Enabling MultiTenants Isolation for SoftwareDefined Cloud Networks via XMPP and BGP: Implementation and Evaluation BGPMPLS IP VPN is a traditional L3 tunneling and intersites routing solution and it can be used for the intra Data Center (DC) network. With the emergence of Software Defined Networking (SDN) scheme, BGPMPLS IP VPN can be extended via the Extensible Messaging and Presence Protocol (XMPP) to provide a multitenants isolation solution for SoftwareDefined cloud networks. In this work, we propose and implement a multitenants isolation solution using the Open Networking Operating System (ONOS) framework which is a very popular open source SDN controller maintained by the Open Networking Foundation (ONF). We use XMPP protocol as its southbound interface. We show how this solution can be deployed and used in both real and emulated environments. A performance comparison between the XMPP and the OpenFlowbased SBIs is provided via experimentation results. The results demonstrate the efficiency and the scalability of the XMPPbased solution. Our work is modular and easily extensible, which enables new use cases based on ONOS.

MToS: MultiTenant Network Over Software Defined Networking MToS, a multitenant network service is designed and implemented under SoftwareDefined Network (SDN) environment. One of the solutions to establish multitenant network in nonSDN environment is MultiProtocol Label Switching Virtual Private Network that involves numerous and complicated protocols to be configured prior to the establishment of multitenant network. With SDN, it opens new opportunities to create multitenant networks that are less complicated, more automated, and lower implementation cost via SDN commodity devices. MToS categorizes OpenFlow switches into three hierarchies, where matching fields and actions in flow entries are different depending on the switch hierarchy. Therefore, traffic forwarding can be scalable. MToS provides tenant isolation through dedicate flow table associated with each tenant, and tenant MAC address as the identifier which is used in flow table redirection and packet header modification. Traffic forwarding between Edge switches is achieved through Edge MAC address as the identifier which is used in packet header modification, and Edge switch serves as ARP Proxy for tenant end hosts. Comparing to MPLS VPN, MToS only requires essential information about tenants to construct a multitenant network. By taking advantage of SDN centralized global network information, MToS adds automations of IP address management and shortest path routes calculation. MToS is developed based upon OpenFlow version 1.3, and implemented in Python and runs on top of Ryu SDN framework.