HP Network Protector SDN Application Administrator Guide

to send the traffic which matches the flow rules to the application for action. The rest of the traffic,
which does not match any flow rules programmed by either the SDN Controller or the application,
continues to flow normally from the switch. For more information about the supported switches for
the application, see the table Table 1 (page 8).
Table 1 Switch support matrix
Switch software versionHP Switch model
K/KA/WB.15.15.yyyyK/KA/WB.15.14.yyyyK/KA/WB.15.10.yyyym
K/KA/WB.15.10.yyyy
K/KA/WB.15.11.yyyy
K/KA/WB.15.12.yyyy
K/KA/WB.15.13.yyyy
OpenFlow 1.3
2
OpenFlow 1.3
1
OpenFlow 1.02920
OpenFlow 1.3OpenFlow 1.3OpenFlow 1.03500
OpenFlow 1.3
2
OpenFlow 1.3
1
OpenFlow 1.03800
OpenFlow 1.3OpenFlow 1.3OpenFlow 1.05400zl v1 modules
5400zl v1/v2 module mix
3
OpenFlow 1.3
2
OpenFlow 1.3
1
OpenFlow 1.05400zl v2 modules only
OpenFlow 1.3OpenFlow 1.3OpenFlow 1.06200
OpenFlow 1.3OpenFlow 1.3OpenFlow 1.06600
OpenFlow 1.3OpenFlow 1.3OpenFlow 1.08200zl v1 modules
8200zl v1/v2 module mix
3
OpenFlow 1.3
2
OpenFlow 1.3
1
OpenFlow 1.08200zl v2 modules only
Legend: y = software build version, m = software maintenance version
1
Better for higher client densities.
Client density is defined by the number of clients accessing the same switch, and represents a combination of hardware and
software capabilities.
2
Best for the highest client densities.
Client density is defined by the number of clients accessing the same switch, and represents a combination of hardware and
software capabilities.
3
Configuration must include “no allow-v1–modules”
NOTE: For more information about V1 and V2 Modules, see Troubleshooting topic “Switch
connection is not showing as registered in the SDN controller” (page 64).
For more information about supported switch matrix information, see the HP Network Protector
SDN Application Support Matrix Guide in the SDN information library at
http://www.hp.com/go/sdn/infolib.
Service Insertion
The application uses OpenFlow to redirect DNS traffic from the switch to the application and
compares it against RepDV to make forwarding or blocking decisions. However, packets of new
flows need to be copied to switch CPU for processing and then redirected to the application,
limiting performance in the range of tens of megabits per second. In order to maximize the
performance and keep the switch to what it does best, packets switching, the switch hardware
should be used to pipe traffic directly to application, yielding potential performance in the gigabits
per second range or line rate. In other words, packets are forwarded by switch hardware instead
8 HP Network Protector Solution Overview