Liyanage, Ahmad, Okwuibe, Montes de Oca, MAI, Perez, and Itzazelaia
236
needed by the security applications (e.g. Management/Monitoring/Security,
Applications and Network Services modules) from either the switches or the probes
(i.e. agents). The probes can be passive (e.g. Traffic Monitoring and Analysis module
that analyse mirrored traffic) or active (e.g. Active Probes acting as a firewall that filters
traffic). In Figure 10.2, the SDM‐CTRL acts as a controller for the software and hardware security devices and could be integrated into the SDN‐CTRL or remain separate.
If separate, then it will interact with the SDN‐CTRL via an OpenFlow type interface.
The architecture of the devices and controllers can be hierarchically organized or distributed (e.g. with peer‐to‐peer communications between the controllers).
A control layer based on SDN/SDM is inserted between the application and network
infrastructure layers. At the network infrastructure layer, an SDN protocol, such as
OpenFlow, is used as an interface. Typically, an operator first informs the Orchestrator
to deploy a virtualized DPI (vDPI) application, then the application is configured by
deploying the rules and/or properties that need to be detected, and finally informs the
SDN controller to direct the network traffic to be analyzed to the vDPI function. Such
deployed rules will allow detecting the performance properties of the connection and,
at the same time, help locate performance problems and verify the conformity with
Service Level Agreements (SLAs).
Figure 10.2 illustrates the deployment of the components of SDM architecture in
SDN/NFV‐based 5G Networks.
The added modules and interfaces of the SDM architecture are [2]:
● Modules:
– Security sensor: an active monitoring probe for the detection of security and behaviour related information (e.g. security properties and attacks) and mitigation (e.g.
filtering). It can be installed on the Network Elements or in network taps (passive
network observation points);
– SDM CTRL: a new module or extension of SDN CTRL to allow the control of the
monitoring function (e.g. management of network monitoring appliances, traffic
Application layer
Northbound APls
Control layer
Southbound APls
(SDN/SDM Control Interfaces)
Data layer
Network
Monitoring
Dashboard
Probes
(HW appliances)
SDM
Controller
Network
Services
Network
Devices
SDN
Controller
Figure 10.1 Software defined monitoring architecture for 5G Networks.
236
needed by the security applications (e.g. Management/Monitoring/Security,
Applications and Network Services modules) from either the switches or the probes
(i.e. agents). The probes can be passive (e.g. Traffic Monitoring and Analysis module
that analyse mirrored traffic) or active (e.g. Active Probes acting as a firewall that filters
traffic). In Figure 10.2, the SDM‐CTRL acts as a controller for the software and hardware security devices and could be integrated into the SDN‐CTRL or remain separate.
If separate, then it will interact with the SDN‐CTRL via an OpenFlow type interface.
The architecture of the devices and controllers can be hierarchically organized or distributed (e.g. with peer‐to‐peer communications between the controllers).
A control layer based on SDN/SDM is inserted between the application and network
infrastructure layers. At the network infrastructure layer, an SDN protocol, such as
OpenFlow, is used as an interface. Typically, an operator first informs the Orchestrator
to deploy a virtualized DPI (vDPI) application, then the application is configured by
deploying the rules and/or properties that need to be detected, and finally informs the
SDN controller to direct the network traffic to be analyzed to the vDPI function. Such
deployed rules will allow detecting the performance properties of the connection and,
at the same time, help locate performance problems and verify the conformity with
Service Level Agreements (SLAs).
Figure 10.2 illustrates the deployment of the components of SDM architecture in
SDN/NFV‐based 5G Networks.
The added modules and interfaces of the SDM architecture are [2]:
● Modules:
– Security sensor: an active monitoring probe for the detection of security and behaviour related information (e.g. security properties and attacks) and mitigation (e.g.
filtering). It can be installed on the Network Elements or in network taps (passive
network observation points);
– SDM CTRL: a new module or extension of SDN CTRL to allow the control of the
monitoring function (e.g. management of network monitoring appliances, traffic
Application layer
Northbound APls
Control layer
Southbound APls
(SDN/SDM Control Interfaces)
Data layer
Network
Monitoring
Dashboard
Probes
(HW appliances)
SDM
Controller
Network
Services
Network
Devices
SDN
Controller
Figure 10.1 Software defined monitoring architecture for 5G Networks.