SummarySoftware-defined network (SDN) is constructed by decoupling the control and data plane from the forwarding devices. The control plane operations are managed by centralized or distributed controllers, and the data plane operation is managed by respective forwarding devices. SDN provides an easy and efficient management solutions for software-programmed consolidated middlebox in virtual machines. Additionally, SDN with centralized controller faces complications like scalability, network bottle neck, and single point failure. In this study, a stateful inspection firewall acts as a middlebox in distributed SDN-controlled network. The controller is programmed with a failure detection and recovery mechanism to provide reliability and redundancy and enhance the overall performance of the network. The objective of stateful firewall on SDN architecture is to secure the network by monitoring the current connections and maintain its state information until the connection is active. In this paper, the performance of firewall-enabled SDN with centralized and distributed controllers are measured, compared, and analyzed. The experiments are done using POX controller, and the results are verified by Mininet network emulation tool. The results show that the stateful firewall-enabled SDN with distributed controller network improves the security, reliability, availability, and overall performance of the network. In the proposed SDN, average network throughput is improved by 43%, average network delay is reduced by 4%, average channel utilization is increased by 40%, average network overhead is reduced by 26%, and average network response time is reduced by 23%.
KEYWORDSdistributed controller, middlebox, OpenFlow, SDN, software-defined network, stateful firewall
| INTRODUCTIONSoftware-defined network (SDN) is a promising network model that is utilized to build an adaptable and less expensive alternative for an existing network. SDN decouples the control plane and data plane from the forwarding device. The decoupled control planes from all the forwarding devices are centralized by the SDN controller. A single centralized controller network in SDN has issues like network bottle neck, which cause a single point network failure, less reliability, and scalability. Network bottle neck problem occurs in single centralized SDN controller when there is a rapid increase of ingress traffic. To solve the above-mentioned issue, distributed controllers are configured to handle ingress and egress