OpenFunction: An Extensible Data Plane Abstraction Protocol for Platform-Independent Software-Defined Middleboxes

Tian, Chen; Munir, Ali; Liu, Alex X.; Yang, Jie; Zhao, Yangming

doi:10.1109/tnet.2018.2829882

Cited by 10 publications

(1 citation statement)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Other approaches consider that providing a human-like interface is critical for the evolution of SDN. 4 In this regard, StreaMon 12 is an XML-based abstraction for monitoring in SDN, while OpenFunction 13 is an abstraction for SDN middleboxes. Two recently published pre-prints present SeaNet 14 and Lucid, 15 focused on high-level abstractions for control and data planes, respectively.…”

Section: Related Workmentioning

confidence: 99%

Towards visual programming abstractions in Software‐Defined Networking

Rojas

Zaballa

Noci

2022

Internet Technology Letters

View full text Add to dashboard Cite

Since Software‐Defined Networking (SDN) emerged, the research community and industry have developed numerous projects and fostered novel use cases. However, engineers now need to learn how to program the control and data planes, which might slow down technology acceptance. To accelerate it, visual programming abstractions facilitate the incorporation of SDN technologies and assist in creating new applications. So far, very little effort has been made in this field. This letter presents an early‐stage SDN visual abstraction initiative based on the Scratch/Blockly programming framework, initially aimed at kids. The objective is to illustrate how this work could be extended to provide value‐added resources for network programming.

show abstract

Section: Related Workmentioning

confidence: 99%

Towards visual programming abstractions in Software‐Defined Networking

Rojas

Zaballa

Noci

2022

Internet Technology Letters

View full text Add to dashboard Cite

show abstract

Packet processing and data plane program verification: A survey with tools, techniques, and challenges

Akarte

Yadav

2023

Int J Communication

View full text Add to dashboard Cite

SummaryIn today's era of fast‐growing network‐enabled devices combined, it increases the complexity of the network. This leads to the massive data packet transfer on the network via the data plane in a software‐defined networking environment. The programmable packet processing in a data plane may introduce indirect bugs that are hard to catch manually. To avoid catastrophic after‐effects, such programs need to be formally verified. Researchers have proposed various tools and techniques to verify the data plane program using the P4 language. Most of the researchers have used the concept of assertion and symbolic execution to provide P4 verification approaches. As symbolic execution does not scale up well, researchers have proposed different techniques, which include the use of constraints, slicing of the program, parallelization, data plane verification, program verification, and so on. The tools have experimented with different choices for compiler optimization. In this article, we perform a pervasive survey on various verification tools and techniques based on data plane programming using domain‐specific language like P4 from the inception of the concept. We have compared the packet processing tools developed as per the requirement of time with their ideology and the impact of change.

show abstract

4MIDable: Flexible Network Offloading For Security VNFs

et al. 2023

View full text Add to dashboard Cite

The ever-growing volume of network traffic and widening adoption of Internet protocols to underpin common communication processes augments the importance of network security. In order to enforce network security policies, network managers adopt a widening set of middleboxes and network appliances to improve traffic monitoring and processing capabilities. The resource requirements to support network security appliances are constantly increasing, making efficiency of these systems an essential aspect. The move toward Software-Defined Networking and programmable data planes offers a mean to offload traffic processing functionalities to within the network itself. To this end, we present the 4MIDable framework: a platform that facilitates the integration of existing middleboxes and monitoring appliances with an SDN (P4) network infrastructure. We also present P4Protect, a 4MIDable agent that protects the network from control plane DoS attacks with negligible impact on control plane latency, and P4ID (P4-Enhanced Intrusion Detection), a 4MIDable agent that offers stateful processing and feedback to unmodified Intrusion Detection System middleboxes and reduces traffic processing by over 80% without affecting threat detection rates.

show abstract

OpenFunction: An Extensible Data Plane Abstraction Protocol for Platform-Independent Software-Defined Middleboxes

Cited by 10 publications

References 25 publications

Towards visual programming abstractions in Software‐Defined Networking

Towards visual programming abstractions in Software‐Defined Networking

Packet processing and data plane program verification: A survey with tools, techniques, and challenges

4MIDable: Flexible Network Offloading For Security VNFs

Contact Info

Product

Resources

About