Software-Defined Networks Principles and Applications
Ying Zhang · 2017
Software-defined networking (SDN) is growing as a solution in dynamic environments where customers need to adapt to new protocols and standards. There are multiple SDN controllers in the industry, supporting different deployment scenarios, each of which has pros and cons. A logically centralized SDN controller runs SDN applications targeting important network functions such as load balancing/traffic engineering, quality of service (QoS), and fast failure recovery. Besides the basic network control and forwarding, SDN can enable new features in other network management area. The chapter discusses three areas: measurement, failure recovery, and security. Inspired by SDN, which provides a simple interface (flow-based rules) to facilitate the advancement of networking protocols, it proposes Software dEfiNed Security Service (SENSS), a generic interface for Internet attack diagnosis and mitigation. SENSS has three key features as follows: victim-oriented; simple detection/mitigation interface from an Internet service provider (ISP); and programmable attack detection and mitigation across ISPs.