ONOS Security and Performance Analysis (Report No. 2) + # ^ Stefano Secci , Sandra Scott-Hayward*, You Wang , Quan Pham Van , Dominique ^ € € $ Verchere , Alpha Sow , Christophe Basquin , Dylan Smyth°, Kamel Attou , Kashyap £ # Thimmaraju , Andrea Campanella + ^ € C nam, France. *CSIT, QUB,, U.K. N okia Bell Labs, France. A irbus, France. $ £ °Nimbus Centre, CIT, Ireland. A nevia, France. T U Berlin, Germany # O pen Networking Foundation, USA. Corresponding author: Stefano Secci (
[email protected]) Date: Nov. 2, 2018 © 2018 ONOS. All Rights Reserved. ONF Informational Report 0 TABLE OF CONTENTS Introduction 2 1. Performance Analysis 3 1.1 NETCONF south-bound interface performance evaluation 3 1.2 Controller availability against bundle failure analysis 14 1.3 Network performance and scalability analysis 16 2. Security Analysis 22 2.1 SDN controller hardening guidelines 22 2.2 ONOS configuration issues and vulnerabilities 27 Summary 41 Acknowledgements 42 References 42 About ONOS 43 © 2018 ONOS. All Rights Reserved. ONF Informational Report 1 Introduction This is the second report of the ONOS Security & Performance Analysis (sec&perf) brigade. The goal of sec&perf brigade reports is to raise awareness about weaknesses of the ONOS system, and to provide feedback to ONOS developers on the quality of their code and the impact of pieces of code on the ONOS performance. In the following, we report about major activities of the brigade with ONOS 1.12 and 1.13. Editorial note: the report is not self-contained as a scientific publication could be, i.e., a prior technical knowledge on the various technologies (e.g., NETCONF, OpenFlow message types, etc) is needed to fully understand the content of the report.