A lightweight protocol for consistent policy update on software-defined networking with multiple controllers

Autor(es)

Ferrazani Mattos, Diogo Menezes ^{[1, 2, 3]} ; Muniz Bandeira Duarte, Otto Carlos ^{[2, 4]} ; Pujolle, Guy ^[5]

Afiliação do(s) autor(es)

^[1] Univ Fed Fluminense, TET, PPGEET, Niteroi, RJ - Brazil

^[2] Univ Fed Rio de Janeiro, COPPE, GTA, POLI, Rio de Janeiro - Brazil

^[3] Univ Fed Fluminense, Lab MidiaCom, R Passo Patria 156, BR-24210240 Niteroi, RJ - Brazil

^[4] Univ Fed Rio de Janeiro, GTA, Ilha Fundao, POB 68504, BR-21945972 Rio de Janeiro, RJ - Brazil

^[5] UPMC Univ Paris 06, Sorbonne Univ, Lab Informat Paris 6, Paris - France

• Tipo de documento: Artigo Científico
• Fonte: JOURNAL OF NETWORK AND COMPUTER APPLICATIONS; v. 122, p. 77-87, NOV 15 2018.
• Citações Web of Science: 1

Resumo

Network-policy updates have to be committed in a consistent way on distributed-controller software-defined networking. Otherwise, the network may experience unexpected transitory configuration states, which compromise the performance, the security or, even, the correct operation. In this paper, we propose a scheme that provides consistent policy updates without rule conflicts and transitory states. The main contributions are: (i) a protocol that serializes policy update commitments to provide consistency; (ii) a consensus interface proposal that facilitates controller agreements about the network configuration version; and (iii) an algorithm for checking if a new policy is an update, a refinement, or if it conflicts with already installed policies. We prove that our protocol achieves a global order for all policy updates and that our algorithm correctly composes all policies. Simulation results using real network topologies show that the proposed distributed policy update scheme achieves a per-packet consistent configuration with a low control message overhead. (AU)

• Processo FAPESP: 14/50937-1 - INCT 2014: da Internet do Futuro
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático
• Processo FAPESP: 15/24514-9 - Projeto stream: segurança em tempo real com elasticidade, analítica e monitoramento
• Beneficiário: Otto Carlos Muniz Bandeira Duarte
• Modalidade de apoio: Auxílio à Pesquisa - Regular
• Processo FAPESP: 15/24485-9 - Internet do futuro aplicada a cidades inteligentes
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático