SD-WAN - architecture, functions and benefits

Segeč, Pavel; Moravčík, Marek; Uratmova, J.; Papán, Jozef; Yeremenko, Oleksandra

doi:10.1109/iceta51985.2020.9379257

Cited by 16 publications

(10 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The SD-WAN has revolutionized WAN services through application-driven networking to meet the demands of customers and services. Usually, this makes a close connection to the security and cloud computing for easy management of the resource regardless of the connectivity provider [85]. IoTSim-SDWAN [86] was developed as a simulation framework for interconnecting distributed data centers over SD-WAN for dynamic computation of the best and secure route for the network flow.…”

Section: ) Software Defined Wide Area Network (Sd-wan)mentioning

confidence: 99%

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

et al. 2022

View full text Add to dashboard Cite

Software-Defined networking (SDN) is a networking paradigm to enable dynamic, flexible, and programmatically efficient configuration of networks to revolutionize network control and management via separation of the control plane and data plane. The SDN technology has evolved in response to the demands from large data centers toward all types of networks, from IoT, enterprise, to ISP networks. On the one hand, SDN has provided solutions for high-demand resources, managing unpredictable data traffic patterns, and rapid network reconfiguration. It is further used to enhance network virtualization and security. On the other hand, SDN is still subject to many traditional network security threats. It also introduces new security vulnerabilities, primarily due to its logically centralized control plane infrastructure and functions. In this paper, we conduct a comprehensive survey on the core functionality of SDN from the perspective of secure communication infrastructure at different scales. A specific focus is put forward to address the challenges in securing SDN-based communications, with efforts taken up to address them. We further categorize the appropriate solutions for specific threats at each layer of SDN infrastructures. Lastly, security implications and future research trends are highlighted to provide insights for future research.INDEX TERMS Software defined networks, OpenFlow, security, threat, attack, vulnerability, network security.• Discussion of the future research directions and open challenges hindering resiliency and security in SDNenabled systems. Different from existing papers, this paper provides an up-to-date discussion about security issues in SDN environments. The presented taxonomy covers security threats ranging from topology discovery, network and app manipulation, flow diversion, teleportation & rootkits, controller placement, access control and authorization, to conventional networking threats. Further, in addition to reviewing existing security solutions and related implications, this paper provides key use cases of SDN technology implementation in smart communication systems. This layout is aimed to enable researchers to focus on the challenges that breach security in SDN communications. Ultimately, this work will provide further insights for future research in the SDN security domain.

show abstract

Section: ) Software Defined Wide Area Network (Sd-wan)mentioning

confidence: 99%

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

et al. 2022

View full text Add to dashboard Cite

show abstract

“…Another point to consider in the use of SDWAN technology is that it can work with several connection links, through which traffic is routed through a WAN network making use of load balancing [9], which allows to improve and manage the traffic of the network in the different links [10].…”

Section: Literature Reviewmentioning

confidence: 99%

Analysis about Benefits of Software-Defined Wide Area Network: A New Alternative for WAN Connectivity

Diaz¹,

Andrade–Arenas²,

Arellano³

et al. 2022

IJACSA

View full text Add to dashboard Cite

This article is based on conducting research to analyze the benefits of emerging trends in communications and networking technology, such as software-defined wide area networks. Using Waterfall as a methodology, the main objective is to carry out a technical comparison at the design and configuration level, creating a virtual environment that simulates traditional and SDWAN (Software-Defined Wide Area Network) infrastructures. The results obtained verify that the benefits of SDWAN maintain business continuity, anticipate situations in which the infrastructure can act intelligently, optimize connectivity while maintaining security, and provide improvements in the management of the entire infrastructure. People will be able to see the results obtained between both technologies and validate the benefits that SDWAN offers.

show abstract

“…Using this inequation, we express our network reliability R as the product of a metric of appliance reliability ( √ rr max ) and a metric of post-failure connectivity (C(G) − 1)(C max (G) − 1) . Inequation (22) establishes an upper bound for network reliability. Thereby, reducing the value of any of its factors produces a lower value of R.…”

Section: Appendix a Devising The Mechanisms To Guarantee Network Reli...mentioning

confidence: 99%

“…A Software-defined wide area network (SD-WAN) is a network technology that can benefit from heterogeneous networking to avoid fate-sharing during 0-day exploit failures. SD-WAN is a fast-emerging technology that brings a software-defined approach to orchestrating the Wide Area Network (WAN) networks [22], [23], [24], [25]. This technology creates an overlay network that abstracts network infrastructure in data centers, delivers global analytics, and performs centralized management and security.…”

Section: Introductionmentioning

confidence: 99%

Guaranteeing Network Reliability to 0-Day Exploits Using Cost-Effective Heterogeneous Node Migration

Prieto¹,

Figueroa²,

Pezoa³

2022

IEEE Access

View full text Add to dashboard Cite

Network reliability has become an important concern to network administrators and service providers, and is prominently considered in network design. Particularly, 0-day vulnerabilities are an increasing threat to software-based networking systems. When shared between node appliances, they can be exploited simultaneously and compromise large portions of the network. Moreover, it has been observed that the number of 0-day vulnerabilities discovered yearly in node appliances tends to increase over time. Thus, we can expect that the reliability to 0-day exploits of a network implemented with these appliances will also worsen over time. In this work, we treat network reliability to 0-day exploits as a service, where the network provider agrees to deliver a reliability-based level of service over time. We propose a network reliability metric based on network connectivity and discovered appliance vulnerabilities. We formulate a strategy to guarantee a reliability value over time, based on heterogeneous networking and periodically running cost-effective partial node migrations. We use numerical evaluations to test our methodology on two software-defined wide-area networks based on known backbone IP topologies. Our significant findings are the following: First, when the network reliability becomes worse than the service guarantee, it can be restored in most cases by combining appliance reallocation and node migration. Second, our evaluations show a direct relationship between a network reliability value and the cost incurred to guarantee it. Third, we noted that, when using our appliance-to-node allocation strategy to guarantee the same reliability on different networks, their post-failure connectivity depends on the underlying network topology.

show abstract

SD-WAN - architecture, functions and benefits

Cited by 16 publications

References 3 publications

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

SDN Security Review: Threat Taxonomy, Implications, and Open Challenges

Analysis about Benefits of Software-Defined Wide Area Network: A New Alternative for WAN Connectivity

Guaranteeing Network Reliability to 0-Day Exploits Using Cost-Effective Heterogeneous Node Migration

Contact Info

Product

Resources

About