Visible to the public A Virtual Time System for Linux-container-based Emulation of Software-defined NetworksConflict Detection Enabled

TitleA Virtual Time System for Linux-container-based Emulation of Software-defined Networks
Publication TypeConference Paper
Year of Publication2015
AuthorsJiaqi Yan, Illinois Institute of Technology, Dong Jin, Illinois Institute of Technology
Conference NameACM SIGSIM Conference on Principles of Advanced Discrete Simulation
Date Published06/2015
PublisherACM
Conference LocationLondon, UK
KeywordsA Hypothesis Testing Framework for Network Security, Linux Container, Mininet, Network Emulation, Network security, NSA SoS Lablets Materials, science of security, simulation, software-defined networking, Time Dilation, UIUC, Virtual Time
Abstract

Realistic and scalable testing systems are critical to evaluate network applications and protocols to ensure successful real system deployments. Container-based network emula- tion is attractive because of the combination of many desired features of network simulators and physical testbeds . The success of Mininet, a popular software- defined networking (SDN) emulation testbed, demonstrates the value of such approach that we can execute unmodified binary code on a large- scale emulated network with lightweight OS-level vir- tualization techniques. However, an ordinary network em- ulator uses the system clock across all the containers even if a container is not being scheduled to run. This leads to the issue of temporal fidelity, especially with high workloads. Virtual time sheds the light on the issue of preserving tem- poral fidelity for large-scale emulation. The key insight is to trade time with system resources via precisely scaling the time of interactions between containers and physical devices by a factor of n, hence, making an emulated network ap- pear to be n times faster from the viewpoints of applications in the container. In this paper, we develop a lightweight Linux-container-based virtual time system and integrate the system to Mininet for fidelity and scalability enhancement. We also design an adaptive time dilation scheduling mod- ule for balancing speed and accuracy. Experimental results demonstrate that (1) with virtual time, Mininet is able to accurately emulate a network n times larger in scale, where n is the scaling factor, with the system behaviors closely match data obtained from a physical testbed; and (2) with the adaptive time dilation scheduling, we reduce the running time by 46% with little accuracy loss. Finally, we present a case study using the virtual-time-enabled Mininet to evalu- ate the limitations of equal-cost multi-path (ECMP) routing in a data center network.

URLhttp://publish.illinois.edu/science-of-security-lablet/files/2014/05/A-Virtual-Time-System-for-Linux...
Citation Keynode-23229

Other available formats:

A Virtual Time System for Linux-container-based Emulation of Software-defined Networks
AttachmentSize
bytes