Resilient Network Architecture with eBPF-based Programmability and Centralised Orchestration

In traditional computer network architectures, scalability can be slow and costly, and lack inherent support for resilience increasingly required by modern use-cases applications. The Software-Defined Networking (SDN) architecture provides a centralised controller approach to enable flexible network control resulting in better link utilization. However, this is currently only supported through OpenFlow features, which provide only limited programmability and real-time packet processing.In this work, we propose a resilient network architecture that extends the conventional SDN architecture by using extended Berkley Packet Filter (eBPF) to implement data plane programmability on network devices, converting them into centrally controlled programmable nodes. Such an architecture enables re-programmability, ensuring longevity into future 6G networks and beyond. We verify the architecture using an experimental use case of Distributed Denial of Service (DDoS) mitigation where eBPF programs are automatically installed on affected network devices to mitigate the adverse effects and contain the attack spread. The results show high efficiency of the architecture, reducing the attack impact on throughput up to 96% depending on the mitigation location.