Overview
Direct Answer
Software-Defined Networking (SDN) is an architecture that decouples network control logic from underlying data forwarding hardware, enabling centralised management through software controllers. This separation allows dynamic reconfiguration of network behaviour independent of physical infrastructure.
How It Works
SDN uses a control plane (software controller) communicating with a data plane (network switches and devices) via standardised protocols, typically OpenFlow. The controller maintains a global view of the network topology and issues forwarding rules to switches, which then execute packet routing and handling decisions without local intelligence.
Why It Matters
Organisations benefit from reduced capital expenditure by commoditising switching hardware, improved network agility through programmatic policy changes, and simplified multi-tenant isolation in cloud environments. Rapid provisioning and dynamic traffic engineering address the limitations of traditional distributed routing protocols.
Common Applications
SDN deployment is prevalent in data centre networking for VM mobility and load balancing, wide-area network optimisation across enterprise branch offices, and network virtualisation in cloud computing platforms. Telecommunications providers utilise SDN for service chaining and mobile network slicing.
Key Considerations
Controller reliability becomes a single point of failure requiring redundancy; latency-sensitive applications may suffer if centralised control decisions introduce delays. Security models must account for controller compromise and the extended attack surface created by management interfaces.
More in Networking & Communications
NAT
Protocols & StandardsNetwork Address Translation — a method of mapping one IP address space into another by modifying packet headers.
Network Resilience
Protocols & StandardsThe ability of a network to maintain acceptable service levels despite faults, challenges, and threats.
SD-WAN
InfrastructureSoftware-Defined Wide Area Network — a virtualised network architecture that enables centralised management of geographically distributed networks.
Network Monitoring
Protocols & StandardsThe practice of continuously observing a computer network for slow or failing components.
VPN
InfrastructureVirtual Private Network — a technology creating a secure, encrypted connection over a less secure network like the internet.
Packet Sniffing
Protocols & StandardsThe process of capturing and analysing data packets travelling across a network for monitoring or troubleshooting.
Network Topology
Protocols & StandardsThe arrangement of elements such as nodes, links, and devices in a computer network.
Reverse Proxy
InfrastructureA server that sits in front of web servers and forwards client requests to the appropriate backend server.