Search results for: Roberto Bifulco
article
IEEE Journal on Selected Areas in Communications > 2017 > 35 > 11 > 2574 - 2585
We explore the opportunities and design options enabled by novel SDN and NFV technologies, by re-designing a dynamic content delivery network (CDN) service. Our system, named MOSTO, provides performance levels comparable to that of a regular CDN, but does not require the deployment of a large distributed infrastructure. In the process of designing the system, we identify relevant functions that could...
chapter
The emerging trend of network devices with configurable data planes is pushing software switches as convenient playgrounds for experimenting novel programming paradigms and abstractions. OfSoftSwitch is a popular tool for carrying on such experimentation, as it provides a straightforward implementation of a pipeline of match-action tables. Unfortunately, OfSoftSwitch is not performance oriented and...
chapter
Stateful programmable dataplanes are emerging as a disruptive technology and an enabler factor for network function virtualization in SDN environments. In this demo paper we show three real world use cases with stateful forwarding requirements to validate both the hardware and software implementations of the Open Packet Processor data plane.
chapter
Programmable dataplanes are emerging as a disruptive technology to implement network function virtualization in an SDN environment. This technology can be further enhanced by using data plane abstraction with stateful processing. In this paper we focus on real world use cases with stateful forwarding requirements to validate Open Packet Processor data plane abstraction. We first demonstrate the suitability...
article
International Journal of Network Management > 27 > 2 > n/a - n/a
Service function chaining promises to ease the introduction of new services in mobile networks by enabling the dynamic composition of virtualized network functions. However, current implementations rely on new tunneling protocols and on network infrastructure changes, which make deployments in legacy networks difficult. In this paper, we present a system for service function chaining that can be readily...
article
IEEE Transactions on Information Forensics and Security > 2016 > 11 > 10 > 2160 - 2173
Software-defined networking (SDN) eases network management by centralizing the control plane and separating it from the data plane. The separation of planes in SDN, however, introduces new vulnerabilities in SDN networks, since the difference in processing packets at each plane allows an adversary to fingerprint the network’s packet-forwarding logic. In this paper, we study the feasibility of fingerprinting...
chapter
SDN research is moving towards enabling the delegation of parts of control functions to the network elements. In recent work we analytically evaluated the benefit in terms of ARP data traffic load reduction as well as control channel interaction reduction when delegating the generation of ARP replies. In this paper we describe the corresponding control program and network configuration to handle ARP...
chapter
The dynamic composition of virtualized network functions promises to ease the introduction of new services in mobile networks, while reducing provisioning costs. This approach, usually called Service Function Chaining, has been the focus of several research efforts. However, current systems rely on new tunneling protocols and on network infrastructure changes. In this paper, we introduce CATENAE1,...
chapter
Virtualized access to M2M (Machine-to-Machine) devices can offer to operators various benefits in terms of hardware and management costs. However, it is often impeded by the inability to efficiently handle the traffic from the devices towards servers that are appropriate to serve as virtual hosts for the given devices. In this paper we present a solution which can be applied in a virtual Home Gateway...
chapter
Lecture Notes in Computer Science > Euro-Par 2009 – Parallel Processing Workshops > Fourth Workshop on Virtualization in High - Performance Cloud Computing (VHPC 2009) > 424-433
Cloud computing is an emerging paradigm to provide Infrastructure as a Service (IaaS). In this paper we present NEPTUNE-IaaS, a software system able to support the whole lifecycle of IaaS provisioning in a Virtual Cluster environment. Our system allows interactive design of complex system topologies and their efficient mapping onto the available physical resources of a cluster. It also provides transparent...
chapter
In this paper, we study the feasibility of fingerprinting of controller-switch interactions in SDN networks by a remote adversary whose aim is to acquire knowledge about specific flow rules that are installed at the switches. This knowledge empowers the adversary with a better understanding of the network's packet-forwarding logic and exposes the network to a number of threats. In our study, we collect...
chapter
Sharing network resources with user groups, divisions, or even other companies in software defined networking promises better network utilization. Resource sharing is effectively realized by empowering these tenants at the control plane with permissions for administrating network components. However, since the network resources at the data plane are shared and different tenants can have competing...
chapter
Broadband Remote Access Servers (BRASes) are crucial middleboxes in DSL access networks, providing the first IP point in the network for subscribers and enforcing operator policies. The number of functions provided by BRASes, combined with the key role they play in the network, means that these devices are expensive, difficult to change, and constitute a single point of failure. In order to overcome...
chapter
SDN provides an abstract view of the network in which the switches expose a homogeneous set of capabilities. Unfortunately, the abstraction process may hide important information about the devices that finally impacts on the network operations. Although SDN implementations, like OpenFlow, already account for some device specific properties, we believe that other important ones have been so far overlooked...
chapter
The capability of a network is ultimately bounded by limitations of the devices that compose it. In this paper we argue that Software-Defined Networking (SDN) can increase the importance of certain limitations, such as the size and the flexibility of switches forwarding tables. In particular we focus on the implications of reactive installation of flow entries in the switch fabric: by analyzing traffic...
chapter
Over the years, the demand for high bandwidth services, such as live and on-demand video streaming, steadily increased. The adequate provisioning of such services is challenging and requires complex network management mechanisms to be implemented by Internet service providers (ISPs). In current broadband network architectures, the traffic of subscribers is tunneled through a single aggregation point,...
chapter
Software Defined Networking (SDN) is a promising architecture for computer networks that allows the development of complex and revolutionary applications, without breaking the backward compatibility with legacy networks. Programmability of the control-plane is one of the most interesting features of SDN, since it provides a higher degree of flexibility in network management: network operations are...
chapter
Broadband Remote Access Servers (BRASes) play a crucial role in today's networks, handling all traffic coming from access networks (e.g., DSL traffic), applying operator policies and providing the first IP point in the network. It is perhaps unsurprising then, that these are expensive, proprietary, difficult-to-upgrade boxes. They also represent a large, single point of failure, making operators even...
chapter
Follow-Me Cloud (FMC) allows transparent migration of end-points (users and services) in TCP/IP networks. In this paper we describe in details the FMC handover procedures and analyze the parameters that may affect their performance. Our analysis suggests possible optimizations for such procedures.
chapter
Software Defined Networking (SDN in short) is reshaping the future of computer networks. By decoupling control and data planes, SDN technologies allow a more flexible management of network infrastructures, whose resources may be operated by means of a well defined programming interface. Several approaches have been recently proposed to implement the SDN concept. OpenFlow is maybe the most prominent...
