ABSTRACT
This paper presents a reference implementation of an Elastic IP and Security Group service using the OpenFlow protocol. The implementation is the first to present integration of OpenFlow within a virtual machine provisioning engine and an API for enabling such services. In this paper the OpenNebula system is used. The Elastic IP and Security Groups services are similar to the Amazon EC2 services and present a compatible Query API implemented by OpenNebula. The core of the implementation relies on the integration of an OpenFlow controller (NOX) with the EC2 server. Flow rules can be inserted in the OpenFlow controller using the EC2 API. These rules are then used by Open vSwitch bridges on the underlying hypervisor to manage network traffic. The reference implementation presented opens the door for more advanced cloud networking services that leverage principles from software defined networking including virtual private cloud, virtual data center spanning multiple availability zones, as well as seamless migration over wide are networks.
- Feature guide: Amazon ec2 elastic ip addresses. http://aws.amazon.com/articles/1346, July 2010.Google Scholar
- Flowvisor. http://flowvisor.org, Nov 2011.Google Scholar
- Geni: Exploring networks of the future. http://www.geni.net, Nov 2011.Google Scholar
- Openflow. http://www.openflow.org, Nov 2011.Google Scholar
- Openstack. http://www.openstack.org, Nov 2011.Google Scholar
- Open vswitch. http://openvswitch.org/, February 2012.Google Scholar
- Opennebula home page. http://www.opennebula.org, January 2012.Google Scholar
- User guide for amazon elastic compute cloud. http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/, Feb 2012.Google Scholar
- T. Benson, A. Akella, A. Shaikh, and S. Sahu. Cloudnaas: a cloud networking platform for enterprise applications. In Proceedings of the 2nd ACM Symposium on Cloud Computing, page 8. ACM, 2011. Google ScholarDigital Library
- A. Ganguly, A. Agrawal, P. Boykin, and R. Figueiredo. Wow: Self-organizing wide area overlay networks of virtual workstations. In High Performance Distributed Computing, 2006 15th IEEE International Symposium on, pages 30--42. IEEE, 2006.Google ScholarCross Ref
- D. Inc. Dynamic insertion of services in a multi-tenant virtual data center. http://opennetsummit.org/demonstrations.html, Oct 2011.Google Scholar
- R. Ltd. Scalable dos attack detection and mitigation. http://opennetsummit.org/demonstrations.html, Oct 2011.Google Scholar
- P. Marshall, K. Keahey, and T. Freeman. Elastic site: Using clouds to elastically extend site resources. In Proceedings of the 2010 10th IEEE/ACM International Conference on Cluster, Cloud and Grid Computing, pages 43--52. IEEE Computer Society, 2010. Google ScholarDigital Library
- P. Mell and T. Grance. The nist definition of cloud computing (draft). NIST special publication, 800:145, 2011. Google ScholarDigital Library
- N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. Openflow: enabling innovation in campus networks. ACM SIGCOMM Computer Communication Review, 38(2):69--74, 2008. Google ScholarDigital Library
- M. Murphy, L. Abraham, M. Fenn, and S. Goasguen. Autonomic clouds on the grid. Journal of Grid Computing, 8(1):1--18, 2010.Google ScholarCross Ref
- D. Nurmi, R. Wolski, C. Grzegorczyk, G. Obertelli, S. Soman, L. Youse , and D. Zagorodnov. The eucalyptus open-source cloud-computing system. In Cluster Computing and the Grid, 2009. CCGRID'09. 9th IEEE/ACM International Symposium on, pages 124--131. IEEE, 2009. Google ScholarDigital Library
- P. Ruth, X. Jiang, D. Xu, and S. Goasguen. Virtual distributed environments in a shared infrastructure. Computer, 38(5):63--69, 2005. Google ScholarDigital Library
- B. Sotomayor, R. Montero, I. Llorente, and I. Foster. Virtual infrastructure management in private and hybrid clouds. Internet Computing, IEEE, 13(5):14--22, 2009. Google ScholarDigital Library
Index Terms
- Elastic IP and security groups implementation using OpenFlow
Recommendations
Design and Implementation of a Cloud-Federation Agent for Software Defined Networking
IC2E '15: Proceedings of the 2015 IEEE International Conference on Cloud EngineeringThis paper introduces a cloud-federation agent which enables a horizontal network federation between different cloud providers, based on Software Defined Networking (SDN). Furthermore, tenants, using the cloud's Infrastructureas a Service (IaaS) model, ...
Is your cloud elastic enough?: performance modelling the elasticity of infrastructure as a service (IaaS) cloud applications
ICPE '12: Proceedings of the 3rd ACM/SPEC International Conference on Performance EngineeringElasticity, the ability to rapidly scale resources up and down on demand, is an essential feature of public cloud platforms. However, it is difficult to understand the elasticity requirements of a given application and workload, and if the elasticity ...
Non-tunneling Edge-Overlay Model Using OpenFlow for Cloud Datacenter Networks
CLOUDCOM '13: Proceedings of the 2013 IEEE International Conference on Cloud Computing Technology and Science - Volume 02In current SDN paradigm, an edge-overlay (distributed tunneling) model using L2-in-L3 tunneling protocols, such as VXLAN, has attracted attentions for multi-tenant data center networks. The edge-overlay model can establish rapid-deployment of virtual ...
Comments