Detail publikace

High Level Policies in SDN

POLČÁK, L. CALDAROLA, L. CUDA, D. DONDERO, M. FICARA, D. FRANKOVÁ, B. HOLKOVIČ, M. CHOUKIR, A. MUCCIFORA, R. TRIFILO, A.

Originální název

High Level Policies in SDN

Typ

článek ve sborníku ve WoS nebo Scopus

Jazyk

angličtina

Originální abstrakt

Policies for network traffic handling define packet routes through networks, enforce required quality of service, and protect networks from security threats. When expressing a policy, one needs to characterise the traffic to which the policy applies by traffic identifiers. Low level traffic identifiers, such as IP addresses and port numbers, are available in each packet. Indeed, low level traffic identifiers are perfect for data plane routing and switching. However, high level traffic identifiers, such as user name and application name, are better for the readability and clarity of a policy. In this paper, we extend software defined networks with high level traffic identifiers. We propose to add additional interface to SDN controllers for collecting traffic meta data and high level traffic identifiers. The controller maintains a database that maps high level traffic identifiers to a set of flows defined by low level traffic identifiers. SDN applications can apply policies based on both high level and low level traffic identifiers. We leave the southbound protocols intact. This paper provides two examples of High Level SDN paradigms - Application-Aware Networks and Identity-Aware Networks. The first paradigm enables policies depending on application names and characteristics. The latter allows policies based on user names and their roles.

Klíčová slova

Application-aware network; Data planes; High level policies; IP addresss; Network traffic; Packet routes; Port numbers; Security threats

Autoři

POLČÁK, L.; CALDAROLA, L.; CUDA, D.; DONDERO, M.; FICARA, D.; FRANKOVÁ, B.; HOLKOVIČ, M.; CHOUKIR, A.; MUCCIFORA, R.; TRIFILO, A.

Vydáno

1. 3. 2016

Nakladatel

Springer International Publishing

Místo

Berlin

ISBN

978-3-319-30221-8

Kniha

Communications in Computer and Information Science

ISSN

1865-0929

Periodikum

Communications in Computer and Information Science

Ročník

585

Číslo

1

Stát

Spolková republika Německo

Strany od

39

Strany do

57

Strany počet

19

URL

http://link.springer.com/chapter/10.1007%2F978-3-319-30222-5_2

BibTex

@inproceedings{BUT130913,
  author="Libor {Polčák} and Leo {Caldarola} and Davide {Cuda} and Marco {Dondero} and Domenico {Ficara} and Barbora {Franková} and Martin {Holkovič} and Amine {Choukir} and Roberto {Muccifora} and Antonio {Trifilo}",
  title="High Level Policies in SDN",
  booktitle="Communications in Computer and Information Science",
  year="2016",
  journal="Communications in Computer and Information Science",
  volume="585",
  number="1",
  pages="39--57",
  publisher="Springer International Publishing",
  address="Berlin",
  doi="10.1007/978-3-319-30222-5\{_}2",
  isbn="978-3-319-30221-8",
  issn="1865-0929",
  url="http://link.springer.com/chapter/10.1007%2F978-3-319-30222-5_2"
}