1. Melanie Palmer, Rob Sullivan, John Bilberry LA-UR-13-25961

2. Overview  Introduction  Test Method and Materials  Results  Conclusion  Future Work  Questions LA-UR-13-25961

3. Software Defined Networking  Separate the data plane and the control plane  Software layer between hardware and admin  Virtual networks within a physical network LA-UR-13-25961

4. OpenFlow  Open source SDN  Hardware management on a single platform  Exploits a common set of functions found on most switches  OpenFlow Protocol Flow table Actions LA-UR-13-25961

5. Controller  Management software for network  Communicates via a secure channel  Push and remove flows  Determine actions for undefined flows LA-UR-13-25961

6. Networks for Security User Switch Network 2 Network 1 User job in Node 1 If User accesses Node 2 Redirect to Security Node Security Node Controller Rule 1 Allow access to Network 1 Rule 2 Redirect to Security Node if access to Network 2 is attempted LA-UR-13-25961

7. Networks for Security User Network 2 Network 1 Rule 1 Allow access to Network 1 Rule 2 Redirect to Security Node if access to Network 2 is attempted Security Node Controller Switch LA-UR-13-25961

8. Melanie Palmer LA-UR-13-25961

9. Objective  Performance  Reliability  Scalability LA-UR-13-25961

10. Materials  Our Cluster Seven node CentOS 6.4  Arista 7050S OpenFlow 1.0 EOS 4.10.4  Floodlight 0.9 Open source Widely used in industry Java based LA-UR-13-25961

11. Test Suite  Load Test Performance Reliability Load Test Tests Sections Start Test TCP-Dump to a File Start Section Tests Increment the Pings per Second Increment Test Number Start Section Test Start Pinging Both Nodes Change Flows as Specified Increment the Flows per Second Increment the Section Number Load Test Tests Sections LA-UR-13-25961

12. Test Suite  Load Test Load Test Tests Sections Start Test TCP-Dump to a File Start Section Tests Increment the Pings per Second Increment Test Number Start Section Test Start Pinging Both Nodes Change Flows as Specified Increment the Flows per Second Increment the Section Number Load Test Tests Sections Start Test TCPDump Start 10 Sections Increment Pings/Sec Finish Start Traffic Change Flows Increment Flows/Sec Finish Start Tests Sections Timing Limit Traffic Limit LA-UR-13-25961

13. Load Test Controller Node C Rule 1: Connect A and B Rule 2: Drop Anything to C LA-UR-13-25961

14. Load Test Controller Node C Rule 1: Connect A and C Rule 2: Drop Anything to B LA-UR-13-25961

15. Test Suite  Load Test  Speed Test Scalability Performance Load Test Tests Sections Start Test TCP-Dump to a File Start Section Tests Increment the Pings per Second Increment Test Number Start Section Test Start Pinging Both Nodes Change Flows as Specified Increment the Flows per Second Increment the Section Number Load Test Tests Sections LA-UR-13-25961

16. Test Suite  Load Test  Speed Test Load Test Tests Sections Start Test TCP-Dump to a File Start Section Tests Increment the Pings per Second Increment Test Number Start Section Test Start Pinging Both Nodes Change Flows as Specified Increment the Flows per Second Increment the Section Number Load Test Tests Sections Start Test TCPDump to File Send Traffic to Node C Change Flow LA-UR-13-25961

17. Speed Test Controller Node C Rule 1: Connect A and C LA-UR-13-25961

18. Speed Test Controller Node C Rule 1: Drop Node C LA-UR-13-25961

19. Test Suite  Load Test  Speed Test  Analysis Program Failure! Expected Behavior LA-UR-13-25961

20. Test Suite  Load Test  Speed Test  Analysis Program Stage 1 - Extracts ○ Error rate ○ Flow change speed Stage 2 - Analyzes ○ Averages data ○ Standard deviations Failure! LA-UR-13-25961

21. Rob Sullivan LA-UR-13-25961

22. Load Test Results LA-UR-13-25961

23. Speed Test Results LA-UR-13-25961

24. Problems  OpenFlow 1.0  Volume and nature of data  Human error  Imprecision of some test methods  Meaningful packet redirection LA-UR-13-25961

26. Will OpenFlow Work? LA-UR-13-25961

27. Future Work  OpenFlow 1.1  Security  Controllers and hardware  Scale LA-UR-13-25961

28. Acknowledgements Instructors – Dane Gardner and Matthew Broomfield (T.A.) Mentors – Kyle Lamb (HPC-3) and Ben McClelland (HPC-5) Special Thanks: Los Alamos National Laboratory – Gary Grider, Josephine Olivas, Carolyn Connor, Scott Robbins and Carol Hogsett New Mexico Consortium – Ann Kuiper PRObE – Andree Jacobson Our Schools: University of Texas at El Paso New Mexico Institute of Mining and Technology Michigan Technological University LA-UR-13-25961

29. Your turn! LA-UR-13-25961