skip to main content
10.1145/2287056.2287069acmconferencesArticle/Chapter ViewAbstractPublication PagesicacConference Proceedingsconference-collections
research-article

Elastic IP and security groups implementation using OpenFlow

Published:18 June 2012Publication History

ABSTRACT

This paper presents a reference implementation of an Elastic IP and Security Group service using the OpenFlow protocol. The implementation is the first to present integration of OpenFlow within a virtual machine provisioning engine and an API for enabling such services. In this paper the OpenNebula system is used. The Elastic IP and Security Groups services are similar to the Amazon EC2 services and present a compatible Query API implemented by OpenNebula. The core of the implementation relies on the integration of an OpenFlow controller (NOX) with the EC2 server. Flow rules can be inserted in the OpenFlow controller using the EC2 API. These rules are then used by Open vSwitch bridges on the underlying hypervisor to manage network traffic. The reference implementation presented opens the door for more advanced cloud networking services that leverage principles from software defined networking including virtual private cloud, virtual data center spanning multiple availability zones, as well as seamless migration over wide are networks.

References

  1. Feature guide: Amazon ec2 elastic ip addresses. http://aws.amazon.com/articles/1346, July 2010.Google ScholarGoogle Scholar
  2. Flowvisor. http://flowvisor.org, Nov 2011.Google ScholarGoogle Scholar
  3. Geni: Exploring networks of the future. http://www.geni.net, Nov 2011.Google ScholarGoogle Scholar
  4. Openflow. http://www.openflow.org, Nov 2011.Google ScholarGoogle Scholar
  5. Openstack. http://www.openstack.org, Nov 2011.Google ScholarGoogle Scholar
  6. Open vswitch. http://openvswitch.org/, February 2012.Google ScholarGoogle Scholar
  7. Opennebula home page. http://www.opennebula.org, January 2012.Google ScholarGoogle Scholar
  8. User guide for amazon elastic compute cloud. http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/, Feb 2012.Google ScholarGoogle Scholar
  9. T. Benson, A. Akella, A. Shaikh, and S. Sahu. Cloudnaas: a cloud networking platform for enterprise applications. In Proceedings of the 2nd ACM Symposium on Cloud Computing, page 8. ACM, 2011. Google ScholarGoogle ScholarDigital LibraryDigital Library
  10. A. Ganguly, A. Agrawal, P. Boykin, and R. Figueiredo. Wow: Self-organizing wide area overlay networks of virtual workstations. In High Performance Distributed Computing, 2006 15th IEEE International Symposium on, pages 30--42. IEEE, 2006.Google ScholarGoogle ScholarCross RefCross Ref
  11. D. Inc. Dynamic insertion of services in a multi-tenant virtual data center. http://opennetsummit.org/demonstrations.html, Oct 2011.Google ScholarGoogle Scholar
  12. R. Ltd. Scalable dos attack detection and mitigation. http://opennetsummit.org/demonstrations.html, Oct 2011.Google ScholarGoogle Scholar
  13. P. Marshall, K. Keahey, and T. Freeman. Elastic site: Using clouds to elastically extend site resources. In Proceedings of the 2010 10th IEEE/ACM International Conference on Cluster, Cloud and Grid Computing, pages 43--52. IEEE Computer Society, 2010. Google ScholarGoogle ScholarDigital LibraryDigital Library
  14. P. Mell and T. Grance. The nist definition of cloud computing (draft). NIST special publication, 800:145, 2011. Google ScholarGoogle ScholarDigital LibraryDigital Library
  15. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. Openflow: enabling innovation in campus networks. ACM SIGCOMM Computer Communication Review, 38(2):69--74, 2008. Google ScholarGoogle ScholarDigital LibraryDigital Library
  16. M. Murphy, L. Abraham, M. Fenn, and S. Goasguen. Autonomic clouds on the grid. Journal of Grid Computing, 8(1):1--18, 2010.Google ScholarGoogle ScholarCross RefCross Ref
  17. D. Nurmi, R. Wolski, C. Grzegorczyk, G. Obertelli, S. Soman, L. Youse , and D. Zagorodnov. The eucalyptus open-source cloud-computing system. In Cluster Computing and the Grid, 2009. CCGRID'09. 9th IEEE/ACM International Symposium on, pages 124--131. IEEE, 2009. Google ScholarGoogle ScholarDigital LibraryDigital Library
  18. P. Ruth, X. Jiang, D. Xu, and S. Goasguen. Virtual distributed environments in a shared infrastructure. Computer, 38(5):63--69, 2005. Google ScholarGoogle ScholarDigital LibraryDigital Library
  19. B. Sotomayor, R. Montero, I. Llorente, and I. Foster. Virtual infrastructure management in private and hybrid clouds. Internet Computing, IEEE, 13(5):14--22, 2009. Google ScholarGoogle ScholarDigital LibraryDigital Library

Index Terms

  1. Elastic IP and security groups implementation using OpenFlow

    Recommendations

    Comments

    Login options

    Check if you have access through your login credentials or your institution to get full access on this article.

    Sign in
    • Published in

      cover image ACM Conferences
      VTDC '12: Proceedings of the 6th international workshop on Virtualization Technologies in Distributed Computing Date
      June 2012
      68 pages
      ISBN:9781450313445
      DOI:10.1145/2287056

      Copyright © 2012 ACM

      Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

      Publisher

      Association for Computing Machinery

      New York, NY, United States

      Publication History

      • Published: 18 June 2012

      Permissions

      Request permissions about this article.

      Request Permissions

      Check for updates

      Qualifiers

      • research-article

      Acceptance Rates

      Overall Acceptance Rate5of10submissions,50%

    PDF Format

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader