An adaptable rule placement for software-defined networks

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2014, Pages 88-99

  Zhang, Shuyuan ^a   Ivančić, Franjo ^b   Lumezanu, Cristian ^c   Yuan, Yifei ^d   Gupta, Aarti ^c   Malik, Sharad ^a  

^a PRINCETON UNIVERSITY   (United States)

^b GOOGLE INC   (United States)

^c NEC LABORATORIES AMERICA   (United States)

^d UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

Big Switch Abstraction; Distributed Firewall; Rule Placement; SDN

Indexed keywords

ABSTRACTING; SOFTWARE DEFINED NETWORKING; SPECIFICATIONS; TERNARY CONTENT ADRESSABLE MEMORY;

BIG SWITCH ABSTRACTION; CENTRALIZED CONTROLLERS; DISTRIBUTED FIREWALL; INTEGER LINEAR PROGRAMMING; NETWORK CONFIGURATION; NETWORK OPERATING SYSTEM; RULE PLACEMENT; TERNARY CONTENT ADDRESSABLE MEMORY;

INTEGER PROGRAMMING;

EID: 84912123573     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2014.24     Document Type: Conference Paper

References (34)

1. N. Kang, Z. Liu, J. Rexford, and D. Walker, "Optimizing the one big switch abstraction in software-defined networks," Proceedings of ACM CoNEXT, 2013.
2. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner, " Openflow: enabling innovation in campus networks," SIGCOMM Comput. Commun. Rev., Mar. 2008.
3. N. Gude, T. Koponen, J. Pettit, B. Pfaff, M. Casado, N. McKeown, and S. Shenker, " Nox: towards an operating system for networks," SIGCOMM Comput. Commun. Rev., Jul. 2008.
4. N. Foster, R. Harrison, M. J. Freedman, C. Monsanto, J. Rexford, A. Story, and D. Walker, " Frenetic: A network programming language," SIGPLAN Not., Sep. 2011.
5. Project Floodlight, Dec. 2013. [Online]. Available: http://www.projectfloodlight.org
6. POX, Dec. 2013. [On line]. Available: http://www.noxrepo. org/pox/about-pox/
7. S. Zhang, A. Mahmoud, S. Malik, and S. Narain, "Verification and synthesis of firewalls using sat and qbf, " in The 2nd International Workshop on Rigorous Protocol Engineering, Oct. 2012.
8. A. X. Liu, C. R. Meiners, and Y. Zhou, "All-match based complete redundancy removal for packet classifiers in TCAMs, " in Proceedings of the 27th Annual IEEE Co nference on Computer Communications (Infocom), April 2008.
9. A. Liu, E. Torng, and C. Meiners, "Firewall compressor: An algorithm for minimizing firewall policies, " in INFOCOM 2008. The 27th Conference on Computer Communications. IEEE, april 2008.
10. C. R. Meiners, A. X. Liu, and E. Torng, "Bit weaving: A nonprefix approach to compressing packet classifiers in tcams, " IEEE/ACM Trans. Netw., Apr. 2012.
11. C. Meiners, A. Liu, and E. Torng, "Tcam razor: A systematic approach towards minimizing packet classifiers in tcams, " in Network Protocols, 2007. ICNP 2007. IEEE International Conference on, 2007.
12. D. A. Applegate, G. Calinescu, D. S. Johnson, H. Karloff, K. Ligett, and J. Wang, " Compressing rectilinear pictures and minimizing access control lists," in Proceedings of the Eighteenth Annual ACM-SIAM Symposium on Discrete Algorithms, ser. SODA '07, 2007.
13. M. Yu, J. Rexford, M. J. Freedman, and J. Wang, " Scalable flow-based networking with difane," SIGCOMM Comput. Commun. Rev., Aug. 2010.
14. M. Moshref,M. Yu,A. Sharma,R. Govindan vcrib: Virtualized rule management in the cloud in Proceedings of the 4th USENIX Conference on Hot Topics in Cloud Ccomputing, ser. HotCloud'12 2012.
15. Y. Kanizo, D. Hay, and I. Keslassy, "Palette: Distributing tables in software-defined networks, " IEEE Infocomm Miniconference, 2013.
16. L. De Moura and N. Bjørner, "Satisfiability modulo theories: Introduction and applications, " Commun. ACM, Sep. 2011.
17. E. Boros and P. L. Hammer, "Pseudo-boolean optimization, " Discrete applied mathematics, 2002.
18. R. Sherwood, G. Gibb, K.-K. Yap, G. Appenzeller, M. Casado, N. McKeown, and G. Parulkar, " Flowvisor: A network virtualization layer," OpenFlow, Tech. Rep., 2009. [Online]. Available: http://archive.openflow.org/downloads/technicalreports/openflow-tr-2009-1-flowvisor.pdf
19. A. R. Curtis, J. C. Mogul, J. Tourrilhes, P. Yalagandula, P. Sharma, and S. Banerjee, " Devoflow: Scaling flow management for high-performance networks," SIGCOMM Comput. Commun. Rev., Aug. 2011.
20. Google Compute Engine, Apr. 2014. [Online]. Available: https://developers.google.com/compute/docs/networking#firewalls
21. Amazon EC2 Security Group, Apr. 2014. [Online]. Available: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html
22. iptables, 19 98. [Online]. Available: http://www.netfilter.org/projects/iptables/index.html
23. Open vSwitch, 2011. [Online]. Available: http://openvswitch. org
24. P. Kazemian, M. Chang, H. Zeng, G. Varghese, N. McKeown, and S. Whyte, " Real time network policy checking using header space analysis," in Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation, ser. NSDI'13, 2013.
25. CPLEX, Dec. 2013. [Online]. Available: http://www-01.ibm.com/software/commerce/optimization/cplex-optimizer/
26. M. Al-Fares, A. Loukissas, and A. Vahdat, "A scalable, commodity data center network architecture, " SIGCOMM Comput. Commun. Rev., Aug. 2008.
27. D. Taylor and J. Turner, "Classbench: a packet classification benchmark, " in INFOCOM 2005. 24th Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings IEEE, march 2005.
28. P. Gupta and N. McKeown, "Packet classification on multiple fields, " SIGCOMM Comput. Commun. Rev., Aug. 1999.
29. Z. A. Qazi, C.-C. Tu, L. Chiang, R. Miao, V. Sekar, and M. Yu, " Simple-fying middlebox policy enforcement using sdn," in SIGCOMM '2013, 2013.
30. R. Soulé, S. Basu, R. Kleinberg, E. G. Sirer, and N. Foster, "Managing the network with merlin, " in HotNets '2013, ser. HotNets-XII, 2013.
31. A. Khurshid, X. Zou, W. Zhou, M. Caesar, and P. B. Godfrey, " Veriflow: Verifying network-wide invariants in real time," in Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation, ser. NSDI'13, 2013.
32. N. Foster, R. Harrison, M. J. Freedman, C. Monsanto, J. Rexford, A. Story, and D. Walker, " Frenetic: A network programming language," SIGPLAN Not., Sep. 2011.
33. C. Monsanto, J. Reich, N. Foster, J. Rexford, and D. Walker, " Composing software-defined networks," in Proceedings of the 10th USENIX Conference on Networked Systems Design and Implementation, ser. nsdi'13, 2013.
34. A. Voellmy, J. Wang, Y. R. Yang, B. Ford, and P. Hudak, " Maple: Simplifying sdn programming using algorithmic policies," SIGCOMM Comput. Commun. Rev., Aug. 2013.