Oftables: A distributed packet filter

This paper introduces an innovative packet filter application called “oftables”. The application provides a new network security enforcement opportunity using OpenFlow, with a lot of advantages which will be further explained. Even more, it covers all firewall requirements and evolve the whole concept concerning performance, management, granularity and reliability. Altogether it presents an major improvement regarding packet based network traffic filtering in future data-center, enterprise or campus networks.