SDN Software-Defined Network
Software-defined networking (SDN) technology is an approach to network management that enables dynamic, programmatically efficient network configuration in order to improve network performance and monitoring, making it more like cloud computing than traditional network management.
SDN encompasses several types of technologies, including functional separation, network virtualization and automation through programmability. SDN solution is meant to address the fact that the static architecture of traditional networks is decentralized and complex while current networks require more flexibility and easy troubleshooting.
SDN technology attempts to centralize network intelligence in one network component by disassociating the forwarding process of network packets (data plane) from the routing process (control plane). The control plane consists of one or more controllers which are considered as the brain of SDN network where the whole intelligence is incorporated. Originally, software defined technology focused solely on separation of the network control plane from the data plane. While the control plane makes decisions about how packets should flow through the network, the data plane actually moves packets from place to place.
In a classic SDN scenario, a packet arrives at a network switch, and rules built into the switch's proprietary firmware tell the switch where to forward the packet. These packet-handling rules are sent to the switch from the centralized controller. The switch - also known as a data plane device - queries the controller for guidance as needed, and it provides the controller with information about traffic it handles. The switch sends every packet going to the same destination along the same path and treats all the packets the exact same way.
Software defined networking solutions use an operation mode that is sometimes called adaptive or dynamic, in which a switch issues a route request to a controller for a packet that does not have a specific route. This process is separate from adaptive routing, which issues route requests through routers and algorithms based on the network topology, not through a controller.
The virtualization aspect of SDN comes into play through a virtual overlay, which is a logically separate network on top of the physical network. Users can implement end-to-end overlays to abstract the underlying network and segment network traffic. This microsegmentation is especially useful for service providers and operators with multi-tenant cloud environments and cloud services, as they can provision a separate virtual network with specific policies for each tenant.
Compare of products in the category SDN Software-Defined Network
Deployment |
Network Connectivity |
Zero-touch provisioning |
Identification of applications |
Network Performance |
Cloud Connect |
Routing Capabilities |
Load balancing modes |
Dynamic Path Switching |
Packet Duplication |
Packet Loss with FEC |
Firewall |
AES-256 Encryption |
WAN Optimization Support |
Network segmentation |
Content filtering |
Purchasing |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
N/A
|
over 4500
|
N/A
|
over 7000
|
over 3000
|
over 3000
|
2200
|
1400
|
over 1300
|
over 10000
|
N/A
|
2600
|
3000
|
N/A
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
N/A
|
Yes, for VoIP
|
Yes (VoIP, real-time applications)
|
N/A
|
N/A
|
N/A
|
Yes, for VoIP
|
N/A
|
N/A
|
N/A
|
Yes, for VoIP
|
Yes, UDP applications
|
N/A
|
N/A
|
|||
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
Yes (dynamic, for VoIP)
|
N/A
|
N/A
|
Yes
|
N/A
|
Yes, TCP applications
|
N/A
|
N/A
|
|||
Integrated
|
Integrated
|
Integrated
|
Integrated
|
Integrated
|
Integrated
|
Separate
|
Integrated
|
Integrated
|
Integrated
|
Separate
|
Separate
|
Integrated
|
Integrated
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
N/A
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes, 3rd party
|
Yes
|
Yes, 3rd party
|
Yes
|
Yes
|
Yes
|
Yes, 3rd party
|
Yes
|
Yes
|
|||
N/A
|
Yes, VRF-lite at SD-WAN CPE
|
N/A
|
Yes
|
Yes
|
Yes, VRF at SD-WAN CPE
|
Yes, VRF at SD-WAN CPE
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes, Proprietary VPN ID in IPsec packet header
|
N/A
|
|||
N/A
|
N/A
|
N/A
|
Yes
|
Yes
|
N/A
|
Partial
|
N/A
|
N/A
|
N/A
|
N/A
|
Yes
|
Yes
|
Yes
|
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Suppliers SDN Software-Defined Network
Vendors SDN Software-Defined Network
F.A.Q. about SDN Software-Defined Network
Benefits of Software Defined Networking
With SDN software, an administrator can change any network switch's rules when necessary - prioritizing, deprioritizing or even blocking specific types of packets with a granular level of control and security. This is especially helpful in a cloud computing multi-tenant architecture, because it enables the administrator to manage traffic loads in a flexible and more efficient manner. Essentially, this enables the administrator to use less expensive commodity switches and have more control over network traffic flow than ever before.
Other benefits of SDN are network management and end-to-end visibility.A network administrator need only deal with one centralized controller to distribute policies to the connected switches, instead of configuring multiple individual devices. This capability is also a security advantage because the controller can monitor traffic and deploy security policies. If the controller deems traffic suspicious, for example, it can reroute or drop the packets.
Software defined networking software also virtualizes hardware and services that were previously carried out by dedicated hardware, resulting in the touted benefits of a reduced hardware footprint and lower operational costs.
Additionally, SDN contributed to the emergence of software-defined wide area network (SD-WAN) technology. SD-WAN employs the virtual overlay aspect of SDN technology, abstracting an organization's connectivity links throughout its WAN and creating a virtual network that can use whichever connection the controller deems fit to send traffic.
Are there any SDN security benefits?
As security issues become more complex at the edge of the network, it’s no wonder that network and security professionals are looking for new ways to approach network protection. Nowadays, it seems like SDN is going to be the answer.
- Centralized Network Control
In a traditional network, devices (router/switches) make their own decisions locally about where and how best to send traffic. In terms of network security, SDN can be used to route data packets through a single firewall and make IDS and IPS data capture more efficient.
- Simplify Configuration
The SDN makes it easier to automate configuration and improves the traceability of those configurations. The introduction of SDN network management allows dynamic programming and restructuring of network settings, which reduces the risk of DDoS attacks. It is also worth adding that SDN has automatic quarantine capabilities.
- Creation of High-level Network Policies
Rather than physically configuring security solutions, SDN facilitates the central management of security policies to make network operator roles more efficient and flexible. Moreover, SDN helps to move away from current management approaches such as SNMP/CLI and build more effective policy management.
- Easy to use Application Programming Interfaces (APIs)
Cloud APIs are interfaces presented by software and play a vital role in SDN controllers and applications. Easy to use APIs help to manage network resources, improve the efficiency of IT resources, and aid integration with IT tools. Additionally, a number of good cloud security practices have been introduced recently.
What is Software-Defined WAN (or SD-WAN or SDWAN)?
https://www.sdxcentral.com/networking/sd-wan/definitions/software-defined-sdn-wan/FAQs About Software-Defined Networking
https://cradlepoint.com/blog/cradlepoint/faqs-about-software-defined-networking