Browsing by Author "Hsieh, Yi-Hsuan"

Now showing 1 - 2 of 2

Design and Implementation of a Packet-in Buffer System for SDN Switches
(2017-01-01)
Wang, Shie-Yuan
;
Chang, Chun-Hao
;
Hsieh, Yi-Hsuan
;
Chou, Chih-Liang
;
資訊工程學系
In this paper, we designed, implemented, and evaluated the performance of a Packet-in packet buffer system in an SDN bare metal commodity switch and Open vSwitch. In our approach, only the first packet of a new flow needs to be sent to the SDN controller via a Packet-in packet and all subsequent packets can be temporarily stored in the Packet-in packet buffer system until the arrival of the flow rule. Our experimental results show that our approach effectively prevents packets of a new flow from being dropped when they pass an SDN switch, significantly reduces the switch CPU usage, greatly reduces the control plane bandwidth usage, and greatly reduces the Packet-in packet processing load imposed on the SDN controller.
Running an IDS Virtual Network Function inside an SDN Bare Metal Commodity Switch
(2018-01-01)
Wang, Shie-Yuan
;
Hsieh, Yi-Hsuan
;
資訊工程學系
;
Department of Computer Science
In this paper, we design, implement, and evaluate the real performance of running multiple Snort IDS (intrusion detection system) VNFs (virtual network function) inside a bare metal commodity switch. In the past, normally people ran Snort on a stand-alone server and configure switches to direct packets to it for inspection. However, more recently there is a trend to implement and run VNF directly inside a switch for immediate and intelligent processing of packets. Our work of running Snort directly inside a bare metal commodity switch as a VNF is the first work of its kind in the world. In this paper, we present real performance results and important findings from this innovative work.