Packet Traceability in the OpenStack Cloud Environment
Source abstract
Abstract
OpenStack is a popular open-source cloud platform that orchestrates virtualized compute, storage, and networking resources. In such virtualized environments, packet traceability refers to the ability to track the path and transformations of network packets as they traverse virtual switches, routers, and interfaces. This paper presents a comprehensive overview of packet traceability in OpenStack cloud environments. We provide an introduction to the OpenStack architecture with a focus on the Networking component (Neutron) and discuss how packets flow through virtual networking elements. We examine the routing and interface mechanisms that enable communication within and across nodes, and compare single-node versus multi-node OpenStack deployments from a packet tracing perspective. Furthermore, we survey tools and techniques for packet tracing (such as monitoring interfaces, using tcpdump, and Open vSwitch tracing), and highlight the challenges faced (multi-tenancy, overlay networks, etc.) in tracing packets. We offer recommendations for improving traceability, including leveraging built-in OpenStack features and advanced kernel-level tracing technologies. Our goal is to aid cloud administrators and researchers in understanding and improving network packet observability in OpenStack clouds, thereby enhancing troubleshooting and security analysis capabilities.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Software-Defined Networks and 5G · Cloud Computing and Resource Management · Network Traffic and Congestion Control
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of InfoComm Networks, Faculty of Management Science and Informatics, University of Zilina, 010 26 Zilina, Slovakia
Funding
EU NextGenerationEU
References (30)
Show source-provided references
1. OpenStack Foundation (2025, November 18). Networking Architecture. Available online: https://docs.openstack.org/security-guide/networking/architecture.html.
2. OpenStack Foundation (2025, August 18). Scenario: Classic with Open vSwitch. Available online: https://docs.openstack.org/liberty/networking-guide/scenario-classic-ovs.html.
3. Software-Defined Networking: A Comprehensive Survey10.1109/JPROC.2014.2371999 ↗
4. OpenStack Foundation (2025, August 18). Networking Architecture. Available online: https://docs.openstack.org/newton/admin-guide/networking-arch.html.
5. Software defined networks: A survey10.1016/j.jnca.2016.03.016 ↗
6. Callegati, F., Cerroni, W., Contoli, C., and Santandrea, G. (2014, January 8–10). Performance of Network Virtualization in cloud computing infrastructures: The OpenStack case. Proceedings of the 2014 IEEE 3rd International Conference on Cloud Networking (CloudNet), Luxemburg.10.1109/CloudNet.2014.6968981 ↗
7. Saghir, A., and Masood, T. (2019, January 21–22). Performance Evaluation of OpenStack Networking Technologies. Proceedings of the 2019 International Conference on Engineering and Emerging Technologies (ICEET), Lahore, Pakistan.10.1109/CEET1.2019.8711829 ↗
8. Tu, W., Wei, Y.H., Antichi, G., and Pfaff, B. (2021, January 23–27). Revisiting the Open vSwitch Dataplane Ten Years Later. Proceedings of the 2021 ACM SIGCOMM Conference (SIGCOMM ’21), Virtual.10.1145/3452296.3472914 ↗
9. Donatti, A.W., Koslovski, G.P., Pillon, M.A., and Miers, C.C. (2020, January 21–26). Network Traffic Characterization in the Control and Management Infrastructure of Cloud Providers. Proceedings of the SCITEPRESS—ICT Systems & Sustainability, Bristol, UK.
10. Colca-Mendoza, J., and Auccahuasi, W. (2024, January 23–25). Automated Implementation of a TCPDUMP Solution for Network Traffic Analysis, Strengthening Digital Security in Cyberspace. Proceedings of the 2024 2nd International Conference on Self Sustainable Artificial Intelligence Systems (ICSSAS), Erode, India.10.1109/ICSSAS64001.2024.10760421 ↗
11. Goyal, P., and Goyal, A. (2017, January 16–17). Comparative study of two most popular packet sniffing tools-Tcpdump and Wireshark. Proceedings of the 2017 9th International Conference on Computational Intelligence and Communication Networks (CICN), Girne, Northern Cyprus.10.1109/CICN.2017.8319360 ↗
12. Chen, L., Xian, M., Liu, J., and Wang, H. (2020, January 21–23). Intrusion Detection System in Cloud Computing Environment. Proceedings of the 2020 International Conference on Computer Communication and Network Security (CCNS), Xi’an, China.10.1109/CCNS50731.2020.00037 ↗
13. Gulenko, A., Wallschläger, M., and Kao, O. (2018, January 22–24). A Practical Implementation of In-Band Network Telemetry in Open vSwitch. Proceedings of the 2018 IEEE 7th International Conference on Cloud Networking (CloudNet), Tokyo, Japan.10.1109/CloudNet.2018.8549431 ↗
14. Implementation of a real-time network traffic monitoring service with network functions virtualization10.1016/j.future.2018.08.050 ↗
15. Hu, Z., Sun, S., Yin, P., Xie, T., Li, Y., and Ren, Q. (2023, January 18–22). Building A Layer-2 Hybrid Cloud. Proceedings of the 2023 IEEE 18th Conference on Industrial Electronics and Applications (ICIEA), Ningbo, China.10.1109/ICIEA58696.2023.10241908 ↗
16. Tsai, M.H., Liang, H.T., Wang, Y.H., and Chung, W.C. (2020, January 17–19). Enhanced OpenStack Cloud for Network Function Virtualization. Proceedings of the 2020 International Computer Symposium (ICS), Tainan, Taiwan.10.1109/ICS51289.2020.00045 ↗
17. Callegati, F., Cerroni, W., Contoli, C., and Santandrea, G. (2014, January 8–12). Performance of multi-tenant virtual networks in OpenStack-based cloud infrastructures. Proceedings of the 2014 IEEE Globecom Workshops (GC Wkshps), Austin, TX, USA.10.1109/GLOCOMW.2014.7063390 ↗
18. Stringer, J. (2021). Open vSwitch without Open vSwitch: The API and its Users. NetDevConf Papers, VMware.
19. Srivastava, P.R., and Saurav, S. (2015, January 19–21). Networking agent for overlay L2 routing and overlay to underlay external networks L3 routing using OpenFlow and Open vSwitch. Proceedings of the 2015 17th Asia-Pacific Network Operations and Management Symposium (APNOMS), Busan, Republic of Korea.10.1109/APNOMS.2015.7275442 ↗
20. Open vSwitch Project (2023). Tracing packets inside Open vSwitch. Open vSwitch Documentation, Open vSwitch Project.
21. Network Traffic Characterization in the Control Network of OpenStack based on Virtual Machines State Changes
22. Pfaff, B., Pettit, J., Koponen, T., Jackson, E.J., Zhou, A., Rajahalme, J., Gross, J., Wang, A., Stringer, J., and Shelar, P. (2015, January 2–4). The design and implementation of open vSwitch. Proceedings of the 12th USENIX Conference on Networked Systems Design and Implementation (NSDI’15), Oakland, CA, USA.
23. Usman, M., Rathore, M.A., and Kim, J. (2019). SmartX multi-view visibility framework with flow-centric visibility for SDN-enabled multisite cloud playground. Appl. Sci., 9.10.3390/app9102045 ↗
24. Pluribus Networks (2025, October 04). OpenStack ML2 Plugin Deployment Guide. Available online: https://techdocassets.pluribusnetworks.com/netvisor/nv1_611/openstack/UnderstandingtheML2Plugin.html.
25. OpenStack Foundation (2025, September 14). Modular Layer 2 (ML2) Plug-in—OpenStack Neutron Documentation. Available online: https://docs.openstack.org/neutron/latest/admin/config-ml2.html.
26. Red Hat Inc (2025, September 18). Networking Guide: Modular Layer 2 (ML2) Networking. Available online: https://docs.redhat.com/de/documentation/red_hat_openstack_platform/16.0/html-single/networking_guide/index.html.
27. He, M., Alba, A.M., Mansour, E., and Kellerer, W. (2019, January 26–29). Evaluating the Control and Management Traffic in OpenStack Cloud with SDN. Proceedings of the 2019 IEEE 20th International Conference on High Performance Switching and Routing (HPSR), Xi’an, China.10.1109/HPSR.2019.8807989 ↗
28. Rao, A. (2025, September 06). Tap-as-a-Service: Enabling Traffic Monitoring in OpenStack Clouds. Available online: https://blog.gigamon.com/2015/10/26/tap-as-a-service-enabling-traffic-monitoring-in-openstack-clouds-2/.
29. Oracle (2015). Three-Node Architecture Overview—Installing and Configuring OpenStack in Oracle Solaris 11.2. Oracle Documentation, Oracle.
30. Red Hat Team (2025, September 29). Use Skydive for OpenStack Network Analysis. Available online: https://docs.redhat.com/en/documentation/red_hat_openstack_platform/14/html-single/use_skydive_for_openstack_network_analysis/index.