Software Defined Networking

D415 - Software Defined Networking NFV Functions deployed as Virtual Network Functions (VNF's) and can be dynamically deployed and scaled NFV Optimize network infrastructure, reduce hardware dependence, and streamline network service deployment NFV Useful for service providers, telecom operators, and orgs with complex network requirements Southbound API Northbound API systems Southbound API Northbound API Southbound API Northbound API Used to communicate between the control plane and data plane Communicate between control plane and application/management OpenFlow, NETCONF, and gRPC RESTful APIs, WebSockets, and custom appliaction-specific APIs Control plane instructs the data plane on how to handle network traffic Provide way for external applications, services, or orchestrators to request network services, retrieve network status, and manipulate network behavior. Southbound API Used to communicate with physical or virtual network devices. Can configure, manage, and monitor Chef Uses code written in Ruby and a specialized Domain-Specific Language (DSL) Ansible Uses YAML-based playbooks, while also using JSON for data serialization during task execution and communication. Ansible Operates agentlessly over SSH, automating processes within an environment Virtual Network Function (VNF) Software implementation of a network function that traditionally would be performed by dedicated hardware appliances Virtual Network Function Manager (VNFM) Responsible for managing the lifecycle of VNFs. Handles VNF deployment, scaling, updating, and termination. Interacts with the NFV infrastructure. Virtual Network Function Infrastructure (VNFI) Virtualized resources required to support the execution of VNFs. Includes compute, storage, and network resources that VNFs need to operate effectively. Network Functions Virtualization (NFV) Architectural approach that involves virtualizing and consolidating network functions onto standard hardware. Network Functions Virtualization (NFV) Allows functions to run as software on general purpose servers, reducing the need for dedicated hardware. Common Vulnerability Scoring System (CVSS) Framework used to assess and communicate the severity of vulnerabilities in software and systems. Assigns score based on impact, exploitability, and complexity NIST SP 800-53 Security Controls Outlines a comprehensive set of security controls across various control families, including access control, configuration management, incident response, and more. NIST SP 800-125B Hypervisor Security Provides guidance on security the hypervisor layer to prevent unauthorized access, ensure isolation between VMs, and protect against various attacks. NIST SP 800-53 Control Families Organized into families, each addressing a specific area of security concern. Ex: Access Control, Audit and Accountability, System and Communications Protection, and Security Assessment and Authorization NIST SP 800-125B Virtualization Components Covers various components such as host systems, guest systems, management interfaces, and virtual networks NIST SP 800-53 Control Baselines Guidelines for tailored security measures based on the organization risk profile and the sensitivity of the information being protected. (low, medium, and high) NIST SP 800-125B Isolation and Segmentation Importance of maintaining strong isolation between VMs to prevent unauthorized information disclosure or unauthorized access. NIST SP 800-53 Continuous Monitoring compliance and effectiveness Monitoring of security controls to ensure ongoing NIST SP 800-125B Configuration Management Emphasizes the need for secure configuration of hypervisor and virtual machine settings, including parameters related to memory allocation, CPU scheduling, and network configurations. NIST SP 800-53 Risk Management Framework (RMF) managing and mitigating information security risks. Provides a structured approach for NIST SP 800-125B Secure Deployment Provides recommendations for practices involving patch management, secure boot processes and hardware-based security features