<link rel="stylesheet" href="styles.cf390c6bfbe7555f.css"> Skip to main content

學術出版;;Publications

Permanent URI for this communityhdl:11536/1

收集所有交通大學研究人員與學生個人或團體所發表之各項學術著作,涵蓋期刊論文、教師專書、學位論文等項。;;Collections of Publications of NCTU Researchers and Students Like Journal Papers and Thesis.

Browse

Search Results

Now showing 1 - 6 of 6
  • Item type:Item,
    Dynamic Switch Migration in Distributed Software-Defined Networks to Achieve Controller Load Balance
    (2019-03-01)
    Xu, Yang
    ;
    Cello, Marco
    ;
    Wang, I-Chih
    ;
    Walid, Anwar
    ;
    Wilfong, Gordon
    Multiple distributed controllers have been used in software-defined networks (SDNs) to improve scalability and reliability, where each controller manages one static partition of the network. In this paper, we show that dynamic mapping between switches and controllers can improve efficiency in managing traffic load variations. In particular, we propose balanced controller (BalCon) and BalConPlus, two SDN switch migration schemes to achieve load balance among SDN controllers with small migration cost. BalCon is suitable for the scenarios where the network does not require a serial processing of switch requests. For other scenarios, BalConPlus is more suitable, as it is immune to the switch migration blackout and does not cause any service disruption. Simulations demonstrate that BalCon and BalConPlus significantly reduce the load imbalance among SDN controllers by migrating only a small number of switches with low computation overhead. We also build a prototype testbed based on the open-source SDN framework RYU to verify the practicality and effectiveness of BalCon and BalConPlus. Experiment confirms the results of the simulations. It also shows that BalConPlus is immune to switch migration blackout, an adverse effect in the baseline BalCon.
  • Item type:Item,
    Performance modeling and comparison of NFV integrated with SDN: Under or aside?
    (2018-07-01)
    Fahmin, Ahmed
    ;
    Lai, Yuan-Cheng
    ;
    Hossain, Md Shohrab
    ;
    Lin, Ying-Dar
    ;
    資訊工程學系
    Software Defined Networking (SDN) focuses on the separation of data and control plane, while network function virtualization (NFV) decouples network functions from underlying hardware. Combining SDN with NFV would have many benefits, but the problem is how to integrate them. There are two possible architectures for such integration: the controller interacts with virtualized network functions (VNFs), or the switch interacts with VNFs. In this paper, the former is referred to as NFV under the controller (NFV_C) while the latter is called NFV aside the controller (NFV_AC). To the best of our knowledge, there is no analytical model for mathematically investigating the performance of such architectures. This paper therefore reports on the analytical modeling of SDN with NFV under or aside the controller. We model and analyze these two SDN + NFV architectures using an M/M/1 queuing model and validate our analysis with various simulations. We show that the analytical results match the simulation results very well. Furthermore, a packet delay reduction of 68.83% can be achieved for NFVAC over NFVC, meaning that NFVAC is a better architecture for integrating SDN with NFV. We also consider feedback from the VNF to the switch. For low loads there is delay increase of 35.42% for high feedback (90%) in comparison with low feedback (10%). In the case of high loads we recorded a delay increase of 66.64%.
  • Item type:Item,
    Towards load-balanced service chaining by Hash-based Traffic Steering on Softswitches
    (2018-05-01)
    Thai, Minh-Tuan
    ;
    Lin, Ying-Dar
    ;
    Lin, Po-Ching
    ;
    Lai, Yuan-Cheng
    ;
    資訊工程學系
    In this paper we study Hash-based Traffic Steering on Softswitches (HATS) which is a load balancing scheme for chaining virtualized network functions (VNFs), with the aim of mitigating the control and data plane overheads of existing methods. Our method uses a flow-hashing technique applied to softswitches to carry out server and network load balancing without triggering the controller. By exploiting the advantages of HATS, we then derive two algorithms, HATS with Flowcell-based Multipathing (HATS-Flowcell) and Dynamic Weight Adjustment for HATS (D-HATS), to address hash collision problems which downgrade system performance. The first algorithm divides an elephant flow into various equal-size flowcells, which are distributed over network paths as individual flows. The second algorithm periodically updates the hashing weights of VNFs and network paths according to their current load status. Our implementation demonstrates that HATS can be readily deployed on commodity network hardware. Furthermore, our experimental results show that D-HATS has roughly the same load balancing performance with Least Load First (LLF), a controller-based service chaining algorithm; while significantly reducing the number of flow entries and service chaining time by 54% and 93%.
  • Item type:Item,
    Traffic-aware Load Balancing for M2M Networks Using SDN
    (2014)
    Chen, Yu-Jia
    ;
    Shen, Yi-Hsin
    ;
    Wang, Li-Chun
    ;
    電機工程學系
    ;
    Department of Electrical and Computer Engineering
    To relieve the heavy loading caused by burst machine-to-machine (M2M) traffic and also satisfy various quality of service (QoS) requirements, load balancing techniques are often introduced in M2M networks. In recent years, software defined networking (SDN) has shown the possibility of improving load balancing technique. In this paper, we propose traffic-aware load balancing mechanism for M2M networks using SDN. The proposed mechanism can satisfy different QoS requirements of M2M traffic by instant traffic identification and dynamic traffic rerouting, which leverage the capability of SDN to dynamically monitor and control the entire network.
  • Item type:Item,
    PathMon: Path-Specific Traffic Monitoring in OpenFlow-Enabled Networks
    (2016)
    Wang, Ming-Hung
    ;
    Wu, Shao-You
    ;
    Yen, Li-Hsing
    ;
    Tseng, Chien-Chao
    ;
    資訊工程學系
    Software-defined networking (SDN) aims to provide open interfaces, such as OpenFlow protocol, that enable programmable flow-based network management. Meanwhile, OpenFlow-enabled switches provide rich statistical information for specific flows, tables, and ports which facilitates various network management tasks. However, current traffic monitoring techniques collecting statistics from existing flow entries do not provide the flexibility of querying path-specific flow statistics at any aggregation levels. In this paper, we proposes PathMon which encodes flow and path information as tags to provide that flexibility and corresponding link-to-link correlations for further anomaly detection or traffic engineering tasks. Our implementation runs on commodity switches which are compliant to OpenFlow 1.3 specification and requires only a few monitoring entries for each switch along monitored paths and un-tag entries for each edge switch.
  • Item type:Item,
    An Efficient Flow Control Approach for SDN-based Network Threat Detection and Migration Using Support Vector Machine
    (2016)
    Wang, Ping
    ;
    Lin, Hsiao-Chung
    ;
    Lin, Wen-Hui
    ;
    Chao, Kuo-Ming
    ;
    Lo, Chi-Chun
    Most existing approaches for solving the network threat problems focus on the specific security mechanisms, for example, network intrusion detection system (NIDS) detection, firewall configuration, rather than on flow management approaches to defend network threats with an SDN (Software Defined Networking) architecture. Accordingly, this study proposes an improved behaviour-based SVM (support vector machine) with learning algorithm for use in the security monitoring system (SMS) to categorize network threats for network intrusion detection system. The model also adopted the ID3 decision tree theory to outrank raw features and determine the most qualified features to train support vector classifier (SVC) considering the overall detection precision rate of experiments which speeds up the learning of normal and intrusive patterns and and increases the accuracy of detecting intrusion. By using sFlow collector and analyzer associated with sFlow-RT toolset, the experimental results proved that the SMS enables a defender to classify the network threats with defence strategies and defend network threats.