Software-Defined Networking (SDN) in Computer Networks - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Software-Defined Networking (SDN)?

SDN is a way to manage computer networks by separating the control part (which decides where data goes) from the part that actually moves the data. This makes networks easier to control and change.

beginner

What are the two main parts of an SDN architecture?

The two main parts are the control plane, which makes decisions about where traffic should go, and the data plane, which forwards the traffic based on those decisions.

intermediate

How does SDN improve network management compared to traditional networks?

SDN allows network managers to change network behavior quickly through software instead of manually configuring hardware devices. This makes networks more flexible and easier to automate.

beginner

What role does the SDN controller play?

The SDN controller acts like a brain for the network. It communicates with network devices to tell them how to handle data traffic based on the rules set by network administrators.

intermediate

Name one common protocol used for communication between the SDN controller and network devices.

OpenFlow is a common protocol that allows the SDN controller to communicate with switches and routers to control how data packets are handled.

What does the control plane in SDN do?

A Manufactures network hardware

B Physically moves data packets

C Monitors user activity

D Decides where network traffic should go

The control plane makes decisions about routing and managing network traffic.

Which part of SDN forwards the actual data packets?

A Control plane

B Data plane

C Application layer

D Management plane

The data plane is responsible for forwarding data packets based on instructions from the control plane.

What is a key benefit of SDN over traditional networking?

A Separates control and data functions for easier management

B Requires more manual configuration

C Uses only hardware switches

D Eliminates the need for network security

SDN separates control and data planes, making networks easier to manage and more flexible.

Which protocol is commonly used for SDN controller communication?

A HTTP

B FTP

C OpenFlow

D SMTP

OpenFlow is a protocol designed for SDN controllers to communicate with network devices.

In SDN, who typically programs the network behavior?

A Network administrators using software

B Network hardware manufacturers

C End users

D Internet service providers

Network administrators use software to program and control network behavior in SDN.

Explain the main difference between the control plane and data plane in Software-Defined Networking.

Think about who decides and who acts in the network.

Describe how SDN makes network management easier compared to traditional networks.

Consider how changes are made in SDN versus old methods.

Practice

1. What is the main purpose of Software-Defined Networking (SDN)?

easy

A. To combine hardware and software into a single device

B. To replace all network cables with wireless connections

C. To increase the physical size of network devices

D. To separate the control plane from the data plane for easier network management

Solution

1. Step 1: Understand SDN architecture

   SDN separates the control plane (which decides where traffic is sent) from the data plane (which forwards traffic).

2. Step 2: Identify the main benefit

   This separation allows easier and centralized network management.

3. Final Answer:

   To separate the control plane from the data plane for easier network management -> Option D

4. Quick Check:

   SDN = Control and data plane separation [OK]

Hint: SDN means control and data parts are separate [OK]

Common Mistakes:

• Thinking SDN combines hardware and software physically
• Confusing SDN with wireless technology
• Assuming SDN increases device size

2. Which of the following is the correct component of an SDN architecture?

easy

A. Control plane, data plane, and application plane

B. Router, switch, and firewall only

C. Physical cables and wireless signals

D. User interface and database only

Solution

1. Step 1: Recall SDN components

   SDN architecture includes the control plane (manages decisions), data plane (forwards data), and application plane (network applications).

2. Step 2: Match options with components

   Only Control plane, data plane, and application plane lists these three key planes correctly.

3. Final Answer:

   Control plane, data plane, and application plane -> Option A

4. Quick Check:

   SDN components = Control, data, application planes [OK]

Hint: Remember SDN has three planes: control, data, application [OK]

Common Mistakes:

• Confusing physical devices with SDN planes
• Ignoring the application plane
• Mixing network hardware with SDN architecture

3. Consider this SDN controller command snippet:
flow_mod = { 'match': {'ip_dst': '10.0.0.5'}, 'actions': ['output:2'] }
What does this command do in the network?

medium

A. It drops all packets destined to 10.0.0.5

B. It forwards packets destined to 10.0.0.5 out of port 2

C. It blocks port 2 for all traffic

D. It sends packets from port 2 to 10.0.0.5

Solution

1. Step 1: Analyze the flow_mod command

   The command matches packets with destination IP 10.0.0.5 and sets action to output on port 2.

2. Step 2: Understand the effect

   Packets matching the destination IP will be forwarded out of port 2.

3. Final Answer:

   It forwards packets destined to 10.0.0.5 out of port 2 -> Option B

4. Quick Check:

   Match IP, output port 2 = forward packets [OK]

Hint: Match destination IP, then forward to specified port [OK]

Common Mistakes:

• Thinking it drops packets instead of forwarding
• Confusing input and output ports
• Assuming it blocks traffic

4. A network admin writes this SDN rule:
flow_mod = { 'match': {'ip_src': '192.168.1.10'}, 'actions': ['drop'] }
But packets from 192.168.1.10 are still passing through. What is the likely error?

medium

A. The action 'drop' is not a valid action keyword

B. The match field should be 'ip_dst' instead of 'ip_src'

C. The rule is missing a priority level

D. The controller is offline

Solution

1. Step 1: Check the action keyword validity

   In SDN, to drop packets, the action list should be empty or use a specific drop command depending on the controller. 'drop' as a string in actions is usually invalid.

2. Step 2: Evaluate other options

   Match on 'ip_src' is valid, priority is optional but recommended, and controller status is unrelated to this syntax error.

3. Final Answer:

   The action 'drop' is not a valid action keyword -> Option A

4. Quick Check:

   Invalid action keyword causes rule failure [OK]

Hint: Check if action keywords are valid in SDN rules [OK]

Common Mistakes:

• Assuming 'drop' is always valid in actions list
• Confusing source and destination IP fields
• Ignoring controller connectivity issues

5. In an SDN environment, how can network administrators quickly isolate a compromised device without physically disconnecting it?

hard

A. By increasing the device's bandwidth allocation

B. By unplugging the device's network cable manually

C. By updating the SDN controller to block traffic from the device's IP or MAC address

D. By restarting the device remotely

Solution

1. Step 1: Understand SDN's centralized control

   SDN allows administrators to control network behavior centrally via the controller without physical intervention.

2. Step 2: Apply isolation method

   Blocking traffic from a device's IP or MAC address at the controller level isolates it quickly and effectively.

3. Final Answer:

   By updating the SDN controller to block traffic from the device's IP or MAC address -> Option C

4. Quick Check:

   SDN controller blocks device traffic = quick isolation [OK]

Hint: Use SDN controller to block device traffic instantly [OK]

Common Mistakes:

• Thinking physical disconnection is needed
• Restarting device does not isolate it
• Increasing bandwidth helps attacker access