This project aims to demonstrate a DDoS attack on an SDN. This project serves more on scientific investigation to analyse vulnerabilities of SDN and the impact of cyber-attacks on the network. This project requires an understanding of OpenFlow, the ONOS controller, the network simulator called Mininet, DDoS penetration testing tools; and using these building blocks to implement a simulator of DDoS attacks against SDNs.

Mininet version: 2.3.0

1. Install mininet repositories form source

$ git clone https://github.com/mininet/mininet

2. Install Mininet

mininet/util/install.sh -a # to install every dependencies such as Open vSwitch, OpenFlow wireshark and POX.

3. Test Mininet after installation

sudo mn --switch ovsbr --test pingall

Based on ONOS requirements , ONOS requires JAVA 11.

$ sudo apt update
$ sudo apt install openjdk-11-jdk

Set $JAVA_HOME variable for better performance

$ sudo cat >> /etc/environment <<EOL
JAVA_HOME=/usr/lib/jvm/java-11-openjdk-amd64
EOL

Other software packages that is recommended to be installed includes:

• preffered text editor (gedit, vim, etc.)
• git
• wget
• net-tools

1. Install ONOS and extract the files into /opt/onos

$ sudo wget -c https://repo1.maven.org/maven2/org/onosproject/onos-releases/2.7.0/onos-2.7.0.tar.gz
$ sudo tar zxvf onos-2.7.0.tar.gz

2. Run ONOS services

$ cd /opt/onos/bin
$ sudo /opt/onos/bin/onos-service start

3. Configure ssh in another terminal

$ mkdir ~/.ssh # if it doesn't exist
$ vim ~/.ssh/config

HostKeyAlgorithms +ssh-rsa
PubkeyAcceptedKeyTypes +ssh-rsa

3. Enter ONOS CLI terminal and activate application

$ /opt/onos/bin/onos -l onos
password: rocks

onos> app activate org.onosproject.pipelines.basic
onos> app activate org.onosproject.fwd
onos> app activate org.onosproject.openflow

4. Open web browser to log in into GUI http://localhost:8181/onos/ui or http://:8181/onos/ui

username: onos 
password: rocks

$ sudo mn --controller remote,ip=<host ip address> --switch ovs,protocols=OpenFlow14 --custom /path/to/DDoS-attack-on-SDN/sdn_topology.py --topo=project

mininet> pingall 

To simulate a DDoS attack, refer to the DDoS Attack Simulation File.

Tools used for monitoring: Sflow-rt, iperf3, Wireshark

1. Sflow-rt

   • Install sflow-rt from source

   $ sudo wget https://inmon.com/products/sFlow-RT/sflow-rt.tar.gz
   $ tar -xvzf sflow-rt.tar.gz
   

   • Install application and start sflow service

   $ ./sflow-rt/get-app.sh sflow-rt browse-metrics
   $ ./sflow-rt/get-app.sh sflow-rt browse-metrics
   $ ./sflow-rt/get-app.sh sflow-rt mininet-dashboard
   $ ./sflow-rt/start.sh
   

   • Open sflow web GUI http://localhost:8008/html

2. iperf3

   • Install iperf3

   $ sudo apt install -y iperf3
   

3. Wireshark

   • Check if Wireshark has been installed locally. If not, install Wireshark using the following command:

   $ sudo apt install wireshark