SD-Access: Practical Experiences in Designing and Deploying Software Defined Enterprise Networks

TL;DR

This paper presents SDA, a practical SDN-based solution for modern enterprise networks that improves scalability, mobility, and segmentation, demonstrated through real-world deployments and evaluated for efficiency gains.

Contribution

The paper introduces SDA, a novel SDN-based architecture combining overlay and event-driven protocols for scalable, dynamic enterprise network management, with real-world deployment insights.

Findings

Reduces data plane forwarding state by up to 70%

Decreases handover delays by an order of magnitude

Successfully deployed in enterprise campus and warehouse scenarios

Abstract

Enterprise Networks, over the years, have become more and more complex trying to keep up with new requirements that challenge traditional solutions. Just to mention one out of many possible examples, technologies such as Virtual LANs (VLANs) struggle to address the scalability and operational requirements introduced by Internet of Things (IoT) use cases. To keep up with these challenges we have identified four main requirements that are common across modern enterprise networks: (i) scalable mobility, (ii) endpoint segmentation, (iii) simplified administration, and (iv) resource optimization. To address these challenges we designed SDA (Software Defined Access), a solution for modern enterprise networks that leverages Software-Defined Networking (SDN) and other state of the art techniques. In this paper we present the design, implementation and evaluation of SDA. Specifically, SDA: (i) leverages a combination of an overlay approach with an event-driven protocol (LISP) to dynamically adapt to traffic and mobility patterns while preserving resources, and (ii) enforces dynamic endpoint groups for scalable segmentation with low operational burden. We present our experience with deploying SDA in two real-life scenarios: an enterprise campus, and a large warehouse with mobile robots. Our evaluation shows that SDA, when compared with traditional enterprise networks, can (i) reduce overall data plane forwarding state up to 70% thanks to a reactive protocol using a centralized routing server, and (ii) reduce by an order of magnitude the handover delays in scenarios of massive mobility with respect to other approaches. Finally, we discuss lessons learned while deploying and operating SDA, and possible optimizations regarding the use of an event-driven protocol and group-based segmentation.