter.

Condominium network refers to intra-organization networks, where smart buildings or apartments are connected and share resources over the network. Secured communication platform or channel has been highlighted as a key requirement for a reliable condominium which can be ensured by the utilization of the advanced techniques and platforms like Software-Defined Network (SDN), Network Function Virtualization (NFV) and Blockchain (BC). These technologies provide a robust, and secured platform to meet all kinds of challenges, such as safety, confidentiality, flexibility, efficiency, and availability. This work suggests a distributed, scalable IoT-SDN with Blockchain-based NFV framework for a smart condominium (DistB-Condo) that can act as an efficient secured platform for a small community. Moreover, the Blockchain-based IoT-SDN with NFV framework provides the combined benefits of leading technologies. It also presents an optimized Cluster Head Selection (CHS) algorithm for selecting a Cluster Head (CH) among the clusters that efficiently saves energy. Besides, a decentralized and secured Blockchain approach has been introduced that allows more prominent security and privacy to the desired condominium network. Our proposed approach has also the ability to detect attacks in an IoT environment. Eventually, this article evaluates the performance of the proposed architecture using different parameters (e.g., throughput, packet arrival rate, and response time). The proposed approach outperforms the existing OF-Based SDN. DistB-Condo has better throughput on average, and the bandwidth (Mbps) much higher than the OF-Based SDN approach in the presence of attacks. Also, the proposed model has an average response time of 5% less than the core model.

El gran desarrollo y despliegue actual de las redes de fibra óptica en el segmento de acceso a través de tecnologías pasivas, redes PON (Passive Optical Networks), hace que exista una gran variedad de fabricantes de los dispositivos ópticos que componen este tipo de redes y que surjan problemas de incompatibilidad entre estos dispositivos a la hora de controlar su gestión y configuración de forma simultánea. Aunque estos dispositivos siguen los mismos estándares, cada fabricante añade sus propias implementaciones, haciendo que no haya dispositivos universales. Sin embargo, la tecnologías SDN (Software Defined Networking) resultan prometedoras en el campo de las redes ópticas de siguiente generación y en particular en las redes PON puesto que a través de protocolos comunes SDN se podrían gestionar de forma automática y simultánea redes de diferentes fabricantes, pues SDN propone la separación de la capa de control de la capa de datos. En este trabajo se tratará de analizar esta problemática en estas redes y de los protocolos y software utilizados en ellas para diseñar y elaborar un agente que permita salvar esas diferencias y permita la gestión y configuración SDN en este tipo de redes y que pueda ser compatible con cualquier red PON comercial., The great development and current deployment of fiber optic networks in the access segment through passive technologies, PON networks (Passive Optical Networks), means that there is a wide variety of manufacturers of the optical devices that form this type of network and also the incompatibility problems between these devices arise when controlling their management and configuration simultaneously. Although these devices follow the same standards, each manufacturer adds their own implementations, making there no universal devices. However, SDN (Software Defined Networking) technologies are promising in the field of next generation optical networks and in particular in PON networks since through common SDN protocols networks from different manufacturers could be managed automatically and simultaneously, since SDN proposes the separation of the control layer from the data layer. In this Final Project, we will try to analyze this problem in these networks and the protocols and software used in them to design and develop an agent, compatible with any PON network, which can solve these differences and allow SDN management and configuration in this type of network., Grado en Ingeniería Informática

The importance of fast and efficient one-to-many transfers of a large file is increasing to replicate, move, or share bulk data not only intra a datacenter but also inter geographically distributed datacenters. We previously proposed the Coded Multipath Multicast (Coded-MPMC) one-to-many file transfer method in which the multicast transfer, the multipath transfer, and Reed-Solomon (RS) coding are integrated. This method aims to minimize the retrieval completion time of each recipient by simultaneously transmitting blocks of a file on multiple paths from a single sender to each recipient to maximize the aggregated flow value, i.e., to realize the max-flow to the recipient. We preliminarily implemented Coded-MPMC with OpenFlow protocol; however we only tested its feasibility over a small homogeneous in-lab OpenFlow network. In this paper, through experiments on a wide-area OpenFlow testbed network, we show that Coded-MPMC correctly works in a heterogeneous and geographically-distributed network. The results suggest the practicability and potential benefits of Coded-MPMC in real networks., 2020 International Conference on Emerging Technologies for Communications (ICETC2020), December 2-4, 2020, Online, Virtual Conference

With an increase of popularity in live video streaming, there are new demands on current networks. Therefore it is interesting to explore if new architectures has what it takes. Software defined networking (SDN) is a new architecture that brings benefits in terms of control and management of networks. In this thesis we explore SDN's capabilities in terms of live streaming and put forth the question: What are the effects of using SDN-based network architecture on data streams with respect to jitter and latency? To answer this question we also need to know how to design an evaluation framework for measuring jitter and latency. We developed two iterations of a live stream, time stamping each video frame. These were used in two similar network topologies, a conventional network and an SDN-network using OpenFlow. The first iteration of the live stream depended on clock synchronization. After inconsistencies between tests we suspected that the clock synchronization was not accurate and reprogrammed the stream. The second iterations showed the same inconsistencies in latency meaning our results were inconclusive due to randomness in operative systems and inconsistencies in time stamping. This work shows several considerations to take into account when measuring latency on an application level in a network environment. Our most distinctive result shows that SDN and conventional networks have comparable jitter.

The advent of 5G has sparked interest in Wi-Fi offloading techniques that enable efficient resource sharing and congestion management of wireless communication spectrum. However, offloading data between multiple networks (i.e. service providers) requires costly inter-provider communication which has a substantial overhead as well as high offloading latency. Moreover, involvement of the profit-oriented decision making of service providers has an inherent weakness of unfair scheduling among users and networks. To overcome those problems, this research work proposes a holistic framework similar to an online data market place where existing infrastructure can be used to set up Wi-Fi zones that everyone can use from their own data plan irrespective of the network operators they belong to. First, our proposed architecture improves the efficacy of offloading by using decentralized nature of the emerging Software-Defined Networking (SDN) to set up an operator-assisted data offloading platform, resulting in efficient inter-provider communication. Second, our proposal strengthens the fair scheduling of offloading resources by using blockchain technology to initiate unbiased and independent decision making. The resulting service is a rating system for the sellers to make reliable transactions for payments.

The predominant protocol for SDN is OpenFlow, although not the only one. In fact, another technology has emerged that promises to revolutionize the status quo of software-defined networks. This is the P4 language. The aim of this project is to study, understand and identify the role of P4 language in SDN. An analysis of OpenFlow and, especially, P4 will be carried out. With the results of both parts, clarity will be provided and it will be possible to discern accurately between the two technologies., El protocolo predominante para SDN es OpenFlow, aunque no el único. De hecho, ha aparecido otra tecnología que promete revolucionar el status quo de las redes definidas por software. Se trata del lenguaje P4. El objetivo de este proyecto es estudiar, comprender e identificar el rol que ejerce el lenguaje P4 en SDN. Se realizará un análisis de OpenFlow y, especialmente, de P4. Con los resultados de ambas partes, se aportará claridad y será posible discernir con precisión entre las dos tecnologías., El protocol predominant per a SDN és OpenFlow, tot i que no l'únic. De fet, ha aparegut una altre tecnologia que promet revolucionar l'status quo de les xarxes definides via software. Es tracta del llenguatge P4. L?objectiu d?aquest projecte és estudiar, comprendre i identificar el rol que pren el llenguatge P4 en SDN. Es realitzarà un anàlisi d'OpenFlow i, especialment, de P4 Amb els resultats d'ambdues parts, s'aportarà claredat i serà possible discernir amb precisió entre les dues tecnologies sota estudi.

El gran desarrollo y despliegue actual de las redes de fibra óptica en el segmento de acceso a través de tecnologías pasivas, redes PON (Passive Optical Networks), hace que exista una gran variedad de fabricantes de los dispositivos ópticos que componen este tipo de redes y que surjan problemas de incompatibilidad entre estos dispositivos a la hora de controlar su gestión y configuración de forma simultánea. Aunque estos dispositivos siguen los mismos estándares, cada fabricante añade sus propias implementaciones, haciendo que no haya dispositivos universales. Sin embargo, la tecnologías SDN (Software Defined Networking) resultan prometedoras en el campo de las redes ópticas de siguiente generación y en particular en las redes PON puesto que a través de protocolos comunes SDN se podrían gestionar de forma automática y simultánea redes de diferentes fabricantes, pues SDN propone la separación de la capa de control de la capa de datos. En este trabajo se tratará de analizar esta problemática en estas redes y de los protocolos y software utilizados en ellas para diseñar y elaborar un agente que permita salvar esas diferencias y permita la gestión y configuración SDN en este tipo de redes y que pueda ser compatible con cualquier red PON comercial., The great development and current deployment of fiber optic networks in the access segment through passive technologies, PON networks (Passive Optical Networks), means that there is a wide variety of manufacturers of the optical devices that form this type of network and also the incompatibility problems between these devices arise when controlling their management and configuration simultaneously. Although these devices follow the same standards, each manufacturer adds their own implementations, making there no universal devices. However, SDN (Software Defined Networking) technologies are promising in the field of next generation optical networks and in particular in PON networks since through common SDN protocols networks from different manufacturers could be managed automatically and simultaneously, since SDN proposes the separation of the control layer from the data layer. In this Final Project, we will try to analyze this problem in these networks and the protocols and software used in them to design and develop an agent, compatible with any PON network, which can solve these differences and allow SDN management and configuration in this type of network., Grado en Ingeniería Informática

The separation of control and forwarding planes in software-defined networking (SDN) networks is a key issue of the SDN technology. This feature and the existence of the SDN controller allow the developing of dynamic, adaptable and manageable networks, networks that require adequate services, and applications. However, the separation of these planes prevents the use of existing powerful tools that were coded considering traditional networks. In this paper, we make use of the potential of network virtualization (NV) technologies to propose the use of a virtualized infrastructure that makes possible the incorporation of these existing services and/or applications to an SDN network, without the need for programming additional and complex software modules in the SDN controller. Thus, in this paper, NV is not employed to develop a network managed by SDN but to broaden and give support to the SDN control layer. As an example, we describe the incorporation of nmap (a versatile and powerful tool widely used by security experts for network exploration) into the SDN framework. It is only necessary to develop a simple control plane service that thanks to the proposed virtualized infrastructure allows the inclusion of this powerful management application. The result offers the complete functionality of the nmap utility to the network administrators, who control the SDN network through the out-of-band control plane. In addition, a northbound REST API has been defined to offer the main functionality of the tool (host discovery, port scanning, and operating system detection) to the application layer.

MultiPath TCP (MPTCP) protocol splits one transport connection into multiple subflows that are treated as normal TCP flows by the network layer. Therefore, the MPTCP subflows are able to use different physical paths between the origin and the destination points. This TCP extension can be used in datacenters to improve communication performance. On the other hand, load balancing techniques are employed in these scenarios to avoid the overload of the systems. When load balancing is combined with MPTCP it is necessary that the subflows belonging to the same MPTCP session are established with the same server in the datacenter. In this work we describe and prove two MPTCP-compatible solutions based on OpenFlow SDN technology that allow the implementation of load balancing services in the presence of MPTCP traffic.

[SPA] En los últimos años ha surgido un nuevo concepto de arquitectura de red conocido como Software-Defined Networking (SDN). Contrariamente a las arquitecturas tradicionales, donde el plano de control y el plano de datos coexisten en dispositivos de red tales como routers y switches, este nuevo concepto consiste básicamente en mover el plano de control fuera de dichos dispositivos, dejando sólo el plano de datos. El plano de control quedará por tanto gestionado y administrado por elementos centralizados lógicamente, denominados controladores. Los dispositivos de red se convierten en simples dispositivos de reenvío de paquetes que se programan a través de reglas definidas por el controlador. En SDN, la comunicación entre el plano de control y el plano de datos (dispositivos de red) está establecida principalmente por el protocolo OpenFlow (OF). En esta tesis se han propuesto soluciones eficientes a tres líneas de investigación relativas a las redes SDN: la monitorización y descubrimiento de la red, la eficiencia energética y el desarrollo de un protocolo de encaminamiento no tradicional. La monitorización de la red está adquiriendo importancia como consecuencia de que cada vez más Proveedores de Servicios de Internet (ISP) y redes empresariales despliegan servicios en tiempo real. Tener una visión actualizada de la red y medir su rendimiento con métricas como el throughput, la pérdida de paquetes y el retardo, se presenta como la principal tarea de la monitorización de la red. La obtención de estadísticas de red precisas y significativas ayuda a encontrar la degradación del servicio debida a la congestión y además permite implementar soluciones para la optimización del enrutamiento. Lograr la eficiencia energética se ha convertido recientemente en un tema clave para la comunidad investigadora debido al aumento del consumo de energía y de las emisiones de CO2 generadas por las grandes redes de datos. Si además contemplamos el drástico aumento de tráfico previsto par