Design and Implementation of Monitoring Schemes for Software-Defined Routing over a Federated Multi-domain SDN Testbed

Emerging Software-Defined Networking (SDN) paradigm has been widely affecting most networking fields. However, the real-world SDN application for inter-domain routing management is still limited since the routing exchange among wide-area networks is quite complicate due to the extreme scale of global Internet connectivity. Several SDN-leveraged routing ideas are being proposed to improve the routing exchange among wide-area networks. Thus, in this paper, an on-going experience for experimenting and validating the inter-domain routing proposals over OF@TEIN federated testbed in Asia is shared. By focusing on the design and implementation of monitoring deployment for visibility support, we try to identify practical key points and provide improved monitoring for validating the performance and anomaly of the exchange. Other design considerations are also discussed together with possible future research directions

The Software Architecture of a Virtual Distributed Computing Environment

The requirements of grand challenge problems and the deployment of gigabit networks makes the network computing framework an attractive and cost effective computing environment with which to interconnect geographically distributed processing and storage resources. Our project, Virtual Distributed Computing Environment (VDCE), provides a problem-solving environment for high-performance distributed computing over wide area networks. VDCE delivers well-defined library functions that relieve end-users of tedious task implementations and also support reusability. In this paper we present the conceptual design of VDCE software architecture, which is defined in three modules: a) the Application Editor, a user-friendly application development environment that generates the Application Flow Graph (AFG) of an application; b) the Application Scheduler, which provides an efficient task-to-resource mapping of AFG; and c) the VDCE Runtime System, which is responsible for running and managing application execution and monitoring the VDCE resources

Enabling data analytics and machine learning for 5G services within disaggregated multi-layer transport networks

Recent advances, related to the concepts of Artificial Intelligence (AI) and Machine Learning (ML) and with applications across multiple technology domains, have gathered significant attention due, in particular, to the overall performance improvement of such automated systems when compared to methods relying on human operation. Consequently, using AI/ML for managing, operating and optimizing transport networks is increasingly seen as a potential opportunity targeting, notably, large and complex environments.Such AI-assisted automated network operation is expected to facilitate innovation in multiple aspects related to the control and management of future optical networks and is a promising milestone in the evolution towards autonomous networks, where networks self-adjust parameters such as transceiver configuration.To accomplish this goal, current network control, management and orchestration systems need to enable the application of AI/ML techniques. It is arguable that Software-Defined Networking (SDN) principles, favouring centralized control deployments, featured application programming interfaces and the development of a related application ecosystem are well positioned to facilitate the progressive introduction of such techniques, starting, notably, in allowing efficient and massive monitoring and data collection.In this paper, we present the control, orchestration and management architecture designed to allow the automatic deployment of 5G services (such as ETSI NFV network services) across metropolitan networks, conceived to interface 5G access networks with elastic core optical networks at multi Tb/s. This network segment, referred to as Metro-haul, is composed of infrastructure nodes that encompass networking, storage and processing resources, which are in turn interconnected by open and disaggregated optical networks. In particular, we detail subsystems like the Monitoring and Data Analytics or the in-operation planning backend that extend current SDN based network control to account for new use cases.Peer ReviewedPostprint (author's final draft

Application Specific Processor for Stateful Network Traffic Processing

Bakalářská práce se zabývá návrhem a implementací aplikačně specifického procesoru pro vysokorychlostní stavové měření síťových toků. Hlavním cílem je vytvoření komplexního systému pro akceleraci různých aplikací z oblasti monitorování a bezpečnosti počítačových sítí. Aplikačně specifický procesor tvoří hardwarovou část systému implementovanou v FPGA na akcelerační síťové kartě. Návrh procesoru je proveden s ohledem na nasazení na sítích o rychlostech 100 Gb/s a je založen na unikátní kombinaci rychlosti hardwarového zpracování a flexibility softwarového řízení vycházející z konceptu softwarově definovaného monitorování (SDM). Vytvořený systém prošel funkční verifikací a v rámci hardwarového testování byla ověřena jeho reálná propustnost a další výkonové parametry.This bachelor's thesis deals with the design and implementation of an application-specific processor for high-speed network traffic processing. The main goal is to provide complex system for hardware acceleration of various network security and monitoring applications. The application-specific processor (hardware part of the system) is implemented on an FPGA card and has been designed with respect to be used in 100 Gbps networks. The design is based on the unique combination of high-speed hardware processing and flexible software control using a new concept called Software Defined Monitoring (SDM). The performance and throughput of the proposed system has been verified and measured.

IoT protocols, architectures, and applications

The proliferation of embedded systems, wireless technologies, and Internet protocols have made it possible for the Internet-of-things (IoT) to bridge the gap between the physical and the virtual world and thereby enabling monitoring and control of the physical environment by data processing systems. IoT refers to the inter-networking of everyday objects that are equipped with sensing, computing, and communication capabilities. These networks can collaborate to autonomously solve a variety of tasks. Due to the very diverse set of applications and application requirements, there is no single communication technology that is able to provide cost-effective and close to optimal performance in all scenarios. In this chapter, we report on research carried out on a selected number of IoT topics: low-power wide-area networks, in particular, LoRa and narrow-band IoT (NB-IoT); IP version 6 over IEEE 802.15.4 time-slotted channel hopping (6TiSCH); vehicular antenna design, integration, and processing; security aspects for vehicular networks; energy efficiency and harvesting for IoT systems; and software-defined networking/network functions virtualization for (SDN/NFV) IoT

IoT protocols, architectures, and applications

The proliferation of embedded systems, wireless technologies, and Internet protocols have made it possible for the Internet-of-things (IoT) to bridge the gap between the physical and the virtual world and thereby enabling monitoring and control of the physical environment by data processing systems. IoT refers to the inter-networking of everyday objects that are equipped with sensing, computing, and communication capabilities. These networks can collaborate to autonomously solve a variety of tasks. Due to the very diverse set of applications and application requirements, there is no single communication technology that is able to provide cost-effective and close to optimal performance in all scenarios. In this chapter, we report on research carried out on a selected number of IoT topics: low-power wide-area networks, in particular, LoRa and narrow-band IoT (NB-IoT); IP version 6 over IEEE 802.15.4 time-slotted channel hopping (6TiSCH); vehicular antenna design, integration, and processing; security aspects for vehicular networks; energy efficiency and harvesting for IoT systems; and software-defined networking/network functions virtualization for (SDN/NFV) IoT

Cooperative Learning for Disaggregated Delay Modeling in Multidomain Networks

Accurate delay estimation is one of the enablers of future network connectivity services, as it facilitates the application layer to anticipate network performance. If such connectivity services require isolation (slicing), such delay estimation should not be limited to a maximum value defined in the Service Level Agreement, but to a finer-grained description of the expected delay in the form of, e.g., a continuous function of the load. Obtaining accurate end-to-end (e2e) delay modeling is even more challenging in a multi-operator (Multi-AS) scenario, where the provisioning of e2e connectivity services is provided across heterogeneous multi-operator (Multi-AS or just domains) networks. In this work, we propose a collaborative environment, where each domain Software Defined Networking (SDN) controller models intra-domain delay components of inter-domain paths and share those models with a broker system providing the e2e connectivity services. The broker, in turn, models the delay of inter-domain links based on e2e monitoring and the received intra-domain models. Exhaustive simulation results show that composing e2e models as the summation of intra-domain network and inter-domain link delay models provides many benefits and increasing performance over the models obtained from e2e measurements

Intelligent Autonomous Vehicles in digital supply chains: A framework for integrating innovations towards sustainable value networks

The principal objective of this research is to provide a framework that captures the main software architecture elements for developing highly customized simulation tools that support the effective integration of Intelligent Autonomous Vehicles (IAVs) in sustainable supply networks, as an emerging field in the operations management agenda. To that end, the study's contribution is fourfold including: (i) a review of software simulation tools and platforms used in assessing the performance of IAVs interlinked with sustainability ramifications in supply chain (SC) ecosystems, (ii) an integrated software framework for monitoring and assessing the sustainability performance of SCs defined by the utilisation of innovative IAVs in operations, (iii) a translation of the proposed SC framework into a corresponding software application through a robust five-stage stepwise process, and (iv) a demonstration of the developed software tool through its application on the case of an IAV system operating in a customisable warehouse model. Our analysis highlights the flexibility resulting from a decentralised software management architecture, thus enabling the dynamic reconfiguration of a SC network. In addition, the developed pilot simulation tool can assist operations managers in capturing the operational needs of facilities and assessing the performance of IAV systems while considering sustainability parameters

Reactive Security for SDN/NFV-enabled Industrial Networks leveraging Service Function Chaining

The innovative application of 5G core technologies, namely Software Defined Networking (SDN) and Network Function Virtualization (NFV), can help reduce capital and operational expenditures in industrial networks. Nevertheless, SDN expands the attack surface of the communication infrastructure, thus necessitating the introduction of additional security mechanisms. These major changes could not leave the industrial environment unaffected, with smart industrial deployments gradually becoming a reality; a trend that is often referred to as the 4th industrial revolution or Industry 4.0. A wind park is a good example of an industrial application relying on a network with strict performance, security, and reliability requirements, and was chosen as a representative example of industrial systems. This work highlights the benefit of leveraging the flexibility of SDN/NFV-enabled networks to deploy enhanced, reactive security mechanisms for the protection of the industrial network, via the use of Service Function Chaining. Moreover, the implementation of a proof-of-concept reactive security framework for an industrial-grade wind park network is presented, along with a performance evaluation of the proposed approach. The framework is equipped with SDN and Supervisory Control and Data Acquisition (SCADA) honeypots, modelled on and deployable to the wind park, allowing continuous monitoring of the industrial network and detailed analysis of potential attacks, thus isolating attackers and enabling the assessment of their level of sophistication. Moreover, the applicability of the proposed solutions is assessed in the context of the specific industrial application, based on the analysis of the network characteristics and requirements of an actual, operating wind park