2018•Unpublished venueRequires access

Implementation of SDN Stateful Firewall on Data Plane using Open vSwitch

Pakapol Krongbaramee, Yuthapong Somchit

Open publisher page 24 citations

Abstract

A Software Defined Networking (SDN) has been deployed in the current network system. Together with Network Virtualization (NVF), it makes the network become more flexible. The firewall can be implemented in SDN. However, with the limitation of earlier version of OpenFlow protocol used in SDN, the stateful firewall could not be implemented with the SDN standard. The development of OpenFlow enables some features that can be used for implementing the stateful firewall. In this work, we implement the stateful firewall in the SDN switch on the data plane. The Open vSwitch is used. We also evaluate the performance of the SDN stateful firewall. The results show that our SDN stateful firewall can work correctly with small overhead increased in SDN switches.

About this research paper

What this paper is about

A Software Defined Networking (SDN) has been deployed in the current network system. Together with Network Virtualization (NVF), it makes the network become more flexible. The firewall can be implemented in SDN. However, with the limitation of earlier version of OpenFlow protocol used in SDN, the stateful firewall could not be implemented with the SDN standard. The development of OpenFlow enables some features that can be used for implementing the stateful firewall. In this work, we implement the stateful firewall in the SDN switch on the data plane. The Open vSwitch is used. We also evaluate the performance of the SDN stateful firewall. The results show that our SDN stateful firewall can work correctly with small overhead increased in SDN switches.

Why it matters

OpenAlex reports 24 citations for this work. Citation counts describe recorded attention and do not establish research quality.

Key contribution

A contribution statement is not available in the OpenAlex record.

Method / approach

Method details are not available in the OpenAlex metadata.

Main findings

Findings are not separately available in the OpenAlex metadata.

Limitations

Limitations are not available in the OpenAlex metadata.

Applications

Application details are not available in the OpenAlex metadata.

Available abstract

A Software Defined Networking (SDN) has been deployed in the current network system. Together with Network Virtualization (NVF), it makes the network become more flexible. The firewall can be implemented in SDN. However, with the limitation of earlier version of OpenFlow protocol used in SDN, the stateful firewall could not be implemented with the SDN standard. The development of OpenFlow enables some features that can be used for implementing the stateful firewall. In this work, we implement the stateful firewall in the SDN switch on the data plane. The Open vSwitch is used. We also evaluate the performance of the SDN stateful firewall. The results show that our SDN stateful firewall can work correctly with small overhead increased in SDN switches.

Key concepts: Stateful firewall, OpenFlow, Context-based access control, Firewall (physics), Application firewall, Computer science, Computer network, Forwarding plane

Related papers

Back to paper searchBrowse research topicsOriginal source
Implementation of SDN Stateful Firewall on Data Plane using Open vSwitch — Research Paper | ScholarLens