为OpenFlow软件定义网络重塑NetFlow
Reinventing NetFlow for OpenFlow Software-Defined Networks
摘要：
使用OpenFlow获得流级测量（类似于Netflow/IPFIX提供的测量）具有挑战性，因为它需要在流表中为每个流安装一个条目。这种方法不能很好地随流量中并发流的数量扩展，因为流表中的条目数量有限且很小。流监控规则还可能干扰交换机中已经存在的转发或其他规则，这些规则通常以与流级别不同的粒度定义。在本文中，我们提出了一个透明的和可扩展的基于流的监控解决方案，是完全兼容当前的现成的OpenFlow交换机。与NetFlow/IPFIX一样，我们直接在交换机中将数据包聚合到流中，并将流量报告异步发送到外部收集器。为了减少开销，我们根据交换机中可用的OpenFlow功能实现了三种不同的流量采样方法。我们在OpenDaylight中开发了完整的流量监控解决方案，并在Open vSwitch的测试平台中评估了其准确性。我们使用真实世界的流量跟踪实验结果表明，所提出的采样方法是准确的，可以有效地减少OpenFlow流量测量的资源需求。
英文摘要：
Obtaining flow-level measurements, similar to those provided by Netflow/IPFIX, with OpenFlow is challenging as it requires the installation of an entry per flow in the flow tables. This approach does not scale well with the number of concurrent flows in the traffic as the number of entries in the flow tables is limited and small. Flow monitoring rules may also interfere with forwarding or other rules already present in the switches, which are often defined at different granularities than the flow level. In this paper, we present a transparent and scalable flow-based monitoring solution that is fully compatible with current off-the-shelf OpenFlow switches. As in NetFlow/IPFIX, we aggregate packets into flows directly in the switches and asynchronously send traffic reports to an external collector. In order to reduce the overhead, we implement three different traffic sampling methods depending on the OpenFlow features available in the switch. We developed our complete flow monitoring solution within OpenDaylight and evaluated its accuracy in a testbed with Open vSwitch. Our experimental results using real-world traffic traces show that the proposed sampling methods are accurate and can effectively reduce the resource requirements of flow measurements in OpenFlow.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
