the age of programmable networks - tu berlinstefan/rndm17short.pdf · the age of programmable...
TRANSCRIPT
![Page 1: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/1.jpg)
The Age of Programmable Networks
Algorithms for Designing Flexible and Robust SDNs
Stefan Schmid
Aalborg University, DK & TU Berlin, DE
![Page 2: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/2.jpg)
❏ Datacenter networks, enterprise networks, Internet: a criticalinfrastructure of the information society
❏ While many Internet protocols hardly changed…
❏ … we have seen a huge shift in scale and application diversity
Why SDN? Why RNDM? The Internet Works!
Goal: connectivity between researchers
Applications: file transfer, emailGoal: QoS, security, …
Applications: live streaming, IoT, etc.
![Page 3: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/3.jpg)
❏ Datacenter networks, enterprise networks, Internet: a criticalinfrastructure of the information society
❏ While many Internet protocols hardly changed…
❏ … we have seen a huge shift in scale and application diversity
Goal: connectivity between researchers
Applications: file transfer, emailGoal: QoS, security, …
Applications: live streaming, IoT, etc.
Hardly any outages overthe last decades!
Why SDN? Why RNDM? The Internet Works!
![Page 4: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/4.jpg)
❏ Datacenter networks, enterprise networks, Internet: a criticalinfrastructure of the information society
❏ While many Internet protocols hardly changed…
❏ … we have seen a huge shift in scale and application diversity
Goal: connectivity between researchers
Applications: file transfer, emailGoal: QoS, security, …
Applications: live streaming, IoT, etc.
But new requirements and challenges, especially in
terms of reliability!
Hardly any outages overthe last decades!
Why SDN? Why RNDM? The Internet Works!
![Page 5: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/5.jpg)
Even techsavvy companies struggle to provide reliable operations
We discovered a misconfiguration on thispair of switches that caused what's called a“bridge loop” in the network.
A network change was […] executed incorrectly […] more “stuck” volumes and added more requests to the re-mirroring storm
Service outage was due to a series of internalnetwork events that corrupted router data tables
Experienced a network connectivity issue […]interrupted the airline's flight departures,airport processing and reservations systems
Source: Talk by Nate Foster at DSDN Workshop
Mostly manual and ad-hoc!
Reliability is The Big Networking Challenge
![Page 6: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/6.jpg)
The Wall Street Bank Anecdote
❏ Outage of a data center of a Wall Street investment bank: lost revenue measured in USD 106 / min!
❏ Quickly, assembled emergency team:
Source: «The world’s fastest and most programmable networks»White Paper Barefoot Networks
Reliability Challenge 1: Lack of Good Debugging Tools
The compute team: quickly came armed with reams of logs, showing how and when the applications failed, and had already written experiments to reproduce and isolate the error, along with candidate prototype programs to workaround the failure.
The storage team: similarly equipped, showing which file system logs were affected, and already progressing with workaround programs.
The networking team: All the networking team had were two tools invented over twenty years ago [ping and traceroute] to merely test end-to-end connectivity. Neither tool could reveal problems with the switches, the congestion experienced by individual packets, or provide any means to create experiments to identify, quarantine and resolve the problem.
![Page 7: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/7.jpg)
The Wall Street Bank Anecdote
❏ Outage of a data center of a Wall Street investment bank: lost revenue measured in USD 106 / min!
❏ Quickly, assembled emergency team:
Source: «The world’s fastest and most programmable networks»White Paper Barefoot Networks
The compute team: quickly came armed with reams of logs, showing how and when the applications failed, and had already written experiments to reproduce and isolate the error, along with candidate prototype programs to workaround the failure.
The storage team: similarly equipped, showing which file system logs were affected, and already progressing with workaround programs.
The networking team: All the networking team had were two tools invented over twenty years ago [ping and traceroute] to merely test end-to-end connectivity. Neither tool could reveal problems with the switches, the congestion experienced by individual packets, or provide any means to create experiments to identify, quarantine and resolve the problem.
Guess who getsblamed?
Reliability Challenge 1: Lack of Good Debugging Tools
![Page 8: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/8.jpg)
Have a good idea for a new reliable network protocol? Forget it!
Reliability Challenge 2: Lack of Innovations
Inn
ova
tio
n!
Innovation?!
Inn
ova
tio
n!
![Page 9: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/9.jpg)
Reliability Challenge 3: Security
Source: Slide by Adrian Perrig
The Internet on first sight: - Monumental- Passed the “Test-of-Time”- Should not and cannot be changed
![Page 10: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/10.jpg)
Source: Slide by Adrian Perrig
The Internet on first sight: - Monumental- Passed the “Test-of-Time”- Should not and cannot be changed
The Internet on second sight: - Antique- Britle- Successful attacks more and more
frequent (e.g., based on IoT)
Reliability Challenge 3: Security
![Page 11: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/11.jpg)
Recent “Attack of the (Internet-)Things”(aka babyphone attack)
Reliability Challenge 3: Security
![Page 12: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/12.jpg)
Remark: Assumptions have changed!
Reliability Challenge 3: Security
Danny Hillis, TED* talk, Feb. 2013, about trust in
the Internet in the 80s: “There were two Dannys. I
knew both. Not everyone knew everyone, but
there was an atmosphere of trust.”
The paper by David Clark about “The Design
Philosophy of the DARPA Internet Protocols”
does not even contain the term security.
![Page 13: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/13.jpg)
A Promising Trend: Programmable Networks
aka Software-Defined Networks (SDNs)
![Page 14: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/14.jpg)
SDN: What is it about?
Traditional networks: standardized and fixeddistributed algorithms
Ctrl
Ctrl
Ctrl
Ctrl
Ctrl
![Page 15: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/15.jpg)
SDN: What is it about?
Ctrl
Ctrl
Ctrl
Ctrl
Ctrl
Blackbox, complexdistributed configuration.
Traditional networks: standardized and fixed distributed algorithms
Drawbacks, e.g.:
• fixed algorithms
• blackbox devices
• slow reconvergence after failures(«bad news slow»)
• complex and hard to debug
![Page 16: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/16.jpg)
Traditional networks: standardized and fixed distributed algorithms
Drawbacks, e.g.:
• fixed algorithms
• blackbox devices
• slow reconvergence after failures(«bad news slow»)
• complex and hard to debug
SDN: What is it about?
Ctrl
Ctrl
Ctrl
Ctrl
Ctrl
Key reasons for Google’s move to SDN: morepredictable and faster failure recovery (and more
fine-grained traffic engineering)
![Page 17: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/17.jpg)
Ctrl
Control
Programs
Control
Programs
SDN = Logical Centralization
In a nutshell:
SDN outsources and consolidates control over multiple devices to (logically) centralized software controller
![Page 18: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/18.jpg)
Ctrl
Control
Programs
Control
Programs
SDN = Logical Centralization
In a nutshell:
SDN outsources and consolidates control over multiple devices to (logically) centralized software controller
Algorithms run on server in software here: Your RNDM Algorithm!
![Page 19: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/19.jpg)
Ctrl
Control
Programs
Control
Programs
SDN = Logical Centralization
In a nutshell:
SDN outsources and consolidates control over multiple devices to (logically) centralized software controller
Simple switches with open interface (no blackbox!): «the
Linux of networking»!
![Page 20: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/20.jpg)
Ctrl
Control
Programs
Control
Programs
SDN = Logical Centralization
In a nutshell:
SDN outsources and consolidates control over multiple devices to (logically) centralized software controllerConcretely: set of match-action
rules installed by controller:
match packet header
=> forward/drop/change…
![Page 21: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/21.jpg)
Ctrl
Control
Programs
Control
Programs
SDN = Logical Centralization
In a nutshell:
SDN outsources and consolidates control over multiple devices to (logically) centralized software controller
Inn
ova
tio
n!
Fast
an
d in
dep
end
ent
evo
luti
on
in s
oft
war
e.
![Page 22: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/22.jpg)
Ctrl
Control
Programs
Control
Programs
SDN = Logical Centralization
In a nutshell:
SDN outsources and consolidates control over multiple devices to (logically) centralized software controller
Sim
ple
dat
a p
lan
e: a
llow
s fo
r fo
rmal
ve
rifi
cati
on
!
![Page 23: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/23.jpg)
Ctrl
Control
Programs
Control
Programs
SDN = Logical Centralization
In a nutshell:
SDN outsources and consolidates control over multiple devices to (logically) centralized software controller
Sim
ple
dat
a p
lan
e: a
llow
s fo
r fo
rmal
ve
rifi
cati
on
!
… but also here: L2-L4 header fields, granularity
of rules, etc.
Many flexibilities here (algorithms)…
![Page 24: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/24.jpg)
”We are at an interesting inflection point!”Keynote by George Varghese at SIGCOMM 2014
A rehash: It’s a great time to be a scientist!
Opportunitiesand
innovation!
![Page 25: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/25.jpg)
”We are at an interesting inflection point!”Keynote by George Varghese at SIGCOMM 2014
A rehash: It’s a great time to be a scientist!
But how to exploitthese flexiblities? How not to shoot
in our feet?New RNDM challenges!
Opportunitiesand
innovation!
![Page 26: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/26.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
New RNDM Challenges on Several Fronts
![Page 27: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/27.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
New RNDM Challenges on Several Fronts
Challenge 1: distributed
control plane (only logicallycentralized!)
![Page 28: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/28.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
New RNDM Challenges on Several Fronts
But let’s first talkabout the
challenges fromdecoupling!
![Page 29: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/29.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
New RNDM Challenges on Several Fronts
It remains a distributed system!
He et al., ACM SOSR 2015:
without network latency
Asynchronous!
![Page 30: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/30.jpg)
Controller Platform
What can possibly go wrong?
Invariant: Traffic from untrusted hosts to trusted hosts via firewall!
insecure
Internetsecure
zone
![Page 31: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/31.jpg)
Problem 1: Bypassed Waypoint
insecure
Internetsecure
zone
Controller Platform
Invariant: Traffic from untrusted hosts to trusted hosts via firewall!
![Page 32: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/32.jpg)
Problem 2: Transient Loop
insecure
Internetsecure
zone
Controller Platform
Invariant: Traffic from untrusted hosts to trusted hosts via firewall!
![Page 33: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/33.jpg)
Tagging: A Universal Solution?
tag blue
redred
blue
blue
new route
❏ Old route: red
❏ New route: blue
❏ 2-Phase Update:
❏ Install blue flowrules internally
❏ Flip tag at ingressports
old route
tag red
Reitblatt et al. Abstractions for Network Update, ACM SIGCOMM 2012.
![Page 34: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/34.jpg)
Tagging: A Universal Solution?
tag blue
redred
blue
blue
new route
❏ Old route: red
❏ New route: blue
❏ 2-Phase Update:
❏ Install blue flowrules internally
❏ Flip tag at ingressports
old route
tag red
Where to tag? Header space? Overhead!
Time till new link becomes available!
Reitblatt et al. Abstractions for Network Update, ACM SIGCOMM 2012.
Cost of extra rules!
![Page 35: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/35.jpg)
Tagging: A Universal Solution?
tag blue
redred
blue
blue
new route
❏ Old route: red
❏ New route: blue
❏ 2-Phase Update:
❏ Install blue flowrules internally
❏ Flip tag at ingressports
old route
tag red
Cost of extra rules!
Where to tag? Header space? Overhead!
Time till new link becomes available!
Reitblatt et al. Abstractions for Network Update, ACM SIGCOMM 2012.
Possible solution without tagging, and at least preserve weaker consistency properties?
![Page 36: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/36.jpg)
Idea: Schedule Subsets of Nodes!
Idea: Schedule safe update subsets in multiple rounds!
Packet may take a mix of old and new path, as long as, e.g., Loop-Freedom (LF) and Waypoint Enforcement(WPE) are fulfilled
Controller Platform
Controller Platform
Round 1
Round 2
…
![Page 37: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/37.jpg)
Idea: Schedule Subsets of Nodes!
Idea: Schedule safe update subsets in multiple rounds!
Packet may take a mix of old and new path, as long as, e.g., Loop-Freedom (LF) and Waypoint Enforcement(WPE) are fulfilled
Controller Platform
Controller Platform
Round 1
Round 2
…
How to be sure?
![Page 38: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/38.jpg)
Going Back to Our Examples: LF Update
insecure
Internet
secure
zone
![Page 39: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/39.jpg)
Going Back to Our Examples: LF Update
insecure
Internet
secure
zone
insecure
Internet
secure
zone
insecure
Internet
secure
zone
R1:
R2:
![Page 40: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/40.jpg)
Going Back to Our Examples: LF Update
insecure
Internet
secure
zone
insecure
Internet
secure
zone
insecure
Internet
secure
zone
R1:
R2:
Forward edges(wrt old policy)! Always safe.
Backwardedge: risky!
![Page 41: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/41.jpg)
Going Back to Our Examples: LF Update
insecure
Internet
secure
zone
insecure
Internet
secure
zone
insecure
Internet
secure
zone
R1:
R2:LF ok! But: WPE violated in Round 1!
Forward edges(wrt old policy)! Always safe.
Backwardedge: risky!
![Page 42: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/42.jpg)
Going Back to Our Examples: WPE Update
insecure
Internet
secure
zone
![Page 43: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/43.jpg)
Going Back to Our Examples: WPE Update
insecure
Internet
secure
zone
insecure
Internet
secure
zone
insecure
Internet
secure
zone
R1:
R2:
Don’t cross thewaypoint: safe!
![Page 44: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/44.jpg)
Going Back to Our Examples: WPE Update
insecure
Internet
secure
zone
insecure
Internet
secure
zone
insecure
Internet
secure
zone
R1:
R2:… ok but may violate LF in Round 1!
Don’t cross thewaypoint: safe!
![Page 45: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/45.jpg)
Going Back to Our Examples: Both WPE+LF?
insecure
Internet
secure
zone
![Page 46: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/46.jpg)
Going Back to Our Examples: WPE+LF!
insecure
Internet
secure
zone
insecure
Internet
secure
zone
R1:
R2:
insecure
Internet
secure
zoneR3:
![Page 47: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/47.jpg)
Going Back to Our Examples: WPE+LF!
insecure
Internet
secure
zone
insecure
Internet
secure
zone
R1:
R2:
insecure
Internet
secure
zoneR3:Is there always a WPE+LF schedule?
![Page 48: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/48.jpg)
What about this one?
![Page 49: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/49.jpg)
LF and WPE may conflict!
❏ Cannot update any forward edge in R1: WP
❏ Cannot update any backward edge in R1: LF
No schedule exists!
Resort to tagging…
![Page 50: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/50.jpg)
What about this one?
![Page 51: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/51.jpg)
NP-Hard!
1
1
Bad news: Even decidability hard: cannot quickly test feasibility and ifinfeasible resort to say, tagging solution!
Open question: very artificial? Under which circumstances poly-time?
To update or not to update in the first round?
That is the question… leading to NP-hardness!
Also an example that greedy can be bad.
We don’t know!
![Page 52: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/52.jpg)
Let us focus on loop-freedom only:always possible in n rounds! How?
![Page 53: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/53.jpg)
Let us focus on loop-freedom only:always possible in n rounds! How?
1
From the destination! Invariant: path suffix updated!
![Page 54: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/54.jpg)
Let us focus on loop-freedom only:always possible in n rounds! How?
12
From the destination! Invariant: path suffix updated!
![Page 55: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/55.jpg)
Let us focus on loop-freedom only:always possible in n rounds! How?
12
3
From the destination! Invariant: path suffix updated!
![Page 56: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/56.jpg)
Let us focus on loop-freedom only:always possible in n rounds! How?
1
From the destination! Invariant: path suffix updated!
2
34
5
6
![Page 57: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/57.jpg)
Let us focus on loop-freedom only:always possible in n rounds! How?
1
From the destination! Invariant: path suffix updated!
2
34
5
6
![Page 58: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/58.jpg)
But how to minimize # rounds?
![Page 59: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/59.jpg)
But how to minimize # rounds?
2 rounds easy, 3 rounds NP-hard. Let’s take it offline!
![Page 60: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/60.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
w
s t
u v
capacity
![Page 61: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/61.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
Flow 1
w
s t
u v
![Page 62: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/62.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
Flow 1
Flow 2Can you find an update schedule?
w
s t
u v
e.g., cannot update red: congestion!
![Page 63: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/63.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
Schedule:1. red@w,blue@u,blue@v
w
s t
u v
1 1
1
Round 1: prepare
No flow! No flow!
No flow!
![Page 64: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/64.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
Schedule:1. red@w,blue@u,blue@v
w
s t
u v
1 1
1
2. blue@s
2
Round 2
flow! No flow!
No flow!
![Page 65: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/65.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
Schedule:1. red@w,blue@u,blue@v
w
s t
u v
1 1
1
2. blue@s
2
3. red@sRound 3
Capacity 2: ok!
3
No flow!
![Page 66: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/66.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
Schedule:1. red@w,blue@u,blue@v
w
s t
u v
1 1
1
2. blue@s
2
3. red@sRound 4
Capacity 2: ok!
3
4
4. blue@w
![Page 67: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/67.jpg)
What about capacity constraints?
1
2
2
1 1
1
1
Schedule:1. red@w,blue@u,blue@v
w
s t
u v
1 1
1
2. blue@s
2
3. red@sRound 4
3
4
4. blue@w
Note: this (non-trivial) example was just a DAG,
without loops!
![Page 68: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/68.jpg)
Block Decomposition of DAGs
1
2
2
1 1
1
1
Flow 1
Flow 2
Block for a given flow: subgraph between two
consecutive nodes whereold and new route meet. w
s t
u v
![Page 69: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/69.jpg)
Block Decomposition of DAGs
1
2
2
1 1
1
1
Block for a given flow: subgraph between two
consecutive nodes whereold and new route meet. w
s t
u v
Just one red block: r1
r1
![Page 70: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/70.jpg)
Block Decomposition of DAGs
1
2
2
1 1
1
1
Block for a given flow: subgraph between two
consecutive nodes whereold and new route meet. w
s t
u v
Two blue blocks: b1 and b2
b1 b2
![Page 71: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/71.jpg)
Block Decomposition of DAGs
1
2
2
1 1
1
1
Block for a given flow: subgraph between two
consecutive nodes whereold and new route meet. w
s t
u v
Dependencies: update b2 after r1 after b1.
b1 b2r1
![Page 72: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/72.jpg)
Algorithms and Properties
❏ For k=2 flows❏ Using dependency graph of DAG block decomposition:
feasible update exists if and only if cycle-free dependency
❏ Also directly yields optimal number of rounds!
❏ For general k flows❏ Harder: We need a weaker notion of dependency graph
❏ Only feasibility for constant k in polynomial-time
❏ For general k, NP-hard
❏ Not much more is known so far❏ NP-hard on general networks already for 2 flows
![Page 73: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/73.jpg)
Algorithms and Properties
❏ For k=2 flows❏ Using dependency graph of DAG block decomposition:
feasible update exists if and only if cycle-free dependency
❏ Also directly yields optimal number of rounds!
❏ For general k flows❏ Harder: We need a weaker notion of dependency graph
❏ Only feasibility for constant k in polynomial-time
❏ For general k, NP-hard
❏ Not much more is known so far❏ NP-hard on general networks already for 2 flows
Essentially a combinatorial reconfiguration problem!
![Page 74: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/74.jpg)
Many Open Algorithmic Problems
❏ Complexity of scheduling (weak) loop-freeupdates? What about approximations?
❏ Congestion-free update algorithms beyondDAGs?
❏What about multiple waypoints?
❏ Related to Reconfiguration Graph Theory!
![Page 75: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/75.jpg)
Further Reading
Scheduling Loop-free Network Updates: It's Good to Relax!Arne Ludwig, Jan Marcinkowski, and Stefan Schmid.ACM Symposium on Principles of Distributed Computing (PODC), Donostia-San Sebastian, Spain, July 2015.
Transiently Secure Network UpdatesArne Ludwig, Szymon Dudycz, Matthias Rost, and Stefan Schmid.42nd ACM SIGMETRICS, Antibes Juan-les-Pins, France, June 2016.
Can't Touch This: Consistent Network Updates for Multiple PoliciesSzymon Dudycz, Arne Ludwig, and Stefan Schmid.46th IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), Toulouse, France, June 2016.
Congestion-Free Rerouting of Flows on DAGsSaeed Akhoondian Amiri, Szymon Dudycz, Stefan Schmid, and Sebastian Wiederrecht. ArXiv Technical Report, November 2016.
![Page 76: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/76.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
Let’s next talkabout the
challenges in thedataplane!
![Page 77: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/77.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
Which challenges? Data plane is very simple?!
Let’s next talkabout the
challenges in thedataplane!
![Page 78: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/78.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
Which challenges? Data plane is very simple?!
Even in SDNs, some functionality should stay in data plane. For example?
Let’s next talkabout the
challenges in thedataplane!
![Page 79: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/79.jpg)
Should Stay in Data Plane: Local Fast Failover
Ctrl
OpenFlow supportspreconfigured
failover rules: First line of defense.
Via controller too slow.
![Page 80: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/80.jpg)
Should Stay in Data Plane: Local Fast Failover
Ctrl
The Crux: How to define conditional rules which have local failure knowledge only?
OpenFlow supportspreconfigured
failover rules: First line of defense.
Via controller too slow.
![Page 81: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/81.jpg)
Efficient Local Fast Failover:Non-Trivial Already in the Clique!
![Page 82: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/82.jpg)
1
2
3
4
6
5
The network:
Local Fast Failover
![Page 83: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/83.jpg)
1
2
3
4
6
5
Without failures!
Traffic demand:{1,2,3}->6
Local Fast Failover
![Page 84: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/84.jpg)
1
2
3
4
6
5
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…
Preinstalled failover rulesfor red flow
Traffic demand:{1,2,3}->6
![Page 85: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/85.jpg)
1
2
3
4
6
5
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…flow 2->6: 3,4,5,…
Preinstalled failover rulesfor blue flow
Traffic demand:{1,2,3}->6
![Page 86: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/86.jpg)
1
2
3
4
6
5
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…flow 2->6: 3,4,5,…flow 3->6: 4,5,…
Preinstalled failover rulesfor green flow
Traffic demand:{1,2,3}->6
![Page 87: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/87.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
Local failover @1:Does not know failures
downstream!
Local Fast Failover
![Page 88: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/88.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
Local failover @1:Does not know failures
downstream!
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
![Page 89: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/89.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
Local failover @1:Reroute to 2!
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…
![Page 90: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/90.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
But also from 2: 6 not reachable.
Next: 3.
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…
![Page 91: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/91.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
Finally, 6 can be reached!
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…
![Page 92: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/92.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
Similarly for the other two flows.
Local Fast FailoverFailover table:flow 1->6: 2,3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,3,4,5,…flow 2->6: 3,4,5,…flow 3->6: 4,5,…
![Page 93: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/93.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
Max load:3
Local Fast Failover
![Page 94: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/94.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
A better solution:load 2
Local Fast FailoverFailover table:flow 1->6: 2,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…flow 3->6: 4,5,…
![Page 95: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/95.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
A better solution:load 2
Local Fast FailoverFailover table:flow 1->6: 2,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…flow 3->6: 4,5,…
Tables statically defined, without global failure
knowledge: a local algorithmwithout communication!
![Page 96: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/96.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
A better solution:load 2
Local Fast FailoverFailover table:flow 1->6: 2,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…flow 3->6: 4,5,…
In order to load balance: prefixes of rows should be
different!
![Page 97: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/97.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
A better solution:load 2
Local Fast FailoverFailover table:flow 1->6: 2,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…flow 3->6: 4,5,…
Bad news (intriguing!): High load unavoidable even in well-connected residual networks: a price of locality.
Given L failures, load at least √L, although network still highly connected (n-L connected). E.g., L=n/2, load
could be 2 still, but due to locality at least √n.
![Page 98: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/98.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
A better solution:load 2
Local Fast FailoverFailover table:flow 1->6: 2,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…flow 3->6: 4,5,…
Good news: Theory of local algorithms withoutcommunication: symmetric block design theory.
Bad news (intriguing!): High load unavoidable even in well-connected residual networks: a price of locality.
Given L failures, load at least √L, although network still highly connected (n-L connected). E.g., L=n/2, load
could be 2 still, but due to locality at least √n.
![Page 99: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/99.jpg)
1
2
3
4
6
5
Traffic demand:{1,2,3}->6
A better solution:load 2
Local Fast FailoverFailover table:flow 1->6: 2,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…
Failover table:flow 1->6: 2,5, …flow 2->6: 3,4,5,…flow 3->6: 4,5,…
Good news: Theory of local algorithms withoutcommunication: symmetric block design theory.
Bad news (intriguing!): High load unavoidable even in well-connected residual networks: a price of locality.
Given L failures, load at least √L, although network still highly connected (n-L connected). E.g., L=n/2, load
could be 2 still, but due to locality at least √n.
What about multihop networks? See Chiesa et al.
![Page 100: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/100.jpg)
What About Failover in Multi-Hop Networks?
![Page 101: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/101.jpg)
Solution: Use Arborescences (Chiesa et al.)
❏ Let us focus on resiliency only and ignore load
❏ Assume:
❏ single destination d and k-connected network G
❏ G decomposed into k d-rooted arc-disjoint spanningarborescences
Basic principle:
❏ Route along fixed arborescence towards the destination d
❏ If packet hits a failed edge at vertex v, reroute along a different arborescence
always exist in k-connected graphs (efficient)
![Page 102: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/102.jpg)
Solution: Use Arborescences (Chiesa et al.)
❏ Let us focus on resiliency only and ignore load
❏ Assume:
❏ single destination d and k-connected network G
❏ G decomposed into k d-rooted arc-disjoint spanningarborescences
Basic principle:
❏ Route along fixed arborescence towards the destination d
❏ If packet hits a failed edge at vertex v, reroute along a different arborescence
always exist in k-connected graphs (efficient)
The crux: To which one? Random? Influences
resilience.
![Page 103: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/103.jpg)
Simple Example: Hamilton Cycle
Chiesa et al.: if k-connected graph has k arc disjoint Hamilton Cycles, k-1 resilient routing can
be constructed!
![Page 104: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/104.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
![Page 105: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/105.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
Arb
ore
sce
nce
1:
Ham
ilto
n C
ycle
![Page 106: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/106.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
Arb
ore
sce
nce
1:
Ham
ilto
n C
ycle
spans all nodes: each node visited exactly once!
![Page 107: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/107.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
Arb
ore
sce
nce
2:
Ham
ilto
n C
ycle
![Page 108: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/108.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
Arb
ore
sce
nce
2:
Ham
ilto
n C
ycle
Edge disjoint: Together span all edges!
![Page 109: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/109.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
Arb
ore
sce
nce
2:
Ham
ilto
n C
ycle
Make Hamilton cycles directed: each direction
on each edge!
![Page 110: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/110.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
Arb
ore
sce
nce
2:
Ham
ilto
n C
ycle
In order to reach destination d: go along 1st directed HC, if hit
failure, reverse direction, if again failure switch to 2nd HC, if again
failure reverse direction: no more failures possible!
d
![Page 111: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/111.jpg)
Example: 3-Resilient Routing Function for 2d-Torus
Arb
ore
sce
nce
2:
Ham
ilto
n C
ycle
In order to reach destination d: go along 1st directed HC, if hit
failure, reverse direction, if again failure switch to 2nd HC, if again
failure reverse direction: no more failures possible!
dTorus 4-connected, has 2 edge disjoint
Hamilton cycles, so can construct optimal 3-resilient routing!
![Page 112: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/112.jpg)
Many Open Problems
For example:
❏ Optimal robustness: given a k-connectedgraph, can we always find a failover schemewhich is k-resilient?
❏ If not, what is the «local failover robustness» of a given graph?
![Page 113: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/113.jpg)
Further Reading
How (Not) to Shoot in Your Foot with SDN Local Fast Failover: A Load-Connectivity TradeoffMichael Borokhovich and Stefan Schmid.17th International Conference on Principles of Distributed Systems (OPODIS), Nice, France, Springer LNCS, December 2013.
Load-Optimal Local Fast Rerouting for Dependable NetworksYvonne-Anne Pignolet, Stefan Schmid, and Gilles Tredan.47th IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), Denver, Colorado, USA, June 2017.
Exploring the Limits of Static Resilient RoutingMarco Chiesa et al. arXiv Report, ICALP 2016, INFOCOM 2016.
![Page 114: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/114.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
How to manage robustly?
![Page 115: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/115.jpg)
A Self-Stabilization Problem!
CtrlCtrl
CtrlCtrl
CtrlCtrl
1. 2.
3.
![Page 116: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/116.jpg)
Further Reading
A Self-Organizing Distributed and In-Band SDN Control Plane (Poster Paper)Marco Canini, Iosif Salem, Liron Schiff, Elad M. Schiller, and Stefan Schmid.37th IEEE International Conference on Distributed Computing Systems (ICDCS), Atlanta, Georgia, USA, June 2017.
![Page 117: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/117.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
Another challengein the data plane:
efficientverification!
![Page 118: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/118.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
Another challengein the data plane:
efficientverification!
Promise of SDN: The simple and static match-action rules in data plane enable
automated configuration and verifiability!
![Page 119: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/119.jpg)
Questions Operators May Have:
❏ Reachability: «Is it possible / not possible toreach, from ingress port x, egress port y?»❏ To ensure connectivity
❏ But also policies: professor network not reachablefrom student dorms (logical isolation)
❏ What-if analysis: «How can the forwardingbehavior look like if there are up to kconcurrent link failures?»
Policy-compliance under failures is difficult!
![Page 120: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/120.jpg)
What-if Analysis Matters
Example: Datacenter (BGP!)*
PG1 PG2
C
A
D
B
X Y
PL1 PL2
G
E
H
F
* Example taken from Beckett et al. (SIGCOMM 2016): Don’t Mind the Gap: Bridging Network-wide Objectives and Device-level Configurations.
Internet
Dat
ace
nte
r
![Page 121: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/121.jpg)
Dat
ace
nte
r
What-if Analysis Matters
Example: Datacenter (BGP!)*
PG1 PG2
C
A
D
B
X Y
PL1 PL2
G
E
H
F
* Example taken from Beckett et al. (SIGCOMM 2016): Don’t Mind the Gap: Bridging Network-wide Objectives and Device-level Configurations.
InternetCluster with services that
should be globally reachable.
Cluster with services that should be accessible only
internally.
![Page 122: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/122.jpg)
Dat
ace
nte
r
What-if Analysis Matters
Example: Datacenter (BGP!)*
PG1 PG2
C
A
D
B
X Y
PL1 PL2
G
E
H
F
* Example taken from Beckett et al. (SIGCOMM 2016): Don’t Mind the Gap: Bridging Network-wide Objectives and Device-level Configurations.
InternetX and Y announce to
Internet what is from PG (prefix).
X and Y block what is from PL.
![Page 123: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/123.jpg)
Dat
ace
nte
r
What-if Analysis Matters
Example: Datacenter (BGP!)*
PG1 PG2
C
A
D
B
X Y
PL1 PL2
G
E
H
F
* Example taken from Beckett et al. (SIGCOMM 2016): Don’t Mind the Gap: Bridging Network-wide Objectives and Device-level Configurations.
Internet
What can go wrong?
X and Y announce to Internet what is from PG
(prefix).
X and Y block what is from PL.
![Page 124: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/124.jpg)
Dat
ace
nte
r
What-if Analysis Matters
Example: Datacenter (BGP!)*
PG1 PG2
C
A
D
B
X Y
PL1 PL2
G
E
H
F
* Example taken from Beckett et al. (SIGCOMM 2016): Don’t Mind the Gap: Bridging Network-wide Objectives and Device-level Configurations.
Internet
If link (G,X) fails and traffic from G is rerouted via Y and C to X: X announces (does not block)
G and H as it comes from C. (Note: BGP.)
X and Y announce to Internet what is from PG
(prefix).
X and Y block what is from PL.
![Page 125: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/125.jpg)
Multiple Link Failures: Push Recursively!
v1 v2 v3 v4
v5 v6 v7 v8
in1
in2
out1
out2
v1 v2 v3 v4
v5 v6 v7 v8
in1
in2
out1
out2
v1 v2 v3 v4
v5 v6 v7 v8
in1
in2
out1
out2
1020
1121 12
22
1020 11
2112
22
1020
1121
12
22
30|1130|21
1121
31|1131|21
40|30|1140|30|21
30|1130|21
1121
31|1131|21
Original Routing
One failure: push 30: route around (v2,v3)
Two failures: first push 30: route
around (v2,v3)
Recursively push 40: route around (v2,v6)
Push 30
Push 40
![Page 126: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/126.jpg)
Tractability of Verification
Even without failures: reachability test is undecidable in SDN!
Proof: Can emulate a Turing machine.
?!in out
in’ out’
![Page 127: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/127.jpg)
Further Reading
WNetKAT: A Weighted SDN Programming and Verification LanguageKim G. Larsen, Stefan Schmid, and Bingtian Xue.20th International Conference on Principles ofDistributed Systems (OPODIS), Madrid, Spain, December 2016.
![Page 128: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/128.jpg)
Another Emerging Flexibility:Reconfigurable Topologies
![Page 129: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/129.jpg)
The Fat-Tree Topology: Theory
Edge
Aggregation
Core
![Page 130: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/130.jpg)
Edge
Aggregation
Core
The Fat-Tree Topology: Theory
![Page 131: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/131.jpg)
Edge
Aggregation
Core
1 Gig
10 Gig
The Fat-Tree Topology: Theory
100 Gig
![Page 132: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/132.jpg)
Edge
Core
Aggregation
Pod 0 Pod 1 Pod 2 Pod 3
The Fat-Tree Topology: Practice
![Page 133: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/133.jpg)
Edge
Core
Aggregation
////////////////////////////////////////////////////////////////////////////////
ProjecToR: direct ToR-ToRconnectivity!
The Fat-Tree Topology: Future?
![Page 134: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/134.jpg)
Reconfigurable Networks
❏ Reconfigurable interconnects, e.g., based on optical circuit switches, 60 GHz wireless, and free-space optics, allow to directly connect frequently communicating pairs of racks (e.g., using digital micromirror devices)
❏ Emerging technologies: ProjecToR, REACToR, Flyways, Mirror, Firefly, etc. allow to reconfigure the (physical) topology of communication networks at runtime
❏ Attractive: real communication patterns are far from “all-to-all”, but usually feature much structure and are sparse
Robustness aspects not studied yet!
![Page 135: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/135.jpg)
First Insights: Model 1 «Bounded Network Design»
Given a demand matrix…
… find a network of max degree
which minimizes the expected pathlength!
Ideas? Subgraph?
![Page 136: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/136.jpg)
Given a demand matrix…
… find a network of max degree
which minimizes the expected pathlength!
Can first build subgraph and then
“rewire edges”, make it connected and low
degree!
First Insights: Model 1 «Bounded Network Design»
![Page 137: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/137.jpg)
Distributed generalization of self-adjusting data structures, e.g., splay tree binary search trees:
First Insights: Model 2 «SplayNets»
Splay TreeMove-to-front(Move-to-root)
SplayNetMove-to-LCA
![Page 138: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/138.jpg)
Open Questions
❏ Bounded degree network design for arbitrary demandmatrices?
❏ Robust bounded degree network design?
❏ Static optimality, dynamic optimality, static finger, dynamicfinger for SplayNets?
❏ Robust SplayNets?
❏ From Clos to WAN?
![Page 139: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/139.jpg)
Further Reading
Demand-Aware Network Designs of Bounded DegreeChen Avin, Kaushik Mondal, and Stefan Schmid.31st International Symposium on Distributed Computing (DISC), Vienna, Austria, October 2017.
SplayNet: Towards Locally Self-Adjusting NetworksStefan Schmid, Chen Avin, Christian Scheideler, Michael Borokhovich, Bernhard Haeupler, and Zvi Lotker.IEEE/ACM Transactions on Networking (ToN), Volume 24, Issue 3, 2016.
![Page 140: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/140.jpg)
Conclusion
❏ SDN introduces many flexibilities
❏ But also new challenges
❏ How to exploit flexibilities algorithmically?
❏ How to deal with remote controller(s)?
❏ Another grand challenge: reconfigurable topologiesfor datacenter and WAN (amortized and competitiveanalysis!)
![Page 141: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/141.jpg)
Algorithms for flow rerouting:
Can't Touch This: Consistent Network Updates for Multiple Policies
Szymon Dudycz, Arne Ludwig, and Stefan Schmid.
46th IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), Toulouse, France, June 2016.
Transiently Secure Network Updates
Arne Ludwig, Szymon Dudycz, Matthias Rost, and Stefan Schmid.
42nd ACM SIGMETRICS, Antibes Juan-les-Pins, France, June 2016.
Scheduling Loop-free Network Updates: It's Good to Relax!
Arne Ludwig, Jan Marcinkowski, and Stefan Schmid.
ACM Symposium on Principles of Distributed Computing (PODC), Donostia-San Sebastian, Spain, July 2015.
Good Network Updates for Bad Packets: Waypoint Enforcement Beyond Destination-Based Routing Policies
Arne Ludwig, Matthias Rost, Damien Foucard, and Stefan Schmid.
13th ACM Workshop on Hot Topics in Networks (HotNets), Los Angeles, California, USA, October 2014.
Congestion-Free Rerouting of Flows on DAGs
Saeed Akhoondian Amiri, Szymon Dudycz, Stefan Schmid, and Sebastian Wiederrecht.
ArXiv Technical Report, November 2016.
Survey of Consistent Network Updates
Klaus-Tycho Foerster, Stefan Schmid, and Stefano Vissicchio.
ArXiv Technical Report, September 2016.
Security of the data plane:
Outsmarting Network Security with SDN Teleportation
Kashyap Thimmaraju, Liron Schiff, and Stefan Schmid.
2nd IEEE European Symposium on Security and Privacy (EuroS&P), Paris, France, April 2017.
See also CVE-2015-7516.
Reigns to the Cloud: Compromising Cloud Systems via the Data Plane
Kashyap Thimmaraju, Bhargava Shastry, Tobias Fiebig, Felicitas Hetzelt, Jean-Pierre Seifert, Anja Feldmann, and Stefan Schmid.
ArXiv Technical Report, October 2016.
teleportation
attacking the cloud
survey
loop-freedom
multiple policies
waypointing
loop-freedom
waypointing
capacity constraints
![Page 142: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/142.jpg)
Backup Slides
![Page 143: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/143.jpg)
Ctrl
Control
Programs
Control
Programs
Let’s talk about security!
![Page 144: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/144.jpg)
Ctrl
Control
Programs
Control
Programs
Let’s talk about security!
In particular: malicious switches
(less studied).
![Page 145: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/145.jpg)
Ctrl
Control
Programs
Control
Programs
Let’s talk about security!
In particular: malicious switches
(less studied).
Note: Governments etc. don’t have resources to build their own trusted hardware.
![Page 146: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/146.jpg)
Ctrl
Control
Programs
Control
Programs
Let’s talk about security!
The case for insecure dataplanes: many incidents
❏ Attackers have compromisedrouters
❏ Compromised routers aretraded underground
❏ Vendors have left backdoorsopen
❏ National security agenciescan bug network equipment
❏ …
![Page 147: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/147.jpg)
What a malicious switch could do:
1 drop/reroute/exfiltrate 2 mirror
3 modify 4 inject
![Page 148: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/148.jpg)
New attack vector:
❏ DoS on controller
❏ Harms availability
❏ E.g., force otherswitches into defaultbehavior
Ctrl
Control
Programs
Control
Programs
More and New Attacks in SDN
![Page 149: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/149.jpg)
Ctrl
Control
Programs
Control
Programs
❏ Idea: exploit controller tocommunicate information: «Teleportation»
Another New SDN Attack: Teleportation
![Page 150: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/150.jpg)
Ctrl
Control
Programs
Control
Programs
❏ Idea: exploit controller tocommunicate information: «Teleportation»
❏ Controller reacts to switchevents (packet-ins) by sendingflowmods/packet-outs/… etc.: can be exploited to transmitinformation
❏ E.g., in MAC learning: src MAC 0xBADDAD
❏ Can also modulate informationimplicitly (e.g., frequency ofpacketins)
❏ E.g.: covert communication, bypass firewall, coordinateattack
Another New SDN Attack: Teleportation
![Page 151: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/151.jpg)
Ctrl
Control
Programs
Control
Programs
❏ Idea: exploit controller tocommunicate information: «Teleportation»
❏ Controller reacts to switchevents (packet-ins) by sendingflowmods/packet-outs/… etc.: can be exploited to transmitinformation
❏ E.g., in MAC learning: src MAC 0xBADDAD
❏ Can also modulate informationimplicitly (e.g., frequency ofpacketins)
❏ E.g.: covert communication, bypass firewall, coordinateattack
Another New SDN Attack: TeleportationDifficult to detect: (1) The teleported information follows
the normal traffic pattern of control communication, indirectly between any switch and the controller. (2)
Teleportation channel is inside the typically encrypted OpenFlow channel. Cannot easily be detected with
modern IDS, even if they operate in the control plane.
![Page 152: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/152.jpg)
Ctrl
Control
Programs
Control
Programs
❏ Idea: exploit controller tocommunicate information: «Teleportation»
❏ Controller reacts to switchevents (packet-ins) by sendingflowmods/packet-outs/… etc.: can be exploited to transmitinformation
❏ E.g., in MAC learning: src MAC 0xBADDAD
❏ Can also modulate informationimplicitly (e.g., frequency ofpacketins)
❏ E.g.: covert communication, bypass firewall, coordinateattack
Another New SDN Attack: Teleportation
E.g., 2 switches try to use the same DPID, exploit pave
path technique, etc.
![Page 153: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/153.jpg)
Ctrl
Control
Programs
Control
Programs
Another Front: Virtualized Switches
Attack vector:
❏ The virtualized data plane
![Page 154: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/154.jpg)
Further Reading
Outsmarting Network Security with SDN TeleportationKashyap Thimmaraju, Liron Schiff, and Stefan Schmid.2nd IEEE European Symposium on Security and Privacy (EuroS&P), Paris, France, April 2017.
![Page 155: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/155.jpg)
Ctrl
Control
Programs
Control
Programs
Another Front: Virtualized Switches
Attack vector:
❏ The virtualized data plane
Background:
❏ Packet processing and other network functionsare more and morevirtualized
❏ E.g., runing on servers at the edge of the datacenter
❏ Example: OVS
Advantage:
❏ Cheap and performance ok!
❏ Fast and easydeployment
![Page 156: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/156.jpg)
Attack vector:
❏ The virtualized data plane
Background:
❏ Packet processing and other network functionsare more and morevirtualized
❏ E.g., runing on servers at the edge of the datacenter
❏ Example: OVS
Advantage:
❏ Cheap and performance ok!
❏ Fast and easy deployment
Ctrl
Control
Programs
Control
Programs
Security Challenges: Insecure Dataplane
New vulnerability: collocation. Switches
run with evelated (root) priviledges.
![Page 157: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/157.jpg)
Attack vector:
❏ The virtualized data plane
Background:
❏ Packet processing and other network functionsare more and morevirtualized
❏ E.g., runing on servers at the edge of the datacenter
❏ Example: OVS
Advantage:
❏ Cheap and performance ok!
❏ Fast and easy deployment
Ctrl
Control
Programs
Control
Programs
Security Challenges: Insecure Dataplane
New vulnerability: collocation. Switches
run with evelated (root) priviledges.
Collocated with e.g., controllers, hypervisors, guest VMs, VM image and network management, identity management (of admins and tenants), etc.
![Page 158: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/158.jpg)
A Case Study: OVS
❏ OVS: a production quality switch, widely deployed in the Cloud
❏ After fuzzing just 2% of the code, found major vulnerabilities:
❏ E.g., two stack overflows when malformed MPLS packets are parsed
❏ These vulnerabilities can easily be weaponized:
❏ Can be exploited for arbitrary remote code execution
❏ E.g., our «reign worm» compromised cloud setups within 100s
❏ Significance
❏ It is often believed that only state-level attackers (with, e.g., control overthe vendor’s supply chain) can compromise the data plane
❏ Virtualized data planes can be exploited by very simple, low-budget attackers: e.g., by renting a VM in the cloud and sending a singlemalformed MPLS packet
![Page 159: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/159.jpg)
The Reign Worm
Exploits 4 problems:
1. Security assumptions: Virtual switches often run with elevated(root) priviledges by design.
2. Collocation: virtual switchs reside in virtualized servers (Dom0), and are hence collocated with other and possibly critical cloud software, including controller software
3. Logical centralization: the control of data plane elements is oftenoutsourced to a centralized software. The correspondingbidirectional communication channels can be exploited to spreadthe worm further.
4. Support for extended protocol parsers: Virtual switches providefunctionality which goes beyond basic protocol locations of normal switches (e.g., handling MPLS in non-standard manner)
![Page 160: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/160.jpg)
The Reign Worm: Step 1
Attacker VM sends a malicious packet that compromises its server, giving the remote attacker control of the server.
![Page 161: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/161.jpg)
The Reign Worm: Step 2
Attacker controlled server compromises the controllers’server, giving the remote attacker control of the controllers’ server.
Bidirectionalcommunication channel
![Page 162: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/162.jpg)
The Reign Worm: Step 3
The compromised controllers’ server propagatesthe worm to the remaining uncompromised server.
![Page 163: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/163.jpg)
The Reign Worm: Step 4
All the servers are controlled by the remote attacker.
![Page 164: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/164.jpg)
Further Reading
Reigns to the Cloud: Compromising Cloud Systems via the Data PlaneKashyap Thimmaraju, Bhargava Shastry, Tobias Fiebig, Felicitas Hetzelt, Jean-Pierre Seifert, Anja Feldmann, and Stefan Schmid.ArXiv Technical Report, October 2016.
![Page 165: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/165.jpg)
Ctrl
Control
Programs
Control
Programs
Let’s talk about security!
Challenge: how to build securenetworks if hardware untrusted?
![Page 166: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/166.jpg)
Opportunity: Adversarial Trajectory Sampling
Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Principle:
❏ Sample subset ofpackets (based on hash value) anytime
❏ Get complete route for sampled packets
❏ Efficient: sampling
![Page 167: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/167.jpg)
Principle:
❏ Sample subset ofpackets (based on hash value) anytime
❏ Get complete route for sampled packets
❏ Efficient: sampling
Opportunity: Adversarial Trajectory Sampling
Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Not sampled!
Sampled!
![Page 168: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/168.jpg)
Principle:
❏ Sample subset ofpackets (based on hash value) anytime
❏ Get complete route for sampled packets
❏ Efficient: sampling
Opportunity: Adversarial Trajectory Sampling
Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Problem: knows whichpackets are sampled and
which not! Can manipulateothers without risk!
![Page 169: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/169.jpg)
Principle:
❏ Sample subset ofpackets (based on hash value) anytime
❏ Get complete route for sampled packets
❏ Efficient: sampling
Opportunity: Adversarial Trajectory Sampling
Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Problem: knows whichpackets are sampled and
which not! Can manipulateothers without risk!
How to make trajectory sampling secure to malicious switches?
![Page 170: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/170.jpg)
Opportunity: Adversarial Trajectory Sampling
Adversarial Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
![Page 171: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/171.jpg)
Opportunity: Adversarial Trajectory Sampling
Adversarial Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Idea: leverage SDN!
Secure communicationchannels: can
distributed samplingvalues in a secure and
redundant way!
![Page 172: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/172.jpg)
Opportunity: Adversarial Trajectory Sampling
Adversarial Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Different switches sample different packets!
Idea: leverage SDN!
Secure communicationchannels: can
distributed samplingvalues in a secure and
redundant way!
![Page 173: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/173.jpg)
Opportunity: Adversarial Trajectory Sampling
Adversarial Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
e.g., injects packet (e.g., for exfiltration)
![Page 174: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/174.jpg)
Opportunity: Adversarial Trajectory Sampling
Adversarial Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Does not reportpacket!
Reports packet!
e.g., injects packet (e.g., for exfiltration)
![Page 175: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/175.jpg)
Opportunity: Adversarial Trajectory Sampling
Adversarial Trajectory Sampling
❏ Classic tool to monitor packet routes: trajectory sampling
Does not reportpacket!
Reports packet!
e.g., injects packet (e.g., for exfiltration)
If sampled before and after:
Inconsistency detected!
![Page 176: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/176.jpg)
Further Reading
Software-Defined Adversarial Trajectory SamplingKashyap Thimmaraju, Liron Schiff, and Stefan Schmid.ArXiv Technical Report, May 2017.
![Page 177: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/177.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
One wordabout control
plane…
![Page 178: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/178.jpg)
Ctrl
Control
Programs
Control
ProgramsApplications and
Control Plane
… and regardingdecoupling / inter-
connect!
Data Plane
Algorithmic Problems in SDNs
Claim: SDN introduces manyflexibilities in how control planes
can be designed.
![Page 179: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/179.jpg)
Ctrl Ctrl Ctrl
Ctrl
One for all…
Ctrl
Ctrl
CtrlCtrl
Ctrl
… one for each…
… anything between.
![Page 180: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/180.jpg)
Ctrl Ctrl Ctrl
Ctrl
One for all…
Ctrl
Ctrl
CtrlCtrl
Ctrl
… one for each…
… anything between.
What can becomputed locally?
E.g., to prolong lifetimeof routers with restricted
memory: cache onlyheavy hitters!
E.g., shortest paths: global problem
![Page 181: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/181.jpg)
❏ Some insights from distributed computing are handy: but come in a new light!
❏ But finding right level of locality is non-trivial: tradeoff between inter-controller communication and quality of solution
❏ E.g., in load balancing
Challenge: Right Level of Locality?
Points ofpresence
Customer sites
Primary links
![Page 182: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/182.jpg)
Further Reading
A Distributed and Robust SDN Control Plane for TransactionalNetwork UpdatesMarco Canini, Petr Kuznetsov, Dan Levin, and Stefan Schmid.34th IEEE Conference on Computer Communications (INFOCOM), Hong Kong, April 2015.
Exploiting Locality in Distributed SDN ControlStefan Schmid and Jukka Suomela.ACM SIGCOMM Workshop on Hot Topics in Software DefinedNetworking (HotSDN), Hong Kong, China, August 2013.
![Page 183: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/183.jpg)
Jennifer Rexford’s Example:SDN MAC Learning Done Wrong
❏ MAC learning: The «Hello World»
❏ a bug in early controller versions
h1
h2h3
1
23
Controller
❏ In legacy networks simple
❏ Flood packets sent to unknown destinations
❏ Learn host’s location when it sends packets (source address!)
❏ Pitfalls in SDN: learn sender => miss response
❏ Assume: low priority rule * (no match): send to controller
❏ h1->h2: Add rule h1@port1 (location learned)
❏ Controller misses h2->h1 (as h1 known, h2 stay unknown!)
❏ When h3->h2: flooding forever (learns h3, never learns h2)
OpenFlow
switch
Thanks to Jen Rexford for example!
![Page 184: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/184.jpg)
Jennifer Rexford’s Example:SDN MAC Learning Done Wrong
❏ MAC learning: The «Hello World»
❏ a bug in early controller versions
h1
h2h3
1
23
Controller
❏ In legacy networks simple
❏ Flood packets sent to unknown destinations
❏ Learn host’s location when it sends packets (source address!)
❏ Pitfalls in SDN: learn sender => miss response
❏ Assume: low priority rule * (no match): send to controller
❏ h1->h2: Add rule h1@port1 (location learned)
❏ Controller misses h2->h1 (as h1 known, h2 stay unknown!)
❏ When h3->h2: flooding forever (learns h3, never learns h2)
OpenFlow
switch
Thanks to Jen Rexford for example!
Controller never sees source h2: switch already knows all destinations h1 and h3, so for h2 it keeps flooding.
![Page 185: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/185.jpg)
Software-Defined Wifi
![Page 186: The Age of Programmable Networks - TU Berlinstefan/rndm17short.pdf · The Age of Programmable Networks ... While many Internet protocols hardly changed ... Source: Slide by Adrian](https://reader031.vdocuments.net/reader031/viewer/2022021712/5b935e0d09d3f209728dbc03/html5/thumbnails/186.jpg)
Further Reading
OpenSDWN: Programmatic Control over Home and Enterprise WiFiJulius Schulz-Zander, Carlos Mayer, Bogdan Ciobotaru, Stefan Schmid, and Anja Feldmann.ACM Sigcomm Symposium on SDN Research (SOSR), Santa Clara, California, USA, June 2015.