Floodlight (OpenFlow controller)

Floodlight (OpenFlow controller)
Name	Floodlight
Developer	Big Switch Networks, Stanford University
Released	2011
Programming language	Java
Operating system	Cross-platform
License	Apache License 2.0

Floodlight (OpenFlow controller) is an open-source software-defined networking (SDN) controller implemented in Java and originally developed at Stanford University and by Big Switch Networks. It provides an OpenFlow control plane for managing network switches and appliances and integrates with ecosystems including Open vSwitch, POX, Ryu, ONOS, and OpenDaylight. Floodlight is used in academic research, production datacenter fabrics, and carrier networks, and interacts with projects such as Mininet, Wireshark, and Bro/Zeek for testing and monitoring.

Overview

Floodlight was created to implement the OpenFlow protocol and to serve as a modular controller platform in the lineage of SDN initiatives from Stanford and projects led by researchers affiliated with Carnegie Mellon University, Massachusetts Institute of Technology, and UC Berkeley. The design emphasizes modularity and extensibility similar to earlier controllers like NOX, POX, and Beacon while addressing operational needs expressed by companies such as Google, Facebook, and Amazon. Floodlight interoperates with switch implementations including Open vSwitch, HP, Cisco Nexus, and Pica8, and complements orchestration platforms such as OpenStack, Kubernetes, and VMware NSX.

Architecture

Floodlight's architecture is based on a core module system that resembles plugin frameworks used by Apache Software Foundation projects and Eclipse. The core provides lifecycle management, configuration, and an in-memory data model comparable to models in OpenDaylight and ONOS. Southbound integrations implement OpenFlow versions comparable to those in the IETF and ONF specifications and work with hardware from Broadcom, Intel, and Mellanox. Northbound APIs expose REST interfaces similar to those in Juniper Contrail and Cisco ACI, enabling interaction with orchestration tools such as OpenStack Neutron, Kubernetes API Server, and Apache Mesos. Floodlight subsystems include device discovery, topology, link management, and flow tables analogous to features in F5 and Arista management suites.

Features and Modules

Floodlight ships with modules for topology discovery, IPv4 routing, static flow pusher, switch manager, and firewall-like capabilities reminiscent of Palo Alto Networks and Fortinet appliances. The static flow pusher echoes functionality seen in ONOS and OpenDaylight, while route learning and ARP handling parallel mechanisms in Brocade and Huawei network OS stacks. The REST API supports integrations with monitoring systems such as Prometheus, Grafana, Nagios, and Zabbix. Additional modules enable multicast, DHCP, and LLDP processing akin to implementations in Cumulus Linux and Nokia SR OS.

Deployment and Use Cases

Floodlight has been deployed in university campuses including Stanford, MIT, and UC Berkeley for SDN research curricula and by companies such as Big Switch Networks and Pica8 for proof-of-concept datacenter overlays. Use cases include traffic engineering for content delivery networks run by Akamai and Fastly, campus network virtualization used by Cisco Meraki customers, and tenant isolation in multi-tenant cloud platforms operated by Rackspace and DigitalOcean. Floodlight also appears in network function virtualization (NFV) testbeds involving ETSI frameworks and in interoperability tests with controllers like ONOS and OpenDaylight at events sponsored by the Open Networking Foundation and IETF hackathons.

Performance and Scalability

Floodlight's single-threaded event loop and modular packet processing have been studied in benchmarks against controllers such as OpenDaylight, ONOS, and Ryu, with comparisons focusing on flow setup latency, throughput, and CPU utilization on platforms from Dell, HP, and Supermicro. Scaling strategies include clustering at the orchestration layer with external state stores like Apache Zookeeper, Redis, and Cassandra, and integration with hardware offloads provided by Broadcom SDKs and Mellanox Accelerated Switching drivers. Real-world deployments measure capacity for millions of flows per second in environments operated by enterprises such as Goldman Sachs and Microsoft in experimental setups.

Development and Community

Floodlight's development community includes contributors from academic labs at Stanford, UC Berkeley, and Carnegie Mellon as well as engineers from Big Switch Networks, Pica8, and Brocade. The project participates in collaborative events hosted by the Open Networking Foundation, Linux Foundation, and Apache Software Foundation communities, and shares interoperability testing with projects like Mininet, Wireshark, Scapy, and Testpmd. Documentation and contributions follow patterns similar to those used by Apache Kafka and Kubernetes communities, with continuous integration tooling drawn from Jenkins, Travis CI, and GitLab CI.

Security and Management Practices

Operational security for Floodlight deployments follows best practices used in enterprise environments managed by teams at Cisco, Juniper Networks, and Arista, including RBAC models analogous to those in Microsoft Azure Active Directory, certificate management with Let's Encrypt and HashiCorp Vault, and audit logging for compliance common in environments regulated by PCI DSS and HIPAA. Management integrates with SIEM systems such as Splunk and Elastic Stack, and mitigations for threats comparable to those addressed by Palo Alto Networks and Fortinet include rate-limiting, hardened Java runtimes, and isolation within virtual private clouds managed by AWS, Google Cloud Platform, and Microsoft Azure.

Category:Software-defined networking Category:OpenFlow controllers Category:Java (programming language) software