Paper Info
Title
FAS: Using FPGA to Accelerate and Secure SDN Software Switches.
Abstract
Software-Defined Networking (SDN) promises the vision of more flexible and manageable networks but requires certain level of programmability in the data plane to accommodate different forwarding abstractions. SDN software switches running on commodity multicore platforms are programmable and are with low deployment cost. However, the performance of SDN software switches is not satisfactory due to the complex forwarding operations on packets. Moreover, this may hinder the performance of real-time security on software switch. In this paper, we analyze the forwarding procedure and identify the performance bottleneck of SDN software switches. An FPGA-based mechanism for accelerating and securing SDN switches, named FAS (FPGA-Accelerated SDN software switch), is proposed to take advantage of the reconfigurability and high-performance advantages of FPGA. FAS improves the performance as well as the capacity against malicious traffic attacks of SDN software switches by offloading some functional modules. We validate FAS on an FPGA-based network processing platform. Experiment results demonstrate that the forwarding rate of FAS can be 44% higher than the original SDN software switch. In addition, FAS provides new opportunity to enhance the security of SDN software switches by allowing the deployment of bump-in-the-wire security modules (such as packet detectors and filters) in FPGA.
Year
DOI
Venue
2018
10.1155/2018/5650205
SECURITY AND COMMUNICATION NETWORKS
Field
DocType
Volume
Forwarding plane,Bottleneck,Software deployment,Reconfigurability,Computer science,Network packet,Field-programmable gate array,Computer network,Software,Multi-core processor,Embedded system
Journal
2018
ISSN
Citations 
PageRank 
1939-0114
0
0.34
References 
Authors
3
3
Name
Order
Citations
PageRank
Wenwen Fu112.38
Tao Li2387.33
Zhi-gang Sun34114.15