Sampling and Large Flow Detection in SDN

摘要

We present techniques for traffic sampling and large flows detection in SDN with Openflow. In many cases, in order to efficiently compute high speed traffic statistics, sampling is needed. While SDN switches are very efficient and considerably simpler to manage than existing routers and switches, they don't offer direct means for sampling and detection of large flows. Both of these capabilities are important for various basic network applications. For example, traffic monitoring is such an application, which is a key ability in providing QoS, capacity planning and efficient traffic engineering. Additional applications which make use of sampling and large flow detection are applications that depend on network visibility, such as security (DDoS and others), anomaly detection, DPI and billing.