Elastic IP and security groups implementation using OpenFlow

Authors:
Greg Stabler;Aaron Rosen;Sebastien Goasguen;Kuang-Ching Wang
Affiliations:
Clemson University, Clemson, SC, USA;Clemson University, Clemson, SC, USA;Clemson University, Clemson, SC, USA;Clemson University, Clemson, SC, USA
Venue:
Proceedings of the 6th international workshop on Virtualization Technologies in Distributed Computing Date
Year:
2012

Citing 7
Cited 0

Virtual Distributed Environments in a Shared Infrastructure

Computer
OpenFlow: enabling innovation in campus networks

ACM SIGCOMM Computer Communication Review
The Eucalyptus Open-Source Cloud-Computing System

CCGRID '09 Proceedings of the 2009 9th IEEE/ACM International Symposium on Cluster Computing and the Grid
Virtual Infrastructure Management in Private and Hybrid Clouds

IEEE Internet Computing
Elastic Site: Using Clouds to Elastically Extend Site Resources

CCGRID '10 Proceedings of the 2010 10th IEEE/ACM International Conference on Cluster, Cloud and Grid Computing
CloudNaaS: a cloud networking platform for enterprise applications

Proceedings of the 2nd ACM Symposium on Cloud Computing
SP 800-145. The NIST Definition of Cloud Computing

SP 800-145. The NIST Definition of Cloud Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents a reference implementation of an Elastic IP and Security Group service using the OpenFlow protocol. The implementation is the first to present integration of OpenFlow within a virtual machine provisioning engine and an API for enabling such services. In this paper the OpenNebula system is used. The Elastic IP and Security Groups services are similar to the Amazon EC2 services and present a compatible Query API implemented by OpenNebula. The core of the implementation relies on the integration of an OpenFlow controller (NOX) with the EC2 server. Flow rules can be inserted in the OpenFlow controller using the EC2 API. These rules are then used by Open vSwitch bridges on the underlying hypervisor to manage network traffic. The reference implementation presented opens the door for more advanced cloud networking services that leverage principles from software defined networking including virtual private cloud, virtual data center spanning multiple availability zones, as well as seamless migration over wide are networks.