SlideShare a Scribd company logo
Damascus University
Faculty of Information Technology Engineering
Department of Computer Systems and Networks
‫دمشق‬ ‫جامعة‬
‫المعلوماتية‬ ‫الهندسة‬ ‫كلية‬
‫الحاسوب‬ ‫والشبكات‬ ‫النظم‬ ‫قسم‬
‫ة‬ّ‫ي‬
‫الشبكات‬ ‫ة‬
‫إدار‬ ‫عملي‬
Network Management
Session 5: Introduction to Software Defined Networks (SDN)
‫اعداد‬
:
‫م‬
.
‫غاندي‬
‫هسام‬
Ghandi
Hessam
PART 1:
BACKGROUND
8/30/2019 By Eng. Ghandy Hessam 2
Introduction
• Drawbacks of existing network:
➢Difficult to perform real world experiments on large scale
production networks.
➢Networks have remained the same for many years.
➢Rate of innovation in networks is slower.
➢Closed Systems: Vendor specific software.
➢Non-standard interfaces to H/W.
➢Traditional networks are known to be “inside the box” paradigm.
• Thus, proposals for a new networking paradigm, namely
programmable networks
8/30/2019 By Eng. Ghandy Hessam 3
Software Defined Networking
• Separate Control plane and Data plane entities.
• Execute or run Control plane software on general purpose
hardware.
• Have programmable data planes.
• An architecture to control not just a networking device but an
entire network.
8/30/2019 By Eng. Ghandy Hessam 4
SDN Architecture
8/30/2019 By Eng. Ghandy Hessam 5
SDN Components: Controller
8/30/2019 By Eng. Ghandy Hessam 6
Existing SDN Controller Implementations
 Java-based versions:
 Python-based versions:
8/30/2019 By Eng. Ghandy Hessam 7
Controller northbound API
 Data Plane managed via
Network Controller
providing high level
services like:
– Firewall
– Load Balancing
– VPN
– Intrusion Detection
– …
8/30/2019 By Eng. Ghandy Hessam 8
SDN Components: OpenFlow Switch
 Plug-in services at the switch
layer
 Filtering traffic based on open
flow rules
 Create a underlay network
 Dynamically reconfigure
network based Events
 The widely known one is:
8/30/2019 By Eng. Ghandy Hessam 9
OpenFlow Protocol
 OpenFlow Basics:
❖ Ports and Port Queues
❖ Flow Table
❖ Packet Matching
❖ Actions and Packet
Forwarding
❖ Messaging Between
Controller and Switch
8/30/2019 By Eng. Ghandy Hessam 10
OF v1.0: Flow Table Entry
8/30/2019 By Eng. Ghandy Hessam 11
OF v1.3: Flow Table Entry
8/30/2019 By Eng. Ghandy Hessam 12
Basic Packet matching function
8/30/2019 By Eng. Ghandy Hessam 13
OpenFlow: Types of Messages (1)
• Asynchronous (Controller-to-Switch)
• Send-packet
• Flow-mod
• Asynchronous (initiated by the switch)
• Read-state
• Features
• Configuration
8/30/2019 By Eng. Ghandy Hessam 14
OpenFlow: Types of Messages (2)
• Asynchronous (initiated by the switch)
• Packet-in
• Flow-removed
• Port-status
• Error
• Symmetric (can be sent in either direction without solicitation)
• Hello
• Echo
• Vendor
8/30/2019 By Eng. Ghandy Hessam 15
Dimension of SDN Applications:
Rule installation
Proactive Rules Reactive Rules
Controller (N. O.S.)
Applications
Applications
Applications
Switch H.W
O.S
Controller (N. O.S.)
Applications
Applications
Applications
Switch H.W
O.S
8/30/2019 By Eng. Ghandy Hessam 16
Dimensions of SDN Applications:
Granularity of Rules (1)
Microflow WildCards (aggregated rules)
Controller (N. O.S.)
Applications
Applications
Applications
Switch H.W
O.S
Controller (N. O.S.)
Applications
Applications
Applications
Switch H.W
O.S
8/30/2019 By Eng. Ghandy Hessam 17
Dimensions of SDN Applications:
Granularity of Rules (2)
Distributed Controller Centralized Controller
Controller (N. O.S.)
Applications
Applications
Applications
Switch O.S
Switch HW
Switch O.S
Switch HW
Switch O.S
Switch HW
Controller (N. O.S.)
Applications
Applications
Applications
Switch O.S
Switch HW
Switch O.S
Switch HW
Switch O.S
Switch HW
Controller (N. O.S.)
Applications
Applications
Applications
Controller (N. O.S.)
Applications
Applications
Applications
8/30/2019 By Eng. Ghandy Hessam 18
Google’ B4 Application
 Rule installation
 Proactive
 Rule Granularity
 Aggregate
 Distributed
 Multiple instances
8/30/2019 By Eng. Ghandy Hessam 19
End of Session 5
By Eng. Ghandy Hessam
8/30/2019 20

More Related Content

Similar to Introduction to software defined networks (sdn)

Grid Computing
Grid ComputingGrid Computing
Grid Computing
Arun Basil Lal
 
"Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N...
"Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N..."Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N...
"Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N...
Yandex
 
APIs at the Edge
APIs at the EdgeAPIs at the Edge
APIs at the Edge
Red Hat
 
Named data networking. Basic Principle
Named data networking. Basic PrincipleNamed data networking. Basic Principle
Named data networking. Basic Principle
Михаил Климарёв
 
Presentation of CLIF open source project at OW2con'19, June 12-13, Paris.
Presentation of CLIF open source project at OW2con'19, June 12-13, Paris. Presentation of CLIF open source project at OW2con'19, June 12-13, Paris.
Presentation of CLIF open source project at OW2con'19, June 12-13, Paris.
OW2
 
Future services on Janet
Future services on JanetFuture services on Janet
Future services on Janet
Jisc
 
GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...
GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...
GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...
Otávio Carvalho
 
5G, A network, and beyond ...
5G, A network, and beyond ...5G, A network, and beyond ...
5G, A network, and beyond ...
Belal Essam ElDiwany
 
Smart Grid Technology Use at East Grand Forks Water and Light
Smart Grid Technology Use at East Grand Forks Water and LightSmart Grid Technology Use at East Grand Forks Water and Light
Smart Grid Technology Use at East Grand Forks Water and Light
University of Minnesota
 
Peering 101 - ABQNOG1 - May2023
Peering 101 - ABQNOG1 - May2023Peering 101 - ABQNOG1 - May2023
Peering 101 - ABQNOG1 - May2023
Chris Grundemann
 
Open flow wp
Open flow wpOpen flow wp
Open flow wp
youyou166
 
DevDay: Managing a Distributed Network on a Common Infra, NTT Data
DevDay: Managing a Distributed Network on a Common Infra, NTT DataDevDay: Managing a Distributed Network on a Common Infra, NTT Data
DevDay: Managing a Distributed Network on a Common Infra, NTT Data
R3
 
Checkpointing the Un-checkpointable: MANA and the Split-Process Approach
Checkpointing the Un-checkpointable: MANA and the Split-Process ApproachCheckpointing the Un-checkpointable: MANA and the Split-Process Approach
Checkpointing the Un-checkpointable: MANA and the Split-Process Approach
inside-BigData.com
 
Netsoft19 Keynote: Fluid Network Planes
Netsoft19 Keynote: Fluid Network PlanesNetsoft19 Keynote: Fluid Network Planes
Netsoft19 Keynote: Fluid Network Planes
Christian Esteve Rothenberg
 
SDN applications with floodlight
SDN applications with floodlightSDN applications with floodlight
SDN applications with floodlight
Damascus University
 
IEEE_2030_5_Seoul_Simpson_20150424.pdf
IEEE_2030_5_Seoul_Simpson_20150424.pdfIEEE_2030_5_Seoul_Simpson_20150424.pdf
IEEE_2030_5_Seoul_Simpson_20150424.pdf
ssuser834261
 
Open Hardware for All - Webinar March 25, 2015
Open Hardware for All - Webinar March 25, 2015Open Hardware for All - Webinar March 25, 2015
Open Hardware for All - Webinar March 25, 2015
Cumulus Networks
 
Locationless data science on a modern secure edge
Locationless data science on a modern secure edgeLocationless data science on a modern secure edge
Locationless data science on a modern secure edge
John Archer
 
OpenFlow in the access - pushing OpenFlow switches - Richard G Clegg
OpenFlow in the access - pushing OpenFlow switches - Richard G CleggOpenFlow in the access - pushing OpenFlow switches - Richard G Clegg
OpenFlow in the access - pushing OpenFlow switches - Richard G CleggCPqD
 
1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx
1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx
1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx
jackiewalcutt
 

Similar to Introduction to software defined networks (sdn) (20)

Grid Computing
Grid ComputingGrid Computing
Grid Computing
 
"Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N...
"Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N..."Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N...
"Morphology of Modern Data Center Networks: Overview". Dinesh Dutt, Cumulus N...
 
APIs at the Edge
APIs at the EdgeAPIs at the Edge
APIs at the Edge
 
Named data networking. Basic Principle
Named data networking. Basic PrincipleNamed data networking. Basic Principle
Named data networking. Basic Principle
 
Presentation of CLIF open source project at OW2con'19, June 12-13, Paris.
Presentation of CLIF open source project at OW2con'19, June 12-13, Paris. Presentation of CLIF open source project at OW2con'19, June 12-13, Paris.
Presentation of CLIF open source project at OW2con'19, June 12-13, Paris.
 
Future services on Janet
Future services on JanetFuture services on Janet
Future services on Janet
 
GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...
GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...
GaruaGeo: Global Scale Data Aggregation in Hybrid Edge and Cloud Computing En...
 
5G, A network, and beyond ...
5G, A network, and beyond ...5G, A network, and beyond ...
5G, A network, and beyond ...
 
Smart Grid Technology Use at East Grand Forks Water and Light
Smart Grid Technology Use at East Grand Forks Water and LightSmart Grid Technology Use at East Grand Forks Water and Light
Smart Grid Technology Use at East Grand Forks Water and Light
 
Peering 101 - ABQNOG1 - May2023
Peering 101 - ABQNOG1 - May2023Peering 101 - ABQNOG1 - May2023
Peering 101 - ABQNOG1 - May2023
 
Open flow wp
Open flow wpOpen flow wp
Open flow wp
 
DevDay: Managing a Distributed Network on a Common Infra, NTT Data
DevDay: Managing a Distributed Network on a Common Infra, NTT DataDevDay: Managing a Distributed Network on a Common Infra, NTT Data
DevDay: Managing a Distributed Network on a Common Infra, NTT Data
 
Checkpointing the Un-checkpointable: MANA and the Split-Process Approach
Checkpointing the Un-checkpointable: MANA and the Split-Process ApproachCheckpointing the Un-checkpointable: MANA and the Split-Process Approach
Checkpointing the Un-checkpointable: MANA and the Split-Process Approach
 
Netsoft19 Keynote: Fluid Network Planes
Netsoft19 Keynote: Fluid Network PlanesNetsoft19 Keynote: Fluid Network Planes
Netsoft19 Keynote: Fluid Network Planes
 
SDN applications with floodlight
SDN applications with floodlightSDN applications with floodlight
SDN applications with floodlight
 
IEEE_2030_5_Seoul_Simpson_20150424.pdf
IEEE_2030_5_Seoul_Simpson_20150424.pdfIEEE_2030_5_Seoul_Simpson_20150424.pdf
IEEE_2030_5_Seoul_Simpson_20150424.pdf
 
Open Hardware for All - Webinar March 25, 2015
Open Hardware for All - Webinar March 25, 2015Open Hardware for All - Webinar March 25, 2015
Open Hardware for All - Webinar March 25, 2015
 
Locationless data science on a modern secure edge
Locationless data science on a modern secure edgeLocationless data science on a modern secure edge
Locationless data science on a modern secure edge
 
OpenFlow in the access - pushing OpenFlow switches - Richard G Clegg
OpenFlow in the access - pushing OpenFlow switches - Richard G CleggOpenFlow in the access - pushing OpenFlow switches - Richard G Clegg
OpenFlow in the access - pushing OpenFlow switches - Richard G Clegg
 
1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx
1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx
1. Software-Defined Networks (SDN) is a new paradigm in network ma.docx
 

Recently uploaded

20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
Matthew Sinclair
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
名前 です男
 
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptxHow to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
danishmna97
 
By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024
Pierluigi Pugliese
 
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
DianaGray10
 
Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1
DianaGray10
 
Artificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopmentArtificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopment
Octavian Nadolu
 
Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...
Zilliz
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Malak Abu Hammad
 
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
SOFTTECHHUB
 
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to ProductionGenerative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Aggregage
 
UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5
DianaGray10
 
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdfObservability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Paige Cruz
 
National Security Agency - NSA mobile device best practices
National Security Agency - NSA mobile device best practicesNational Security Agency - NSA mobile device best practices
National Security Agency - NSA mobile device best practices
Quotidiano Piemontese
 
20240607 QFM018 Elixir Reading List May 2024
20240607 QFM018 Elixir Reading List May 202420240607 QFM018 Elixir Reading List May 2024
20240607 QFM018 Elixir Reading List May 2024
Matthew Sinclair
 
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing DaysClimate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
Kari Kakkonen
 
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
James Anderson
 
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AIEnchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Vladimir Iglovikov, Ph.D.
 
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex ProofszkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
Alex Pruden
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Alan Dix
 

Recently uploaded (20)

20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
 
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptxHow to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
 
By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024
 
UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6UiPath Test Automation using UiPath Test Suite series, part 6
UiPath Test Automation using UiPath Test Suite series, part 6
 
Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1
 
Artificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopmentArtificial Intelligence for XMLDevelopment
Artificial Intelligence for XMLDevelopment
 
Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
 
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
 
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to ProductionGenerative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
 
UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5
 
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdfObservability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
 
National Security Agency - NSA mobile device best practices
National Security Agency - NSA mobile device best practicesNational Security Agency - NSA mobile device best practices
National Security Agency - NSA mobile device best practices
 
20240607 QFM018 Elixir Reading List May 2024
20240607 QFM018 Elixir Reading List May 202420240607 QFM018 Elixir Reading List May 2024
20240607 QFM018 Elixir Reading List May 2024
 
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing DaysClimate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
 
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
 
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AIEnchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
 
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex ProofszkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
 

Introduction to software defined networks (sdn)

  • 1. Damascus University Faculty of Information Technology Engineering Department of Computer Systems and Networks ‫دمشق‬ ‫جامعة‬ ‫المعلوماتية‬ ‫الهندسة‬ ‫كلية‬ ‫الحاسوب‬ ‫والشبكات‬ ‫النظم‬ ‫قسم‬ ‫ة‬ّ‫ي‬ ‫الشبكات‬ ‫ة‬ ‫إدار‬ ‫عملي‬ Network Management Session 5: Introduction to Software Defined Networks (SDN) ‫اعداد‬ : ‫م‬ . ‫غاندي‬ ‫هسام‬ Ghandi Hessam
  • 2. PART 1: BACKGROUND 8/30/2019 By Eng. Ghandy Hessam 2
  • 3. Introduction • Drawbacks of existing network: ➢Difficult to perform real world experiments on large scale production networks. ➢Networks have remained the same for many years. ➢Rate of innovation in networks is slower. ➢Closed Systems: Vendor specific software. ➢Non-standard interfaces to H/W. ➢Traditional networks are known to be “inside the box” paradigm. • Thus, proposals for a new networking paradigm, namely programmable networks 8/30/2019 By Eng. Ghandy Hessam 3
  • 4. Software Defined Networking • Separate Control plane and Data plane entities. • Execute or run Control plane software on general purpose hardware. • Have programmable data planes. • An architecture to control not just a networking device but an entire network. 8/30/2019 By Eng. Ghandy Hessam 4
  • 5. SDN Architecture 8/30/2019 By Eng. Ghandy Hessam 5
  • 6. SDN Components: Controller 8/30/2019 By Eng. Ghandy Hessam 6
  • 7. Existing SDN Controller Implementations  Java-based versions:  Python-based versions: 8/30/2019 By Eng. Ghandy Hessam 7
  • 8. Controller northbound API  Data Plane managed via Network Controller providing high level services like: – Firewall – Load Balancing – VPN – Intrusion Detection – … 8/30/2019 By Eng. Ghandy Hessam 8
  • 9. SDN Components: OpenFlow Switch  Plug-in services at the switch layer  Filtering traffic based on open flow rules  Create a underlay network  Dynamically reconfigure network based Events  The widely known one is: 8/30/2019 By Eng. Ghandy Hessam 9
  • 10. OpenFlow Protocol  OpenFlow Basics: ❖ Ports and Port Queues ❖ Flow Table ❖ Packet Matching ❖ Actions and Packet Forwarding ❖ Messaging Between Controller and Switch 8/30/2019 By Eng. Ghandy Hessam 10
  • 11. OF v1.0: Flow Table Entry 8/30/2019 By Eng. Ghandy Hessam 11
  • 12. OF v1.3: Flow Table Entry 8/30/2019 By Eng. Ghandy Hessam 12
  • 13. Basic Packet matching function 8/30/2019 By Eng. Ghandy Hessam 13
  • 14. OpenFlow: Types of Messages (1) • Asynchronous (Controller-to-Switch) • Send-packet • Flow-mod • Asynchronous (initiated by the switch) • Read-state • Features • Configuration 8/30/2019 By Eng. Ghandy Hessam 14
  • 15. OpenFlow: Types of Messages (2) • Asynchronous (initiated by the switch) • Packet-in • Flow-removed • Port-status • Error • Symmetric (can be sent in either direction without solicitation) • Hello • Echo • Vendor 8/30/2019 By Eng. Ghandy Hessam 15
  • 16. Dimension of SDN Applications: Rule installation Proactive Rules Reactive Rules Controller (N. O.S.) Applications Applications Applications Switch H.W O.S Controller (N. O.S.) Applications Applications Applications Switch H.W O.S 8/30/2019 By Eng. Ghandy Hessam 16
  • 17. Dimensions of SDN Applications: Granularity of Rules (1) Microflow WildCards (aggregated rules) Controller (N. O.S.) Applications Applications Applications Switch H.W O.S Controller (N. O.S.) Applications Applications Applications Switch H.W O.S 8/30/2019 By Eng. Ghandy Hessam 17
  • 18. Dimensions of SDN Applications: Granularity of Rules (2) Distributed Controller Centralized Controller Controller (N. O.S.) Applications Applications Applications Switch O.S Switch HW Switch O.S Switch HW Switch O.S Switch HW Controller (N. O.S.) Applications Applications Applications Switch O.S Switch HW Switch O.S Switch HW Switch O.S Switch HW Controller (N. O.S.) Applications Applications Applications Controller (N. O.S.) Applications Applications Applications 8/30/2019 By Eng. Ghandy Hessam 18
  • 19. Google’ B4 Application  Rule installation  Proactive  Rule Granularity  Aggregate  Distributed  Multiple instances 8/30/2019 By Eng. Ghandy Hessam 19
  • 20. End of Session 5 By Eng. Ghandy Hessam 8/30/2019 20