Skip to main content

SDN starter kit "StackFlowOS"




The SDN stack nicked named "StackFlowOs" based on Debian 7.2 is available for download here  or here as a VM.  The Stack will help you get started quickly with the deployment of SDN enable lab for research or education purpose I highly recommend not to take this stuck to production "do it under your own risk" you have been warned


OUT-OF The BOx

The SDN starter kit "StackFlowOs" is made up by integrating a controller, the popular Quagga open source routing suite and the low-level vendor-independent OpenFlow interface OVS.With StackFlowOS Networking, you get the flexibility and granularity of Flowbased network policy on the same device/VM that's running traditional Layer2/ Layer3 protocols for efficient packet forwarding. StackFlowOS Networking users can use OpenFlow fine tune the switching (FIB) or router (RIB) tables in a switch. This allows users to inject OpenFlow rules for specific applications and policies. While also preserving the networking topology that's built on tried and true Layer2 and Layer3 protocols.
The "StackFlowOs" delivers advanced routing for physical, virtual and cloud networking environments. The StackFlowOs includes dynamic routing, Policy-Based Routing (PBR), stateful firewall, VPN support, traffic management and more in a package that is optimized to perform
in virtualized environments. All features are configured through "StackFlowOs" CLI, or third party management
The "StackFlowOs" supports all major hypervisors or when using tools like LiveCD it can be
installed on any standard x86 based system. Advancements in x86 processing power have proven that readily available multi-core systems can easily handle small packet processing and deep packet inspection up to 10Gbps.Since the Debian OS has not been modified your able to pull all software updates, bug fixes and security from Debian repository and you're not limited when it comes to add new features that you wish. To meet your Lab requirements.


Network Connectivity
At the core of the "StackOs" is OVS a key virtualization technology that traditional has been used to manage virtual machine i.e VLAN technology setting QoS parameters managing flows around virtual machine environment or automation of process the reason I'm keen on OVS as technology it helps me fulfill  open source stack, and there  is a complex routing engine (Quagga) with full support of IPv4 and IPv6 dynamic routing protocols (BGP Multipath, OSPF, RIP) and Policy-Based Routing.


username: root   ( ssh access have been granted out of the box for security reasons you can change this behavior)
password weed123

username: weed     (very limited privilege you will need to su - to have more fun)
password weed123





What is included on the stack

Os=Debian7,2

----OVS

----Quagga

----Shorewall

----Bind9

----isc-dhcp-server

----openswan

----xl2tpd

----NTP

-----Vlan

-----SSH

-----Pox

----keepalived vrrpd

------iperf, hping3, arping, tcpdump, nmap.


Release 1.0 feat


IPv4 / IPv6 Routing »» BGPv4, BGPv6
»» OSPFv2
»» BGP Multipath
»» RIPv2
»» Static Routes
»» Policy-Based Routing (PBR)
»» IPv6 Policy
»» VXLAN Tunnel Endpoint
»»VLAN routing
IP Address Management »» Static
»» DHCP Server
»» DHCP Client
»» DHCP Relay
»» Dynamic DNS
»» DNS Forwarding
»» IPv6 DNS Resolver
»» IDHCPv6 Server, Client
»» DHCPv6 Relay
Encapsulations »» Ethernet
»» 802.1Q VLANs
»» PPP
»» PPPoE
»» IP in IP
»» Frame Relay
»»L2 switching
»»Flow control
802.1D Bridging and Spanning
Tree Protocol
• 802.1s Multiple Spanning Tree
Protocol
• 802.1w Rapid Spanning Tree
Protocol
• 802.1p QOS/COS
• 802.1Q VLAN Tagging
Firewall »» Stateful Inspection Firewall
»» Zone-based Firewall
»» P2P Filtering
»» IPv6 Firewalling
»» Time-based Firewall Rules
»» Rate Limiting
»» ICMP Type Filtering
»» Stateful Failover
Tunneling / VPN »» SSL-based OpenVPN
»» Site to Site VPN (IPSec)
»» Remote VPN (PPTP, L2TP, IPSec)
»»OpenFlow Implementation
• Based on Open-vSwitch (OVS) 2.3.1
• Compatible with OpenFlow 1.4
specification
• TCAM Flow Optimization for better
scalability and performance
• Interoperable with RYU, OpenDaylight,
Floodlight, Trema and NOX
• OpenFlow encapsulation: L2oGRE,
L3oGRE, NVGRE, PBB, VXLAN,
»»Command line interface (CLI)
• Telnet and SSH remote login
• Centralized control plane policing
and filtering

Popular posts from this blog

Hands on Drupal

This video features Drupal CMS and Apache Solr search server Building big engaging content delivery system      
Read more

Difference between HashMap, LinkedHashMap and TreeMap

 LinkedHashMap is an implementation of java.util.Map interface with predictable iteration order (the order of insertion) i.e. LinkedHashMap will iterate in the order in which the entries were put into the map. LinkedHashMap implementation differs from HashMap in the way that it maintains a doubly-linked list running through all of its entries. This linked list defines the iteration ordering, which is normally the order in which keys were inserted into the map. The insertion order is not affected if a key is re-inserted into the map. Performance of LinkedHashMap is slightly below than that of HashMap, due to the added expense of maintaining the linked list. The other two important implementations of Map interface are java.util.HashMap and java.util.TreeMap. They offer mostly the same functionality. The most important difference is the order in which iteration through the entries will happen. HashMap makes no guarantee about the order. The order can even change completely whe...
Read more

mongodb authentication setting

The administrator of the database is the right person for the task of granting, or denying, permissions to users for doing operations with database resources. By using roles, we can specify what action can be done with a resource. Therefore, a role is a privilege granted to a user to do specific tasks with specific resources. Before you enable access control, you should create a user that can then create users and assign roles to them once access control is enabled.This user-admin will then be used to create and maintain other users and roles, so needs to be assigned a suitable role to enable it to do so. I assume you already have admin user set up within you system if not refer hare before proceeding. The role userAdminAnyDatabase in MongoDB gives ability to create users and assign roles to them, but by itself it doesn’t allow the user to do anything else. The superuser role in MongoDB is the root . In the this post i will show how to create, show and delete a user in...
Read more