Le SDN (Software-Defined Networking) émerge comme une nouvelle architecture pour la programmation des réseaux. A l'origine, l'idée du SDN est de déplacer le plan de contrôle à l'extérieur des équipements, et de permettre ainsi un contrôle déporté de l'ensemble depuis une entité logicielle logique nommée "contrôleur". Le principal avantage d'une telle approche est de centraliser donc toute l'intelligence de gestion du réseau dans le contrôleur, qui s'appuie pour cela sur des protocoles standard et assure par ce biais la reprogrammation de la totalité de la partie du réseau sous son contrôle. L'évolution technologique vers le SDN est toujours en cours dans des scénarios de déploiement programmable et flexible des réseaux mobiles. Le NFV (Network Function Virtualization) est le processus de déplacement ou de migration des fonctions réseau d'un équipement dédié de réseau vers des serveurs génériques dans le Cloud. Les SDN et NFV sont deux technologies étroitement liées qui sont souvent utilisées ensemble. Le couplage fort entre les plans de contrôle et de données, ainsi que les limitations en matière de passage à l'échelle et de flexibilité, font que la virtualisation des réseaux mobiles actuels nécessite non seulement l'utilisation du Cloud Computing mais aussi les récentes innovations telles que SDN et NFV pour pouvoir permettre un déploiement à la demande des services réseaux (Network-as-a-Service) aux utilisateurs. Les lignes de recherche globales de cette thèse s'inscrivent dans deux principaux cas d'utilisation. Ces cas d'utilisation, bien qu'appelés de la "prochaine génération de réseaux mobiles", sont le "Telco" et le "Vertical", qui apparaissent ici couplés, les deux étant traditionnellement complètement séparés. Dans les cas d'utilisation de "télécommunications", nous exploitons les avantages de SDN pour avoir un cadre de contrôle flexible pour les réseaux d'auto-organisation (SON) et la division de traitement dynamique des utilisateurs. Dans le cas d'utilisation de "verticale", nous appliquons divers avantages du protocole SDN et OpenFlow pour utiliser efficacement les ressources radio du réseau de backhaul dans le système de communication train-sol. Notre cadre d'étude du SDN, en général, peut être une solution efficace et alternative pour la gestion RAN (Radio Access Network), c'est-à-dire pour des objectives comme l'optimisation des ressources radio, l'optimisation du réseau, la gestion de la mobilité et l'équilibrage de la charge, peuvent être atteint avec ce cadre. Grâce à l'analyse et l'expérimentation concrète des SDN et NFV pour le RAN, nous montrons que les solutions proposées dans ce travail peuvent apporter un faisceau d'avantages évidents aux réseaux mobiles tels que la flexibilité, la programmabilité, la gestion unifiée et la mise en œuvre de nouveaux services / Software-Defined Networking (SDN) has emerged as a new intelligent architecture for network programmability. The primary idea behind SDN is to move the control-plane outside the switches and enable external control of data-plane through a logical software entity called controller. Such approach benefits mobile network management by brining complete intelligence to the logically centralized controller. Network Function Virtualization (NFV) is the process of relocating or migrating network functions from dedicated hardware to generic servers. SDN and NFV are two closely related technologies that are often used together. The traditional mobile network architecture due to its strongest coupling between control and data planes along with limitations in scalability and flexibility requires the usage of cloud computing along with the recent revolutionary approaches in networking such as SDN and NFV to have an architecture that deploys on demand "Network-as-a-Service" for users. The global research focus of this thesis falls in to two main use cases of next generation mobile networks such as Telco and Vertical. In the telco use cases, we exploit the advantages of SDN to have flexible control framework for both Self-Organizing Networks (SON) and dynamic user processing split. In vertical use case, we apply various advantages of SDN and OpenFlow protocol to efficiently utilize the scare radio resources of wireless backhaul network in the train-to-ground communication system. Our SDN framework in general can be an efficient and alternative solution for RAN management i.e. Radio Optimization, Network Optimization, Mobility Management and Load Balancing can be achieved with such framework. Through analysis and experimentation of SDN frameworks for RAN, we shows that the proposed solutions can bring set of advantages to wireless networks such as flexibility, programmability, unified management, and enables new services

Dans cette thèse, on présente nos travaux sur la virtualisation dans le contexte de la réplication des serveurs de contenu vidéo. Les travaux couvrent la conception d’une architecture de virtualisation pour laquelle on présente aussi plusieurs algorithmes qui peuvent réduire les couts globaux à long terme et améliorer la performance du système. Le travail est divisé en plusieurs parties : les solutions optimales, les solutions heuristiques pour des raisons de passage à l’échelle, l’orchestration des services, l’optimisation multi-objective, la planification de services dans des réseaux actifs et complexes et l'intégration d'algorithmes dans une plate-forme réelle / In this thesis, we designed and implemented a tool which performs optimizations that reduce the number of migrations necessary for a delivery task. We present our work on virtualization in the context of replication of video content servers. The work covers the design of a virtualization architecture for which there are also several algorithms that can reduce overall costs and improve system performance. The thesis is divided into several parts: optimal solutions, greedy (heuristic) solutions for reasons of scalability, orchestration of services, multi-objective optimization, service planning in complex active networks, and integration of algorithms in real platform. This thesis is supported by models, implementations and simulations which provide results that showcase our work, quantify the importance of evaluating optimization techniques and analyze the trade-off between reducing operator cost and enhancing end user satisfaction index

Optical networking has been developing for decades and wavelength-division multiplexing (WDM) is the main technology used to carry signals in fiber-optical communication systems. However, its development has slowed because it is approaching the Shannon limit of nonlinear fiber transmission. Researchers are looking for multi dimensional multiplexing. Space-division multiplexing (SDM) is an ideal way to scale network capacities. The capacity of WDM/SDM network could be expanded to several times the capacity of WDM network but the active hardware devices may also increase by several times. This project aims to answer a practical question: How to construct a WDM/SDM network with less hardware resource? There is no mature research about WDM/SDM network yet. Therefore, the problem can be divided into two parts: (1) how to build a WDM/SDM network and (2) how to allocate resource and compute routes in such a network to minimize hardware resources. First, this thesis proposes a WDM/SDM node which has bypass connections between different fibers and architecture on demand (AoD) to effectively decrease the number of active hardware devices within the node. Then, two types of networks were constructed: one with bypass connections in each node and another one without any bypass connections. These networks were under the control of a software defined network (SDN) controller. The controller knew the wavelength resources within the networks. Several algorithms were applied to these networks to evaluate the effect of a bypass network and to identify the desired characteristics (to find short length path and decrease the probability of spectrum fragmentation) of an algorithm suitable for a network with bypass connections. The results of applying the proposed algorithms in two networks proved that the bypass connections increased the blocking probability in small topology but did not affect the results in large topology. The results in a large-scale network with bypass network were almost the same as the results in a network without bypass connections. Thus, bypass connections are suitable for large-scale network. / Optiskt nätverk har utvecklats i årtionden och våglängdsdelningsmultiplexering (WDM) är den viktigaste tekniken som används för att bära signaler i fiberoptiska kommunikationssystem. Utvecklingen har dock minskat eftersom den närmar sig Shannon-gränsen för olinjär fiberöverföring. Forskare letar efter flerdimensionell multiplexering. Space-division multiplexing (SDM) är ett idealiskt sätt att skala nätverkskapacitet. Kapaciteten för WDM / SDM-nätverk kan utökas till flera gånger WDM-nätverkets kapacitet, men de aktiva hårdvaraenheterna kan också öka med flera gånger. Projektet syftar till att svara på en praktisk fråga: Hur konstruerar jag ett WDM / SDM-nätverk med mindre hårdvara? Det finns ingen mogen forskning om WDM / SDM-nätverk än. Därför kan problemet delas in i två delar: (1) hur man bygger ett WDM / SDM-nätverk och (2) hur man fördelar resurser och beräknar rutter i ett sådant nätverk för att minimera hårdvaruressurser. Först föreslår denna avhandling en WDM / SDM-nod som har förbikopplingsanslutningar mellan olika fibrer och arkitektur på begäran (AoD) för att effektivt minska antalet aktiva hårdvaraenheter inom noden. Sedan konstruerades två typer av nätverk: en med bypass-anslutningar i varje nod och en annan utan några bypass-anslutningar. Dessa nätverk kontrollerades av en mjukvarudefinierad nätverkskontroller (SDN). Styrenheten visste våglängdsresurserna i nätverket. Flera algoritmer applicerades på dessa nätverk för att utvärdera effekten av ett förbikopplingsnätverk och för att identifiera de önskade egenskaperna (för att hitta en kort längdväg och minska sannolikheten för spektrumfragmentering) av en algoritm som är lämplig för ett nätverk med bypass-anslutningar. Resultaten av att tillämpa de föreslagna algoritmerna i två nät visade att förbikopplingsförbindelserna ökade blockeringssannolikheten i liten topologi men inte påverkade resultaten i stor topologi. Resultaten i ett storskaligt nätverk med bypass-nätverk var nästan samma som resultaten i ett nätverk utan bypass-anslutningar. Bypassanslutningar är således lämpliga för storskaliga nätverk.

No description available.

No description available.

Distributed attacks, such as Distributed Denial of Service (DDoS) ones, require not only the deployment of standalone security mechanisms responsible for monitoring a limited portion of the network, but also distributed mechanisms which are able to jointly detect and mitigate the attack before the complete exhaustion of network resources. This need led to the proposal of several collaborative security mechanisms, covering different phases of the attack mitigation: from its detection to the relief of the system after the attack subsides. It is expected that such mechanisms enable the collaboration among security nodes through the distributed enforcement of security policies, either by installing security rules (e.g., for packet filtering) and/or by provisioning new specialized security nodes on the network. Albeit promising, existing proposals that distribute security tasks among collaborative nodes usually do not consider an optimal allocation of computational resources. As a result, their operation may result in a poor Quality of Service for legitimate packet flows during the mitigation of a DDoS attack. Aiming to tackle this issue, this work proposes a collaborative solution against DDoS attacks with two main goals: (1) ensure an optimal use of resources already available in the attack\'s datapath in a proactive way, and (2) optimize the placement of security tasks among the collaborating security nodes. Regardless the characteristics of each main goal, legitimate traffic must be preserved as packet loss is reduced as much as possible. / Sem resumo

Software-Defined Networking (SDN) is an emerging trend in networking that offers a number of advantages such as smoother network management over traditional networks. By decoupling the control and data planes from network elements, a huge amount of new opportunities arise, especially in network virtualization. In cloud datacenters, where virtualization plays a fundamental role, SDN presents itself as the perfect candidate to ease infrastructure management and to ensure correct operation. Even if the original SDN ideology advocates openness of source and interfaces, multiple networking vendors offer their own proprietary solutions. In this work, an open-source SDN solution, named Tungsten Fabric, will be deployed in a virtualized datacenter and a number of SDN-related use-cases will be examined. The main goal of this work is to determine whether Tungsten Fabric can deliver the same set of use-cases as a proprietary solution from Juniper, named Contrail Cloud. Finally, this work will give some guidelines on whether open-source SDN is the right candidate for Ericsson.

Distributed attacks, such as Distributed Denial of Service (DDoS) ones, require not only the deployment of standalone security mechanisms responsible for monitoring a limited portion of the network, but also distributed mechanisms which are able to jointly detect and mitigate the attack before the complete exhaustion of network resources. This need led to the proposal of several collaborative security mechanisms, covering different phases of the attack mitigation: from its detection to the relief of the system after the attack subsides. It is expected that such mechanisms enable the collaboration among security nodes through the distributed enforcement of security policies, either by installing security rules (e.g., for packet filtering) and/or by provisioning new specialized security nodes on the network. Albeit promising, existing proposals that distribute security tasks among collaborative nodes usually do not consider an optimal allocation of computational resources. As a result, their operation may result in a poor Quality of Service for legitimate packet flows during the mitigation of a DDoS attack. Aiming to tackle this issue, this work proposes a collaborative solution against DDoS attacks with two main goals: (1) ensure an optimal use of resources already available in the attack\'s datapath in a proactive way, and (2) optimize the placement of security tasks among the collaborating security nodes. Regardless the characteristics of each main goal, legitimate traffic must be preserved as packet loss is reduced as much as possible. / Sem resumo

Enhancement of QoS in PS network as 5G communication network is non trivial endeavour which faces a host of new challenges beyond 3G and 4G communication networks. The number of nodes, the homogeneity of the access technologies, the conflicting network management objectives, resource usage minimization, and the division between limited physical resources and elastic virtual resources is driving a complete change in the vision and methodologies for efficient management of the available network resources. QoS is the measure of the reliability and performance of the networks' nodes and links, particularly as perceived by the end users of the services and application that are transported via PS network. Furthermore, QoS is a composite metric as it based on a number of multiple factors, which indicate the E2E characteristics and performance of the network condition, applications and services. Hence, reductions or improvements in the QoS level can brought about through a number of combined factors. This thesis tries to introduce a vision of Quality of Service (QoS) enhancement and management based on the 5th generation network requirements and solutions by: Firstly: Proposing a traffic flow management policy, which allocates and organises Machine Type Communication (MTC) traffic flow's network resources sharing within Evolved Packet System (EPS), with an access element as a Wireless Sensor Network (WSN) gateway for providing an overlaying access channel between the Machine Type Devices (MTDs) and EPS. This proposal addresses the effect and interaction in the heterogeneity of applications, services and terminal devices and the related QoS issues among them. The introduced work in this proposal overcomes the problems of network resource starvation by preventing deterioration of network performance. The scheme is validated through simulation, which indicates the proposed traffic flow management policy outperforms the current traffic management policy. Specifically, simulation results show that the proposed model achieves an enhancement in QoS performance for the MTC traffic flows, including a decrease of 99.45% in Packet Loss Rate (PLR), a decrease of 99.89% in packet End to End (E2E) delay, a decrease of 99.21% in Packet Delay Variation (PDV). Furthermore, it retains the perceived Quality of Experience (QoE) of the real time application users within high satisfaction levels, such as the Voice over Long Term Evolution (VoLTE) service possessing a Mean Opinion Score (MOS)of 4.349 and enhancing the QoS of a video conference service within the standardised values of a 3GPP body, with a decrease of 85.28% in PLR, a decrease of 85% in packet E2E delay and a decrease of 88.5% in PDV. Secondly: Proposing an approach for allocating existing 4G installed network radio access nodes to multiple Base Band Unit (BBU) pools, which is proposed to deploy 5G Cloud-Radio Access Network (C-RAN) and improve the offered Network QoS (NQoS). The proposed approach involves performing radio access nodes clustering based on the Particle Swarm Optimization (PSO) algorithm, model selection Bayesian Information Criterion (BIC), Measure of spread technique and Voronoi tessellation. The proposed scheme is used to consider a Dynamic C-RAN (DC-RAN) operation, that adaptively adjusts the main Radio Remote Head (RRH) coverage range according to the traffic load requirement as well as considering energy saving. The numerical results of the approach show that the optimized partition of the proposed network model is 41 BBU pools, with an average density of RRHs per pool area, which matches the primary average density of the radio access nodes per network area. Thirdly: Developing mathematical framework that investigates the Power Consumption (PC) profile for the interaction of Internet of Thing (IoT) Application QoS (AQoS) with NQoS in wireless Software Defined Network (SDN) as SDN for WIreless SEnsor network (SDN-WISE). This profile model offers flexibility for managing the structure of the Machine to Machine (M2M) system in IoT. It enables controlling the provided NQoS, precisely the achieved PHY layer transmission link throughput, combined with the AQoS, represented by IoT data stream payload size. The investigation is composed of two essential SDN traffic parts, they are control plane signalling and data plane traffic PCs and their relevance with QoS. The results show that 98% PC in data plane companion with a control plane PC of 2% in overall of the proposed system power, these figures were achieved with control plane signalling Transmission Time Interval (TTI) of 5 sec and a maximum data plane payload size of 92 Bytes as a worst case scenario.

Live migration of Virtual Machines (VMs) has significantly improved the flexibility of modern Data Centers (DCs). Ideally, live migration ought to be seamless which in turn raises challenges on how to minimize service disruption and avoid performance degradation. To address these challenges, a comprehensive support from the underlying network is required. However, legacy DC networks fall short to help as they take a reactive approach to live migration procedure. Moreover, the complexity and inflexibility of legacy DC networks make it difficult to deploy, manage, and improve network technologies that DC providers may need to use for migration. In this thesis, we explore the application of Software Defined Networking (SDN) paradigm for making live VM migration more seamless. Exploiting the characteristics of SDN such as its centralized view on network states, we contribute to the body of knowledge by enhancing the quality of intra- and inter-DC live migration. Firstly, for intra-DC migration, we provide an SDN-based solution which minimizes the service disruption by employing OpenFlow-based resiliency mechanisms to prepare a DC network for migration proactively. Secondly, we improve the inter-DC live migration by accelerating the network convergence through announcing the migration in the control plane using MP-BGP protocol. Further, our proposed framework resolves the sub-optimal routing problem by conducting the gateway functionality at the SDN controller. Finally, with the ultimate goal of improving the inter-DC migration, we develop an SDN-based framework which automates the deployment, improves the management, enhances the performance, and increases the scalability of interconnections among DCs. / Live migration of Virtual Machines (VMs) has significantly improved the flexibility of modern Data Centers (DCs). Ideally, live migration ought to be seamless which requires a comprehensive support from the underlying network. However, legacy DC networks fall short to address the challenges of migration due to their inflexible and decentralized characteristics. In contrast, Software Defined Networking (SDN) is a new networking paradigm, which has the potential to improve the live migration thanks to its comprehensive view over the network, flexible structure, and its close integration with DC management infrastructures. This thesis investigates networking challenges of short and long-haul live VM migration in SDN-based DCs. We propose solutions to make the intra- and inter-DC live migration procedures more seamless. Furthermore, our proposed SDN-based framework for inter-DC migration improves the management, enhances the performance, and increases the scalability of interconnections among DCs. / HITS, 4707