search query: @keyword monitoring / total: 53
reference: 7 / 53
| Author: | Ranjbar, Alireza |
| Title: | Domain Isolation in a Multi-Tenant Software-Defined Network |
| Publication type: | Master's thesis |
| Publication year: | 2015 |
| Pages: | x + 92 s. + liitt. 5 Language: eng |
| Department/School: | Sähkötekniikan korkeakoulu |
| Main subject: | Networking Technology (S3029) |
| Supervisor: | Manner, Jukka |
| Instructor: | Slavov, Kristian |
| Electronic version URL: | http://urn.fi/URN:NBN:fi:aalto-201505283005 |
| Location: | P1 Ark Aalto 2829 | Archive |
| Keywords: | traffic isolation multi-tenancy SDN domain packet rewriting monitoring |
| Abstract (eng): | Software-Defined Networking (SDN) has evolved as a new networking paradigm to solve many of current obstacles and limitations in communication networks. The SDN technology is going to be implemented in multi-tenant environments like data centers where several customers, which are called "tenants", share network resources. In fact, the integration of SDN allows tenants in a shared network to have higher levels of control over available resources. While this approach has several advantages, the isolation between the tenants of a shared network becomes a vital factor which has not been discussed clearly so far. This thesis discusses multi-tenancy and explains current isolation approaches in a multi-tenant SDN. For increasing isolation between tenants, this thesis proposes a scalable solution that provides traffic isolation, address space isolation, control isolation and performance isolation. In the new system architecture, tenants are not limited to their own networks and they are able to make interaction with each other and external resources. Indeed, while tenants are isolated from each other, they are allowed to access special services offered by other tenants or external services outside of a shared network. The evaluation of the prototype proves that the new architecture provides a high level of isolation in a multi-tenant SDN and it is scalable enough to be implemented in large networks with millions of tenants. |
| ED: | 2015-06-21 |
INSSI record number: 51484
+ add basket
INSSI