OpenDaylight Summit 2014

Many current implementations based on sFlow, IPFIX etc. treat all flows as equal at Layer 4 level. There is no differentiation between the type of flows -- long-lived/short-lived, large/small. This results in sub-optimal network bandwidth utilization and non-real-time detection of behavioral security threats such as DDoS attacks. This presentation discusses flow-aware real-time SDN analytics applications in the area of local/global load-balancing, behavioral security threat detection which treat the long-lived large flows separately from other flows at layer 4 level. This addresses the aforementioned issues and enables service providers to offer tiered services. This presentation also discusses how these applications can be developed in the OpenDaylight open source framework with focus on the relevant southbound/northbound APIs and examines standardization work in this area in IETF.