SDN Filter-Based Query Control for Traffic Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Software-Defined Networking (SDN) environments, the process of control information query is inefficient and susceptible to malicious attacks due to the broadcast nature of address resolution, leading to issues like ARP flooding and increased processing burdens on network management entities.
Innovation Solution
Implementing a filter-based approach using a set membership filter to determine whether a query key is a member of a known set before sending query messages to the SDN controller, reducing unnecessary traffic and enhancing security by applying Bloom filters to manage query keys and control information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hosts send query messages to the network management entity for control information, then control information can be obtained, but unnecessary traffic increases and processing burden on the network management entity increases
Solution Approach 1:
The network management entity pre-generates resolution results for all possible query keys and stores them in a resolution result database before any queries occur. When a host needs control information, it can directly retrieve pre-computed results without sending queries to the network management entity, eliminating unnecessary traffic and processing burden while maintaining reliable control information acquisition.
2Reliability
If hosts send query messages to the network management entity, then control information can be obtained, but the network management entity becomes susceptible to malicious attacks
Solution Approach 1:
The patent extracts the query processing function from the network management entity and places it locally in hosts through the resolution result database. By taking out the vulnerable query interface from the central network management entity, the system eliminates the security vulnerability to malicious attacks while maintaining the ability to acquire control information through local database lookups.
3Adaptability or versatility
If broadcast address resolution is used, then all hosts can receive control information, but ARP flooding occurs and traffic on control-plane channels increases
Solution Approach 1:
Each host maintains its own resolution result database with pre-computed control information for its specific query keys. Instead of relying on broadcast mechanisms to disseminate control information to all hosts, each host serves itself by locally retrieving needed information, thereby achieving adaptable control information acquisition without generating unnecessary broadcast traffic.
Data Source
AI summary
Example methods are provided for filter-based control information query in a software-defined networking (SDN) environment that includes a host and a network management entity. One example method may comprise identifying a first query key for the host to query for control information associated with the first query key from the network management entity; and applying a set membership filter to determine whether the first query key is possibly a member of a set of second query keys that are known to the network management entity. The method may also comprise, in response to determination that the first query key is possibly a member of the set of second query keys, generating and sending a query message to the network management entity over a control-plane channel to query for the control information associated with the first query key.