Search NASA⌕ Search

Engineering topics

Owen, Henry

Publications and source records attributed to Owen, Henry.

Orchestrating intercontinental advance reservations with software-defined exchanges

To interconnect research facilities across wide geographic areas, network operators deploy science networks, also referred to as research and education networks. These networks allow experimenters to establish dedicated circuits between research facilities for transferring large amounts of data by using advanced reservation systems. Intercontinental dedicated circuits typically require coordination among multiple administrative domains, which need to reach an agreement on a suitable advance reservation. The success rate of finding an advance reservation decreases as the number of participant domains increases for traditional systems because the circuit is composed over a single path. To improve provisioning of multidomain advance reservations, we have designed and implemented an architecture for end-to-end service orchestration in multidomain science networks that leverages software-defined exchanges for providing multipath, multidomain advance reservations. In conclusion, our orchestration architecture improves the reservation success rate from 50% in single-path systems to 99% when four paths are available.

97 MATHEMATICS AND COMPUTING↗

Advance reservation access control using software-defined networking and tokens

Advance reservation systems allow users to reserve dedicated bandwidth connection resources from advanced high-speed networks. A common use case for such systems is data transfers in distributed science environments in which a user wants exclusive access to the reservation. However, current advance network reservation methods cannot ensure exclusive access of a network reservation to the specific flow for which the user made the reservation. We present here a novel network architecture that addresses this limitation and ensures that a reservation is used only by the intended flow. We achieve this by leveraging software-defined networking (SDN) and token-based authorization. We use SDN to orchestrate and automate the reservation of networking resources, end-to-end and across multiple administrative domains, and tokens to create a strong binding between the user or application that requested the reservation and the flows provisioned by SDN. We conducted experiments on the ESNet 100G SDN testbed, and demonstrated that our system effectively protects authorized flows from competing traffic in the network.

admission control↗