Software-Defined Networking 2.0

软件定义网络2.0

• 批准号: RGPIN-2018-06280
• 负责人: Ganjali, Yashar
• 金额: $ 5.97万
• 依托单位: University of Toronto
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2022
• 资助国家: 加拿大
• 起止时间: 2022-01-01 至 2023-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=750034
• 关键词: Software; Defined; Networking; 2.0

The ever-increasing demand for networks requires significant changes in the current Internet. Software-Defined Networking (SDN) was proposed to address these challenges. The basic idea behind SDN is to separate the control plane from the switches (data path). This separation can essentially: (i) make network switches extremely simple, fast, and inexpensive; (ii) make it easy to make changes to the network controller since the change is done in software; (iii) simplify network management and optimization by creating a global view of network resources; and (iv) lower the barrier to entry for individuals and small companies to build and change network components to be used in large-scale networks, which is another way to reduce cost.A major accelerator for development and deployment of software-defined networks has been the OpenFlow protocol. This is the de facto standard for interactions between network switches and SDN controllers. Unfortunately, OpenFlow intrinsically limits the information channel between switches and the control plane, which imposes significant restrictions on the types of controller applications we can support. For example, any applications (e.g. smart firewall, application-aware load balancer, etc.) that require access to payload of packets beyond the initial packet of a flow cannot be implemented with OpenFlow. Can we move from a rigid flow-based protocol like OpenFlow, to a design where control applications can define and dynamically change the granularity and the pattern of packets they receive from switching elements? There are two new advances in SDN world that might make this possible: 1) Recent developments in programmability of network devices (e.g. P4) allow execution of a complex logic on every packet in data plane. This is a very powerful feature that gives extreme control on which packets to send to the controller; and 2) with the introduction of the new generation of distributed controllers (e.g. ONOS, and Beehive), scalability is not considered to be a major roadblock for deployment of SDN solutions. These advances open the door to new protocols that allow control applications to tune the granularity of the data they require from switches, which we call "Software-Defined Networking 2.0". SDN 2.0 will allow a wide range of new applications that cannot be implemented in today's networks. A smart firewall application, for example, can start with a low overhead surveillance of the entire network, and dynamically increase the number of packets sent to the controller when it identifies abnormal activities in certain parts of the network. SDN 2.0 can be used for debugging and troubleshooting network control applications, a feature missing in today's networks. To that end, we can increase the fraction of traffic sent to the controller for fine-grained analysis and troubleshooting, and reduce the load under normal operation of the network.

对网络的需求不断增加，需要在当前的互联网上进行重大变化。提出了软件定义的网络（SDN）来应对这些挑战。 SDN背后的基本思想是将控制平面与开关（数据路径）分开。这种分离本质上可以：（i）使网络开关非常简单，快速且便宜； （ii）由于更改是在软件中完成的，因此可以轻松更改网络控制器； （iii）通过创建网络资源的全局视图来简化网络管理和优化； （iv）降低个人和小型公司建立和更改网络组件的进入障碍，以在大型网络中使用，这是降低成本的另一种方法。用于开发和部署软件定义网络的主要加速器一直是OpenFlow协议。这是网络交换机和SDN控制器之间交互的事实上的标准。不幸的是，OpenFlow本质上限制了开关和控制平面之间的信息通道，这对我们可以支持的控制器应用程序的类型施加了重大限制。例如，任何应用程序（例如，智能防火墙，应用程序吸引的负载平衡器等）都需要使用OpenFlow访问流量以外的数据包的有效负载。我们可以从诸如OpenFlow之类的基于刚性流程的协议转移到控制应用程序可以定义并动态更改它们从切换元素中获得的数据包的模式的设计吗？ SDN世界中有两个新的进步可能使这可能成为可能：1）网络设备的可编程性（例如P4）的最新发展允许在数据平面中的每个数据包上执行复杂的逻辑。这是一个非常强大的功能，可以极端控制哪些数据包发送到控制器； 2）随着新一代分布式控制器的引入（例如Onos和Beehive），可扩展性不被认为是部署SDN解决方案的主要障碍。这些进步打开了新协议的大门，允许控制应用程序调整所需数据的粒度，我们称之为“软件定义的网络2.0”。 SDN 2.0将允许在当今网络中无法实现的各种新应用程序。例如，智能防火墙应用程序可以从整个网络的低开销监视开始，并在确定网络某些部分的异常活动时动态增加发送给控制器的数据包数量。 SDN 2.0可用于调试和故障排除网络控制应用程序，这是当今网络中缺少的功能。为此，我们可以增加发送到控制器的流量的比例，进行细粒度的分析和故障排除，并减少在网络正常操作下的负载。