CoVisor: A compositional hypervisor for software-defined networks

Xin Jin, Jennifer Gossels, Jennifer L. Rexford, David P. Walker

Research output: Chapter in Book/Report/Conference proceedingConference contribution

91 Scopus citations

Abstract

We present CoVisor, a new kind of network hypervisor that enables, in a single network, the deployment of multiple control applications written in different programming languages and operating on different controller platforms. Unlike past hypervisors, which focused on slicing the network into disjoint parts for separate control by separate entities, CoVisor allows multiple controllers to cooperate on managing the same shared traffic. Consequently, network administrators can use CoVisor to assemble a collection of independently-developed "best of breed" applications-a firewall, a load balancer, a gateway, a router, a traffic monitor-and can apply those applications in combination, or separately, to the desired traffic. CoVisor also abstracts concrete topologies, providing custom virtual topologies in their place, and allows administrators to specify access controls that regulate the packets a given controller may see, modify, monitor, or reroute. The central technical contribution of the work is a new set of efficient algorithms for composing controller policies, for compiling virtual networks into concrete OpenFlow rules, and for efficiently processing controller rule updates. We have built a CoVisor prototype, and shown that it is several orders of magnitude faster than a naive implementation.

Original languageEnglish (US)
Title of host publicationProceedings of the 12th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2015
PublisherUSENIX
Pages87-101
Number of pages15
ISBN (Electronic)9781931971218
StatePublished - Jan 1 2015
Event12th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2015 - Oakland, United States
Duration: May 4 2015May 6 2015

Publication series

NameProceedings of the 12th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2015

Other

Other12th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2015
CountryUnited States
CityOakland
Period5/4/155/6/15

All Science Journal Classification (ASJC) codes

  • Control and Systems Engineering
  • Computer Networks and Communications

Fingerprint Dive into the research topics of 'CoVisor: A compositional hypervisor for software-defined networks'. Together they form a unique fingerprint.

  • Cite this

    Jin, X., Gossels, J., Rexford, J. L., & Walker, D. P. (2015). CoVisor: A compositional hypervisor for software-defined networks. In Proceedings of the 12th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2015 (pp. 87-101). (Proceedings of the 12th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2015). USENIX.