Inefficiencies in using Middleboxes with OpenFlow

OpenFlow & MiddleboxesLevent DaneUniversity of Houston

Middlebox on the Path

Leverage hardware capabilities on the path of OpenFlow flows

(Application data transport, not just packet headers) GEC15: Selective packet Encryption GEC16: Creating feedback from ICMP packets GEC17: Statically inserted a middlebox into

GENI GEC18: Dynamic deployment of a middlebox

GEC PostersAvailable at GENI wiki

OpenFlow Uses in Middle Boxes

Selective flow routing

Easily path redirecting

Traffic Steering

Feature Matrix

MAC IP Phy Port Port # VLAN/MPLS

Encryption DPI SSL/IPSec TCP

OutputChange Header

Mat

chHW

Acc

elAc

tion

Use Case Examples

Creating feedback from network events.

TCP Error Fixing and Accelerators Manipulating Payload

Common Switch Architecture for OpenFlow Programmability of TCAM and ASIC Need for NPU

TCAM ASIC

Control Subsystem

TCAM ASIC

Control Subsystem NPU

Future with OpenFlow

Basic scripting language(combine actions together for future use) Applications Hosting Capability(enabling the NPU capabilities like HW accelerators) Pattern Match(searching a data in the network packet)

Thank you. Questions?Levent DaneResearch Assistant

University of Houstonldane@uh.edu