Book Image

Learning OpenDaylight

By : Reza Toghraee
Book Image

Learning OpenDaylight

By: Reza Toghraee

Overview of this book

OpenDaylight is an open source, software-defined network controller based on standard protocols. It aims to accelerate the adoption of Software-Defined Networking (SDN) and create a solid foundation for Network Functions Virtualization (NFV). SDN is a vast subject; many network engineers find it difficult to get started with using and operating different SDN platforms. This book will give you a practical bridge from SDN theory to the practical, real-world use of SDN in datacenters and by cloud providers. The book will help you understand the features and use cases for SDN, NFV, and OpenDaylight. NFV uses virtualization concepts and techniques to create virtual classes for node functions. Used together, SDN and NFV can elevate the standards of your network architecture; generic hardware-saving costs and the advanced and abstracted software will give you the freedom to evolve your network in the future without having to invest more in costly equipment. By the end of this book, you will have learned how to design and deploy OpenDaylight networks and integrate them with physical network switches. You will also have mastered basic network programming over the SDN fabric.
Table of Contents (18 chapters)
Title Page
Credits
About the Author
Acknowledgments
About the Reviewers
www.PacktPub.com
Customer Feedback
Dedication
Preface

Security - user management


OpenDaylight security is a very wide context; it includes different components and technologies. The security framework of OpenDaylight is mainly based on the Apache Shiro Java security framework. The main configuration file of AAA is located at etc/shiro.ini, which is relative to the OpenDaylight Karaf home directory.

AAA can be enabled for each SDN module or application by simply adding a specific set of parameters to the servlet web.xml file, which is an advanced topic that we will not cover in this book.

User management in OpenDaylight is provided via the same framework. OpenDaylight has multiple Realm implementations; however, the main implementation that can be used widely for modules is TokenAuthRealm.

TokenAuthRealm provides the following features:

  • It is AuthorizingRealm built to bridge the Shiro-based AAA service with the h2-based AAA implementation.
  • It exposes a RESTful web service to manipulate the IdM policy on a per-node basis. If identical, the AAA policy...