NetTAP® SDN Technology - Innovative Application of Network Traffic Control Visibility Part 2

NetTAP® SDN Technology - Innovative Application of Network Traffic Control Visibility Part 2
 
The principle of SDN Technology
Software Defined Network (SDN) is a new Network innovation architecture proposed by Clean State Research Group of Stanford University. It can define and control the Network in the form of Software programming. It has the characteristics of separation of control plane and forwarding plane and open and programmable.
 

 
The Development of SDN Technology
It has been more than 10 years since the concept was put forward, continuous engineering practice and the extensive application of SDN technology and its various branch technologies in various industries. In today's data center, WAN, transmission and other fields, SDN technology and its technical ideas have been generally blossoming and bearing fruit, and become the basis of intelligent and intentional network in the future.

 
The Core Advantage of SDN Technology
Network simplification: Simplifies configuration, management, and optimization by providing a unified view of the network architecture and a unified view of the entire network architecture.
High utilization: Centralized traffic engineering enables us to effectively adjust the end-to-end traffic path so as to achieve efficient utilization of network resources.
Quick failure repair: quick repair can be achieved for both link and node failures. Moreover, the system can quickly aggregate network resources, realize equal distribution, and predict some network behaviors.
Smooth upgrade: The separation of the control plane and the forward/data plane allows for smooth software upgrades without data packet loss or performance degradation.
Elastic computation: the large-scale computation and path analysis are integrated in the sub-controller and done by the latest generation of servers.
 
What SDN does is to separate the control over the network equipment and manage it by a centralized controller without relying on the underlying network equipment, thus masking the differences between the underlying network equipment. While control is completely open, users can customize any network routing and transmission rule policy they want to implement, making it more flexible and intelligent. After the TRANSFORMATION of SDN, there is no need to repeatedly configure the routers of each node in the network. The devices in the network are automatically connected, only need to be defined simple network rules when they are used. Therefore, if the protocol built into the router does not meet the user's needs, it can be modified programmatically to achieve better data exchange performance. So, for network equipment, the users can like upgrade, install the software to modify the network architecture, expansion and satisfy the user to adjust the network architecture, or the need to upgrade, and the underlying hardware, such as switches, routers, you do not need to replace, save a lot of cost at the same time, the network architecture of iteration cycle will be shorten.
 
Application of SDN Technology in Network Traffic Data Visibility Control

SDN Technology Architecture has been widely applied in data center, WAN, transmission, intent-based network and other fields, and it also has outstanding performance in traffic data control.

Traffic data contains all the information of IT information data interaction. Based on the rich data connotation of "traffic data" itself, IT determines the analysis value of "traffic data". The multi-dimensional analysis of traffic data such as "information security analysis", "business health analysis", "IT operation and maintenance big data analysis" has been widely applied in the IT information of all walks of life, which strongly guarantees the enterprise information security and the normal operation of IT system. In the process of information/network development, the unified management/control of traffic data has become imperative.

SDN technology constructs the traffic data acquisition network, separates the data plane and control plane of the traditional traffic data acquisition equipment, and manages and distributes various traffic data acquisition equipment through the centralized controller and standardized interface. The flow acquisition plane integrates the current mainstream flow acquisition technology in the industry to centrally manage the flow data acquisition. In terms of flow processing, through the flow processing center, the flow data can be replicated, aggregated, split, de-weighted, desensitized, data slicing, filtering and other operations. Meanwhile, the flow data can be forwarded to the back-end business/security/operation and maintenance analysis equipment at line speed. User interface in the controller, through different view components, can be the network traffic data to demonstrate to the user, let users understand the running status of the use of the network, including network load distribution and bandwidth, communications, business quality, conform to the standards and service quality, failure and failure risk, etc., thus, network optimization and operation maintenance management work.

SDN Controller and SDN-TAP use OpenFlow protocol to achieve more fine-grained data collection and presentation. Continuous monitoring is carried out for core links, key business applications, traditional data centers and main links of cloud data centers to achieve comprehensive coverage of traffic data and eliminate blind spots in monitoring. Respond to rapid delivery flow and support emergency response. Realize traffic data security control, comb traffic data based on business data types, and reduce the risk of data leakage. Realize the distribution of traffic data on demand, improve the efficiency of security analysis system, and save the overall investment. Realize real-time perception of network traffic situation, big data analysis and presentation. In this way, we can fully grasp the usage of various applications, deeply analyze the flow model and performance change model of applications, so as to prevent faults and provide the basis for network and application planning and operation management.