Inefficiencies in using Middleboxes with OpenFlow presentation by Levent Dane, U. of Houston at US Ignite ONF GENI workshop on October 8, 2013

1. OpenFlow & Middleboxes
Levent Dane
University of Houston

2. Middlebox on the Path
Leverage hardware capabilities on the path of
OpenFlow flows
(Application data transport, not just packet headers)
GEC15: Selective packet Encryption
GEC16: Creating feedback from ICMP packets
GEC17: Statically inserted a middlebox into GENI
GEC18: Dynamic deployment of a middlebox

3. GEC Posters
Available at GENI wiki

4. OpenFlow Uses in Middle Boxes
Selective flow routing
Easily path redirecting
Traffic Steering

5. Feature Matrix
MAC IP Phy Port Port # VLAN/MPLS
Encryption DPI SSL/IPSec TCP
OutputChange Header
MatchHWAccelAction

6. Use Case Examples
 Creating feedback from network
events.
 TCP Error Fixing and Accelerators
 Manipulating Payload

7. Common Switch Architecture for
OpenFlow
Programmability of TCAM and ASIC
Need for NPU
TCAM ASIC
Control Subsystem
TCAM ASIC
Control Subsystem NPU

8. Future with OpenFlow
Basic scripting language
(combine actions together for future use)
Applications Hosting Capability
(enabling the NPU capabilities like HW accelerators)
Pattern Match
(searching a data in the network packet)

9. Thank you. Questions?
Levent Dane
Research Assistant
University of Houston
ldane@uh.edu