10
votes
How does Deep Packet Inspection work with encrypted packets?
As you point out, traditional DPI methods have limited ability to deal with encrypted traffic completely. They can still address encrypted traffic at a surface level at the very least, but it does ...
- 27.4k
6
votes
Accepted
What exactly is the difference between SDN & NFV?
I disagree with the answer provided @Pedro Perez, I think his answer is mixing phrases and ambiguous so I have provided my own interpretation below.
SDN:
I think it is pretty much what the name says “...
- 5,310
6
votes
Accepted
Are routers used in Software Defined Network?
Software Defined networks do not have a device explicitly named as router. The Network is generally made of switches and controllers. However, can sdn networks achieve functionality of routing ?
...
- 1,237
6
votes
How does SDN Controller know the IP address from a packet?
We've always said that SDN Controllers are "Protocol-less", they don't
need to know the packet's encoding to switch it. Or, controllers can
route packets by the IP Address. And the IP Address used ...
- 67.9k
6
votes
Accepted
How does Deep Packet Inspection work with encrypted packets?
For the actual payload inspection you need to break the encryption. That is the only way to detect drive-by malware downloads and similar threats.
The usual way that works is the same way as a man-in-...
- 86.4k
5
votes
Can SDN controllers inject or delete routes in a router?
SDN is anything but a standard. So it is possible that some SDN implementations allow to inject / delete routes while other don't.
BGP is one routing protocol among many. A router learn routes from ...
- 19.8k
5
votes
Accepted
Whats the meaning of `802.1Q tunnel customer VLAN mapping` and `802.1Q tunnel provider VLAN mapping`?
Using QinQ (802.1ad) double tagging, you can use an inner (customer) VLAN ID and an outer (provider) VLAN ID.
The point is that a provider can provide full, 802.1Q-tagged services to each client and ...
- 86.4k
5
votes
How to traceroute in SDN Networks while traceroute is not working in SDN by default?
One of the points of SDN is that you build a virtual "network box" where all your switching, routing, NATing, etc happens and that looks like a single device from the outside, regardless of its ...
- 86.4k
5
votes
what is meaning of MPLS when compared to SD-WAN? is it dedicated MPLS or MPLS VPNs
Can anyone tell me if there is real world WAN solutions for 3 cases above
There are many. Large organizations use MPLS in their own networks, especially when they provide "services" to ...
- 67.9k
4
votes
Forwarding to multiple output ports using SDN
Yes, the openflow protocol supports the creation of flows with multiple actions, and each action can be to send a frame/packet out a certain port.
However, whether or not your openflow switch ...
- 2,658
4
votes
Accepted
how openflow messages get routed from switch to controller? (SDN)
When the network is set up, the controller on recognizing the switch has been added to the network will install the default rule to ensure it gets messages from that switch that are not resolved by ...
- 186
3
votes
Regarding NETCONF
XR probably wants NETCONF 1.1. If you enable debugging you might find something like this in your log:
RP/0/RSP0/CPU0:Sep 8 09:47:27.513 : netconf[1120]: ERR: NC: Error, Capability urn:ietf:params:...
- 1,086
3
votes
Accepted
Finding the difference between flow tables in SDN and routing tables in traditional network
First note that all of these technical terms are subject to distortion by Marketing, so sometimes you have to read between the lines.
The term switch refers to a layer-2 device, so it is forwarding ...
- 366
3
votes
Can SDN controllers inject or delete routes in a router?
Having an out-of-path router inject a route into another BGP speaker is quite common - consider the way a route-reflector works - they are often BGP daemons running on servers with no transit traffic.
...
- 9,460
3
votes
Can SDN controllers inject or delete routes in a router?
Let's forget about SDN for the moment, and consider what happens in a traditional router. There is some software that looks at the BGP configuration and also the BGP information from peers, and ...
- 2,426
3
votes
If routing protocol in physical routers in SDN network?
SDN is still being developed, so there are no hard and fast rules. But generally speaking, the controller has a complete view of the network, so there is no need for a routing protocol.
However, ...
- 67.9k
3
votes
What is a Logically Centralised Controller in SDN
Without knowing which SDN you're referring to, and without knowing what material you're reading, I think we're just going to be guessing.
With that said, not all SDN solutions have separate data and ...
- 1,033
3
votes
Accepted
Regarding Tier0 switch to downstream servers connectivity
I think it’s mostly a cost and scaling issue. When operating in the scale those big networks operate, you don’t care about a single server losing connectivity, you think in scale of data centers ...
- 17.4k
3
votes
Direct packet forwarding by controller
An SDN controller generally doesn't forward user data (at least not with OpenFlow). It often only gets a digest from an unmatched packet (the essential data extracted), so there might even be nothing ...
- 86.4k
3
votes
What is the difference between a Network Operating System and an SDN controller?
Welcome to NE! We hope you will become a contributing member of this community.
The terms you mention, like a lot of networking terms, are often defined by the system manufacturers, and they are ...
- 67.9k
3
votes
Accepted
How to aggregate four upstream ports in the network module?
In the manual you've linked, check page 206:
channel-group
The group of channel-group commands allows configuring Etherchannel/port bundling. After port is assigned to channel-group, all ...
- 86.4k
3
votes
Accepted
what is the difference between OpenFlow queue and 802.1p
Although they are both related to quality of service, they are completely different concepts.
IEEE 802.1p is a mechanism (format) for marking "class of service" (CoS) on Ethernet frames. The CoS has ...
- 67.9k
3
votes
Why do we need machine learning for QoS classification in SDNs if we have DSCP in IP address for QoS enforcement?
Something has to set the DSCP values. In a traditional network, that comes from either the end user / application, or intervening network hardware. Unless you have significant control of the device/...
- 32.4k
3
votes
Accepted
Software Defined Networking (SDN): What is line-speed?
Most often, the terms "line speed" or "wire speed" refer to a device's capability to process or forward data only limited by the respective interface speeds.
- 86.4k
2
votes
Accepted
How overlay network has led to the other network virtualization techniques
Overlay as in a layer is not new. IP is layered on top of link layer technologies such as Ethernet. IP GRE tunneling used to be discouraged because of the overhead, sometimes doubling the bandwidth ...
- 4,409
2
votes
Accepted
Can SDN work with the conventional switches?
Good question.
First, as I indicated in What Exactly is SDN?, if it ain't running the trademarked OpenFlow® protocol, it ain't SDN, it's SDN Fashioned. OpenFlow®'s owner, the ONF, spells ...
- 4,409
2
votes
Accepted
Unknown Unicast Flooding Attack in Software Defined Networking
The short answer is, it is software defined :-)
Let's unpack your question. An Unknown Unicast in a transparently bridged network is one who's destination MAC address isn't known. In transparent ...
- 1,171
2
votes
Accepted
The actual definition of network configuration
Basically (simplified) an SDN controller allows an administrator to configure various settings on network devices (which may include switches, routers, firewalls, ... anything that has an appropriate ...
- 2,658
2
votes
Accepted
Fiber Network Bandwidth Control without Radius/PPPoE (Service Provider-Limit Client Bandwidth)
Many switches (smart ones) can do bandwidth limiting on a per-port basis - this is a robust, distributed method of limiting BW from a provider perspective for port-connected clients. Since most ...
- 2,746
2
votes
Software defined system
If by Ethernet, you mean Ethernet 'frames' then that packet is sent to the Controller. The Controller then instructs the Switch about packet modification and actions for output port.
Alternatively, ...
- 31
Only top scored, non community-wiki answers of a minimum length are eligible