Future Networking Essentials: A Practical Guide for Exploring Cloud, Edge, and 5G core Networking Environments (First Edition)

Explore virtualized networking environments through the Cloud, Edge, and 5G core networks, and their applications. This book covers the primary approaches related to setting up and experimenting with related cloud and networking environments using virtual networks, and virtual network functions. You’ll start by experimenting with future networking environments and learn a variety of Docker basics and essential networking skills. Specifically, containers, networking, volumes, iptables (for Docker environment security) and default orchestration features are discussed to help set up custom cloud, edge, and 5G core networking environments. Hands-on activities related to Docker networking and services features for publishing, scaling, and monitoring of services are also provided. By the end Part 1, you’ll be able to set up a variety of custom networking environments easily using Docker compose features and secure the set-up using iptables. Part 2 introduces Network Function Virtualization (NFV) architecture, and its roles in Cloud and 5G core networks. You’ll learn to deploy an open source 5G core platform from OpenAirInterface (OAI) using Docker. Then, you’ll set up and evaluate Virtual Network Functions (VNF) over suitable virtual networks. Hands-on activities are featured to guide you through the process of setting up and deploying VNFs such as DHCP, DNS, and proxy servers. Finally, Part 3 discusses key virtual networks such as IP VLANs, MAC VLANs, and overlay networks using Docker cluster setups. You’ll use interesting hands-on activities to easily experiment and learn cloud and 5G core network set-up related virtual networks, overlay networks, and network slicing. When done, you’ll be able to set up a variety of VNFs, carefully deploying VNFs, and conducting slicing activities over Docker cluster setups. What You’ll Learn Explore Cloud, Edge, and 5G core networking using Docker networking features. Build and evaluate a variety of virtual networks and deploy Virtual Network Functions (VNFs) and Network Slices using Docker swarm setups. Set up and deploy an open source 5G core network using Docker for experimenting. Enhance cloud environment and applications security using linux security features such as Capabilities, Seccomp, and AppArmors. Develop and evaluate network security experiments using Scapy and Docker networks. Who This Book Is For Network engineers, cloud engineers, students, faculty, and cloud and networking researchers. Table of Contents About the Author About the Technical Reviewer Acknowledgments Introduction Chapter 1: Getting Started with Future Networking Environments Understanding Future Networking Environments Cloud Computing Platforms SaaS PaaS IaaS Edge Computing and Its Environment VPC and Setting Up a VPC 5G 5G RAN 5G Core Platforms Docker Role in Future Networking Environments Docker Architecture Docker Architecture Blocks Docker Host Docker Client Docker Registry Docker Way for Services Deployment BUILD PUBLISH RUN Docker Objects Docker Image Docker Container Docker Volume Docker Network Docker Service Getting Started with Docker Installation Set Up Docker Registry Know Building Process of Your Image Let’s Create and Run Custom Images Docker Basic Commands for Experimenting Container Management Volumes Quick View of Docker Networking Commands Summary Chapter 2: Exploring Docker Networking Features Docker Networking Services Getting Started with Docker Networking Docker Default Supporting Networks Default Bridge Network Docker Host Network Docker None Network Understanding Docker Host and Container Networking Set Up a Custom Bridge Network Set Up a Custom Network with ICC Disabled Set Up a Custom Network with Internet Access Disabled Docker IP Addressing and Naming Services Docker IP Addressing Service Reserve a Few IP Addresses Allocate a Range of IP Addresses Host Interfaces Binding to Access Services Docker DNS Services Docker Default DNS Services Docker Embedded DNS Services Docker DNS Aliases Docker Host Routing and Iptables Docker Routing Docker Host to Container’s Network Container’s Network to Docker Host Docker and Iptables Iptables Important Tables and Supporting Rule Chains Filter Table NAT Table Mangle Table Iptables Rule Structure Docker-Specific Iptables Rules Filter Traffic from Docker Host to Container Network Filter Traffic from Container Network to Docker Host Filter Traffic from Container to Container Summary Chapter 3: Setting Up Realistic Networking Scenarios Docker Services for Setting Up Experimental Networks docker-compose Basics docker-compose for Deployment Tasks Configuring Computational Resources Checking Health of a Container or Service docker-compose for Containers Orchestration Controlling Services Order and Scaling Important Options for Networks Compose Exposing Container Services and Accessing Host Internet Importance of Iptables for Accessing the Internet Experimenting by Setting Up a LAN over Docker Containers Experimenting with an Internetworking over Docker Containers Summary Chapter 4: Virtualizing Network Functions in Cloud and Telecom Core Networks Importance of Virtualizing Network Functions Approaches for Deploying VNFs Virtual Machines for Deploying VNFs Containers for Deploying VNFs Benefits of VNFs Explore NFV Architecture Details Introduction to NFV Architecture NFV Key Use Cases Flexible Ways for Deploying NFs Provisioning of Network Services Quickly Helping in the Design of Flexible, Scalable, and Reliable Telecom Infrastructure Role of NFV in 5G Core Networks Service-Based Architecture Principles for 5G Basic 5G Core Network Functions Look into Sample 5G Core NFs Service Interfaces Role of Docker in Realizing VNFs Introduction to OpenAIR 5G Core Network Experimenting with OPENAIR-CN-5G Summary Chapter 5: Experiment with VNFs over Docker Containers Setting Up VNFs Using Docker Build VNFs Using Docker Images Set Up Suitable Volumes and Networks for VNFs Deployment Automate VNFs Deployment and Testing Tasks Experimenting with Virtual DHCP Server Set Up and Test DHCP VNFs Setting Up Reliable DHCP Service VNFs Experimenting with Virtual DNS Server Experiment with Local DNS Server Experiment with Authoritative DNS Server Experimenting with Virtual High-Availability Proxy Server Basic Experiments with a Proxy Server VNF Advanced Experiments with Proxy Server VNF Summary Chapter 6: Importance of Virtual Networks in Cloud and Telecom Networks Role of Virtual Networks in Cloud and 5G Core Networks Importance of MAC VLANs Importance of IP VLANs Docker IP VLAN L2 Mode IP VLAN L3 Mode Importance of Overlay Networks Docker Overlay Networks Experimenting with Docker Virtual Networks Experiment with MAC VLANs Experiment with IP VLANs Overlay Networks Using Docker Swarm Set Up and Experiment a Variety of VLANs over Docker Containers Quickly Set Up MAC VLANs and Test Using docker-compose Quickly Set Up IP VLAN L2 Mode and Test Using docker-compose Quickly Set Up IP VLAN L3 Mode and Test Using docker-compose Learning Setting Up Overlay Networks over Docker Containers Quickly Set Up Overlay Networks and Test over the Docker Swarm Practice Setting Up Network Slices over the Docker Swarm Setup Summary Chapter 7: Learning Docker Security for Experimenting with Cloud Security Importance of Cloud Security Know Docker Features and Ways for Security Docker Security Features Kernel-Level Access Control: Capabilities Docker and Capabilities System Calls-Level Access Control: Seccomp Docker and Seccomp Application-Level Access Control: AppArmors Docker and AppArmor Experimenting with Seccomp Profiles Understanding Seccomp Profile Syntax Define a Custom-Secure Computing Environment for Linux Containers Learn How to Override Secure Environments Using Capabilities Experimenting with AppArmor Profiles AppArmor Profile Syntax Quickly Set Up and Test an AppArmor Profile Application-Specific AppArmor Profiles Summary Chapter 8: Explore Scapy for Experimenting with Networking Environments Security Scapy for Exploring Network Security Getting Started with Scapy Usage Know Important Features of Scapy for Experimenting with Network Security Scapy’s Unique Features Learning Basics of Scapy Programming Construction of Network Protocol Stack Packets Generating Network Protocol Packets Quickly Sniffing and Inspecting of Network Traffic Sending and Receiving Packets Using Scapy Implement a Packet Sniffer Using Scapy Implement an ARP Sniffer Implement a UDP Sniffer Implement an ICMP Sniffer Implement a Packet Spoofer Using Scapy Implement an ARP Spoofer Implement a UDP Spoofer Implement an ICMP Spoofer Summary Chapter 9: Recreating and Analyzing Realistic Network Security Scenarios Understanding a Variety of Network Security Attacks Sniffing and Spoofing Network Traffic Attacks Denial-of-Service (DoS) Attacks Man-in-the-Middle (MiTM) Attacks Hands-On 1: Sniffing and Spoofing Network Traffic Sniffing and Spoofing UDP Traffic Sniffing and Spoofing ICMP Messages Hands-On 2: Sniffing and Spoofing Network Traffic Start with Sniffing TCP Session Segments Sniffing an Ongoing TCP Session and Spoofing TCP Segments Setting Up a Network and Simulating a Variety of Attacks Spoofing DNS Replies DoS Attack on a TCP Server Resetting Ongoing TCP Connections Summary