One of the primary principles of Software Defined Networking (SDN) is that representing networks as a collection of simple abstractions implemented as an API - rather than as a collection of standardized and proprietary protocols and command line interfaces - will lead to networks that are easier to build and manage. Application of this principle has advanced furthest in cloud computing, where the OpenStack Quantum network service provides tenants in a data center with an abstraction of an enterprise LAN. The Quantum API implements a virtual network through a plug-in, which might in fact require protocols and command line interfaces to drive the physical hardware. However, existing OpenStack support for wide area connectivity is restricted to L3 IPsec and SSL VPNs which do not in general support quality of service (QoS). In this paper, we present Cloud Atlas, a SDN abstraction and API extending the Quantum virtual network into the WAN. Cloud Atlas is built on top of existing WAN network services (L1-, L2-, and L3VPNs) that do support QoS. Cloud Atlas makes these services available to OpenStack through a tight integration with Quantum. We discuss two prototypes we have built of Cloud Atlas, one based on command line scripts and one based on a network management system. We conclude the paper with some observations on applying the cloud service model to networking and the value of SDN abstractions in supporting such a service model.

Network operators are faced with the challenge of deploying and managing middleboxes (also called inline services) such as firewalls within their broadband access, datacenter or enterprise networks. Due to the lack of available protocols to route traffic through middleboxes, operators still rely on error-prone and complex low-level configurations to coerce traffic through the desired set of middleboxes. Built upon the recent software-defined networking (SDN) architecture and OpenFlow protocol, this paper proposes StEERING, short for SDN inlinE sERvices and forwardlNG. It is a scalable framework for dynamically routing traffic through any sequence of middleboxes. With simple centralized configuration, StEERING can explicitly steer different types of flows through the desired set of middleboxes, scaling at the level of per-subscriber and per-application policies. With its capability to support flexible routing, we further propose an algorithm to select the best locations for placing services, such that the performance is optimized. Overall, StEERING allows network operators to monetize their middlebox deployment in new ways by allowing subscribers flexibly to select available network services.