OpenFlow

Last updated

OpenFlow is a communications protocol that gives access to the forwarding plane of a network switch or router over the network. [1]

Contents

Description

OpenFlow enables network controllers to determine the path of network packets across a network of switches. The controllers are distinct from the switches. This separation of the control from the forwarding allows for more sophisticated traffic management than is feasible using access control lists (ACLs) and routing protocols. Also, OpenFlow allows switches from different vendors — often each with their own proprietary interfaces and scripting languages — to be managed remotely using a single, open protocol. The protocol's inventors consider OpenFlow an enabler of software-defined networking (SDN).

OpenFlow allows remote administration of a layer 3 switch's packet forwarding tables, by adding, modifying and removing packet matching rules and actions. This way, routing decisions can be made periodically or ad hoc by the controller and translated into rules and actions with a configurable lifespan, which are then deployed to a switch's flow table, leaving the actual forwarding of matched packets to the switch at wire speed for the duration of those rules. Packets which are unmatched by the switch can be forwarded to the controller. The controller can then decide to modify existing flow table rules on one or more switches or to deploy new rules, to prevent a structural flow of traffic between switch and controller. It could even decide to forward the traffic itself, provided that it has told the switch to forward entire packets instead of just their header.

The OpenFlow protocol is layered on top of the Transmission Control Protocol (TCP) and prescribes the use of Transport Layer Security (TLS). Controllers should listen on TCP port 6653 for switches that want to set up a connection. Earlier versions of the OpenFlow protocol unofficially used port 6633. [2] [3] Some network control plane implementations use the protocol to manage the network forwarding elements. [4] OpenFlow is mainly used between the switch and controller on a secure channel. [5]

History

The Open Networking Foundation (ONF), a user-led organization dedicated to promotion and adoption of software-defined networking (SDN), [6] manages the OpenFlow standard. [7] ONF defines OpenFlow as the first standard communications interface defined between the control and forwarding layers of an SDN architecture. OpenFlow allows direct access to and manipulation of the forwarding plane of network devices such as switches and routers, both physical and virtual (hypervisor-based). It is the absence of an open interface to the forwarding plane that has led to the characterization of today's networking devices as monolithic, closed, and mainframe-like. A protocol like OpenFlow is needed to move network control out of proprietary network switches and into control software that's open source and locally managed. [8]

A number of network switch and router vendors announced intent to support or are shipping supported switches for OpenFlow, including Alcatel-Lucent, [9] Big Switch Networks, [10] Brocade Communications, [11] and Radisys. [12]

Development

Version 1.1 of the OpenFlow protocol was released on 28 February 2011, and new development of the standard was managed by the ONF. [13] In December 2011, the ONF board approved OpenFlow version 1.2 and published it in February 2012. [14] The current version of OpenFlow is 1.5.1. [15] However, version 1.6 has been available since September 2016, but accessible only to ONF's members.

In May 2011, Marvell and Larch Networks announced the availability of an OpenFlow-enabled, fully featured switching solution based on Marvell's networking control stack and the Prestera family of packet processors. [16] [17]

Indiana University in May 2011 launched a SDN Interoperability Lab in conjunction with the ONF to test how well different vendors' software-defined networking and OpenFlow products work together. [18]

In June 2012, Infoblox released LINC, an open-source OpenFlow version 1.2 and 1.3 compliant software switch. [19]

In February 2012, Big Switch Networks released Project Floodlight, an Apache-licensed open-source software OpenFlow Controller, [20] and announced its OpenFlow-based SDN Suite in November of that year, which contains a commercial controller, and virtual switching and tap monitoring applications. [21]

In February 2012, HP said it is supporting the standard on 16 of its Ethernet switch products. [22]

In April 2012, Google's Urs Hölzle described how the company's internal network had been completely re-designed over the previous two years to run under OpenFlow with substantial efficiency improvement. [23]

In January 2013, NEC unveiled a virtual switch for Microsoft's Windows Server 2012 Hyper-V hypervisor, which is designed to bring OpenFlow-based software-defined networking and network virtualisation to those Microsoft environments. [24]

Security concerns

Related Research Articles

<span class="mw-page-title-main">Asynchronous Transfer Mode</span> Digital telecommunications protocol for voice, video, and data

Asynchronous Transfer Mode (ATM) is a telecommunications standard defined by the American National Standards Institute and International Telecommunication Union Telecommunication Standardization Sector for digital transmission of multiple types of traffic. ATM was developed to meet the needs of the Broadband Integrated Services Digital Network as defined in the late 1980s, and designed to integrate telecommunication networks. It can handle both traditional high-throughput data traffic and real-time, low-latency content such as telephony (voice) and video. ATM provides functionality that uses features of circuit switching and packet switching networks by using asynchronous time-division multiplexing. ATM was seen in the 1990s as a competitor to Ethernet and networks carrying IP traffic as, unlike Ethernet, it was faster and designed with quality-of-service in mind, but it fell out of favor once Ethernet reached speeds of 1 gigabits per second.

Multiprotocol Label Switching (MPLS) is a routing technique in telecommunications networks that directs data from one node to the next based on labels rather than network addresses. Whereas network addresses identify endpoints, the labels identify established paths between endpoints. MPLS can encapsulate packets of various network protocols, hence the multiprotocol component of the name. MPLS supports a range of access technologies, including T1/E1, ATM, Frame Relay, and DSL.

<span class="mw-page-title-main">Network interface controller</span> Hardware component that connects a computer to a network

A network interface controller is a computer hardware component that connects a computer to a computer network.

<span class="mw-page-title-main">Network processor</span>

A network processor is an integrated circuit which has a feature set specifically targeted at the networking application domain.

In computer networking, source routing, also called path addressing, allows a sender of a data packet to partially or completely specify the route the packet takes through the network. In contrast, in conventional routing, routers in the network determine the path incrementally based on the packet's destination. Another routing alternative, label switching, is used in connection-oriented networks such as X.25, Frame Relay, Asynchronous Transfer Mode and Multiprotocol Label Switching.

<span class="mw-page-title-main">Nick McKeown</span>

Nicholas (Nick) William McKeown FREng, is a Senior Fellow at Intel, a professor in the Electrical Engineering and Computer Science departments at Stanford University, and a visiting professor at Oxford University. He has also started technology companies in Silicon Valley.

The Open Networking Foundation (ONF) is a non-profit operator-led consortium. It uses an open source business model aimed at promoting networking through software-defined networking (SDN) and standardizing the OpenFlow protocol and related technologies. The standards-setting and SDN-promotion group was formed out of recognition that cloud computing will blur the distinctions between computers and networks. The initiative was meant to speed innovation through simple software changes in telecommunications networks, wireless networks, data centers and other networking areas.

Hewlett Packard Enterprise Networking is the Networking Products division of Hewlett Packard Enterprise ("HP"). HPE Networking and its predecessor entities have developed and sold networking products since 1979. Currently, it offers networking and switching products for small and medium sized businesses through its wholly owned subsidiary Aruba Networks. Prior to 2015, the entity within HP which offered networking products was called HP Networking.

RDMA over Converged Ethernet (RoCE) is a network protocol which allows remote direct memory access (RDMA) over an Ethernet network. There are multiple RoCE versions. RoCE v1 is an Ethernet link layer protocol and hence allows communication between any two hosts in the same Ethernet broadcast domain. RoCE v2 is an internet layer protocol which means that RoCE v2 packets can be routed. Although the RoCE protocol benefits from the characteristics of a converged Ethernet network, the protocol can also be used on a traditional or non-converged Ethernet network.

Arista Networks, Inc. is an American computer networking company headquartered in Santa Clara, California. The company designs and sells multilayer network switches to deliver software-defined networking (SDN) for large datacenter, cloud computing, high-performance computing, and high-frequency trading environments. These products include 10/25/40/50/100/200/400/800 gigabit low-latency cut-through Ethernet switches. Arista's Linux-based network operating system, Extensible Operating System (EOS), runs on all Arista products.

Software-defined networking (SDN) is an approach to network management that uses abstraction to enable dynamic and programmatically efficient network configuration to create grouping and segmentation while improving network performance and monitoring in a manner more akin to cloud computing than to traditional network management. SDN is meant to improve the static architecture of traditional networks and may be employed to centralize network intelligence in one network component by disassociating the forwarding process of network packets from the routing process. The control plane consists of one or more controllers, which are considered the brains of the SDN network, where the whole intelligence is incorporated. However, centralization has certain drawbacks related to security, scalability and elasticity.

Network functions virtualization (NFV) is a network architecture concept that leverages IT virtualization technologies to virtualize entire classes of network node functions into building blocks that may connect, or chain together, to create and deliver communication services.

The Data Plane Development Kit (DPDK) is an open source software project managed by the Linux Foundation. It provides a set of data plane libraries and network interface controller polling-mode drivers for offloading TCP packet processing from the operating system kernel to processes running in user space. This offloading achieves higher computing efficiency and higher packet throughput that is possible using the interrupt-driven processing provided in the kernel.

Distributed Overlay Virtual Ethernet (DOVE) is a tunneling and virtualization technology for computer networks, created and backed by IBM. DOVE allows creation of network virtualization layers for deploying, controlling, and managing multiple independent and isolated network applications over a shared physical network infrastructure.

<span class="mw-page-title-main">Open vSwitch</span> Virtual network switch

Open vSwitch (OVS) is an open-source implementation of a distributed virtual multilayer switch. The main purpose of Open vSwitch is to provide a switching stack for hardware virtualization environments, while supporting multiple protocols and standards used in computer networks.

Pica8 Software Inc. is a computer networking company headquartered in Palo Alto, California, United States. Pica8 is a vendor of open-standards-based operating systems on white box network switches delivering software-defined networking (SDN) solutions for datacenter and cloud computing environments and traditional L2/L3 solutions for large enterprise customers. The company's products include a Linux-based L2/L3 and OpenFlow-supporting network operating system, PicOS, which is shipped as standalone software that can be loaded onto a range of 1/10/40/100 Gigabit Ethernet switches based on commoditized switches purchased from original design manufacturers (ODMs).

Martín Casado is a Spanish-born American software engineer, entrepreneur, and investor. He is a general partner at Andreessen Horowitz, was a pioneer of software-defined networking, and was a co-founder and the chief technology officer of Nicira Networks.

A Software-Defined Wide Area Network (SD-WAN) is a wide area network that uses software-defined networking technology, such as communicating over the Internet using overlay tunnels which are encrypted when destined for internal organization locations.

Adara Networks is an American software company.

References

  1. ↑ McKeown, Nick; et al. (April 2008). "OpenFlow: Enabling innovation in campus networks". ACM SIGCOMM Computer Communication Review . 38 (2): 69–74. doi:10.1145/1355734.1355746. S2CID   1153326 . Retrieved 2 November 2009.
  2. ↑ "OpenFlow Switch Errata v1.0.2-rc1" (PDF). Open Networking Foundation . 4 October 2013.
  3. ↑ "Service Name and Transport Protocol Port Number Registry". IANA .
  4. ↑ Koponen, Teemu; et al. (4 October 2010). "Onix: A Distributed Control Platform for Large-scale Production Networks". USENIX . Retrieved 1 October 2010.
  5. ↑ McKeown, Nick; et al. (April 2008). "OpenFlow: Enabling innovation in campus networks". ACM SIGCOMM Computer Communication Review . 38 (2): 69–74. doi:10.1145/1355734.1355746. S2CID   1153326 . Retrieved 2 November 2009.
  6. ↑ Greene, Kate (March–April 2009). "TR10: Software-Defined Networking". MIT Technology Review . Retrieved 7 October 2011.
  7. ↑ "Open Networking Foundation: SDN Defined". Open Networking Foundation . 23 March 2013.
  8. ↑ "Software-Defined Networking (SDN): The New Norm for Networks". Open Networking Foundation .
  9. ↑ Solomon, Howard (11 December 2013). "Alcatel Now Supports OpenFlow, OpenStack on Switches". IT World Canada .
  10. ↑ Metz, Cade (26 March 2013). "You Can't Have Google's Pluto Switch, But You Can Have This". Wired .
  11. ↑ Radda, Pavel (22 March 2011). "Brocade Leads OpenFlow Adoption to Accelerate Network Virtualization and Cloud Application Development". Reuters . Archived from the original on 4 November 2013. Retrieved 29 November 2011.
  12. ↑ "FlowEngine:Intelligent Flow Management". Radisys . 20 February 2016. Archived from the original on 16 April 2016. Retrieved 11 February 2016.
  13. ↑ "Open Networking Foundation Press Release". Open Networking Foundation . 20 March 2011. Archived from the original on 26 March 2011.
  14. ↑ "OpenFlow v1.2" (PDF). Open Networking Foundation .
  15. ↑ "OpenFlow v1.5.1" (PDF). Open Networking Foundation .
  16. ↑ "Marvell Introduces OpenFlow-enabled Switches". Marvell . 10 May 2011. Retrieved 28 June 2015.
  17. ↑ "OpenFlow – Innovate in Your Network". Larch Networks . 6 May 2011. Retrieved 28 June 2015.{{cite web}}: CS1 maint: url-status (link)
  18. ↑ "SDN Interoperability Lab - InCNTRE". IU.edu . 5 June 2012. Archived from the original on 5 June 2012.
  19. ↑ "Project Floodlight". www.openflowhub.org.
  20. ↑ Cole, Bernard (2 February 2012). "Big Switch releases open source controller for OpenFlow". EE Times . Retrieved 2 February 2012.
  21. ↑ Kerner, Sean Michael (13 November 2012). "Big Switch Emerges with Commercial SDN Portfolio". Enterprise Networking Planet .
  22. ↑ Neagle, Colin (2 February 2012). "HP takes giant first step into OpenFlow: HP is announcing its first effort to support OpenFlow standard on its Ethernet switches". Network World . Archived from the original on 13 May 2013. Retrieved 28 April 2013.
  23. ↑ Levy, Steven (17 April 2012). "Going With the Flow: Google's Secret Switch to the Next Wave of Networking". Wired . Retrieved 17 April 2012.
  24. ↑ Duffy, Jim (22 January 2013). "NEC rolls out OpenFlow for Microsoft Hyper-V: NEC virtual switch adds IPv6 support to SDN controller". Network World . Archived from the original on 3 April 2013. Retrieved 28 April 2013.
  25. 1 2 "OpenFlow protocol has a switch authentication vulnerability". The Register .
  26. ↑ "OpenFlow Vulnerability Assessment" (PDF). Indiana.edu . Archived from the original (PDF) on 4 March 2016. Retrieved 23 June 2014.
  27. ↑ "OpenFlow security: Does OpenFlow secure software-defined networks?". TechTarget .
  28. ↑ Natarajan, Sriram; et al. (2013). "A Software defined Cloud-Gateway automation system using OpenFlow". 2013 IEEE 2nd International Conference on Cloud Networking (Cloud Net). pp. 219–226. doi:10.1109/CloudNet.2013.6710582. ISBN   978-1-4799-0568-3. S2CID   16248079.{{cite book}}: |work= ignored (help)
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.