Preface xxi
1 Introduction to Software Defined Networking 1
Subhra Priyadarshini Biswal and Sanjeev Patel
1.1 Introduction 2
1.2 Terminology and Architecture 5
1.2.1 Infrastructure Layer 9
1.2.2 Southbound Interfaces Layer 11
1.2.3 Network Hypervisors Layer 11
1.2.4 Controller Layer 12
1.2.5 Northbound Interfaces 13
1.3 The Role of Network Operating Systems 14
1.4 SDN Versus NFV 16
1.5 The Role of NFV into SDN-Based IoT Systems 17
1.6 Challenges and Future Directions 19
1.7 Applications of SDN in IT Industries 21
1.8 Conclusion and Future Scope 23
References 24
2 Software-Defined Networks: Perspectives and Applications 29
Inderjeet Kaur, Anupama Sharma, Amita Agnihotri and Charu Agarwal
2.1 Introduction 30
2.2 SDN Architecture 32
2.2.1 Key Takeaways of SDN Architecture 35
2.2.2 Open Flow 36
2.3 Functionalities of SDN 39
2.3.1 SDN Benefits 40
2.4 SDN vs. Traditional Hardware-Based Network 41
2.5 Load Balancing in SDN 44
2.5.1 SDN-Based Load Balancer in Cloud Computing 47
2.5.2 SDN Without Cloud Computing 49
2.6 SDN Security 49
2.6.1 Security Threats and Attacks 51
2.7 SDN Applications 53
2.8 Research Directions 55
2.9 Conclusion 55
References 56
3 Software-Defined Networks and Its Applications 63
Rajender Kumar, Alankrita Aggarwal, Karun Handa, Punit Soni and Mukesh Kumar
3.1 Introduction 64
3.2 SDN vs Traditional Networks 65
3.3 SDN Working: A Functional Overview 67
3.4 Components and Implementation Architecture 68
3.4.1 Components of an SDN 68
3.4.1.1 SDN Application 68
3.4.1.2 SDN Controller 69
3.4.1.3 SDN Datapath 69
3.4.1.4 SDN Control to Data-Plane Interface (CDPI) 69
3.4.1.5 SDN Northbound Interfaces (NBI) 69
3.4.1.6 SDN Control Plane: Incorporated-Hierarchical-Distributed 69
3.4.1.7 Controller Placement 70
3.4.1.8 OpenFlow and Open Source in SDN Architecture 70
3.4.2 SDN Design 70
3.4.2.1 Northward APIs 71
3.4.2.2 Southward APIs 71
3.4.2.3 Orchestrator 71
3.4.2.4 Controller 71
3.4.2.5 Compute 71
3.5 Implementation Architecture 72
3.6 Pros and Cons of SDN 72
3.6.1 SDN Misconceptions 73
3.6.2 Pros of SDN 73
3.6.2.1 Centralized Network Provisioning 73
3.6.2.2 Holistic Enterprise Management 73
3.6.2.3 More Granular Security 74
3.6.2.4 Lower Operating Costs 74
3.6.2.5 Hardware-Savings and Reduced Capital Expenditures 74
3.6.2.6 Cloud Abstraction 75
3.6.2.7 Guaranteed Content Delivery 75
3.6.3 Cons of SDN 75
3.6.3.1 Latency 75
3.6.3.2 Maintenance 75
3.6.3.3 Complexity 75
3.6.3.4 Configuration 76
3.6.3.5 Device Security 76
3.7 SDN Applications 76
3.7.1 SDN Environment for Applications 76
3.7.1.1 Internal SDN Applications 77
3.7.1.2 External SDN Applications 77
3.7.1.3 Security Services 77
3.7.1.4 Network Monitoring and Intelligence 77
3.7.1.5 Data Transmission Management 78
3.7.1.6 Content Availability 78
3.7.1.7 Guideline and Compliance-Bound Applications 78
3.7.1.8 Elite Applications 79
3.7.1.9 Circulated Application Control and Cloud Integration 79
3.7.2 Common Application of SDN in Enterprise Networks 79
3.7.2.1 Further Developed Security 80
3.7.2.2 Diminished Working Expenses 80
3.7.2.3 A Superior Client Experience 81
3.7.3 SDN Drives in the Enterprise 81
3.7.3.1 Bringing Together and Improving on the Administration Plane 81
3.7.3.2 Accomplishing Programmability of the Control Plane 81
3.7.3.3 Simple Client Onboarding 82
3.7.3.4 Simple Endpoint Security 82
3.7.3.5 Simple Traffic Checking 82
3.7.3.6 SES Client Onboarding 83
3.7.3.7 Client Onboarding 83
3.7.3.8 SES Simple Endpoint Security: Distinguishing Dubious Traffic 83
3.7.3.9 SES Simple Traffic Observing 84
3.7.3.10 Synopsis 84
3.7.4 SDN Stream Sending (SDN) 84
3.7.4.1 Proactive Versus Reactive Versus Hybrid 84
3.7.4.2 DMN 85
3.7.4.3 SD-WAN 85
3.7.4.4 SD-LAN 85
3.7.4.5 Security Using the SDN Worldview 85
3.7.5 Security Utilizing the SDN Paradigm 86
3.7.6 Gathering Data Delivery Using SDN 87
3.7.7 Relationship of SDN to NFV 87
3.8 Future Research Directions of SDN 88
3.9 Conclusion & Future Scope 89
References 90
4 Latency-Based Routing for SDN-OpenFlow Networks 97
Hima Bindu Valiveti, Meenakshi K, Swaraja K, Jagannadha Swamy Tata, Chaitanya Duggineni, Swetha Namburu and Sri Indrani Kotamraju
4.1 Introduction to Generations of Networks 98
4.2 Features of 5G Systems 99
4.3 Software-Defined Networking (SDN) 102
4.4 Proposed Work 105
4.4.1 Path Selection Algorithm 106
4.4.2 Optimized Path Selection 106
4.4.2.1 Forwarding Node Selection 106
4.4.2.2 Priority Scheduling 108
4.4.2.3 Priority Classification 108
4.5 Experimentation and Results 109
4.5.1 Implementation of Traffic Streaming 109
4.6 Performance Analysis 113
4.7 Conclusion and Future Scope 116
References 116
5 QoS Improvement Evaluation With An Effective Switch Assignment to the Controller in Real-Time SDN Environment 119
Jehad Ali and Byeong-hee Roh
5.1 Introduction 120
5.1.1 Objectives 121
5.2 Architecture of SDN 121
5.2.1 Data Plane 123
5.2.2 Southbound (SB) APIs 123
5.2.3 NB API 124
5.2.4 Management Plane 125
5.2.5 Control Plane 125
5.3 Controller Placement Effect on the QoS 125
5.4 Communication between the Control and Data Planes 126
5.5 Related Works 128
5.6 Parameters for Computing E2E Delay 129
5.6.1 Path Discovery Delay (PD) 129
5.6.2 Actual Delay (AD) 129
5.7 Clustering Based on the Latency of the Emulated Mininet Network 130
5.8 Results and Discussion 131
5.9 Conclusion and Future Directions 133
References 134
6 An Insight into Traffic Engineering in Software-Defined Networks 137
Prabu U. and Geetha V.
6.1 Introduction 138
6.2 Related Works 142
6.3 Review on Traffic Engineering Techniques in SDN 145
6.4 Review on Traffic Engineering Techniques in Hybrid SDN 163
6.5 Review on Traffic Matrix Estimation and Measurement Techniques in SDN 169
6.6 Analysis and Research Direction 177
6.7 Conclusion and Future Scope 179
References 179
7 Network Functions Virtualization and SDN 191
Priyanka Kujur and Sanjeev Patel
7.1 Introduction 192
7.2 Types of Virtualizations 194
7.2.1 Server Virtualization 194
7.2.2 Network Virtualization 195
7.2.3 Application Virtualization 195
7.2.4 Desktop Virtualization 197
7.2.5 Storage Virtualization 197
7.3 Wireless Network Virtualization 198
7.3.1 Radio Spectrum Resources 198
7.3.2 Wireless Network Infrastructure 199
7.3.3 Wireless Virtual Resources 200
7.3.3.1 Spectrum-Level Slicing 200
7.3.3.2 Infrastructure-Level Slicing 200
7.3.3.3 Network-Level Slicing 200
7.3.3.4 Flow-Level Slicing 200
7.3.4 Wireless Virtualization Controller 201
7.4 Network Functions Virtualization and Software-Defined Network 201
7.4.1 Network Virtualization 201
7.4.2 Network Functions Virtualization 201
7.4.2.1 Network Functions Virtualization Infrastructure 202
7.4.2.2 Virtual Network Functions 203
7.4.2.3 Network Functions Virtualization Management and Orchestration 203
7.4.2.4 NFV Challenges 204
7.4.3 Benefits of NFV 204
7.4.3.1 Coexistence of Dissimilar Network 204
7.4.3.2 Encouraging Network Innovation 204
7.4.3.3 Deployment of Agile Network Capabilities 204
7.4.3.4 Provisioning of Independent and Diverse Networks 205
7.4.3.5 Resource Optimization 205
7.4.3.6 Deployment of Distinct Network Services 205
7.4.4 Software-Defined Networking (SDN) 205
7.4.4.1 Traditional Networks 205
7.4.4.2 Need for New Network Architecture 206
7.4.4.3 Introduction to SDN 206
7.4.4.4 SDN Implementation 208
7.4.4.5 SDN Design 208
7.4.4.6 SDN Operation 209
7.4.5 Open Flow 210
7.4.5.1 Open Flow Architecture 211
7.4.5.2 Defining Flow in Open Flow 212
7.4.5.3 Flow and Group Table 213
7.4.6 SDN Benefits 214
7.4.6.1 Centralized Network 214
7.4.6.2 Programmability of the Network 214
7.4.6.3 Rise of Virtualization 214
7.4.6.4 Lower Operating Cost 215
7.4.6.5 Device Configuration and Troubleshooting 215
7.4.7 SDN Challenges 215
7.4.7.1 Reliability 215
7.4.7.2 Scalability 215
7.4.7.3 Performance Under Latency Constraints 216
7.4.7.4 Use of Low-Level Interface Between the Controller and the Network Device 216
7.4.7.5 Controller Placement Problem 216
7.4.7.6 Security 217
7.4.8 SDN versus Traditional Network 217
7.4.9 Network Function Virtualization versus SDN 218
7.5 SDN Architecture 219
7.5.1 Data Plane 219
7.5.2 Control Plane 220
7.5.3 Application Layer 220
7.6 Software-Defined Networking Application 220
7.6.1 Adaptive Routing 220
7.6.2 Load Balancing 221
7.6.3 Boundless Roaming 221
7.6.4 Network Maintenance 222
7.6.5 Network Security 222
7.6.6 SDN for Cloud Computing 222
7.6.7 Internet of Things 224
7.7 Conclusion and Future Scope 224
References 225
8 SDN-Enabled Network Virtualization and Its Applications 231
Anil Kumar Rangsietti and Siva Sairam Prasad Kodali
8.1 Introduction 232
8.2 Traditional Cloud Data Centers 234
8.2.1 SDN for Enabling Innovative Traffic Engineering Tasks in Cloud Data Centers 236
8.2.1.1 Optimal Routing Mechanisms 236
8.2.1.2 Flexible Traffic Steering During Network Failure Recovery 238
8.2.1.3 Improved Topology Management Mechanisms 238
8.2.1.4 Innovative Traffic Analysis and Monitoring Mechanisms 239
8.2.1.5 General Challenges in Adopting SDN 239
8.2.2 SDN Role in Flexible Network Virtualization 241
8.2.2.1 Sharing of Physical Infrastructure and Enforcing Multiple Customer Policies 242
8.2.2.2 Strict Customer Policies Enforcement and Service Level Agreements (SLA) Guarantee 243
8.2.2.3 Failures of Devices or Links 243
8.2.2.4 Optimal Utilization of Cloud Resources 244
8.3 Importance of SDN in Network Function Virtualization (NFV) 245
8.3.1 Network Service Chaining (NSC) 248
8.3.2 Importance of NFs Placement in a Cloud Environment 249
8.3.3 Importance of NF Placement and Scaling in NSC 251
8.4 SDN and Network Virtualization Role in Evolution of Next-Generation Wi-Fi and Mobile Networks 253
8.4.1 Software-Defined Solutions for Enterprise Wireless LANs (WLANs) 253
8.4.1.1 Software-Defined APs 254
8.4.1.2 SDN Switches and Controller 256
8.4.2 Software-Defined Mobile Networks and Telecommunication Clouds 258
8.4.3 Necessity and Importance of Telecommunication Clouds 259
8.4.3.1 SDN- and NFV-Enabled Cloud Environments 260
8.4.3.2 Lightweight Virtualization Technologies 261
8.4.3.3 Novel Application Architecture, Such as Cloud Native Applications and Microservices 263
8.5 SDN and NFV Role in 5G and Smart Cities 264
8.5.1 SDN and NFV Role in Designing Deployment Environment for IoT Applications 265
8.5.2 Cloud-Fog-Edge Computing Environments 266
8.5.3 SDN- and NFV-Enabled 5G and Network Slicing Deployment 269
8.6 Conclusions and Future Scope 271
References 272
9 Software-Defined Networking: Recent Developments and Potential Synergies 279
Jasminder Kaur Sandhu, Bhawna Singla, Meena Pundir, Sanjeev Rao and Anil Kumar Verma
9.1 Introduction 280
9.2 Characteristics of Software-Defined Networking 282
9.2.1 Open Standards and Vendor Neutral 282
9.2.2 Centrally Managed 283
9.2.3 Decoupled 283
9.2.4 Dynamic/Agile 283
9.2.5 Flow-Based Management 283
9.2.6 Programmable 283
9.3 Applications of Software-Defined Networking 284
9.3.1 Specific Purposes 284
9.3.1.1 Network Management 284
9.3.1.2 Middle-Box 284
9.3.2 Security 285
9.3.3 Networks 285
9.3.3.1 Optical Network 286
9.3.3.2 Home Network 286
9.3.3.3 Wireless Network 286
9.4 Security Issues in Software-Defined Networking 287
9.4.1 Authentication and Authorization 287
9.4.2 Access Control and Accountability 288
9.4.3 Threats from Applications 289
9.4.4 Threats Due to Scalability 289
9.4.5 Denial of Service (DoS) Attacks 290
9.4.6 Challenges in Distributed Control Plane 290
9.5 Potential Attacks in Software-Defined Networking 291
9.5.1 Spoofing 291
9.5.2 ARP Spoofing 291
9.5.2.1 IP Spoofing 293
9.5.3 Tampering 293
9.5.4 Repudiation 294
9.5.5 Information Disclosure 295
9.5.6 DoS 295
9.5.7 Elevation of Privilege 296
9.6 Solutions to Security Issues and Attacks in Software-Defined Networking 297
9.6.1 Spoofing 297
9.6.1.1 ARP Spoofing 297
9.6.1.2 IP Spoofing 301
9.6.2 Tampering 301
9.6.3 Repudiation 301
9.6.3.1 Nonrepudiation Verification 301
9.6.3.2 Accountability 302
9.6.4 Information Disclosure 302
9.6.4.1 Scanning-Based Solutions 302
9.6.4.2 Information Disclosure Countermeasure 302
9.6.5 Denial of Service (DoS) 302
9.6.6 Elevation of Privilege 303
9.7 Software-Defined Networking Framework 303
9.7.1 Global Flow Table 304
9.7.2 VNGuard 304
9.8 Security Enhancement Using the Software-Defined Networking Framework 305
9.8.1 SDN Firewall 305
9.8.2 Access Control 307
9.8.3 Intrusion Detection System/Intrusion Prevention System (IDS/IPS) 307
9.8.4 SDN Policies 307
9.8.5 Monitoring and Auditing 308
9.8.6 Privacy Protection 308
9.8.7 SDN WiFi Networks 308
9.8.8 Mobile SDN 309
9.8.9 BYOD 309
9.8.10 SDN Open Labs 309
9.9 Open Challenge 310
9.9.1 Interaction Between Different Controllers and Switches 310
9.9.2 Controller Security 310
9.9.3 Managing Heterogenous Controllers 310
9.9.4 Standard Protocol for Controller 311
9.9.5 Standard Protocol Between Control and Management Plane 311
9.9.6 Managing the Load Between Controllers 311
9.10 Recommended Best Practices 311
9.10.1 Authentication 312
9.10.2 Access Control 312
9.10.3 Data Confidentiality 312
9.10.4 Nonrepudiation 312
9.10.5 Data Integrity 313
9.10.6 Communication Security 313
9.10.7 Privacy 313
9.10.8 Availability 313
9.11 Conclusion and Future Scope 314
References 315
10 Security Challenges and Analysis for SDN-Based Networks 321
Priyanka Kujur, Subhra Priyadarshini Biswal and Sanjeev Patel
10.1 Introduction 322
10.2 Threat Model 325
10.2.1 Spoofing 325
10.2.2 Tampering 325
10.2.3 Repudiation 325
10.2.4 Information Disclosure 325
10.2.5 Denial of Service 326
10.2.6 Elevation of Privileges 326
10.2.7 Threats in SDN Networks 326
10.2.7.1 Attack Surface in SDN 326
10.2.7.2 Security Issues in SDN 327
10.2.7.3 Addressing SDN Security Matters 328
10.2.7.4 Attack to the SDN Architecture 328
10.2.8 Policy-Based SDN Security Architecture 330
10.3 Control Plane Security of SDN 331
10.3.1 Application Coexistence 331
10.3.2 Flow Constraints vs. Flow Circuits 332
10.3.3 An Application Permission Model 332
10.3.4 Application Accountability 332
10.3.5 Toward a Security-Enhanced Control Layer 332
10.4 Security Analysis 332
10.5 Network-Wide Security in SDN 333
10.5.1 Security Systems Development 334
10.5.2 Flow Sampling 335
10.5.3 Traffic Monitoring 336
10.5.4 Access Control 337
10.5.5 Content Inspection 337
10.5.6 Network Resilience 338
10.5.7 Security Middle Boxes 339
10.5.8 Security Challenges in SDN 339
10.6 SDN-Based Virtual and Cloud Networks Security 340
10.6.1 Virtual Networks Security 340
10.6.2 Cloud Networks Security 340
10.7 SDN-Based Secure IoT Frameworks 341
10.8 Conclusion and Future Scope 341
References 342
11 A Novel Secure SDN Architecture for Reliable Data Transmission in 5G Networks 347
J. Sathiamoorthy, Usha M. and R. Bhagavath Nishant
11.1 Introduction 348
11.1.1 Organization of the Chapter 352
11.2 Related Work 352
11.3 SDN-5G Networks-What Does the Future Hold? 356
11.4 Layers in SDN-5G Networks 358
11.5 Security Threats 359
11.5.1 Control Plane 360
11.5.2 Data Plane 361
11.5.3 Application Plane 361
11.6 SDN-5G Networks-Possible Attacks and Threats 362
11.6.1 Distributed Denial of Services (DDoS) 362
11.6.2 Solution for DDoS-To Analyze User's Behavior via Detection Through Entropy 363
11.6.3 Solution for Packet Sniffing 363
11.6.4 Steps in the Handshake Process 364
11.6.5 ARP Spoofing Attack 365
11.6.5.1 ARP Authentication 365
11.6.5.2 Operating System Patching 365
11.6.5.3 API Exploitation 366
11.6.5.4 Password Guessing or Brute Force 366
11. 7 Proposed Methodology 367
11.7.1 Strong Security Architecture for SDN-Based 5G Networks 367
11.8 Security Analysis 373
11.8.1 IP Spoofing 373
11.8.2 MITM Attack 379
11.8.3 Replay Attack 379
11.9 Conclusion and Future Scope 388
References 388
12 Security and Privacy Issues in 5G/6G-Assisted Software-Defined Networks 391
Durbadal Chattaraj and Ashok Kumar Das
12.1 Introduction 392
12.1.1 SDN Applications 394
12.1.2 Security and Privacy Issues in SDN 396
12.1.3 Chapter Contributions 397
12.1.4 Chapter Organization 397
12.2 Security and Functionality Requirements in SDN 398
12.3 Network and Threat Models 399
12.3.1 Network Model 399
12.3.2 Adversary Model 402
12.4 Taxonomy of Security Protocols in SDN 405
12.5 Security Solutions in SDN 406
12.5.1 Authentication 407
12.5.2 Access Control 408
12.5.3 Key Management 409
12.5.4 Intrusion Detection 410
12.5.5 Blockchain-Based Security Solution 412
12.6 Comparative Analysis 413
12.6.1 Comparative Analysis on Communication and Computational Costs 414
12.6.2 Comparative Analysis on Security Features 415
12.7 Conclusion and Future Scopes 419
References 420
13 Evolving Requirements and Application of SDN and IoT in the Context of Industry 4.0, Blockchain and Artificial Intelligence 427
Sunil Kr. Singh, Sunil Kr Sharma, Dipesh Singla and Shabeg Singh Gill
13.1 Introduction 428
13.2 Objectives of the Chapter 430
13.3 Organization of the Chapter 431
13.4 Software-Defined Network Architecture 431
13.4.1 SDN Planes 434
13.4.1.1 Control Plane 434
13.4.1.2 Data Plane 434
13.4.1.3 Application/Management Plane 435
13.4.2 QoS: Quality of Service 436
13.4.2.1 Jitter 436
13.4.2.2 Packet Loss 436
13.4.2.3 Bandwidth 437
13.4.2.4 Latency 437
13.4.3 OpenQoS 437
13.4.4 Secondnet 438
13.4.5 OpenQFlow 440
13.4.6 CloudNaaS 441
13.4.7 Scalable QoS and Automated Control for Network Convergence 442
13.5 Security 442
13.5.1 Fresco 442
13.5.2 NetFuse 443
13.5.3 Scalability 444
13.5.4 DIFANE 444
13.5.5 DevoFlow 445
13.5.6 Maestro 445
13.5.7 Load Balancing 446
13.5.8 AsterX 446
13.5.9 OpenFlow-Based Server Load Balancing Gone Wild 447
13.6 Software-Defined Network (SDN) With IoT 447
13.7 SDN-Based IoT Architecture 448
13.7.1 IoT's Architecture With Software Programming Functions 449
13.7.2 SDN Controllers 449
13.7.3 Gateways/Routers 451
13.7.4 Sinks 452
13.7.5 Data Center 452
13.7.6 Design Principles 453
13.7.7 Dynamic Deployment of Security Policies 454
13.8 Role of SDN and IoT in Industry 4.0 456
13.8.1 Industry 4.0 Explained 457
13.8.1.1 Mass Customization 457
13.8.1.2 Flexibility 457
13.8.1.3 Additive Manufacturing 457
13.8.1.4 Better Decision Making 458
13.8.1.5 Simulation and Digital Twins 458
13.8.1.6 Integrated Supply Chain 458
13.8.1.7 Energy Management 458
13.8.1.8 Creating Value from Big Data 459
13.8.1.9 Cyber-Physical Systems 459
13.8.2 Brokerage Services 462
13.8.3 Man4Ware 464
13.8.4 Security 466
13.8.5 Additional Advanced Service Alternatives 467
13.8.6 Interconnection and Integration Between IoT and Industry 4.0 467
13.9 Work in Related Domains of IoT 468
13.10 IoT Computing and Management With SDN 470
13.10.1 Edge Computing 470
13.10.2 Convergence of NFV and Edge Computing 471
13.10.3 Use of Artificial Intelligence (AI) in Software-Defined Networks (SDN) 472
13.10.4 SDN Network Structure and OpenFlow (OF) Protocol 473
13.11 Scope of Blockchain to Secure IoT Using SDN 474
13.11.1 The Architecture of Blockchain-Based SDN 475
13.11.2 Workflow of BC-SDN and Smart Contracts 477
13.11.2.1 Key Components of Workflow 478
13.12 SDN in Various Emerging Areas of IoT 481
13.13 Conclusion and Future Scope 486
References 489
14 SDN-Based Cloud Combining Edge Computing for IoT Infrastructure 497
Jyoti Snehi, Manish Snehi, Devendra Prasad, Sarita Simaiya, Isha Kansal and Vidhu Baggan
14.1 Introduction 498
14.1.1 Architecture of SDN vs. Traditional Networks 503
14.1.2 SDN/NFV Tiers 504
14.1.3 Objective of Chapter 509
14.1.4 Organization of Chapter 509
14.2 Challenges with SDN-Based Cloud and NFV Technologies for IoT 510
14.3 Literature Survey 519
14.4 Knowledge-Driven SDN-Based IoT Architecture That Leverages Edge Cloud 526
14.5 Discussion and Future Recommendation 532
14.6 Conclusion 533
References 533
Index 541
