Panopticon: Reaping the Benefits of Partial SDN Deployment in Enterprise Networks
نویسندگان
چکیده
The operational challenges posed in enterprise networks, present an appealing opportunity for the software-defined orchestration of the network (SDN). However, the primary challenge to realizing solutions built on SDN in the enterprise is the deployment problem. Unlike in the data-center, network upgrades in the enterprise start with the existing deployment and are budget and resource-constrained. In this work, we investigate the prospect for partial Software Defined Network (SDN) deployment. We present Panopticon, an architecture and methodology for planning and operating networks that combine legacy and upgraded SDN switches. Panopticon exposes an abstraction of a logical SDN in a partially upgraded legacy network, where the SDN benefits extend potentially over the entire network. We evaluate the feasibility of our approach through simulation on real enterprise campus network topologies entailing over 1500 switches and routers. Our results suggest that with only a handful of upgraded switches, it becomes possible to operate most of an enterprise network as a single SDN while meeting key resource constraints.
منابع مشابه
Panopticon: Reaping the Benefits of Incremental SDN Deployment in Enterprise Networks
The operational challenges posed in enterprise networks present an appealing opportunity for automated orchestration by way of Software-Defined Networking (SDN). The primary challenge to SDN adoption in the enterprise is the deployment problem: How to deploy and operate a network consisting of both legacy and SDN switches, while benefiting from simplified management and enhanced flexibility of ...
متن کاملPanopticon: Incremental Deployment of Software-Defined Networking
Software-Defined Networking (SDN) has the potential to automate and radically simplify management of computer networks—today a manual, error-prone task. Many networks however, especially enterprise networks, face a deployment problem: How to migrate an existing network to SDN? SDN must be introduced incrementally to build confidence and respect infrastructure budget constraints. In this article...
متن کاملAn incrementally deployable anti-spoofing mechanism for software-defined networks
Internet attacks often use IP spoofing to forge the source IP address of packets, and thereby hide the identity of the source. It causes many serious security problems such as the difficulty of packet authenticity and IP traceback. While many IP spoofing prevention techniques have been proposed apart from ingress filtering, none have achieved widespread real-world use. One main reason is the la...
متن کاملMaturing of OpenFlow and Software-defined Networking through deployments
Software-defined networking (SDN) has emerged as a new paradigm of networking that enables evolvable and programmable networks allowing network operators, owners, vendors, and even third parties to innovate and create new capabilities at a faster pace. The SDN paradigm shows potential for all domains of use including the data center, cellular, service provider, enterprise, and home. In this pap...
متن کاملTowards SDN-Defined Programmable BYOD (Bring Your Own Device) Security
An emerging trend in corporate network administration is BYOD (Bring Your Own Device). Although with many advantages, the paradigm shift presents new challenges in security to enterprise networks. While existing solutions such as Mobile Device Management (MDM) focus mainly on controlling and protecting device data, they fall short in providing a holistic network protection system. New innovatio...
متن کامل