NDLI: A packet-in message filtering mechanism for protection of control plane in openflow networks

Please wait, while we are loading the content...

Future networking: reconfiguration heartland, challenge and revolution

WASP: a software-defined communication layer for hybrid wireless networks

DiFS: distributed flow scheduling for adaptive routing in hierarchical data center networks

Efficient and programmable ethernet switching with a NoC-enhanced FPGA

Integration and QoS of multicast traffic in a server-rack fabric with 640 100g ports

Caesar: a content router for high-speed forwarding on content names

Secure remote sensing and communication using digital pufs

Efficient software packet processing on heterogeneous and asymmetric hardware architectures

A scalable routing and admission control model in sdn-based networks

Superspreader detection system on NetFPGA platform

Programmable measurement architecture

ElastiCon: an elastic distributed sdn controller

Blender: upgrading tenant-based data center networking

Laying out interconnects on optical printed circuit boards

Marlin: a memory-based rack area network

Design patterns for tunable and efficient SSD-based indexes

Thermal-aware vacation and rate adaptation for network packet processing

A purely functional approach to packet processing

High performance multi-field packet classification using bucket filtering and GPU processing

On reducing false positives of a bloom filter in trie-based algorithms

A packet-in message filtering mechanism for protection of control plane in openflow networks

BCCC: an expandable network for data centers

CoRC: coordinated routing and caching for named data networking

Fine-grained power scaling algorithms for energy efficient routers

QoS aware dynamic power scaling algorithms for deploying energy efficient routers

Static power reduction in caches using deterministic naps

Faithful reproduction of network experiments

Network monitoring probe based on Xilinx Zynq

Secure and efficient key management protocol (SEKMP) for wireless sensor networks

Network service quality rank: a network selection algorithm for heterogeneous wireless networks

A digital PUF-based IP protection architecture for network embedded systems

Toward terabyte-scale caching with SSD in a named data networking router

PLWAH+: a bitmap index compressing scheme based on PLWAH

Spectral clustering based regular expression grouping

Impact of the end-system and affinities on the throughput of high-speed flows

Change-point detection method on 100 Gb/s ethernet interface

A packet-in message filtering mechanism for protection of control plane in openflow networks

Content Provider	ACM Digital Library
Author	Kotani, Daisuke Okabe, Yasuo
Abstract	Protecting control planes in networking hardware from high rate packets is a critical issue for networks under operation. One common approach for conventional networking hardware is to offload expensive functions onto hard-wired offload engines as ASICs. OpenFlow networks are expected to provide greater network control flexibility by an open interface to the packet-forwarding plane and by centralized controllers. In OpenFlow networks, the approach for conventional networking hardware alone is inadequate because it restricts a certain amount of flexibility that OpenFlow is expected to provide. Therefore, we need a generic control plane protection mechanism in OpenFlow switches as a last resort. In this paper, we propose a mechanism to filter out Packet-In messages without dropping important ones for network control. Our proposed mechanism works simply. Switches record the values of packet header fields before sending Packet-In messages, which are specified by the controllers in advance, and filter out packets that have the same values as the recorded ones. We implemented and evaluated the proposed mechanism on a prototype software switch, concluding that it dramatically reduces CPU loads in the switches and passes important Packet-In messages for network control.
Starting Page	29
Ending Page	40
Page Count	12
File Format	PDF
ISBN	9781450328395
DOI	10.1145/2658260.2658276
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-10-20
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Software-defined networking Network security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A Packet-In Message Filtering Mechanism for Protection of Control Plane in OpenFlow Switches

Security in Software Defined Networks: A Survey

SDSNM: A Software-Defined Security Networking Mechanism to Defend against DDoS Attacks

Campus Network using Software Defined Networking

Software-Defined Networking Using OpenFlow: Protocols, Applications and Architectural Design Choices

Layered control plane for reducing information sharing in OpenFlow networks

Blessing or curse? Revisiting security aspects of Software-Defined Networking

Design and test of a software defined hybrid network architecture

Security Analysis of Security Applications for Software Defined Networks

A packet-in message filtering mechanism for protection of control plane in openflow networks

Similar Documents

A Packet-In Message Filtering Mechanism for Protection of Control Plane in OpenFlow Switches

Security in Software Defined Networks: A Survey

SDSNM: A Software-Defined Security Networking Mechanism to Defend against DDoS Attacks

Campus Network using Software Defined Networking

Software-Defined Networking Using OpenFlow: Protocols, Applications and Architectural Design Choices

Layered control plane for reducing information sharing in OpenFlow networks

Blessing or curse? Revisiting security aspects of Software-Defined Networking

Design and test of a software defined hybrid network architecture

Security Analysis of Security Applications for Software Defined Networks

A packet-in message filtering mechanism for protection of control plane in openflow networks