SDN Controller Centralized Management for Network Visibility
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional computer networks, particularly in DMZs, face challenges in visibility and management due to the complexity of determining device connections and traffic flow, leading to difficulties in security and high availability, with manual reconfiguration being error-prone and costly.
Innovation Solution
A software-defined network (SDN) controller that programmatically manages network devices to determine connections, direct traffic paths, and enforce security policies dynamically, using OpenFlow or proprietary protocols to create a centralized control plane that separates from the data plane, enabling automated reconfiguration and fine-grained access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional routing protocols are used where each router performs individual route determination, then network devices can operate independently, but network visibility and management complexity increase significantly
Solution Approach 1:
The patent extracts the control plane functionality from individual network devices and consolidates it into a centralized SDN controller. This separation allows network devices to operate independently at the data plane level while the controller provides centralized visibility and management, resolving the contradiction between independent operation and management complexity.
Solution Approach 2:
The SDN controller acts as an intermediary between network devices and administrators. It provides a simplified interface for management and configuration, reducing the complexity burden on administrators while maintaining the independent operational capability of individual network devices through standardized protocols.
2Ease of manufacture
If manual reconfiguration of network devices is performed, then existing hardware can be utilized, but errors increase and reconfiguration becomes costly
Solution Approach 1:
The SDN controller enables automated self-service reconfiguration of network devices through programmatic interfaces. This eliminates manual configuration errors while maintaining compatibility with existing hardware, allowing the system to reconfigure itself based on high-level policies without requiring manual intervention at the device level.
Solution Approach 2:
The patent replaces manual mechanical configuration processes with automated software-based control. The SDN controller uses programmatic interfaces to configure network devices, substituting the error-prone manual process with automated software control that maintains hardware utilization while significantly improving configuration accuracy.
3Ease of operation
If centralized control is implemented to improve network visibility, then management becomes easier, but the control system complexity increases
Solution Approach 1:
The SDN controller implements a universal control architecture that handles multiple network management functions through a single platform. This multi-functional approach simplifies operations for administrators while consolidating complexity within the controller itself, providing ease of operation without requiring multiple separate systems.
Solution Approach 2:
The controller uses parameter changes and policy-based management to simplify operations. Administrators can manage the network by defining high-level parameters and policies, and the controller automatically translates these into device-specific configurations, easing operations while managing complexity through abstraction.
4Reliability
If dynamic path reconfiguration is implemented for high availability, then network resilience improves, but control overhead increases
Solution Approach 1:
The SDN controller performs preliminary actions by pre-calculating alternative paths and maintaining backup routing information. When failures occur, the controller can quickly switch to pre-prepared paths without requiring intensive real-time computation, thus improving availability while minimizing control overhead during normal operation.
Solution Approach 2:
The system implements feedback mechanisms where the controller monitors network status and automatically triggers path reconfiguration only when necessary. This feedback-driven approach ensures high availability through dynamic path switching while avoiding unnecessary control overhead by maintaining stable routing during normal conditions.
Data Source
AI summary
In one example, a controller device for a software defined network (SDN) includes one or more network interfaces configured to communicate with network devices of the SDN, and one or more processors configured to obtain data representative of the network devices in the SDN, instantiate software-based controller objects for controllers of the network devices, instantiate software-based switch description objects for switches of the network devices, wherein the software-based switch description objects each comprise data representative of a respective primary controller corresponding to a controller of the one or more controllers, a respective switch identifier, a respective switch media access control (MAC) address, a respective Internet protocol (IP) address, and a respective array of port description objects for each physical port on the respective switch, and managing, via the network interfaces, at least some of the switches using the switch description objects and the controller objects.