1
00:00:00,820 --> 00:00:04,120
Another question asked is, is open flow secure?

2
00:00:04,450 --> 00:00:07,030
Is software defined networking secure?

3
00:00:07,330 --> 00:00:12,820
Well, I'm pretty sure most of you have heard of the NSA or National Security Agency of the USA.

4
00:00:13,210 --> 00:00:18,250
He has a presentation on YouTube explaining how open flow is used in the NSA.

5
00:00:18,520 --> 00:00:22,950
The NSA have the same I.T. challenges as other organizations.

6
00:00:22,960 --> 00:00:30,160
They need bigger, faster, better networks, but they need it on a smaller budget.

7
00:00:30,810 --> 00:00:36,480
They decided that centralization via open flow is key to their deployment.

8
00:00:36,720 --> 00:00:40,500
The reason for the NSA to implement open flow is control.

9
00:00:40,590 --> 00:00:46,680
They require predictability and efficiency to make the network more secure, but also need to support

10
00:00:46,680 --> 00:00:50,160
mission critical workloads that run over the network.

11
00:00:50,430 --> 00:00:57,720
So in this presentation, it's mentioned that the NSA are all in to open flow, and using open flow

12
00:00:57,720 --> 00:01:04,110
with a centralized controller is the only viable way that the NSA could technically implement their

13
00:01:04,110 --> 00:01:05,220
requirements.

14
00:01:05,400 --> 00:01:14,280
They needed to simplify the network but have more control and centralized control using open flow was

15
00:01:14,280 --> 00:01:15,330
the solution.

16
00:01:15,510 --> 00:01:21,090
This presentation further goes into how it makes sense to have centralized control.

17
00:01:21,300 --> 00:01:27,420
As an example, in a corporate network, you know where your DHCP servers are, so it makes sense to

18
00:01:27,420 --> 00:01:31,470
only allow DHCP requests to go to those servers.

19
00:01:31,500 --> 00:01:37,650
There should be no need for dynamic learning as the network is predictable and deterministic.

20
00:01:38,040 --> 00:01:42,660
The NSA is deploying open flow in their data centers, campus and branch offices.

21
00:01:44,570 --> 00:01:52,040
This video contains information from the NSA, Deutsche Bank, Samsung, SDS and Credit Suisse.

22
00:01:52,370 --> 00:01:58,790
It's well worth watching this video as well, because it very quickly gives you a sense of some of the

23
00:01:58,790 --> 00:02:06,020
challenges that enterprises face and some of the solutions that centralized control using open flow

24
00:02:06,020 --> 00:02:06,830
provide.