Dissertations / Theses on the topic 'Data Center, Software Defined Networking, SDN'

Software-defined Networking (SDN) enables flexible network management, but as networks evolve to a large number of end-points with diverse network policies, higher speed, and higher utilization, abstraction of networks by SDN makes monitoring and debugging network problems increasingly harder and challenging. While some problems impact packet processing in the data plane (e.g., congestion), some cause policy deployment failures (e.g., hardware bugs); both create inconsistency between operator intent and actual network behavior. Existing debugging tools are not sufficient to accurately detect, localize, and understand the root cause of problems observed in a large-scale networks; either they lack in-network resources (compute, memory, or/and network bandwidth) or take long time for debugging network problems. This thesis presents three debugging tools: PathDump, SwitchPointer, and Scout, and a technique for tracing packet trajectories called CherryPick. We call for a different approach to network monitoring and debugging: in contrast to implementing debugging functionality entirely in-network, we should carefully partition the debugging tasks between end-hosts and network elements. Towards this direction, we present CherryPick, PathDump, and SwitchPointer. The core of CherryPick is to cherry-pick the links that are key to representing an end-to-end path of a packet, and to embed picked linkIDs into its header on its way to destination. PathDump is an end-host based network debugger based on tracing packet trajectories, and exploits resources at the end-hosts to implement various monitoring and debugging functionalities. PathDump currently runs over a real network comprising only of commodity hardware, and yet, can support surprisingly a large class of network debugging problems with minimal in-network functionality. The key contributions of SwitchPointer is to efficiently provide network visibility to end-host based network debuggers like PathDump by using switch memory as a "directory service" - each switch, rather than storing telemetry data necessary for debugging functionalities, stores pointers to end hosts where relevant telemetry data is stored. The key design choice of thinking about memory as a directory service allows to solve performance problems that were hard or infeasible with existing designs. Finally, we present and solve a network policy fault localization problem that arises in operating policy management frameworks for a production network. We develop Scout, a fully-automated system that localizes faults in a large scale policy deployment and further pin-points the physical-level failures which are most likely cause for observed faults.

Today, data centers host a wide variety of applications which generate a mix of diverse internal data center traffic. In a data center environment 90% of the traffic flows, though they constitute only 10% of the data carried around, are short flows with sizes up to a maximum of 1MB. The rest 10% constitute long flows with sizes in the range of 1MB to 1GB. Throughput matters for the long flows whereas short flows are latency sensitive. This thesis studies various data center transport mechanisms aimed at either improving flow completion time for short flows or throughput for long flows. Thesis puts forth two data center transport mechanisms: (1) for improving flow completion time for short flows (2) for improving throughput for long flows. The first data center transport mechanism proposed in this thesis, FA-DCTCP (Flow Aware DCTCP), is based on Data Center Transmission Control Protocol (DCTCP). DCTCP is a Transmission Control Protocol (TCP) variant for data centers pioneered by Microsoft, which is being deployed widely in data centers today. DCTCP congestion control algorithm treats short flows and long flows equally. This thesis demonstrate that, treating them differently by reducing the congestion window for short flows at a lower rate compared to long flows, at the onset of congestion, 99th percentile of flow completion time for short flows could be improved by up to 32.5%, thereby reducing their tail latency by up to 32.5%. As per data center traffic measurement studies, data center internal traffic often exhibit predefined patterns with respect to the traffic flow mix. The second data center transport mechanism proposed in this thesis shows that, insights into the internal data center traffic composition could be leveraged to achieve better throughput for long flows. The mechanism for the same is implemented by adopting the Software Defined Networking paradigm, which offers the ability to dynamically adapt network configuration parameters based on network observations. The proposed solution achieves up to 22% improvement in long flow throughput, by dynamically adjusting network element’s QoS configurations, based on the observed traffic pattern.

Several heterogeneous, intelligent and distributed devices can be connected to interact with one another over the internet in what is known as the internet of things (IoT). Also, the concept of IoT can be exploited in the industrial environment for increasing the production output of goods and services and for mitigating the risk of disaster occurrences. This application of IoT for enhancing industrial production is known as industrial IoT (IIoT). More so, the benefits of IoT technology can be particularly exploited across the maritime industry in what is termed the internet of maritime things (IoMT) where sensors and actuator devices are implanted on marine equipment in order to foster the communication efficacy of nautical radio networks. Marine explorations may suffer from unwanted situations such as transactional delays, environmental degradation, insecurity, seaport congestions, accidents and collisions etc, which could arise from severe environmental conditions. As a result, there is a need to develop proper communication techniques that will improve the overall quality of service (QoS) and quality of experience (QoE) of marine users. To address these, the merits of contemporaneous technologies such as ubiquitous computing, software-defined networking (SDN) and network functions virtualization (NFV) in addition to salubrious communication techniques including emergent configurations (EC), channel estimation (CE) and communication routing protocols etc, can be utilized for sustaining optimal operation of pelagic networks. Emergent configuration (EC) is a technology that can be adapted into maritime radio networks to support the operation and collaboration of IoT connected devices in order to improve the efficiency of the connected IoT systems for maximum user satisfaction. To meet user goals, the connected devices are required to cooperate with one another in an adaptive, interoperable, and homogeneous manner. In this thesis, a survey on the concept of IoT is presented in addition to a review of IIoT systems. The applications of ubiquitous computing and SDN technology are employed to design a newfangled network architecture which is specifically propounded for enhancing the throughput of oil and gas production in the maritime ecosystem. The components of this architecture work in collaboration with one another by attempting to manage and control the exploration process of deep ocean activities especially during emergencies involving anthropogenic oil and gas spillages. Several heterogeneous, intelligent and distributed devices can be connected to interact with one another over the internet in what is known as the internet of things (IoT). Also, the concept of IoT can be exploited in the industrial environment for increasing the production output of goods and services and for mitigating the risk of disaster occurrences. This application of IoT for enhancing industrial production is known as industrial IoT (IIoT). More so, the benefits of IoT technology can be particularly exploited across the maritime industry in what is termed the internet of maritime things (IoMT) where sensors and actuator devices are implanted on marine equipment in order to foster the communication efficacy of nautical radio networks. Marine explorations may suffer from unwanted situations such as transactional delays, environmental degradation, insecurity, seaport congestions, accidents and collisions etc, which could arise from severe environmental conditions. As a result, there is a need to develop proper communication techniques that will improve the overall quality of service (QoS) and quality of experience (QoE) of marine users. To address these, the merits of contemporaneous technologies such as ubiquitous computing, software-defined networking (SDN) and network functions virtualization (NFV) in addition to salubrious communication techniques including emergent configurations (EC), channel estimation (CE) and communication routing protocols etc, can be utilized for sustaining optimal operation of pelagic networks. Emergent configuration (EC) is a technology that can be adapted into maritime radio networks to support the operation and collaboration of IoT connected devices in order to improve the efficiency of the connected IoT systems for maximum user satisfaction. To meet user goals, the connected devices are required to cooperate with one another in an adaptive, interoperable, and homogeneous manner. In this thesis, a survey on the concept of IoT is presented in addition to a review of IIoT systems. The applications of ubiquitous computing and SDN technology are employed to design a newfangled network architecture which is specifically propounded for enhancing the throughput of oil and gas production in the maritime ecosystem. The components of this architecture work in collaboration with one another by attempting to manage and control the exploration process of deep ocean activities especially during emergencies involving anthropogenic oil and gas spillages. On the other hand, CE is a utilitarian communication technique that can be exploited during maritime exploration processes which offer additional reinforcement to the capacities of the nautical radio network. This technique enables the receivers of deep-sea networks to efficiently approximate the channel impulse response (CIR) of the wireless communication channel so that the effects of the communication channel on the transmitting aggregated cluster head information can be proficiently understood and predicted for useful decision-making procedures. Two CE schemes named inter-symbol interference/ average noise reduction (ISI/ANR) and reweighted error-reducing (RER) are designed in this study for estimating maritime channels for supporting the communication performances of nautical radio networks in both severe and light-fading environmental conditions. In the proposed RER method, the Manhattan distance of the CIR of an orthodox adaptive estimator is taken, which is subsequently normalised by a stability constant ɛ whose responsibility is for correcting any potential numerical system instability that may arise during the updating stages of the estimation process. To decrease the received signal error, a log-sum penalty function is eventually multiplied by an adjustable leakage (ɛ ) ̈that provides additional stability to the oscillating channel behaviour. The performance of the proposed RER method is further strengthened and made resilient against channel effects by the introduction of a reweighting attractor that further contracts the mean square error of this proposed estimator. In the ISI/ANR technique, the effects of possible ISI that may arise from maritime transmissions is considered and transformed using a low-pass filter that is incorporated for eliminating the effects of channel noise possible effects of multipath propagation. The RER scheme offered superior CE performances in comparison to other customary techniques such as the adaptive recursive least squares and normalised least mean square method in addition to conventional linear approaches such as least squares, linear minimum mean square error and maximum-likelihood estimation method. The proposed ISI/ANR technique offered an improved MSE performance in comparison to all considered linear methods. Finally, from this study, we were able to establish that accurate CE methods can improve the QoS and QoE of nautical radio networks in terms of network data rate and system outage probability.
Thesis (PhD (Computer Engineering))--University of Pretoria, 2021.
University of Pretoria Doctoral research grant, South African National Research Foundation/Research and Innovation Support and Advancement (NRF/RISA) research grant. Center for Connected Intelligence, Advanced Sensor Networks research group, University of Pretoria.
Electrical, Electronic and Computer Engineering
PhD (Computer Engineering)
Unrestricted

In today’s scenario, energy efficiency has become one of the most crucial issues for Data Center Networks (DCN). This paper analyses the energy saving capability of a Data center network using Segment Routing (SR) based model within a Software Defined Network (SDN) architecture. Energy efficiency is measured in terms of number of links turned off and for how long the links remain in sleep mode. Apart from saving the energy by turning off links, our work further efficiently manages the traffic within the available links by using Per-packet based load balancing approach. Aiming to avoid congestion within DCN’s and increase the sleeping time of inactive links. An algorithm for deciding the particular set of links to be turned off within a network is presented. With the introduction of per-packet approach within SR/SDN model, we have successfully saved 21 % of energy within DCN topology. Results show that the proposed Per-packet SR model using Random Packet Spraying (RPS) saves more energy and provides better performance as compared to Per-flow based SR model, which uses Equal Cost Multiple Path (ECMP) for load balancing. But, certain problems also come into picture using per-packet approach, like out of order packets and longer end to end delay. To further solidify the effect of SR in saving energy within DCN and avoid previously introduced problems, we have used per-flow based Flow Reservation approach along with a proposed Flow Scheduling Algorithm. Flow rate of all incoming flows can be deduced using Flow reservation approach, which is further used by Flow Scheduling Algorithm to increase Bandwidth utilization Ratio of links. Ultimately, managing the traffic more efficiently and increasing the sleeping time of links, leading to more energy savings. Results show that, the energy savings are almost similar in per-packet based approach and per-flow based approach with bandwidth reservation. Except, the average sleeping time of links in per-flow based approach with bandwidth reservation decreases less severely as compared to per-packet based approach, as overall traffic load increases.

Sistemas elétricos possuem grande influência no desenvolvimento econômico mundial. Dada a importância da energia elétrica para nossa sociedade, os sistemas elétricos frequentemente são alvos de intrusões pela rede causadas pelas mais diversas motivações. Para minimizar ou até mesmo mitigar os efeitos de intrusões pela rede, estão sendo propostos mecanismos que aumentam o nível de segurança dos sistemas elétricos, como novos protocolos de comunicação e normas de padronização. Além disso, os sistemas elétricos estão passando por um intenso processo de modernização, tornando-os altamente dependentes de sistemas de rede responsáveis por monitorar e gerenciar componentes elétricos. Estes, então denominados Smart Grids, compreendem subsistemas de geração, transmissão, e distribuição elétrica, que são monitorados e gerenciados por sistemas de controle e aquisição de dados (SCADA). Nesta dissertação de mestrado, investigamos e discutimos a aplicabilidade e os benefícios da adoção de Redes Definidas por Software (SDN) para auxiliar o desenvolvimento da próxima geração de sistemas SCADA. Propomos também um sistema de detecção de intrusões (IDS) que utiliza técnicas específicas de classificação de tráfego e se beneficia de características das redes SCADA e do paradigma SDN/OpenFlow. Nossa proposta utiliza SDN para coletar periodicamente estatísticas de rede dos equipamentos SCADA, que são posteriormente processados por algoritmos de classificação baseados em exemplares de uma única classe (OCC). Dado que informações sobre ataques direcionados à sistemas SCADA são escassos e pouco divulgados publicamente por seus mantenedores, a principal vantagem ao utilizar algoritmos OCC é de que estes não dependem de assinaturas de ataques para detectar possíveis tráfegos maliciosos. Como prova de conceito, desenvolvemos um protótipo de nossa proposta. Por fim, em nossa avaliação experimental, observamos a performance e a acurácia de nosso protótipo utilizando dois tipos de algoritmos OCC, e considerando eventos anômalos na rede SCADA, como um ataque de negação de serviço (DoS), e a falha de diversos dispositivos de campo.
Power grids have great influence on the development of the world economy. Given the importance of the electrical energy to our society, power grids are often target of network intrusion motivated by several causes. To minimize or even to mitigate the aftereffects of network intrusions, more secure protocols and standardization norms to enhance the security of power grids have been proposed. In addition, power grids are undergoing an intense process of modernization, and becoming highly dependent on networked systems used to monitor and manage power components. These so-called Smart Grids comprise energy generation, transmission, and distribution subsystems, which are monitored and managed by Supervisory Control and Data Acquisition (SCADA) systems. In this Masters dissertation, we investigate and discuss the applicability and benefits of using Software-Defined Networking (SDN) to assist in the deployment of next generation SCADA systems. We also propose an Intrusion Detection System (IDS) that relies on specific techniques of traffic classification and takes advantage of the characteristics of SCADA networks and of the adoption of SDN/OpenFlow. Our proposal relies on SDN to periodically gather statistics from network devices, which are then processed by One- Class Classification (OCC) algorithms. Given that attack traces in SCADA networks are scarce and not publicly disclosed by utility companies, the main advantage of using OCC algorithms is that they do not depend on known attack signatures to detect possible malicious traffic. As a proof-of-concept, we developed a prototype of our proposal. Finally, in our experimental evaluation, we observed the performance and accuracy of our prototype using two OCC-based Machine Learning (ML) algorithms, and considering anomalous events in the SCADA network, such as a Denial-of-Service (DoS), and the failure of several SCADA field devices.

Software Defined Networking (SDN) has become increasingly popular in combination with Network Function Virtualization (NFV). SDN is a way to make a network more programmable and dynamic. However, in order to create a homogeneous network using this concept, legacy equipment will have to be substituted by SDN equipment, which is costly. To close the gap between the legacy world and SDN, we introduce the concept of a legacy Network Management System (NMS) that is connected to an SDN controller to perform service provisioning. This way, the NMS is capable of configuring both legacy as well as SDN networks to provide customers with the services that they have ordered, while still allowing for new SDN features in the SDN domain of the network. The main service we wish to provide using SDN is Service Function Chaining (SFC). Service provisioning consists of dynamically constructing a path through the ordered network services, in this case Virtual Network Functions (VNFs). This thesis focuses on the SDN controller and its interaction with the NMS. This project aims at configuring OpenFlow rules in the network using an SDN controller to perform SFC. Moreover, the focus will be on how to represent an SDN element and a service function chain in the legacy network NMS. The thesis also contains a discussion on what information should be exchanged between the management software and the controller. The management software used is called BECS, a system developed by Packetfront Software. Integrating SDN in BECS is done by creating a proof of concept, containing a full environment from the low level network elements to the NMS. By using a bottom-up approach for creating this proof of concept, the information that BECS is required to send to the SDN controller can be identified before designing and implementing the connection between these two entities. When sending the information, the NMS should be able to receive acknowledgement of successful information exchange or an error. However, when the proof of concept was created a problem arose on how to test and troubleshoot it. For this reason, a web Graphical User Interface (GUI) was created. This GUI shows the number of packets that have gone through a VNF. Because it is possible to see how many packets go through a VNF, one can see where a network issue occurs. The subsequent analysis investigates the impact of making such a GUI available for a network administrator and finds that the part of the network where the configuration error occurs can be narrowed down significantly.
Software Defined Networking (SDN) har blivit mer och mer populärt i kombination med Network Function Virtualization (NFV). SDN är en sätt för att göra ett nätverk mer programmerbart och dynamiskt. För att skapa ett homogent nätverk med detta koncept, behöver man dock ersätta traditionell utrustning med SDN utrustning som är dyr. För att stänga gapet mellan traditionella nätverk och SDN-världen, introducerar vi ett koncept med ett traditionell Network Management System (NMS) som är anslutet till en SDN-styrenhet för att utföra tjänsteprovisionering. På detta sätt kan NMS:et konfigurera både traditionella och SDN-nätverk, samt provisionera tjänster för kunderna medan nya SDN-funktioner möjliggörs i SDN-delen av nätverket. Den huvudsakliga tjänsten som vi vill lansera genom SDN är Service Function Chaining (SFC). Tjänsteprovisionering består av att konstruera en väg genom beställda tjänster, i detta fall Virtual Network Functions (VNFs). Detta examensarbete fokuserar huvusakligen på SDN-styrenheten och dess interaktion med NMS:et. Projektet syftar till att konfigurera OpenFlow regler i SDN-styrenheten för att utföra SFC. Dessutom fokuserar arbetet på hur man kan representera SDN-element och SFCs i ett traditionellt NMS. Vidare diskuteras vilken information som ska utbytas mellan NMS:et och SDNstyrenheten. NMS:et som ska vara användas är BECS, ett system utvecklat av Packetfront Software. Uppgiften löses genom att skapa ett proof of concept, som innehåller ett komplett system med alla komponenter från nätverkselement till NMS:et. Genom att använda en bottom-up-strategi för detta proof of concept kan informationen som BECS måste skicka till SDN styrenheten indentifieras, innan design och implementation av förbindelsen mellan enheterna kan utföras. När informationen är skickad ska NMS:et kunna hämta information om huruvida styrenheten fick informationen utan fel. Dock uppstår ett problem gällande hur man testar och felsöker detta proof of concept. Av denna anledning skapades ett web Graphical User Interface (GUI). Användargränssnittet visar antalet paket som går genom varje VNF, samt var i nätverket fel uppstår. Analysen undersöker hur stor effekten är för en nätverkadministrator och visar att området där fel kan uppstå begränsas avsevärt.

Parmi les architectures orientées contenu, l'architecture NDN (Named-Data Networking) a su agréger la plus importante communauté de chercheurs et est la plus aboutie pour un Internet du futur. Dans le cadre de l'architecture NDN, au cours de ce doctorat, nous nous sommes concentrés sur les mécanismes de routage adaptés à cette nouvelle vision du réseau. En effet, la capacité à acheminer une requête vers la destination est fondamentale pour qu'une architecture réseau soit fonctionnelle et cette problématique avait été très peu étudiée jusqu'alors. Ainsi, dans ce manuscrit, nous proposons le protocole de routage SRSC (SDN-based Routing Scheme for CCN/NDN), qui repose sur l'utilisation du paradigme des réseaux logiciels (Software-Defined Networks\\, SDN). SRSC utilise un contrôleur capable de gérer le plan de contrôle du réseau NDN. En centralisant l'ensemble des informations telles que la topologie du réseau, la localisation des différents contenus et le contenu des mémoires cache des nœuds du réseau, le contrôleur va pouvoir établir la meilleure route pour acheminer les requêtes vers le contenu. SRSC permet également un routage de type anycast, c'est à dire qu'il permet d'acheminer les requêtes vers le nœud le plus proche qui dispose des données, permettant d'optimiser la distribution des requêtes dans le réseau et de répartir la charge parmi tous les nœuds. De plus, SRSC utilise uniquement les messages Interest et Data de l'architecture NDN et tient son originalité du fait qu'il s'affranchit complètement de l'infrastructure TCP/IP existante. Dans un premier temps, SRSC a été évalué via simulation avec le logiciel NS-3 où nous l'avons comparé à la méthode d'inondation des requêtes, appelée flooding, initialement proposée par NDN. SRSC a ensuite été implanté dans NDNx, l'implantation open source de l'architecture NDN, puis déployé sur notre testbed utilisant la technologie Docker. Ce testbed permet de virtualiser des nœuds NDN et d'observer un réel déploiement de cette architecture réseau à large échelle. Nous avons ainsi évalué les performances de notre protocole SRSC sur notre testbed virtualisé et nous l'avons comparé au protocole NLSR, (Named-Data Link State Routing Protocol), le protocole de routage du projet NDN
Internet is a mondial content network and its use grows since several years. Content delivery such as P2P or video streaming generates the main part of the Internet traffic and Named Data Networks (NDN) appear as an appropriate architecture to satisfy the user needs. Named-Data Networking is a novel clean-slate architecture for Future Internet. It has been designed to deliver content at large scale and integrates several features such as in-network caching, security, multi-path. However, the lack of scalable routing scheme is one of the main obstacles that slow down a large deployment of NDN at an Internet-scale. As it relies on content names instead of host address, it cannot reuse the traditional routing scheme on the Internet. In this thesis, we propose to use the Software-Defined Networking (SDN) paradigm to decouple data plane and control plane and present SRSC, a new routing scheme for NDN based on SDN paradigm. Our solution is a clean-slate approach, using only NDN messages and the SDN paradigm. We implemented our solution into the NS-3 simulator and perform extensive simulations of our proposal. SRSC show better performances than the flooding scheme used by default in NDN. We also present a new NDN testbed and the implementation of our protocol SRSC, a Controlled-based Routing Scheme for NDN. We implemented SRSC into NDNx, the NDN implementation, and deployed it into a virtual environment through Docker. Our experiments demonstrate the ability of our proposal to forward Interest, while keeping a low computation time for the Controller and low delay to access Content. Moreover, we propose a solution to easily deploy and evaluate NDN network, and we compare SRSC with NLSR, the current routing protocol used in NDNx

Dissertação de mestrado integrado em Engenharia de Telecomunicações e Informática
O crescente uso de aplicações que geram altos volumes de tráfego motivou o desenvolvimento de novas abordagens de Engenharia de Tráfego que pudessem melhorar o desempenho e eficiência das infraestruturas de comunicação, e.g. redes dos ISPs (Internet Service Providers), Data Centers, etc. Neste contexto, a área denominada por Software Defined Networking (SDN) poderá ser útil para a definição de alguns mecanismos inovadores nestes cenários. Este paradigma, que tem sido recentemente explorado, oferece novas tecnologias e protocolos proporcionando novas oportunidades para uma gestão mais expedita e eficiente das infraestruturas de rede. Este trabalho propõe-se contribuir para o desenvolvimento de mecanismos de Engenharia de Tráfego na área das SDN. Os mecanismos a estudar estarão orientados para tarefas de balanceamento de carga em redes de Data Centers e implementados com a ferramenta de emulação Mininet. Para tal, será feito inicialmente um estudo das diversas arquiteturas de redes de Data Centers, dos conceitos que englobam o paradigma SDN e uma análise das estratégias de balanceamento de carga já existentes. De seguida será desenvolvida uma bancada de testes e implementados alguns mecanismos de balanceamento de carga. Posteriormente, serão efetuados testes de desempenho aos mecanismos desenvolvidos
The increasing use of applications that generate high traffic volumes prompted the development of new approaches to Traffic Engineering field that could improve the performance and efficiency of communication infrastructures, e.g. ISPs (Internet Service Providers) networks, Data Centers, etc. In this context, arises the area of Software Defined Networking (SDN) that may be helpful to define some innovative mechanisms in such scenarios. This paradigm, which has recently been explored, offers new technologies and protocols providing new opportunities for a more expeditious and efficient traffic management strategies in network infrastructures. This work aims to contribute to the development of Traffic Engineering mechanisms in the area of SDN. The mechanisms to develop will be oriented to load balancing tasks in Data Centers networks and implemented with the Mininet emulation tool. It will be made initially a study of the various Data Center networks architectures, concepts that encompass the SDN paradigm and an analysis of existing load balancing strategies. Then it will developed a test bench and implemented some load balancing mechanisms. Subsequently, performance tests will be made to the developed mechanisms.

A dissertation submitted to the Faculty of Engineering and the Built Environment, University of the Witwatersrand, Johannesburg, in fulfilment of the requirements for the degree of Master of Science in Engineering, 2016
Data-intensive research computing requires the capability to transfer les over long distances at high throughput. Stateful rewalls introduce su cient packet loss to prevent researchers from fully exploiting high bandwidth-delay network links [25]. To work around this challenge, the science DMZ design [19] trades o stateful packet ltering capability for loss-free forwarding via an ordinary Ethernet switch. We propose a novel extension to the science DMZ design, which uses an SDN-based rewall. This report introduces NFShunt, a rewall based on Linux's Net lter combined with OpenFlow switching. Implemented as an OpenFlow 1.0 controller coupled to Net lter's connection tracking, NFShunt allows the bypass-switching policy to be expressed as part of an iptables rewall rule-set. Our implementation is described in detail, and latency of the control-plane mechanism is reported. TCP throughput and packet loss is shown at various round-trip latencies, with comparisons to pure switching, as well as to a high-end Cisco rewall. Cost, as well as operations and maintenance aspects, are compared and analysed. The results support reported observations regarding rewall introduced packet-loss, and indicate that the SDN design of NFShunt is a technically viable and cost-e ective approach to enhancing a traditional rewall to meet the performance needs of data-intensive researchers
GS2016

碩士
國立臺灣科技大學
電機工程系
105
With the rapid development of the Internet, the most common network architecture is Client/Server which is not afford to the growing of users. In order to solve this issue, Information-centric networking (ICN) was developed to satisfy the users’ requirements and to reduce the loading of server. ICN is a new kind of Client/Server network. By insert several servers in network environment and architecture of ICN which is based on named information (or content or data) that can comes with potential for a wide range of benefits such as promote the delivery speed and ability to accommodate large number of user. Software-Defined Networking (SDN) used the centralized control architecture is different from the traditional network, which the control planes and data planes are decoupled. SDN allows the network to be configured and managed more flexible and programmable. This work combines architecture of ICN and Northbound Interface (NBI) of SDN to establish network environment. The Data Center Manager provides several functions, such as job distribution, system analysis, loading control and content deployment. And the route path is planned by SDN Controller. This work develops a Data Center Manager in Software Defined Information Centric Networking (SDICN) for solve the problem of traditional Client/Server network. It is focus on job distribution and loading control function. First, the system calculates some variables that must be calculated to make the decisions to assign server. Second, set the threshold of the utilization state and analysis the load value of servers. Then, according the results to allocating server to clients. The results demonstrate that the server which is heavy load can be controlled until its loading is below the threshold. The system assigns the job to the other server which utilization is at normal level.

abstract: The reliable operation of critical infrastructure systems is of significant importance to society. The power grid and the water distribution system are two critical infrastructure systems, each of which is facilitated by a cyber-based supervisory control and data acquisition (SCADA) system. Although critical infrastructure systems are interdependent with each other due to coupling (a power grid may be the electrical supply for a water distribution system), the corresponding SCADA systems operated independently and did not share information with each other. Modern critical infrastructure systems tend to cover a larger geographic area, indicating that a SCADA control station supervising a small area is far from meeting the demands. In this thesis, the above-mentioned problem is addressed by building a middleware to facilitate reliable and flexible communications between two or more SCADA systems. Software Defined Networking (SDN), an emerging technology providing programmable networking, is introduced to assist the middleware. In traditional networks, network configurations required highly skilled personnel for configuring many network elements. However, SDN separates the control plane from the data plane, making network intelligence logically centralized, and leaving the forwarding switches with easy commands to follow. In this way, the underlying network infrastructures can be easily manipulated by programming, supporting the future dynamic network functions. In this work, an SDN-assisted middleware is designed and implemented with open source platforms Open Network Operating System (ONOS) and Mininet, connecting the power grids emulator and water delivery and treatment system (WDTS) emulator EPANet. Since the focus of this work is on facilitating communications between dedicated networks, data transmissions in backbone networks are emulated. For the interfaces, a multithreaded communication module is developed. It not only enables real-time information exchange between two SCADA control centers but also supports multiple-to-multiple communications simultaneously. Human intervention is allowed in case of emergency. SDN has many attractive benefits, however, there are still obstacles like high upgrade costs when implementing this technique. Therefore, rather than replace all the routers at once, incremental deployment of hybrid SDN networks consisting of both legacy routers and programmable SDN switches is adopted in this work. We emulate on the ratio of SDN deployment against the performance of the middleware and the results on the real dataset show that a higher fraction of SDN results in a higher reliability and flexibility of data transmissions. The middleware developed may contribute to the development of the next-generation SCADA systems.
Dissertation/Thesis
Masters Thesis Electrical Engineering 2018

Data Centers (DCs) have become an intrinsic element of emerging technologies such as big data, artificial intelligence, cloud services; all of which entails interconnected and sophisticated computing and storage resources. Recent studies of conventional data center networks (DCNs) revealed two key challenges: a biased distribution of inter-rack traffic and unidentified flow classes: delay sensitive mice flows (MFs) and throughput-hungry elephant flows (EFs). Unfortunately, existing DCN topologies support only uniform distribution of capacities, provide limited bandwidth flexibilities and lacks of efficient flow classification mechanism. Fortunately, wireless DCs can leverage wireless communication emerging technologies, such as multi-terabit free-space optic (FSO), to provide flexible and reconfigurable DCN topologies. It is worth noting that indoor FSO links are less vulnerable to outdoor FSO channel impairments. Consequently, indoor FSO links are more robust and can offer high bandwidths with long stability, which can further be enhanced with wavelength division multiplexing (WDM) methods. In this thesis, we alleviate the bandwidth inefficiency by FSO links that have the desired agility by allocating the transmission powers to adapt link capacity for dynamically changing traffic conditions, and to reduce the maintenance costs and overhead. While routing the two classes along the same path causes unpleasant consequences, the DC researchers proposed traffic management solutions to treat them separately. However, the solutions either suffer from packet reordering and high queuing delay, or lack of accurate visibility and estimation on end-to-end path status. Alternatively, we leverage WDM to design elastic network topologies (i.e., part of the wavelengths are assigned to route MFs and the remaining for EFs). Since bandwidth demands can be lower than available capacity of WDM channels, we use traffic grooming to aggregate multiple flows into a larger flow and to enhance the link utilization. On the other hand, to reap the benefits of the proposed WDM isolated topology, an accurate and fast EF detection mechanism is necessary. Accordingly, we propose a scheme that uses TCP communication behavior and collect indicative packets for its flow classification algorithm, it demonstrates perfect flow classification accuracy, and is in order of magnitudes faster than existing solutions with low communication and computation overhead.