Changes between Version 12 and Version 13 of GENIExperimenter/Tutorials/NFV/Ryu/HandlingIntrusionwithRyu

Timestamp:

10/30/17 11:18:02 (7 years ago)

Author:

Nabeel Akhtar

Comment:

--

GENIExperimenter/Tutorials/NFV/Ryu/HandlingIntrusionwithRyu

@@ -13 +13 @@
 We use the same PI control for load balancing as in [wiki:GENIExperimenter/Tutorials/NFV/Ryu/LoadBalancePIwithRyu Experiment 2], and you can find details about the PI control there. 
 
-== (1) RINA Distributed Application == 
-
-Same as Part (1) RINA Distributed Application in [wiki:GENIExperimenter/Tutorials/NFV/Ryu/LoadBalancePIwithRyu Experiment 2]. 
+== (1) RINA Distributed Application == (Same as Part (1) RINA Distributed Application in [wiki:GENIExperimenter/Tutorials/NFV/Ryu/LoadBalancePIwithRyu Experiment 2]. )
+
+First we will run a RINA distributed application to collect the VNF load information on the controller node.
+
+{{{
+#!html
+<table id="Table_02" width = "1150" border="0" cellpadding="0" cellspacing="10" >
+ <tr> 
+<td> <img src = "http://csr.bu.edu/rina/grw-bu2016/tutorial_files/image068.gif" > </td>
+<td>  We need Java installed on the <i> VNF1, VNF2 </i> and <i> controller </i> nodes to run the RINA application. Check if Java is installed using: java -version. If not, install java on <i> VNF1, VNF2 </i> and <i> controller </i> nodes in new windows (Type Ctrl-C to exit netcat on the sources and destination). To install Java, execute: &nbsp;<span style="background:#c0c0c0; font-size: 10pt"><b>sudo apt-get install openjdk-7-jdk </b> </span> <br>
+<b>(If the install fails, you may first run: sudo apt-get update. In some cases, you may need to first run: sudo add-apt-repository ppa:openjdk-r/ppa followed by: sudo apt-get update.)</b>  
+ </td></tr></table>
+}}}  
+
+
+     1.  In the controller window, download the RINA controller code:
+
+      - ''' cd ~ '''
+      - '''  wget !http://csr.bu.edu/rina/grw-bu2016/nfv_ryu/rina/Control.tar.gz '''
+      - ''' tar -xvf Control.tar.gz '''
+
+
+ 2.     Type ''ifconfig'' to get the IP address of the controller. Save this address as we will need this address to direct the RINA processes on the VNFs to the RINA process on the controller.
+
+ 3.     In a new VNF1 window, download the RINA VNF1 code:
+
+
+      - ''' cd ~ '''
+      - '''  wget !http://csr.bu.edu/rina/grw-bu2016/nfv_ryu/rina/VNF1.tar.gz '''
+      - ''' tar -xvf VNF1.tar.gz '''
+
+ 4.     In a new VNF2 window, download the RINA VNF2 code.
+
+
+      - ''' cd ~ '''
+      - '''  wget !http://csr.bu.edu/rina/grw-bu2016/nfv_ryu/rina/VNF2.tar.gz '''
+      - ''' tar -xvf VNF2.tar.gz '''
+
+ 5.     Now we will change the IP address in the RINA configuration files for VNF1, VNF2 and controller, so these RINA processes can talk to each other.
+ In the VNF1 window, execute:
+
+      - ''' cd ~/VNF1'''
+      - ''' nano ipcVNF1.properties '''
+
+ At the bottom of the file, change the '''''rina.dns.name''''' and '''''rina.idd.name''''' to the IP address of the controller. The following screenshot shows an example.
+
+{{{
+#!html
+<img src="http://csr.bu.edu/rina/grw-bu2016/nfv_ryu/pics/DNSIDDConfig.png" hspace=50>
+ }}}
+
+ In the VNF2 window, execute:
+
+      - ''' cd ~/VNF2'''
+      - ''' nano ipcVNF2.properties '''
+ 
+ At the bottom of the file, again change the '''''rina.dns.name''''' and '''''rina.idd.name''''' to the IP address of the controller.
+
+ In the controller window, execute:
+
+     - '''cd ~/Control/RINA'''
+     - '''nano ipcControl.properties'''
+
+ At the bottom of the file, again change the ''''rina.dns.name'''' and ''''rina.idd.name'''' to the IP address of the controller.
+
+
+
+ 6.     To run the RINA application, follow these steps (make sure you installed Java as noted above):
+
+  o   In the controller window, execute the following commands:
+
+      - ''' cd ~/Control/RINA/'''
+      - ''' ./run_controller.sh '''
+
+  o   In the VNF1 window, execute the following commands:
+
+      - '''cd ~/VNF1/'''
+      - ''' ./run_VNF1.sh '''
+
+
+  o   In the VNF2 window, execute the following commands:
+
+      - '''cd ~/VNF2/'''
+      - ''' ./run_VNF2.sh '''
+
+
+ 
+  You should see output on the controller window as shown below:
+{{{
+#!html
+<img src="http://csr.bu.edu/rina/grw-bu2016/nfv_ryu/pics/subInfo.png" hspace=2>
+ }}}
+
+{{{
+#!html
+<table id="Table_02" width = "1150" border="0" cellpadding="0" cellspacing="10" >
+ <tr> 
+<td> <img src = "http://csr.bu.edu/rina/grw-bu2016/tutorial_files/image068.gif" > </td>
+<td>  <i> The RINA application on VNF1 and VNF2 should be run as soon as possible after the RINA application on the controller  is started. If you wait for too long, you will get <b> null</b> values for CPU usage, as the controller's RINA app is not able to subscribe to the CPU load of the VNFs. </i> If this is the case, you should restart all RINA processes.   
+ </td></tr></table>
+}}}  
+
+
+'''Note: the RINA distributed application also passes the intrusion detection results from the VNFs to the Ryu controller. This information is not used in this experiment, but will be used in [wiki:GENIExperimenter/Tutorials/NFV/Ryu/HandlingIntrusionwithRyu Experiment 3] when handling intrusion traffic.'''
+
+
+
+{{{
+#!html
+<table id="Table_02" width = "650" border="0" cellpadding="0" cellspacing="10" >
+ <tr> 
+<td> <img src = "http://csr.bu.edu/rina/grw-bu2016/tutorial_files/image022.gif" > </td>
+<td>  <i> To stop all RINA processes running on a VM, run <b> killall -v java </b> </i> 
+ </td></tr></table>
+}}}  
+
+
 
 == (2) PI Controller ==