Aris Cahyadi Risdianto

Running lifecycle experiments over SDN-enabled OF@TEIN testbed

Managing the lifecycle of service-realization experiments in Future Internet testbed environments is very challenging due to the unbounded scope of user-driven experiments. The lifecycle of experiments should be carefully designed and managed among users and operators so that tasks and responsibilities are well-defined for all experiment stages. The states of involved resources should also be appropriately managed to streamline the experiment lifecycle. In this paper, by considering these issues, we discuss the realization of lifecycle experiments over SDN (Software-Defined Networking)-enabled OF@TEIN (OpenFlow @ Trans-Eurasian Information Network). In order to partially automate the lifecycle experiments, we are working on the automated resource provisioning and experiment execution. To illustrate current progress, we demonstrate prototype lifecycle experiments that attempt to link bandwidth measurements and the automated re-installation and reconfiguration of broken resource node(s).

Prototyping Media Distribution Experiments over OF@TEIN SDN-enabled Testbed

The lifecycle of service realization experiment is composed of multiple stages, where tasks and responsibilities are well-defined between users and operators. In this paper, we prototype media distribution experiments over an OF@TEIN SDN (Software-Defined Networking)-enabled testbed while paying attention to the automated resource provisioning and experiment execution.

Suspicious Flow Forwarding for Multiple Intrusion Detection Systems on Software-Defined Networks

In recent years, there have been an increasing number of attacks on networks, such as the distributed denial-of-service attack. However, the traditional network is not sufficiently flexible to control the huge amount of traffic that now passes through an intrusion detection system. With SDN, which separates control planes and data planes for programmability, elasticity, and simplicity, it becomes possible to force traffic to pass through an IDS by simply rerouting or mirroring traffic to an IDS. This article focuses on how to distribute traffic to multiple IDSs in order to increase the detection of network attacks and balance IDS loads. A clustering-based flow grouping scheme that distributes flows according to routing information and flow data rate is proposed. Through experiments with a virtualized testbed, we show that the proposed scheme detects network attacks more quickly and achieves a better balance of traffic loads on the IDSs.

Building and Operating Distributed SDN-Cloud Testbed with Hyper-Convergent SmartX Boxes

In this paper, we describe our efforts for building and operating a distributed SDN-Cloud testbed by utilizing hyper-convergent SmartX Boxes that are distributed across multiple sites. Each SmartX Box consists of several virtualized functions that are categorized into SDN and cloud functions. Multiple SmartX Boxes are deployed and inter-connected to build a multi-regional distributed cloud infrastructure. The resulting deployment integrates both cloud multi-tenancy and SDN-based slicing, which allow developers to run experiments in a distributed SDN-Cloud testbed. It also offers enhanced troubleshooting capability by providing semi-automated resource configuration and tapping functionality.

Flow-centric Visibility Tools for OF@TEIN OpenFlow-based SDN Testbed

One key challenge in operating virtualized Future Internet testbed is how to monitor various experiments running on the top of it. Among multiple visibility levels for resources, flows, and services, flow-centric visibility is becoming crucial. In this paper, in order to monitor lifecycle experiments over OF@TEIN OpenFlow-based SDN testbed, we are working on flow-centric visibility. The main idea behind flow-centric visibility is duplicating specific packets from OpenFlow-enabled switches and redirecting those packets via a visibility fabric. The duplicated and redirected packets are processed to provide basic visualization about flow information. The flow tapping, implemented for the virtual switches of OF@TEIN SmartX Boxes, is preliminary verified by utilizing it to monitor the targeted lifecycle experiments.

Leveraging open-source software for federated multisite SDN-cloud playground

This paper shows a prototyping and operating effort for a federated multisite SDN-Cloud playground that leverages open-source software such as OpenStack cloud, ONOS SDN controller, and Quagga router. A SDN-based federation possibility for distributed multisite cloud is verified by providing an open playground over three international sites under separate administrative domains.

IO visor-based packet tracing and collection over distributed SmartX server-switch boxes

In this paper, we describe the concept of utilizing packet tracing and collection for 3rd-party packet-precise inspection to assist the secure operation of SDN-enabled multisite cloud environment. The proposed packet tracing and collection is designed and prototyped by utilizing open-source IO Visor projects tools. To verify its feasibility for remotely distributed multiple boxes, we apply it to the multi-box playground with distributed SmartX server-switch boxes. By combining the packet tracing data collected from distributed sites at a centralized location, it is verified to be useful in supporting the malicious packet detection in our multi-site playground.

OF@TEIN resource-level visibility for SDN-enabled distributed cloud testbed

In OF@TEIN (OpenFlow @ Trans-Eurasian Information Network) SDN-enabled distributed cloud testbed, the resource-level visibility is extremely critical to ensure high availability of Physical+Virtual resources and identifying key performance bottlenecks which can significantly degrade testbed operation. Among multiple visibility levels for resources, flows and services, resource-level visibility is becoming crucial. To address resource-visibility challenges, we setup SmartX Visibility Center as a component solution of SmartX Operation Tower by integrating resource-level visibility tools. In this paper, we present our idea of resource-level visibility with specific focus on performance data collection, distributed resources monitoring, events alerts generation and visualization of gathered testbed operation data over large-scale networked tiled displays.

Deployment and Evaluation of Software-Defined Inter-Connections for Multi-domain Federated SDN-Cloud

In this paper, we describe an on-going experimental effort to inter-connect and federate distributed SDN-cloud resources that are spread over separate administrative domains. The proposed Software-Defined Inter-Connections utilizes the mixture of tunnel-based overlay virtual networking and BGP-leveraged routing exchange for multi-domain-federated SDN-cloud. By leveraging SDN paradigm, the deployed prototype for Software- Defined Inter-Connections can enable mixture layer 2 and layer 3 inter-connection with flexible selection. The evaluation result shows the resemblance performance for layer 2 and layer 3, as well as the switchover between them.

Agile and economic media-centric service realization over Software-Defined Infrastructure

The lifecycle management of service realization is very challenging. With virtualized playgrounds over Future Internet testbeds, the lifecycle experiments could be easily exercised so that all tasks and responsibilities are well-defined for entire experiment stages among developers and operators. Also, the dynamic provisioning of hyper-convergent compute/networking/storage resources is appropriately streamlined with the experiment lifecycle. In this paper, by considering these issues, we discuss the agile and economic realization of automated media-centric experiments over OF@TEIN (OpenFlow @ Trans-Eurasian Information Network) SDI (Software-Defined Infrastructure).