Implementation of SDN Stateful Firewall on Data Plane using Open vSwitch
Pakapol Krongbaramee, Yuthapong Somchit
Abstract
Pakapol Krongbaramee, Yuthapong Somchit
Abstract
A Software Defined Networking (SDN) has been deployed in the current network system. Together with Network Virtualization (NVF), it makes the network become more flexible. The firewall can be implemented in SDN. However, with the limitation of earlier version of OpenFlow protocol used in SDN, the stateful firewall could not be implemented with the SDN standard. The development of OpenFlow enables some features that can be used for implementing the stateful firewall. In this work, we implement the stateful firewall in the SDN switch on the data plane. The Open vSwitch is used. We also evaluate the performance of the SDN stateful firewall. The results show that our SDN stateful firewall can work correctly with small overhead increased in SDN switches.
OpenAlex reports 24 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
A Software Defined Networking (SDN) has been deployed in the current network system. Together with Network Virtualization (NVF), it makes the network become more flexible. The firewall can be implemented in SDN. However, with the limitation of earlier version of OpenFlow protocol used in SDN, the stateful firewall could not be implemented with the SDN standard. The development of OpenFlow enables some features that can be used for implementing the stateful firewall. In this work, we implement the stateful firewall in the SDN switch on the data plane. The Open vSwitch is used. We also evaluate the performance of the SDN stateful firewall. The results show that our SDN stateful firewall can work correctly with small overhead increased in SDN switches.
Key concepts: Stateful firewall, OpenFlow, Context-based access control, Firewall (physics), Application firewall, Computer science, Computer network, Forwarding plane