Improving the tunnel management performance of secure VPLS architectures with SDN

Madhusanka Liyanage; Mika Ylianttila; Andrei Gurtov

doi:10.1109/CCNC.2016.7444836

Improving the tunnel management performance of secure VPLS architectures with SDN

Madhusanka Liyanage, Mika Ylianttila, Andrei Gurtov

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

17 Citations (Scopus)

Abstract

Secure VPLS (Virtual Private LAN Services) networks are becoming attractive in many Enterprise applications. However, the tunnel establishment mechanisms of legacy VPLS architectures are static, complex and inflexible in nature. As a result, secure VPLS architectures are suffering from limitations such as the limited scalability, over utilization of network resources, high tunnel establishment delay and high operational cost. In this article, we propose a novel SDN (Software Defined Networking) based VPLS (Virtual Private LAN Services) architecture to overcome tunnel management limitations in existing secure VPLS architectures. The proposed architecture utilizes IPsec enabled OpenFlow switches as PEs (Provider Edge Equipments) and OpenFlow protocol to install flow rules in PEs. A centralized controller is used to manage the tunnel establishment functions. We also propose a novel tunnel management mechanism which can estimate the tunnel duration based on real time session characteristics. Moreover, a novel tunnel resumption mechanism is proposed to reduce the tunnel establishment delay of subsequent tunnel establishments. Finally, the performance of proposed architecture is analyzed by using a simulation model and a testbed implementation.

Original language	English
Title of host publication	2016 13th IEEE Annual Consumer Communications and Networking Conference, CCNC 2016
Publisher	IEEE
Pages	530-536
Number of pages	7
ISBN (Electronic)	9781467392921
DOIs	https://doi.org/10.1109/CCNC.2016.7444836
Publication status	Published - 30 Mar 2016
MoE publication type	A4 Conference publication
Event	IEEE Consumer Communications and Networking Conference - Las Vegas, United States Duration: 6 Jan 2016 → 13 Jan 2016 Conference number: 13

Conference

Conference	IEEE Consumer Communications and Networking Conference
Abbreviated title	CCNC
Country/Territory	United States
City	Las Vegas
Period	06/01/2016 → 13/01/2016

Keywords

HIP
IPsec
OpenFlow
SDN
Security
VPLS

Access to Document

10.1109/CCNC.2016.7444836

Cite this

@inproceedings{d9972b28f7484b469db5ab30c5de67b7,

title = "Improving the tunnel management performance of secure VPLS architectures with SDN",

abstract = "Secure VPLS (Virtual Private LAN Services) networks are becoming attractive in many Enterprise applications. However, the tunnel establishment mechanisms of legacy VPLS architectures are static, complex and inflexible in nature. As a result, secure VPLS architectures are suffering from limitations such as the limited scalability, over utilization of network resources, high tunnel establishment delay and high operational cost. In this article, we propose a novel SDN (Software Defined Networking) based VPLS (Virtual Private LAN Services) architecture to overcome tunnel management limitations in existing secure VPLS architectures. The proposed architecture utilizes IPsec enabled OpenFlow switches as PEs (Provider Edge Equipments) and OpenFlow protocol to install flow rules in PEs. A centralized controller is used to manage the tunnel establishment functions. We also propose a novel tunnel management mechanism which can estimate the tunnel duration based on real time session characteristics. Moreover, a novel tunnel resumption mechanism is proposed to reduce the tunnel establishment delay of subsequent tunnel establishments. Finally, the performance of proposed architecture is analyzed by using a simulation model and a testbed implementation.",

keywords = "HIP, IPsec, OpenFlow, SDN, Security, VPLS",

author = "Madhusanka Liyanage and Mika Ylianttila and Andrei Gurtov",

year = "2016",

month = mar,

day = "30",

doi = "10.1109/CCNC.2016.7444836",

language = "English",

pages = "530--536",

booktitle = "2016 13th IEEE Annual Consumer Communications and Networking Conference, CCNC 2016",

publisher = "IEEE",

address = "United States",

note = "IEEE Consumer Communications and Networking Conference, CCNC ; Conference date: 06-01-2016 Through 13-01-2016",

}

Liyanage, M, Ylianttila, M & Gurtov, A 2016, Improving the tunnel management performance of secure VPLS architectures with SDN. in 2016 13th IEEE Annual Consumer Communications and Networking Conference, CCNC 2016., 7444836, IEEE, pp. 530-536, IEEE Consumer Communications and Networking Conference, Las Vegas, Nevada, United States, 06/01/2016. https://doi.org/10.1109/CCNC.2016.7444836

Improving the tunnel management performance of secure VPLS architectures with SDN. / Liyanage, Madhusanka; Ylianttila, Mika; Gurtov, Andrei.
2016 13th IEEE Annual Consumer Communications and Networking Conference, CCNC 2016. IEEE, 2016. p. 530-536 7444836.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Improving the tunnel management performance of secure VPLS architectures with SDN

AU - Liyanage, Madhusanka

AU - Ylianttila, Mika

AU - Gurtov, Andrei

N1 - Conference code: 13

PY - 2016/3/30

Y1 - 2016/3/30

N2 - Secure VPLS (Virtual Private LAN Services) networks are becoming attractive in many Enterprise applications. However, the tunnel establishment mechanisms of legacy VPLS architectures are static, complex and inflexible in nature. As a result, secure VPLS architectures are suffering from limitations such as the limited scalability, over utilization of network resources, high tunnel establishment delay and high operational cost. In this article, we propose a novel SDN (Software Defined Networking) based VPLS (Virtual Private LAN Services) architecture to overcome tunnel management limitations in existing secure VPLS architectures. The proposed architecture utilizes IPsec enabled OpenFlow switches as PEs (Provider Edge Equipments) and OpenFlow protocol to install flow rules in PEs. A centralized controller is used to manage the tunnel establishment functions. We also propose a novel tunnel management mechanism which can estimate the tunnel duration based on real time session characteristics. Moreover, a novel tunnel resumption mechanism is proposed to reduce the tunnel establishment delay of subsequent tunnel establishments. Finally, the performance of proposed architecture is analyzed by using a simulation model and a testbed implementation.

AB - Secure VPLS (Virtual Private LAN Services) networks are becoming attractive in many Enterprise applications. However, the tunnel establishment mechanisms of legacy VPLS architectures are static, complex and inflexible in nature. As a result, secure VPLS architectures are suffering from limitations such as the limited scalability, over utilization of network resources, high tunnel establishment delay and high operational cost. In this article, we propose a novel SDN (Software Defined Networking) based VPLS (Virtual Private LAN Services) architecture to overcome tunnel management limitations in existing secure VPLS architectures. The proposed architecture utilizes IPsec enabled OpenFlow switches as PEs (Provider Edge Equipments) and OpenFlow protocol to install flow rules in PEs. A centralized controller is used to manage the tunnel establishment functions. We also propose a novel tunnel management mechanism which can estimate the tunnel duration based on real time session characteristics. Moreover, a novel tunnel resumption mechanism is proposed to reduce the tunnel establishment delay of subsequent tunnel establishments. Finally, the performance of proposed architecture is analyzed by using a simulation model and a testbed implementation.

KW - HIP

KW - IPsec

KW - OpenFlow

KW - SDN

KW - Security

KW - VPLS

UR - http://www.scopus.com/inward/record.url?scp=84966614963&partnerID=8YFLogxK

U2 - 10.1109/CCNC.2016.7444836

DO - 10.1109/CCNC.2016.7444836

M3 - Conference article in proceedings

AN - SCOPUS:84966614963

SP - 530

EP - 536

BT - 2016 13th IEEE Annual Consumer Communications and Networking Conference, CCNC 2016

PB - IEEE

T2 - IEEE Consumer Communications and Networking Conference

Y2 - 6 January 2016 through 13 January 2016

ER -

Improving the tunnel management performance of secure VPLS architectures with SDN

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this