OpenFlow

OpenFlow is a communications protocol that gives access to the forwarding plane of a network switch or router over the network.[1]

Description

OpenFlow enables network controllers to determine the path of network packets across a network of switches. The controllers are distinct from the switches. This separation of the control from the forwarding allows for more sophisticated traffic management than is feasible using access control lists (ACLs) and routing protocols. Also, OpenFlow allows switches from different vendors — often each with their own proprietary interfaces and scripting languages — to be managed remotely using a single, open protocol. The protocol's inventors consider OpenFlow an enabler of software defined networking (SDN).

OpenFlow allows remote administration of a layer 3 switch's packet forwarding tables, by adding, modifying and removing packet matching rules and actions. This way, routing decisions can be made periodically or ad hoc by the controller and translated into rules and actions with a configurable lifespan, which are then deployed to a switch's flow table, leaving the actual forwarding of matched packets to the switch at wire speed for the duration of those rules. Packets which are unmatched by the switch can be forwarded to the controller. The controller can then decide to modify existing flow table rules on one or more switches or to deploy new rules, to prevent a structural flow of traffic between switch and controller. It could even decide to forward the traffic itself, provided that it has told the switch to forward entire packets instead of just their header.

The OpenFlow protocol is layered on top of the Transmission Control Protocol (TCP), and prescribes the use of Transport Layer Security (TLS). Controllers should listen on TCP port 6653 for switches that want to set up a connection. Earlier versions of the OpenFlow protocol unofficially used port 6633.[2][3]

History

The Open Networking Foundation (ONF), a user-led organization dedicated to promotion and adoption of software-defined networking (SDN),[4] manages the OpenFlow standard.[5] ONF defines OpenFlow as the first standard communications interface defined between the control and forwarding layers of an SDN architecture. OpenFlow allows direct access to and manipulation of the forwarding plane of network devices such as switches and routers, both physical and virtual (hypervisor-based). It is the absence of an open interface to the forwarding plane that has led to the characterization of today's networking devices as monolithic, closed, and mainframe-like. A protocol like OpenFlow is needed to move network control out of proprietary network switches and into control software that's open source and locally managed.[6]

A number of network switch and router vendors have announced intent to support or are shipping supported switches for OpenFlow, including Alcatel-Lucent,[7] Big Switch Networks,[8] Brocade Communications,[9] Radisys,[10] Arista Networks, Pica8, NoviFlow, Huawei, Cisco, Dell Force10, Extreme Networks, IBM, Juniper Networks, Digisol, Larch Networks, Hewlett-Packard, NEC, and MikroTik.[11] Some network control plane implementations use the protocol to manage the network forwarding elements.[12] OpenFlow is mainly used between the switch and controller on a secure channel. A fairly comprehensive list of OpenFlow-related products may be found on the ONF website and the SDNCentral website.

Development

Version 1.1 of the OpenFlow protocol was released on 28 February 2011, and new development of the standard was managed by the Open Networking Foundation (ONF).[13] In December 2011, the ONF board approved OpenFlow version 1.2 and published it in February 2012.[14] The current version of OpenFlow is 1.4.[15]

In May 2011, Marvell and Larch Networks announced the availability of an OpenFlow-enabled, fully featured switching solution based on Marvell's networking control stack and the Prestera family of packet processors.[16][17]

Indiana University in May 2011 launched a SDN Interoperability Lab in conjunction with the Open Networking Foundation to test how well different vendors' Software-Defined Networking and OpenFlow products work together.[18]

In June 2012, Infoblox released LINC, an open-source OpenFlow version 1.2 and 1.3 compliant software switch.[19]

In February 2012, Big Switch Networks released Project Floodlight, an Apache-licensed open-source software OpenFlow Controller,[20] and announced its OpenFlow-based SDN Suite in November of that year, which contains a commercial controller, and virtual switching and tap monitoring applications.[21]

In February 2012, HP said it is supporting the standard on 16 of its Ethernet switch products.[22]

In April 2012, Google's Urs Hölzle described how the company's internal network had been completely re-designed over the previous two years to run under OpenFlow with substantial efficiency improvement.[23]

In January 2013, NEC unveiled a virtual switch for Microsoft's Windows Server 2012 Hyper-V hypervisor, which is designed to bring OpenFlow-based software-defined networking and network virtualisation to those Microsoft environments.[24]

Security concerns

See also

References

  1. ↑ Nick McKeown; et al. (April 2008). "OpenFlow: Enabling innovation in campus networks". ACM Communications Review. Retrieved 2009-11-02.
  2. ↑ "OpenFlow Switch Errata v1.0.2-rc1" (PDF). Open Networking Foundation. 2013-10-04.
  3. ↑ "Service Name and Transport Protocol Port Number Registry". IANA.
  4. ↑ Kate Greene (March–April 2009). "TR10: Software-Defined Networking". MIT Technology Review. Retrieved 7 October 2011.
  5. ↑ "Open Networking Foundation: SDN Defined". Open Networking Foundation.
  6. ↑ "Software-Defined Networking (SDN): The New Norm for Networks". Open Networking Foundation.
  7. ↑ Solomon, Howard (2013-12-11). "Alcatel Now Supports OpenFlow, OpenStack on Switches". IT World Canada.
  8. ↑ Metz, Cade (26 March 2013). "You Can't Have Google's Pluto Switch, But You Can Have This". Wired.
  9. ↑ Pavel Radda (2011-03-22). "Brocade Leads OpenFlow Adoption to Accelerate Network Virtualization and Cloud Application Development". Reuters. Retrieved 2011-11-29.
  10. ↑ "FlowEngine:Intelligent Flow Management". 20 Feb 2016.
  11. ↑ "MikroTik Manual:OpenFlow". 16 Jun 2015.
  12. ↑ Teemu Koponen et. al (2010-10-04). "Onix: A Distributed Control Platform for Large-scale Production Networks". USENIX OSDI 2010. Retrieved 2010-10-01.
  13. ↑ "Open Networking Foundation Press Release". 2011-03-20.
  14. ↑ "Open Networking Foundation - OpenFlow v1.2" (PDF).
  15. ↑ "Open Networking Foundation - OpenFlow v1.4" (PDF).
  16. ↑ "Marvell Introduces OpenFlow-enabled Switches". 10 May 2011. Retrieved 28 June 2015.
  17. ↑ "OpenFlow – Innovate in Your Network". 6 May 2011. Retrieved 28 June 2015.
  18. ↑ SDN Interoperability Lab
  19. ↑
  20. ↑ Cole, Bernard (2 February 2012). "Big Switch releases open source controller for OpenFlow". EE Times. Retrieved 2012-02-02.
  21. ↑ Sean Michael Kerner (2012-11-13). "Big Switch Emerges with Commercial SDN Portfolio". Enterprise Networking Planet.
  22. ↑ Neagle, Colin (2 February 2012). "HP takes giant first step into OpenFlow: HP is announcing its first effort to support OpenFlow standard on its Ethernet switches". Network World. Retrieved 28 April 2013.
  23. ↑ Levy, Steven, "Going With the Flow: Google's Secret Switch to the Next Wave of Networking", Wired, 17 April 2012. Retrieved 2012-04-17.
  24. ↑ Duffy, Jim (22 January 2013). "NEC rolls out OpenFlow for Microsoft Hyper-V: NEC virtual switch adds IPv6 support to SDN controller". Network World. Retrieved 28 April 2013.
  25. ↑ "OpenFlow Vulnerability Assessment" (PDF).
  26. ↑ "OpenFlow security: Does OpenFlow secure software-defined networks?url=http://searchsecurity.techtarget.com/answer/OpenFlow-security-Does-OpenFlow-secure-software-defined-networks".
  27. ↑ Sriram Natarajan; et al. "A Software defined Cloud-Gateway automation system using OpenFlow".

External links

This article is issued from Wikipedia - version of the 11/10/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.