Future Networking Essentials: A Practical Guide for Exploring Cloud, Edge, and 5G core Networking Environments

About the Author .........................................................................................xiiiAbout the Technical Reviewer .........................................................................xvAcknowledgments ........................................................................................xviiIntroduction .................................................................................................xixPart I: Docker Basics and Networking ....1Chapter 1: Getting Started with Future Networking Environments ....3Understanding Future Networking Environments ....4Cloud Computing Platforms ....55 G ....19Docker Role in Future Networking Environments ....25Docker Architecture ....26Docker Way for Services Deployment ....28Docker Objects ....29Docker Image ....30Getting Started with Docker ....34Installation ....35Set Up Docker Registry ....35Know Building Process of Your Image ....36Let’s Create and Run Custom Images ....40Docker Basic Commands for Experimenting ....48Container Management ....49Volumes ....55Quick View of Docker Networking Commands ....59Summary ....60Chapter 2: Exploring Docker Networking Features ....63Docker Networking Services ....64Getting Started with Docker Networking ....64Docker Default Supporting Networks ....66Understanding Docker Host and Container Networking ....73Set Up a Custom Bridge Network ....73Set Up a Custom Network with ICC Disabled ....77Set Up a Custom Network with Internet Access Disabled ....80Docker IP Addressing and Naming Services ....84Docker IP Addressing Service ....85Docker DNS Services ....90Docker Host Routing and Iptables ....99Docker Routing ....99Docker and Iptables ....107Summary ....135Chapter 3: Setting Up Realistic Networking Scenarios ....137Docker Services for Setting Up Experimental Networks ....138docker-compose Basics ....138docker-compose for Deployment Tasks ....146docker-compose for Containers Orchestration ....155Exposing Container Services and Accessing Host Internet ....165Importance of Iptables for Accessing the Internet ....172Experimenting by Setting Up a LAN over Docker Containers ....174Experimenting with an Internetworking over Docker Containers ....179Summary ....186Part II: Network Function Virtualization and Virtual Networks Basics ....189Chapter 4: Virtualizing Network Functions in Cloud and Telecom Core Networks ....191Importance of Virtualizing Network Functions ....192Approaches for Deploying VNFs ....193Virtual Machines for Deploying VNFs ....193Containers for Deploying VNFs ....195Benefits of VNFs ....197Explore NFV Architecture Details ....199Introduction to NFV Architecture ....200NFV Key Use Cases ....204Role of NFV in 5G Core Networks ....207Service-Based Architecture Principles for 5G ....208Basic 5G Core Network Functions ....211Look into Sample 5G Core NFs Service Interfaces ....214Role of Docker in Realizing VNFs ....217Introduction to OpenAIR 5G Core Network ....217Experimenting with OPENAIR-CN-5G ....220Summary ....230Chapter 5: Experiment with VNFs over Docker Containers ....233Setting Up VNFs Using Docker ....234Build VNFs Using Docker Images ....234Set Up Suitable Volumes and Networks for VNFs Deployment ....236Automate VNFs Deployment and Testing Tasks ....238Experimenting with Virtual DHCP Server ....240Set Up and Test DHCP VNFs ....243Setting Up Reliable DHCP Service VNFs ....254Experimenting with Virtual DNS Server ....261Experiment with Local DNS Server ....264Experiment with Authoritative DNS Server ....271Experimenting with Virtual High-Availability Proxy Server ....282Basic Experiments with a Proxy Server VNF ....284Advanced Experiments with Proxy Server VNF ....291Summary ....295Chapter 6: Importance of Virtual Networks in Cloud and Telecom Networks ....297Role of Virtual Networks in Cloud and 5G Core Networks ....298Importance of MAC VLANs ....300Importance of IP VLANs ....303Docker IP VLAN L2 Mode ....303IP VLAN L3 Mode ....305Importance of Overlay Networks ....306Docker Overlay Networks ....308Experimenting with Docker Virtual Networks ....310Experiment with MAC VLANs ....314Experiment with IP VLANs ....321Overlay Networks Using Docker Swarm ....331Set Up and Experiment a Variety of VLANs over Docker Containers ....339Quickly Set Up MAC VLANs and Test Using docker-compose ....340Quickly Set Up IP VLAN L2 Mode and Test Using docker-compose ....346Quickly Set Up IP VLAN L3 Mode and Test Using docker-compose ....352Learning Setting Up Overlay Networks over Docker Containers ....360Quickly Set Up Overlay Networks and Test over the Docker Swarm ....360Practice Setting Up Network Slices over the Docker Swarm Setup ....375Summary ....384Part III: Cloud and Networking Security ....385Chapter 7: Learning Docker Security for Experimenting with Cloud Security ....387Importance of Cloud Security ....388Know Docker Features and Ways for Security ....391Docker Security Features ....394Experimenting with Seccomp Profiles ....404Understanding Seccomp Profile Syntax ....404Define a Custom-Secure Computing Environment for Linux Containers ....410Learn How to Override Secure Environments Using Capabilities ....421Experimenting with AppArmor Profiles ....429AppArmor Profile Syntax ....430Quickly Set Up and Test an AppArmor Profile ....435Application-Specific AppArmor Profiles ....441Summary ....452Chapter 8: Explore Scapy for Experimenting with Networking Environments Security ....453Scapy for Exploring Network Security ....454Getting Started with Scapy Usage ....455Know Important Features of Scapy for Experimenting withNetwork Security ....460Scapy’s Unique Features ....461Learning Basics of Scapy Programming ....464Construction of Network Protocol Stack Packets ....464Generating Network Protocol Packets Quickly ....472Sniffing and Inspecting of Network Traffic ....478Sending and Receiving Packets Using Scapy ....490Implement a Packet Sniffer Using Scapy ....495Implement an ARP Sniffer ....496Implement a UDP Sniffer ....498Implement an ICMP Sniffer ....502Implement a Packet Spoofer Using Scapy ....505Implement an ARP Spoofer ....506Implement a UDP Spoofer ....510Implement an ICMP Spoofer ....513Summary ....516Chapter 9: Recreating and Analyzing Realistic Network Security Scenarios ....517Understanding a Variety of Network Security Attacks ....518Sniffing and Spoofing Network Traffic Attacks ....519Denial-of-Service (DoS) Attacks ....523Man-in-the-Middle (MiTM) Attacks ....524Hands-On 1: Sniffing and Spoofing Network Traffic ....525Sniffing and Spoofing UDP Traffic ....526Sniffing and Spoofing ICMP Messages ....530Hands-On 2: Sniffing and Spoofing Network Traffic ....535Start with Sniffing TCP Session Segments ....536Sniffing an Ongoing TCP Session and Spoofing TCP Segments ....543Setting Up a Network and Simulating a Variety of Attacks ....548Spoofing DNS Replies ....549DoS Attack on a TCP Server ....556Resetting Ongoing TCP Connections ....560Summary ....565Index ....567