Overview
Direct Answer
Software-Defined Networking (SDN) is an architecture that decouples network control logic from underlying data forwarding hardware, enabling centralised management through software controllers. This separation allows dynamic reconfiguration of network behaviour independent of physical infrastructure.
How It Works
SDN uses a control plane (software controller) communicating with a data plane (network switches and devices) via standardised protocols, typically OpenFlow. The controller maintains a global view of the network topology and issues forwarding rules to switches, which then execute packet routing and handling decisions without local intelligence.
Why It Matters
Organisations benefit from reduced capital expenditure by commoditising switching hardware, improved network agility through programmatic policy changes, and simplified multi-tenant isolation in cloud environments. Rapid provisioning and dynamic traffic engineering address the limitations of traditional distributed routing protocols.
Common Applications
SDN deployment is prevalent in data centre networking for VM mobility and load balancing, wide-area network optimisation across enterprise branch offices, and network virtualisation in cloud computing platforms. Telecommunications providers utilise SDN for service chaining and mobile network slicing.
Key Considerations
Controller reliability becomes a single point of failure requiring redundancy; latency-sensitive applications may suffer if centralised control decisions introduce delays. Security models must account for controller compromise and the extended attack surface created by management interfaces.
More in Networking & Communications
Network Function Virtualisation
Cloud NetworkingReplacing dedicated network hardware with software running on commodity servers.
Network Monitoring
Protocols & StandardsThe practice of continuously observing a computer network for slow or failing components.
SD-WAN
InfrastructureSoftware-Defined Wide Area Network — a virtualised network architecture that enables centralised management of geographically distributed networks.
Mesh Network
Protocols & StandardsA network topology where each node relays data for the network, providing self-healing and redundant paths.
Reverse Proxy
InfrastructureA server that sits in front of web servers and forwards client requests to the appropriate backend server.
mTLS
Protocols & StandardsMutual Transport Layer Security — a protocol where both client and server authenticate each other using certificates.
VLAN
InfrastructureVirtual Local Area Network — a logical grouping of network devices that communicate as if on the same physical network.
VPN
InfrastructureVirtual Private Network — a technology creating a secure, encrypted connection over a less secure network like the internet.