Orange: Multi field openflow based range classifier

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

12 Scopus citations

Abstract

Configuring range based packet classification rules in network switches is crucial to all network core functionalities, such as firewalls and routing. However, OpenFlow, the leading management protocol for SDN switches, lacks the interface to configure range rules directly and only provides mask based rules, named flow entries. In this work we present, ORange, the first solution to multi dimensional range classification in OpenFlow. Our solution is based on paradigms used in state of the art non-OpenFlow classifiers and is designed in a modular fashion allowing future extensions and improvements. We consider switch space utilization as well as atomic updates functionality, and in the network context we provide flow consistency even if flows change their entrance point to the network during policy updates, a property we name cross-entrance consistency. Our scheme achieves remarkable results and is easy to deploy.

Original languageEnglish
Title of host publicationANCS 2015 - 11th 2015 ACM/IEEE Symposium on Architectures for Networking and Communications Systems
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages63-73
Number of pages11
ISBN (Electronic)9781467366335
DOIs
StatePublished - 18 May 2015
Event11th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2015 - Oakland, United States
Duration: 7 May 20158 May 2015

Publication series

NameANCS 2015 - 11th 2015 ACM/IEEE Symposium on Architectures for Networking and Communications Systems

Conference

Conference11th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2015
Country/TerritoryUnited States
CityOakland
Period7/05/158/05/15

Keywords

  • Consistency
  • Packet Classification
  • Software Defines Networks

Fingerprint

Dive into the research topics of 'Orange: Multi field openflow based range classifier'. Together they form a unique fingerprint.

Cite this