An User-Driven Active Way to Push ACL in Software-Defined Networking

• Published in: Parallel and Distributed Computing, Applications and Technologies Vol. 13148; pp. 113 - 120
• Main Authors: Yu, Haisheng, Liu, Dong, Wang, Wenyong, Li, Keqiu, Zou, Sai, Liu, Zhaobin, Liu, Yan
• Format: Book Chapter
• Language: English
• Published: Switzerland Springer International Publishing AG 2022; Springer International Publishing
• Series: Lecture Notes in Computer Science
• Subjects: Access Control List (ACL); Floodlight; ONOS; Security; Software-Defined Networking (SDN)
• ISBN: 9783030967710; 3030967719
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/978-3-030-96772-7_11

Compared with the traditional network, Software-Defined Networking (SDN) provides a more convenient network paradigm to build Access Control List (ACL) application. There has been a few studies focusing on ACL application in SDN up to now, but most of the existing work adopts a reactive way to enforce ACL, resulting in new ACL update can not take effect immediately. In this paper, we propose CLACK, an approach for user-driven centralized ACL in SDN. We implement CLACK on both Floodlight and ONOS controller. The experimental results show that CLACK has a better performance than the existing Floodlight firewall application.