Visible to the public Performance Evaluation of Data Center Network with Network Micro-segmentation

TitlePerformance Evaluation of Data Center Network with Network Micro-segmentation
Publication TypeConference Paper
Year of Publication2020
AuthorsMujib, M., Sari, R. F.
Conference Name2020 12th International Conference on Information Technology and Electrical Engineering (ICITEE)
KeywordsCisco Application Centric Infrastructure, cloud computing, cloud-based applications, composability, computer centres, computer network performance evaluation, computer network security, data center infrastructure, data center network, data center network performance, data centers, Data models, dynamic data center, dynamic networks, high-performance requirements, Metrics, micro-segmentation, network microsegmentation, Network topology, network traffic, performance evaluation, performance evaluation results, pubcrawl, resilience, Resiliency, search engines, security, security idea, social networks, software defined networking, software-defined networking, telecommunication network topology, telecommunication traffic, Topology, zero trust, zero trust security, zero trust security model

Research on the design of data center infrastructure is increasing, both from academia and industry, due to the rapid development of cloud-based applications such as search engines, social networks, and large-scale computing. On a large scale, data centers can consist of hundreds to thousands of servers that require systems with high-performance requirements and low downtime. To meet the network's needs in a dynamic data center, infrastructure of applications and services are growing. It takes a process of designing a network topology so that it can guarantee availability and security. One way to surmount this is by implementing the zero trust security model based on micro-segmentation. Zero trust is a security idea based on the principle of "never trust, always verify" in which no concepts of trust and untrust in network traffic. The zero trust security model implemented network traffic in the form of untrust. Micro-segmentation is a way to achieve zero trust by dividing a network into smaller logical segments to restrict the traffic. In this research, data center network performance based on software-defined networking with zero trust security model using micro-segmentation has been evaluated using a testbed simulation of Cisco Application Centric Infrastructure by measuring the round trip time, jitter, and packet loss during experiments. Performance evaluation results show that micro-segmentation adds an average round trip time of 4 ms and jitter of 11 ms without packet loss so that the security can be improved without significantly affecting network performance on the data center.

Citation Keymujib_performance_2020