Broadband Communications, Networks, and Systems. 9th International EAI Conference, Broadnets 2018, Faro, Portugal, September 19–20, 2018, Proceedings

Research Article

Multi-tenant Isolation in Software Defined Networks

Download
37 downloads
  • @INPROCEEDINGS{10.1007/978-3-030-05195-2_36,
        author={Sarah Irum and Patrick Luedke and Klaus Warnke and Gerrit Schulte},
        title={Multi-tenant Isolation in Software Defined Networks},
        proceedings={Broadband Communications, Networks, and Systems. 9th International EAI Conference, Broadnets 2018, Faro, Portugal, September 19--20, 2018, Proceedings},
        proceedings_a={BROADNETS},
        year={2019},
        month={1},
        keywords={Software defined network VxLAN Network function virtualization OpenFlow},
        doi={10.1007/978-3-030-05195-2_36}
    }
    
  • Sarah Irum
    Patrick Luedke
    Klaus Warnke
    Gerrit Schulte
    Year: 2019
    Multi-tenant Isolation in Software Defined Networks
    BROADNETS
    Springer
    DOI: 10.1007/978-3-030-05195-2_36
Sarah Irum1,*, Patrick Luedke1,*, Klaus Warnke1,*, Gerrit Schulte1,*
  • 1: Acticom Gmbh
*Contact email: sarah.irum@acticom.de, patrick.luedke@acticom.de, klaus.warnke@acticom.de, gerrit.schulte@acticom.de

Abstract

Software Defined Networking (SDN) provides a flexible and programmable infrastructure for future networks. SDN supports multi-domain networks where customers, called tenants, can share network resources on the large data centers. In the multi-tenant environment, tenants can share the network elements while keeping them isolated from each other. In this paper, we describe an isolated multi-tenant solution where the tenants can have control over their assigned network resources. The described approach provides isolation through VxLAN and configuration of flow tables in the OpenFlow switch. VxLAN tunnels are used to isolate packets transmitted by different tenants. Virtual Network Identifiers (VNIs) are assigned to the flow table for identification of the tenant.