Abstract:SDN improves the flexibility and programmability of the network. However, malicious attacks caused by potential vulnerabilities and backdoors can easily lead to data and rule tampering in the network. To address this problem, this paper proposes an endogenous secure SDN network framework based on multipath resilient routing (MRR). MRR includes multipath comparing forwarding, multipath weighted forwarding, and multipath random forwarding. The framework ensures the correctness of flow rules and data content by dynamically comparing the consistency of multi-heterogeneous path data within a certain period, and multipath can also achieve load balance by weighted forwarding. In the MRR framework, we also present an intermediate information feedback mechanism based on encryption authentication and give a mathematical model to evaluate it. This mechanism can accurately identify and dynamically repair malicious switches. Simulation evaluation and prototype system test show that this framework can achieve high accuracy of flow transmission and high availability of system. At the same time, multipath comparing forwarding will bring some performance costs such as delay, bandwidth, and jitter at initial and attacking time. However, when the appropriate forwarding mode and reasonable period T are selected, the proportion of delay introduced by comparing and ruling can be less than 10%, and the average bandwidth of mixed forwarding is almost the same as traditional multipaths', such as we can guarantee 25% multipath comparing forwarding when the bandwidth requirement is 250 M in prototype system.

Technique Report: Near-Optimal Routing Protection for SDN Networks Using Distributed Markov Approximation

A Multipath Resource Updating Approach for Distributed Controllers in Software-Defined Network

Near-Optimal Routing Protection for In-Band Software-Defined Heterogeneous Networks

Achieving Real-Time Quality of Service with Software Defined Networking

Routing Optimization with Path Cardinality Constraints in a Hybrid SDN

SDN candidate and protection path selection for link failure protection in hybrid SDNs

Single Node Failure Routing Protection Algorithm Based on Hybrid Software Defined Networks

Achieving Near-Optimal Traffic Engineering Using a Distributed Algorithm in Hybrid SDN

Multipath Resilient Routing for Endogenous Secure Software Defined Networks.

Network coding-based resilient routing for maintaining data security and availability in Software-Defined Networks

Reducing Controller Response Time with Hybrid Routing in Software Defined Networks

Control Link Load Balancing and Low Delay Route Deployment for Software Defined Networks.

Optimize Routing in Hybrid SDN Network with Changing Traffic.

Link Fault Protection and Traffic Engineering in Hybrid SDN Networks

Multi-path Allocation Scheduling Optimization Algorithm for Network Data Traffic Based on SDN Architecture

Towards Controller Placement for Robust Software-Defined Networks

A Method of DDoS Attack Detection and Mitigation for the Comprehensive Coordinated Protection of SDN Controllers

Real-time Update with Joint Optimization of Route Selection and Update Scheduling for SDNs

A Software Defined Network Routing in Wireless Multihop Network

Efficient Recovery Path Computation for Fast Reroute in Large-Scale Software-Defined Networks

Load-Balancing Software-Defined Networking Through Hybrid Routing