Loading [a11y]/accessibility-menu.js
Efficient Distribution of Security Policy Filtering Rules in Software Defined Networks | IEEE Conference Publication | IEEE Xplore

Efficient Distribution of Security Policy Filtering Rules in Software Defined Networks


Abstract:

Software Defined Networks administrators can specify and smoothly deploy abstract network-wide policies, and then the controller acting as a central authority implements ...Show More

Abstract:

Software Defined Networks administrators can specify and smoothly deploy abstract network-wide policies, and then the controller acting as a central authority implements them in the flow tables of the network switches. The rule sets of these policies are specified in the forwarding tables, which are usually accessed using very expensive and power-hungry ternary content-addressable memory (TCAM). Consequently, a given table can only contain a limited number of rules. However, various applications need large rule sets to perform filtering on diverse flows. In this paper, we propose several algorithms for decomposing and distributing a rule set on network switches of limited flow tables size, while preserving the network policy semantics. Through experiments on several rule sets with single and multiple dimensions, we evaluate and analyse the performance of our rule placement techniques. Our results show that our proposals are efficient in practice.
Date of Conference: 24-27 November 2020
Date Added to IEEE Xplore: 05 January 2021
ISBN Information:

ISSN Information:

Conference Location: Cambridge, MA, USA

References

References is not available for this document.