A Sketch-based Network Traffic Analysis Implementation on Commodity OpenFlow Switches

摘要

The paradigm of Software-defined Networking (SDN) provides excellent flexibility where the traffic monitoring applications can be implemented in the SDN controller. The objective of this work is to develop a software implementation of a Sketch-based network traffic analysis system on commodity OpenFlow switches. A sketch data structure is implemented inside the Open vSwitch as the extra table to collect flow statistics. The OpenFlow protocol is extended to support sketch request and reply messages such that the controller can collect the sketch data structure from the switches. The implementation of heavy-change detection is provided to showcase the flexibility of this implementation. Performance evaluations are conducted with real-world network traffic traces. The system is capable of finding flows with significant volume changes above a predefined threshold.