Automated Placement of In-Network ACL Rules - Inria - Institut national de recherche en sciences et technologies du numérique
Conference Papers Year : 2023

Automated Placement of In-Network ACL Rules

Abstract

Automatically deploying distributed Access Control Lists (ACLs) in a software-defined network can ensure their internal services and hosts connectivity, security and reliability. ACLs are often deployed in a switch using Ternary Content-Addressable Memory (TCAM). Since TCAM memory is often too limited to store a large ACL, one has to split the lists and distribute the parts on several switches in such a way that every packet travelling from a source to a destination undergoes the required match-action rules. In this paper, we develop and compare three algorithms based on graph theory and Reinforcement Learning (RL) techniques to automatically distribute ACLs across networks switches, while minimizing their TCAM memory occupancy. We compare the three algorithms on several network topologies to evaluate their efficiency in terms of memory occupancy.
Fichier principal
Vignette du fichier
netadata_v2.pdf (192.75 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-04236850 , version 1 (11-10-2023)

Licence

Identifiers

Cite

Wafik Zahwa, Abdelkader Lahmadi, Michael Rusinowitch, Mondher Ayadi. Automated Placement of In-Network ACL Rules. 2023 IEEE 9th International Conference on Network Softwarization (NetSoft), Jun 2023, Madrid, Spain. pp.486-491, ⟨10.1109/NetSoft57336.2023.10175436⟩. ⟨hal-04236850⟩
61 View
70 Download

Altmetric

Share

More