Open PONAlyzer: A Software-Defined Analysis and Testing Solution for Enhanced Security and Resilience in Passive Optical Networks

The increasing demand for high-bandwidth, low-latency Internet access is driving the widespread adoption of cost-efficient Passive Optical Networks (PONs). However, the passive nature of PONs necessitate complex subscriber device management protocols, and their shared fiber architecture presents potential disruptions from device failures, misconfigurations, or malicious attacks. To maintain service quality and customer satisfaction, network operators require effective PON monitoring solutions. Yet, existing commercial hardware-based analyzers are prohibitively expensive, challenging to deploy in live networks, and unsuitable for nationwide deployments. This paper introduces PONAlyzer, a novel, open-source software-based PON analyzer and security dashboard, which we make available to the community. By leveraging existing Software Defined Networking (SDN) interfaces of in-field PON-hardware, i.e. eliminating the need for additional analyzer equipment, PONAlyzer enables the capture and analysis of ONU Management and Control Interface (OMCI) messages, and supports OMCI message injection for advanced security testing and troubleshooting.