SDN-sni : moni o mul i- enan a ic in i ualized
ne wo k in as uc u e
A Deg ee Thesis
Submi ed o he Facul y o he
Escola Tècnica d'Enginye ia de Telecomunicació de
Ba celona
Uni e si a Poli ècnica de Ca alunya
by
Luis Fe nández Sánchez
In pa ial ul ilmen
o he equi emen s o he deg ee in
TELECOMMUNICATON SYSTEMS ENGINEERING
Di ec o : F anco Callega i
Ad iso : Josep Solé Pa e a
Bologna, I aly, Ma ch 2018
1
Abs ac
The So wa e De ined Ne wo king (SDN) is an eme ging pa adigm in ne wo k design and
managemen ha enables he op imiza ion o he use o ne wo k esou ces. This
pa adigm is being explo ed and de eloped om se e al di e en angles.
The scope o in e es o his hesis is he secu i y applica ions on SDN, speci ically he
possibili y o he packe in e cep ion in his kind o ne wo ks. A p oo o concep was
de eloped in a p e ious wo k and he goal o his hesis is o con ibu e by de eloping a
mo e ad anced es ing en i onmen in which un deepe es s o unde s and he
unde lying beha io s and message low du ing he moni o ing.
2
Resum
Les Xa xes De inides pe So wa e (SDN, pe les se es sigles en angles) és un
pa adigma eme gen en el disseny i la ges ió de xa xes que pe me la op imi zació en l’ús
dels ecu sos de les ma eixes. Aques pa adigma es à sen explo a i desen olupa des
de di e en s o ien acions.
L’àmbi d’in e ès d’aques eball de i de g au són les aplicacions de segu e a en SDN,
especí icamen la possibili a d’in e cepció de paque s en aques ipus de xa xes. En un
eball p e i es a desen olupa una p o a de concep e i l’objec iu d’aques eball es el
de con ibui desen olupan un en o n de p o es més a ança en el que pode eali za
p o es més comple es pe en end e els compo amen s subjacen s i els luxos de
missa ges du an el moni o a ge de la xa xa.
3
Resumen
Las Redes De inidas po So wa e (SDN, po sus siglas en inglés) es un pa adigma
eme gen e en el diseño i la ges ión de las edes que pe mi e la op imización en el uso de
los ecu sos de las mismas. Es e pa adigma es á siendo explo ado y desa ollado en sus
di e en es e ien es.
El ámbi o de in e és de es e abajo de in de g ado son las aplicaciones en segu idad en
SDN, especí icamen e la posibilidad de in e cepción de paque es en es e ipo de edes.
En un abajo p e io se ha desa ollado una p ueba de concep o y el obje i o de es e
abajo es el de con ibui desa ollando un en o no de p uebas más a anzado en el que
pode ealiza p uebas más comple as pa a en ende los compo amien os subyacen es
y los lujos de mensajes du an e la moni o ización de la ed.
4
Re ision his o y and app o al eco d
Re ision
Da e
Pu pose
0
27/02/2018
Documen c ea ion
1
16/03/2018
Documen e ision
DOCUMENT DISTRIBUTION LIST
Name
e-mail
Luis Fe nández Sánchez
luis. e nandez.sanchez@es udian .upc.edu
F anco Callega i
anco.callega [email protected]
Josep Solè Pa e a
pa e [email protected]
Wal e Ce oni
wal e .ce [email protected]
W i en by:
Re iewed and app o ed by:
Da e
27/02/2018
Da e
16/03/2018
Name
Luis Fe nández
Name
F anco Callega i
Posi ion
P ojec Au ho
Posi ion
P ojec Supe iso

5
Table o con en s
The able o con en s mus be de ailed. Each chap e and main sec ion in he hesis mus
be lis ed in he “Table o Con en s” and each mus be gi en a page numbe o he
loca ion o a pa icula ex .
Abs ac ................................................................................................................................. 1
Resum................................................................................................................................... 2
Resumen .............................................................................................................................. 3
Re ision his o y and app o al eco d................................................................................... 4
Table o con en s .................................................................................................................. 5
Lis o Figu es ....................................................................................................................... 7
Lis o Tables: ....................................................................................................................... 8
1. In oduc ion.................................................................................................................... 9
1.1. S a emen o pu pose ............................................................................................ 9
1.2. Requi emen s and speci ica ions .......................................................................... 9
1.3. Me hodology and P e ious Wo ks....................................................................... 10
1.4. Wo k Plan ............................................................................................................ 10
2. S a e o he a o he echnology used o applied in his hesis:................................ 12
2.1. Ne wo k Simula ion .............................................................................................. 12
2.2. So wa e De ined Ne wo king (SDN)................................................................... 12
2.2.1. SDN A chi ec u e .......................................................................................... 13
2.2.2. Secu i y in SDN ............................................................................................ 14
2.3. OpenFlow............................................................................................................. 14
3. Me hodology / p ojec de elopmen : ........................................................................... 15
3.1. Vi ual Machines .................................................................................................. 15
3.2. Minine .................................................................................................................. 15
3.3. OpenVi eX and i ual ne wo king...................................................................... 16
3.4. Floodligh and Ne wo k Con olle s ..................................................................... 17
3.5. Global Se Up....................................................................................................... 18
3.6. Wi esha k and es ing phase ............................................................................... 19
4. Tes s and Resul s........................................................................................................ 21
4.1. Fi s Tes : SimpleTopo ........................................................................................ 21
4.1.1. Fi s scena io: SimpleTopo .......................................................................... 21
4.1.2. Second scena io: SimpleTopo + Floodligh Con olle ................................ 22
6
4.1.3. Thi d scena io: SimpleTopo + OpenVi eX + Floodligh .............................. 23
4.2. Second Tes : 2 Swi ches, 4 Hos s....................................................................... 26
4.2.1. Fi s scena io: 2sw-4hs ................................................................................ 27
4.2.2. Second scena io: 2sw-4hs + Floodligh Con olle ...................................... 27
4.2.3. Thi d scena io: 2sw-4hs + OpenVi eX + Floodligh .................................... 30
5. Conclusions and u u e de elopmen : ........................................................................ 35
Bibliog aphy: ....................................................................................................................... 36
6. Annexes:...................................................................................................................... 37
6.1. Fi s Case o S udy: simpleTopo ......................................................................... 37
6.1.1. Minine Code................................................................................................. 37
6.1.2. OpenVi eX sc ip code ................................................................................ 38
6.2. Second Case o S udy: 2 Swi ches, 4 Hos s (2sw-4hs) ..................................... 38
6.2.1. Minine Code................................................................................................. 38
........................................................................................................................................ 38
6.2.2. OpenVi eX sc ip code ................................................................................ 39
Glossa y.............................................................................................................................. 40
7
Lis o Figu es
Figu e 1. Gan Diag am o he Deg ee Thesis.................................................................. 11
Figu e 2. F om adi ional ne wo k o SDN ........................................................................ 12
Figu e 3. Example o SDN A chi ec u e. Sou ce: SDN 101: So wa e De ined Ne wo king
Cou se - Sameh Zaghloul/IBM – 2014............................................................................... 13
Figu e 4. We can un VMs wi h di e en OS inside one single physical machine ............ 15
Figu e 5. Example o i ual slices o e a physical ne wo k. SOURCE: Ne wo k Slicing o
5G wi h SDN/NFV: Concep s, A chi ec u es, and Challenges .......................................... 16
Figu e 6. The emula ed ne wo k c ea ed wi h OVX will be a clone o he one deployed by
Minine ................................................................................................................................ 17
Figu e 7. Physical machine con igu a ion .......................................................................... 18
Figu e 8. Global es en i onmen se up ........................................................................... 19
Figu e 9. Topology c ea ed in SimpleTopo o his es ..................................................... 21
Figu e 10. In scena io 1, he hos s canno each each o he ............................................ 21
Figu e 11. In scena io 2, all he hos s ha e isibili y due o he low able ....................... 22
Figu e 12. Emula ed ne wo k as seen om he con olle and he hos s being able o
each each o he ................................................................................................................. 23
Figu e 13. Cap u e o he ICMP echo eques ................................................................... 24
Figu e 14. Cap u e o he eply o he ICMP echo eply .................................................... 24
Figu e 15. Cap u e o he ICMP 6 packe ........................................................................ 26
Figu e 16. Minine Ne wo k Topology o he second es ................................................. 26
Figu e 17. Hos s a e unable o each any o he when he ne wo k does no ha e a
con olle ............................................................................................................................. 27
Figu e 18. No low c i e ia a e es ablished in he swi ches ............................................... 27
Figu e 19. Ne wo k as seen om he con olle and eachabili y o he hos s .................. 27
Figu e 20. Ne wo k as seen om he con olle and hos eachabili y .............................. 30
Figu e 21. Add ess space change ..................................................................................... 33
Figu e 22. Ne wo k as seen om he Floodligh con olle ................................................ 33
Figu e 23. Changes in he physical add esses.................................................................. 34
Figu e 24. Ne wo k as seen om he Floodligh ................................................................ 34
8
Lis o Tables:
Table 1. Flow able on swi ch S1. ...................................................................................... 22
Table 2. Log o he OVX sc ip ha c ea es he emula ed ne wo k................................... 23
Table 3. Flow able in S1 swi ch in scena io 3 es ............................................................ 25
Table 4. Flow ables in S1 in scena io 2 ............................................................................ 28
Table 5. Flow ables in S2 in scena io 2 ............................................................................ 29
Table 6. Flows in S1 in scena io 3 ..................................................................................... 31
Table 7. Flows in S2 in scena io 3 ..................................................................................... 32
15
3. Me hodology / p ojec de elopmen :
This chap e desc ibes he me hodology used in he de elopmen o he p ojec and he
p ocesses in ol ed.
3.1. Vi ual Machines
Being mos o he p ojec ou side o he ield o specializa ion o he au ho , i is a logical
conclusion ha he aining and s udy mus ake an impo an po ion o he e o in es ed
in he p ojec . In o de o in es hese e o s and ime in he mos e icien way, i is usual
ha so wa e de elope s p o ide u o ial sys ems encapsula ed in cus omized Vi ual
Machines (VM).
The possibili y o unning simula ed machines inside o eal physical ones is no new, bu
i s ill qui e use ul. By c ea ing a VM image wi h he OS and so wa e ha is equi ed o a
speci ic ask, like aining in o SDN, we can simpli y he access o knowledge and
inc ease he e iciency o some p ocesses ha ha e o be eplica ed in se e al di e en
machines.
Figu e 4. We can un VMs wi h di e en OS inside one single physical machine
In he con ex o his p ojec , he VM ha e a ele an ole in he aining pa , as hey a e
main ools o lea n p o ided by he de elope s abou bo h Minine and OpenVi eX. The
chosen ool o un hem in he p ojec has been Vi ualBox.
Vi ualBox is a widely ex ended pla o m a ailable o all main OS and used o un VMs
ia GUI o ia command line. Ne e heless, wo king on a VM inside a emo e machine
ia SSH has p o en no be he mos eliable no com o able way.
3.2. Minine
To de elop a eliable es ing en i onmen we needed a s able ne wo k simula ion
pla o m. A p ominen ool in he wo ld o ne wo k simula ion is Minine .

16
C ea ed by Bob Lan z and B andon Helle , based on he p o o ype by Bob Lan z
2
, Minine
was in ended o be a simula ion and lea ning ool o ne wo king, e ol ing o become one
o he main op ions o SDN and OpenFlow simula ions and expe imen s [8] [9] [10]. I
wo ks as an emula ion o a ne wo k build wi h Linux based hos s and swi ches ha
suppo OpenFlow in which i is possible o c ea e ne wo ks wi h cus om complex
opologies allowing o expe imen in an inexpensi e, as and scalable way.
As seen in he S a e o he A , SDN a chi ec u e is buil o e a physical ne wo k used as
he in as uc u e. In he cu en p ojec , we ha e conside ed mo e con enien o simula e
his physical ne wo k using Minine . I s goal is o p o ide he basic in as uc u e o e
which he i ualiza ion/emula ion laye will be es ablished. Fo doing so we de ine a
opology ha ma ches he necessi ies o he p ojec wi hou adding excessi e complexi y.
Those opologies can be de ined using di e en me hods, o ou se up we ha e chosen
de ining i by using he Minine lib a ies o Py hon.
Ge ing s a ed wi h Minine (in Ubun u) is as simple as ins alling ia command line om
he eposi o y and execu e $sudo mn in a e minal. You can add commands wi h
ins uc ions such as he numbe o swi ches, hos s, he kind o opology, e c. bu a he
end, i come easie o code i in o a Py hon sc ip .
3.3. OpenVi eX and i ual ne wo king
Ne wo k i ualiza ion is he p ocess o combine bo h physical and i ual ne wo k
elemen s in o de o wo k as a single en i y. These i ual ne wo ks (VNs) a e use ul in
many scena ios like aining o expe imen a ion o new ea u es educing he en ance
ba ie as almos no physical in as uc u e is needed. Wi h he e olu ion o his concep
ne wo k slicing appea ed, allowing o di e en i ual ope a o s use he same esou ces
independen ly. [11]
Figu e 5. Example o i ual slices o e a physical ne wo k. SOURCE: Ne wo k Slicing o 5G wi h SDN/NFV:
Concep s, A chi ec u es, and Challenges
3
2
h p://minine .o g/c edi s/
3
Ne wo k Slicing o 5G wi h SDN/NFV: Concep s, A chi ec u es, and Challenges [9]
17
OpenVi eX was bo n in o de o exploi he ad an ages o i ual ne wo king as well as
he possibili ies ha ne wo k slicing o e ed. The pla o m was concei ed as an
Hype iso , an in e media e so wa e laye ha is able o manage se e al di e en i ual
sys ems (e en wi h di e en OS) in o de o allow hem o sha e he same physical
esou ces. This ansla es o se e al independen i ual ne wo ks on op o i while a
single physical ne wo k bellow.
Figu e 6. The emula ed ne wo k c ea ed wi h OVX will be a clone o he one deployed by Minine
In he con ex o he p ojec , OpenVi eX is going o be used o app oxima e he eal
ne wo k condi ions, bu i s ea u es o slicing and ne wo k i ualiza ion will no be used.
Ins ead one single emula ed ne wo k will be c ea ed o each Minine opology by cloning
i . This will be achie ed by coding bash sc ip s ha use he o xcl .py con olle sc ip and
he commands p o ided o i by he ONF. The speci ic sc ip s used in each case a e in
he co esponding annex, in chap e 6.
3.4. Floodligh and Ne wo k Con olle s
The key elemen o e e y SDN a chi ec u e is he con olle . Is he componen in cha ge
o he co ec unc ioning o he ne wo k. I de ines he ules on which he ne wo k is
based, he main and back up ou es o he packages, and en o ces i by pushing low
ables in o he ne wo king elemen s. The con olle also collec s li e in o ma ion abou he
s a us, a ic and pe o mance o he ne wo k in o de o make i always as e icien as
possible and o change he pa hs in case o link sa u a ion o d op.
Fo he p ojec se up, we ha e chosen Floodligh con olle o being he one
ecommended by OpenVi eX de elope s and being al eady used in he p e ious p ojec .
Floodligh is an open sou ce, en e p ise-class, Apache-licensed, Ja a-based OpenFlow
con olle de eloped and suppo ed by a communi y and sponso ed by Big Swi ch
Ne wo ks Inc.
I s ole in he p ojec will be jus abou ac ing as a con olle bu we will no be building
any hing on op o i , as ha would exceed he pu pose o his hesis.
18
We will no ha e o un any speci ic con igu a ion, jus ins alling i in he bigTowe and
change he e sion o he OpenFlow o 1.0 so i ma ches he only one suppo ed cu en ly
by OpenVi eX.
3.5. Global Se Up
Once we a e con iden and luen in he uses o he ools ha compose he di e en
laye s o he se up, we ge o se he whole en i onmen . Le ’s ecap, he elemen s
in ol ed a e:
 Physical componen s:
o miniTowe 68 (Physical Machine)
o bigTowe (Physical Machine)
 So wa e componen s:
o Minine simula ed ne wo k, hos ed on miniTowe 68
o OpenVi eX i ualiza ion laye , hos ed on miniTowe 68
o Floodligh SDN con olle , hos ed on bigTowe
As poin ed abo e, all he sys ems will be deployed in physical machines, in o de o allow
achie e one o he main objec i es o he p ojec : ha e sepa a ed physical in e aces ha
can be easily cap u ed by he packe analyze .
Figu e 7. Physical machine con igu a ion
19
Figu e 8. Global es en i onmen se up
3.6. Wi esha k and es ing phase
When inally he es en i onmen was ully buil , we an some es s (see sec ion 4, Tes s
and Resul s). They consis ed on de ining di e en opologies and p og essi e es s
adding elemen s in each successi e scena io. The ool used o e alua ing hei
pe o mance has been, mainly, Wi esha k
4
.
Wi esha k is an open sou ce packe analyze . I allows cap u ing he a ic in he
in e ace o in e es and hen isualizing e e y packe wi h addi ional in o ma ion as he
p o ocol used, he sou ce o he des ina ion.
In his wo k, Wi esha k has been used o unde s and he unde lying beha io o he
di e en elemen s and he in e ac ions be ween hem.
In o de o unde s and he p inciples o wo king o he es ing en i onmen , we build
di e en opologies. This opologies will be deployed in he miniTowe 68 machine. Fo
his es s, we will be cap u ing he packe s wi h Wi esha k and hen il e ing he OpenFlow
packe s in h ee di e en scena ios. The i s scena io is wi h he Minine opology unning
wi hou any con olle no hype iso , in he second one we will connec he opology o a
emo e Floodligh con olle in bigTowe machine and, in he inal scena io, he
OpenVi eX hype iso will be added in be ween hem, comple ing he se up. All he
cap u es will be pe o med om he bigTowe machine o e he e h0 in e ace (See igu e
7).
The es will be pe o med always in he same way:
1. S a Wi esha k cap u es
4
h ps://www.wi esha k.o g/
20
2. Launch equi ed so wa e
3. Minine > pingall
4. @mini owe 68:$ sudo o s-o c l dump- lows s1
5. S op Wi esha k cap u es
In he successi e sec ion, we will p o ide he esul s o he commands lis ed abo e as
well as he Wi esha k cap u es in o de o show and unde s and he beha io o he
di e en s udied scena ios.

21
4. Tes s and Resul s
4.1. Fi s Tes : SimpleTopo
In his i s expe imen , a minimum opology is build and deployed wi h Minine .
Composed by only one swi ch wi h h ee hos s connec ed, i s pu pose is o be su e ha
all he pa s pe o m as expec ed.
Figu e 9. Topology c ea ed in SimpleTopo o his es
4.1.1. Fi s scena io: SimpleTopo
Figu e 10. In scena io 1, he hos s canno each each o he
No OF packe s cap u ed in e h0, no isibili y be ween hos s and no low able on he
swi ch. This makes sense as no one is pushing OpenFlow commands in o he swi ch.
22
luis@mini owe 68:~$ sudo o s-o c l dump- lows s1
NXST_FLOW eply (xid=0x4):
cookie=0x2000001b000000, du a ion=1.231s, able=0, n_packe s=1, n_by es=98,
idle_ imeou =5, idle_age=1,
p io i y=1,ip,in_po =1,dl_s c=00:00:00:00:01:01,dl_ds =00:00:00:00:01:02,nw_s c=10.0.0.1,
nw_ds =10.0.0.2 ac ions=ou pu :2
cookie=0x2000001c000000, du a ion=1.230s, able=0, n_packe s=1, n_by es=98,
idle_ imeou =5, idle_age=1,
p io i y=1,ip,in_po =2,dl_s c=00:00:00:00:01:02,dl_ds =00:00:00:00:01:01,nw_s c=10.0.0.2,
nw_ds =10.0.0.1 ac ions=ou pu :1
cookie=0x2000001d000000, du a ion=1.226s, able=0, n_packe s=1, n_by es=98,
idle_ imeou =5, idle_age=1,
p io i y=1,ip,in_po =1,dl_s c=00:00:00:00:01:01,dl_ds =00:00:00:00:01:03,nw_s c=10.0.0.1,
nw_ds =10.0.0.3 ac ions=ou pu :3
cookie=0x2000001e000000, du a ion=1.224s, able=0, n_packe s=1, n_by es=98,
idle_ imeou =5, idle_age=1,
p io i y=1,ip,in_po =3,dl_s c=00:00:00:00:01:03,dl_ds =00:00:00:00:01:01,nw_s c=10.0.0.3,
nw_ds =10.0.0.1 ac ions=ou pu :1
cookie=0x2000001 000000, du a ion=1.219s, able=0, n_packe s=1, n_by es=98,
idle_ imeou =5, idle_age=1,
p io i y=1,ip,in_po =2,dl_s c=00:00:00:00:01:02,dl_ds =00:00:00:00:01:03,nw_s c=10.0.0.2,
nw_ds =10.0.0.3 ac ions=ou pu :3
cookie=0x20000020000000, du a ion=1.217s, able=0, n_packe s=1, n_by es=98,
idle_ imeou =5, idle_age=1,
p io i y=1,ip,in_po =3,dl_s c=00:00:00:00:01:03,dl_ds =00:00:00:00:01:02,nw_s c=10.0.0.3,
nw_ds =10.0.0.2 ac ions=ou pu :2
4.1.2.Second scena io: SimpleTopo + Floodligh Con olle
Figu e 11. In scena io 2, all he hos s ha e isibili y due o he low able
In his second scena io, we ind ha he emo e con olle wo ks as expec ed and push a
low able in o he swi ch and, in doing so, allowing he hos s o see each o he .
Table 1. Flow able on swi ch S1.
23
4.1.3. Thi d scena io: SimpleTopo + OpenVi eX + Floodligh
In his inal scena io, we es he whole se up wi h he minimum opology. Seems ha
e e y hing wo ks as expec ed as can be app ecia ed in he ollowing igu e.
I is ele an o say ha he ne wo k seen by he Floodligh con olle is no he one
c ea ed by he Minine anymo e, bu he emula ed one c ea ed by OpenVi eX on op o
he o me .
Table 2. Log o he OVX sc ip ha c ea es he emula ed ne wo k
luis@mini owe 68:~/OpenVi eX/sc ip s$ sh simpleNe .sh
Vi ual ne wo k has been c ea ed (ne wo k_id {u'mask': 16, u'ne wo kAdd ess':
167772160, u'con olle U ls': [u' cp:10.10.10.21:6653'], u' enan Id': 1}).
Vi ual swi ch has been c ea ed ( enan _id 1, swi ch_id 00:a4:23:05:00:00:00:01)
Vi ual po has been c ea ed ( enan _id 1, swi ch_id 00:a4:23:05:00:00:00:01,
po _id 1)
Vi ual po has been c ea ed ( enan _id 1, swi ch_id 00:a4:23:05:00:00:00:01,
po _id 2)
Vi ual po has been c ea ed ( enan _id 1, swi ch_id 00:a4:23:05:00:00:00:01,
po _id 3)
Hos (hos _id 1) has been connec ed o i ual po
Hos (hos _id 2) has been connec ed o i ual po
Hos (hos _id 3) has been connec ed o i ual po
Ne wo k ( enan _id 1) has been boo ed
1. Emula ed ne wo k as seen om he con olle and he hos s being able o each each o he Figu e 12. Emula ed ne wo k as seen om he con olle and he hos s being able o each each o he
24
Figu e 13. Cap u e o he ICMP echo eques
Figu e 14. Cap u e o he eply o he ICMP echo eply
31
Table 6. Flows in S1 in scena io 3
cookie=0x10000000b, du a ion=7.402s, able=0, n_packe s=1, n_by es=42, idle_ imeou =5,
idle_age=2, p io i y=1, a p, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0e,
ac ions=mod_dl_s c:00:00:00:00:02:02, mod_dl_ds :00:00:00:00:01:02, ou pu :2
cookie=0x100000007, du a ion=2.353s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=2, p io i y=1, a p, in_po =2, dl_s c=00:00:00:00:01:02, dl_ds =00:00:00:00:02:02
ac ions=mod_dl_s c:a4:23:05:01:00:00, mod_dl_ds :a4:23:05:10:00:04, ou pu :3
cookie=0x100000008, du a ion=2.341s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=2, p io i y=1, a p, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0b
ac ions=mod_dl_s c:00:00:00:00:02:01, mod_dl_ds :00:00:00:00:01:01, ou pu :1
cookie=0x100000004, du a ion=2.340s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=2, p io i y=1,a p,in_po =3,dl_s c=a4:23:05:01:00:00,dl_ds =a4:23:05:10:00:0a
ac ions=mod_dl_s c:00:00:00:00:02:01,mod_dl_ds :00:00:00:00:01:02,ou pu :2
cookie=0x100000009, du a ion=2.322s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=2, p io i y=1,a p,in_po =1,dl_s c=00:00:00:00:01:01,dl_ds =00:00:00:00:02:01
ac ions=mod_dl_s c:a4:23:05:01:00:00,mod_dl_ds :a4:23:05:10:00:07,ou pu :3
cookie=0x100000003, du a ion=2.316s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=2, p io i y=1,a p,in_po =2,dl_s c=00:00:00:00:01:02,dl_ds =00:00:00:00:02:01
ac ions=mod_dl_s c:a4:23:05:01:00:00,mod_dl_ds :a4:23:05:10:00:03,ou pu :3
cookie=0x10000000c, du a ion=7.383s, able=0, n_packe s=1, n_by es=98,
idle_ imeou =5, idle_age=4, p io i y=1, ip, in_po =2, dl_s c=00:00:00:00:01:02,
dl_ds =00:00:00:00:02:02, nw_s c=10.0.0.20, nw_ds =10.0.0.40
ac ions=mod_nw_ds :1.0.0.5, mod_nw_s c:1.0.0.3, mod_dl_s c:a4:23:05:01:00:00,
mod_dl_ds :a4:23:05:10:00:04, ou pu :3
cookie=0x10000000d, du a ion=7.378s, able=0, n_packe s=1, n_by es=98, idle_ imeou =5,
idle_age=4, p io i y=1, ip, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0e,
nw_s c=1.0.0.5,nw_ds =1.0.0.3 ac ions=mod_nw_s c:10.0.0.40, mod_nw_ds :10.0.0.20,
mod_dl_s c:00:00:00:00:02:02,mod_dl_ds :00:00:00:00:01:02, ou pu :2
cookie=0x100000002, du a ion=4.357s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=4, p io i y=1, ip, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0 ,
nw_s c=1.0.0.5, nw_ds =1.0.0.2 ac ions=mod_nw_s c:10.0.0.40, mod_nw_ds :10.0.0.10,
mod_dl_s c:00:00:00:00:02:02, mod_dl_ds :00:00:00:00:01:01, ou pu :1
cookie=0x100000006, du a ion=4.329s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=4, p io i y=1, ip, in_po =1, dl_s c=00:00:00:00:01:01, dl_ds =00:00:00:00:02:02,
nw_s c=10.0.0.10, nw_ds =10.0.0.40 ac ions=mod_nw_ds :1.0.0.5, mod_nw_s c:1.0.0.2,
mod_dl_s c:a4:23:05:01:00:00, mod_dl_ds :a4:23:05:10:00:08, ou pu :3

32
Table 7. Flows in S2 in scena io 3
cookie=0x100000004, du a ion=6.380s, able=0, n_packe s=1, n_by es=98, idle_ imeou =5,
idle_age=3, p io i y=1, ip, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0e,
nw_s c=1.0.0.4, nw_ds =1.0.0.3 ac ions=mod_nw_s c:10.0.0.1, mod_nw_ds :10.0.0.3,
mod_dl_s c:00:00:00:00:01:01, mod_dl_ds :00:00:00:00:02:01, ou pu :1
cookie=0x100000009, du a ion=6.366s, able=0, n_packe s=1, n_by es=98, idle_ imeou =5,
idle_age=3, p io i y=1, ip, in_po =1, dl_s c=00:00:00:00:02:01, dl_ds =00:00:00:00:01:01,
nw_s c=10.0.0.3, nw_ds =10.0.0.1 ac ions=mod_nw_ds :1.0.0.4, mod_nw_s c:1.0.0.3,
mod_dl_s c:a4:23:05:01:00:00, mod_dl_ds :a4:23:05:10:00:04, ou pu :3
cookie=0x10000000b, du a ion=3.341s, able=0, n_packe s=1, n_by es=98, idle_ imeou =5,
idle_age=3, p io i y=1, ip, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0a,
nw_s c=1.0.0.5, nw_ds =1.0.0.3 ac ions=mod_nw_s c:10.0.0.2, mod_nw_ds :10.0.0.3,
mod_dl_s c:00:00:00:00:01:02, mod_dl_ds :00:00:00:00:02:01, ou pu :1
cookie=0x10000000e, du a ion=3.327s, able=0, n_packe s=1, n_by es=98, idle_ imeou =5,
idle_age=3, p io i y=1, ip,in_po =1, dl_s c=00:00:00:00:02:01, dl_ds =00:00:00:00:01:02,
nw_s c=10.0.0.3, nw_ds =10.0.0.2 ac ions=mod_nw_ds :1.0.0.5, mod_nw_s c:1.0.0.3,
mod_dl_s c:a4:23:05:01:00:00, mod_dl_ds :a4:23:05:10:00:03, ou pu :3
cookie=0x10000000a, du a ion=3.321s, able=0, n_packe s=1, n_by es=98, idle_ imeou =5,
idle_age=0, p io i y=1, ip, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0b,
nw_s c=1.0.0.5, nw_ds =1.0.0.2 ac ions=mod_nw_s c:10.0.0.2, mod_nw_ds :10.0.0.4,
mod_dl_s c:00:00:00:00:01:02, mod_dl_ds :00:00:00:00:02:02, ou pu :2
cookie=0x100000006, du a ion=3.301s, able=0, n_packe s=1, n_by es=98, idle_ imeou =5,
idle_age=0, p io i y=1, ip, in_po =2, dl_s c=00:00:00:00:02:02, dl_ds =00:00:00:00:01:02,
nw_s c=10.0.0.4,nw_ds =10.0.0.2 ac ions=mod_nw_ds :1.0.0.5, mod_nw_s c:1.0.0.2,
mod_dl_s c:a4:23:05:01:00:00, mod_dl_ds :a4:23:05:10:00:07, ou pu :3
cookie=0x10000000 , du a ion=0.287s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=0, p io i y=1, ip, in_po =2, dl_s c=00:00:00:00:02:02, dl_ds =00:00:00:00:01:01,
nw_s c=10.0.0.4, nw_ds =10.0.0.1 ac ions=mod_nw_ds :1.0.0.4, mod_nw_s c:1.0.0.2,
mod_dl_s c:a4:23:05:01:00:00, mod_dl_ds :a4:23:05:10:00:08, ou pu :3
cookie=0x100000011, du a ion=0.283s, able=0, n_packe s=0, n_by es=0, idle_ imeou =5,
idle_age=0, p io i y=1, ip, in_po =3, dl_s c=a4:23:05:01:00:00, dl_ds =a4:23:05:10:00:0 ,
nw_s c=1.0.0.4, nw_ds =1.0.0.2 ac ions=mod_nw_s c:10.0.0.1, mod_nw_ds :10.0.0.4,
mod_dl_s c:00:00:00:00:01:01, mod_dl_ds :00:00:00:00:02:02, ou pu :2
33
4.1. Thi d Tes : SimpleTopo and 2sw-4hs wi h small a ia ions
In he e o o disco e wha is causing he mal unc ions seen in he hi d scena io o
second es we ealize ha , unwi ingly, we ha e been using he same add ess space in
bo h he Minine ne wo k and he OpenVi eX i ual ne wo k (See code annexes in
sec ions 6.1.1 o 6.2.2). Conside ing his could be co e ing some mis akes we decide o
y changing he ne wo k add ess space o he OVX VN.
Figu e 21. Add ess space change
By changing his line in he sc ip o he las es we should see hos s add esses like
192.0.0.1, 192.0.0.2 and so on. I should be his way because he Floodligh con olle is
no connec ed o he Minine ne wo k bu o he VN c ea ed by he OVX, which is de ined
in he sc ip ha we a e modi ying.
Figu e 22. Ne wo k as seen om he Floodligh con olle
Bu as shown in he igu e abo e, his is no he case. Fo some eason he OVX is no
pe o ming as expec ed. A e some esea ch in he online help g oups o OVX, we ound
some use s wi h he same issue unsol ed, and answe s o he de elope s seem o poin
ou ha i is an un esol ed issue.
Fo mo e secu i y, we y he same changes in he i s es ed opology, in his case, we
decide o change he add esses o he physical ne wo k. We ob ained simila esul s.
34
Figu e 23. Changes in he physical add esses
Figu e 24. Ne wo k as seen om he Floodligh
Wi h his second expe imen we can assu e ha OVX is being anspa en o mos o he
in o ma ion. A leas o he hos opology. I seems o, a leas , show he i ual swi ches
as de ined in he OVX sc ip and co ec ly se he i ual links. The e is no appa en
eason why i should ac his way wi h he i ual hos s.
Ou hypo hesis is ha OpenVi eX has some mal unc ions when deployed on an
en i onmen ha di e s om he one on i s VM, o a leas he e is some hing in he
con igu a ion o ou machines ha make i pe o m wo se, he e o e we unde s and ha i
is a e o in he OpenVi eX so wa e.
35
5. Conclusions and u u e de elopmen :
The main conclusion is ha e en i he pe sonal objec i es o unde s anding SDN, lea n
abou ne wo k i ualiza ion and ge luency in he use o di e en ools and pla o ms
(such as Minine , OpenVi eX, Floodligh , Wi esha k…) has been la gely achie ed, he
inal implemen a ion s ill needs some imp o emen o be eady o i s o iginally in ended
use. E en so, i is a s ong base in which ha e he po en ial o play a ele an ole in he
line o in es iga ion ini ia ed by C es ani.
As a u u e de elopmen , he i s hing o do is o ind a way o o e come he p oblems
we ound wi h OVX and hen he nex big s ep is o de elop om SDN Con olle up (API
No hbound in e ace, SDN Apps and so on) in o de o build a eliable and ealis ic p oo
o concep o he o iginal sni e .
36
Bibliog aphy:
[1]
L. B eslau, D. Es in, K. Fall, S. Floyd, J. Heidemann, A. Helmy, P. Huang, S.
McCanne, K. Va adhan, Y. Xu and H. Yu, "Ad ances in Ne wo k Simula ion," IEEE,
2000.
[2]
K. P. A. P. H. W. M. H. A. Richa d M. Fujimo o, "La ge-Scale Ne wo k Simula ion:
How Big? How Fas ?," IEEE, A lan a, 2003.
[3]
D. K eu z, F. M. V. Ramos, P. Ve issimo, C. E. Ro henbe g, S. Azodolmolky and S.
Uhlig, "So wa e-De ined Ne wo king: A Comp ehensi e Su ey," IEEE.
[4]
A. Da abseh, M. Al-Ayyoub, Y. Ja a weh, E. Benkheli a, M. Vouk and A. Rindos,
"SDSecu i y: A So wa e De ined Secu i y Expe imen al F amewo k," IEE ICC,
S a o d. UK; Raleigh, No h Ca olina, USA; Resea ch T iangle Pa k, No h Ca olina,
USA, 2015.
[5]
T. R. A. R. Ta iq Ja id, "A Laye 2 Fi ewall o So wa e De ined Ne wo k,"
Con e ence on In o ma ion Assu ance and Cybe Secu i y (CIACS), Uni e si y Taxila
Can -47070, Pakis an, 2014.
[6]
J. H. H. K. Y. K. S. Y. S. Lim, "A SDN-O ien ed DDoS Blocking Scheme o Bo ne -
Based A acks," IEE, Seoul, Ko ea; Daejon, Ko ea, 2014.
[7]
R. K. R. M. K. B. Adel Zaalouk, "O chSec: An O ches a o -Based A chi ec u e Fo
Enhancing Ne wo k-Secu i y Using Ne wo k Moni o ing And SDN Con ol Func ions,"
IEEE, Aachen, Ge many; Da ms ad , Ge many, 2014.
[8]
R. L. S. d. Oli ei a and A. A. Shinoda, "Using Minine o Emula ion and P o o yping
So wa e-De ined Ne wo ks," IEEE, Ilha Sol ei a, B azil; Jales, B azil, 2014.
[9]
Pooja and M. Sood, "SDN and Minine : Some Basic Concep s," In . J. Ad anced
Ne wo king and Applica ions, Shimla, 2015.
[10]
J. S. a. N. S. G. Ka amjee Kau , "Minine as So wa e De ined Ne wo king Tes ing
Pla o m," In e na ional Con e ence on Communica ion, Compu ing & Sys ems
ICCCS, Fe ozepu , India, 2014.
[11]
P. A. D. L. J. J. R.-M. J. L. a. J. F. Jose O donez-Lucena, "Ne wo k Slicing o 5G
wi h SDN/NFV: Concep s, A chi ec u es, and Challenges," IEEE Communica ions
Magazine, G anada, 2017.

37
6. Annexes:
6.1. Fi s Case o S udy: simpleTopo
6.1.1. Minine Code
38
6.1.2. OpenVi eX sc ip code
6.2. Second Case o S udy: 2 Swi ches, 4 Hos s (2sw-4hs)
6.2.1. Minine Code
39
6.2.2. OpenVi eX sc ip code
40
Glossa y
A lis o all ac onyms and he meaning hey s and o .
DPID: Deli e y Poin Iden i ie
hs: in some pa s o names is use o abb e ia e ‘hos ’
ICMP: In e ne Con ol Message P o ocol
MAC: Medium Access Con ol
NBI: No h Bound In e ace
OF: OpenFlow
ONF: Open Ne wo king Founda ion
OVX: OpenVi eX
SDN: So wa e De ined Ne wo king/Ne wo k(s)
sw: in some pa s o names is use o abb e ia e ‘swi ch’
VN: Vi ual Ne wo k