Konferenzbeitrag
OFFWall: A Static OpenFlow-Based Firewall Bypass
Lade...
Volltext URI
Dokumententyp
Text/Conference Paper
Datum
2018
Zeitschriftentitel
ISSN der Zeitschrift
Bandtitel
Quelle
11. DFN-Forum Kommunikationstechnologien
Sicherheit
Verlag
Gesellschaft für Informatik e.V.
Zusammenfassung
Stateful firewalls are becoming bottlenecks for high-speed communication networks. To counteract, trusted network flows may statically bypass the firewall. As access control lists (ACLs) of moderately priced switches do not allow port selection, they cannot be used for implementation of a static firewall bypass. In this work, we present a software-defined networking (SDN) based solution for a static firewall bypass based on moderately priced commodity hardware. We propose OFFWall, an OpenFlow (OF) controller that translates a whitelist of trusted flows into flow rules and installs them on an SDN switch to implement the firewall bypass.