FORTRESS: An Efficient and Distributed Firewall for Stateful Data Plane SDN

<table class="fixed-width table-group" id="tab2"><tr><td><table class="table"><colgroup><col style="width:5.37em"/><col style="width:8.93em"/></colgroup><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_center" colspan="2">State Table</td></tr><tr class="thead"><td class="align_center">Flow Key</td><td class="align_center">State</td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_center"> <svg height="6.01072pt" id="M26" style="vertical-align:-0.04980993pt" version="1.1" viewbox="-0.0498162 -5.96091 7.75925 6.01072" width="7.75925pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M471 153C471 170 463 194 452 212C400 220 373 229 322 255C373 281 400 290 452 298C463 316 471 339 471 357C456 366 431 371 410 370C377 329 356 310 308 279C311 336 317 364 336 413C326 432 310 451 294 459C279 451 262 432 252 413C271 364 277 336 280 279C232 310 211 329 178 370C157 371 132 367 117 357C117 340 125 316 136 298C188 290 215 281 266 255C215 229 188 220 136 212C125 194 117 171 117 153C132 144 157 139 178 140C211 181 232 200 280 231C277 174 271 146 252 97C262 78 278 59 294 51C309 59 326 78 336 97C317 146 311 174 308 231C356 200 377 181 410 140C431 139 456 143 471 153Z"></path></g></svg></td><td class="align_center">Default</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_center"> <svg height="12.6721pt" id="M27" style="vertical-align:-3.38377pt" version="1.1" viewbox="-0.0498162 -9.28833 51.1201 12.6721" width="51.1201pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M360 -163L167 270L360 703H298L106 273V267L298 -163H360Z"></path></g><g transform="matrix(.013,0,0,-0.013,5.369,0)"><path d="M478 437H297V411C355 404 361 392 349 355C329 292 285 174 257 106L167 356C153 394 158 404 205 411L204 437H2V411C57 404 66 391 88 336C117 265 162 144 202 30C208 13 209 0 204 -15C199 -28 191 -49 173 -84C149 -128 130 -153 98 -172C81 -184 73 -193 73 -209C73 -233 101 -257 129 -257C143 -257 156 -252 161 -232C175 -179 197 -122 264 38C333 203 364 286 390 339C417 395 425 403 478 411V437Z"></path></g><g transform="matrix(.013,0,0,-0.013,11.584,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,16.727,0)"><path d="M474 0V26C414 34 401 43 364 100L267 248C300 297 324 332 345 358C381 400 394 405 455 411V437H272V411C316 406 323 401 305 370C287 337 267 306 247 276L188 369C169 397 173 405 215 411V437H16V411C71 404 83 396 114 348L201 212C171 167 144 127 116 92C77 42 66 34 4 26V0H190V26C139 34 136 43 156 77C175 113 198 150 220 183L294 66C311 39 302 31 260 26V0H474Z"></path></g><g transform="matrix(.013,0,0,-0.013,22.889,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,28.032,0)"><path d="M152 404V712C115 698 54 683 7 677V654C71 648 73 642 73 579V24C128 -2 179 -12 220 -12C353 -12 471 92 471 238C471 357 381 449 274 449C262 449 249 446 233 439L152 404ZM152 374C170 384 202 393 230 393C313 393 382 326 382 213C382 97 330 26 246 26C194 26 165 62 158 81C154 91 152 101 152 116V374Z"></path></g><g transform="matrix(.013,0,0,-0.013,34.636,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,39.779,0)"><path d="M433 39L423 65C413 59 399 54 387 54C370 54 352 69 352 114V299C352 352 342 392 307 422C285 440 255 449 225 449C168 437 102 399 75 379C56 365 44 353 44 339C44 315 69 296 87 296C101 296 111 303 116 319C124 349 133 371 145 385C156 397 171 404 190 404C241 404 275 364 275 291V274C253 256 180 229 120 209C65 190 39 159 39 110C39 47 88 -12 159 -12C189 -12 237 25 277 52C282 35 288 21 301 8C312 -3 333 -12 348 -12L433 39ZM275 84C256 65 221 48 195 48C164 48 124 73 124 124C124 161 146 180 185 198C206 208 254 229 275 240V84Z"></path></g><g transform="matrix(.013,0,0,-0.013,45.486,0)"><path d="M307 267V273L115 703H53L246 270L53 -163H115L307 267Z"></path></g></svg></td><td class="align_center">Second Handshake</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>State table after receiving <svg height="11.439pt" id="M24" style="vertical-align:-2.15067pt" version="1.1" viewbox="-0.0498162 -9.28833 5.48877 11.439" width="5.48877pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M360 -163L167 270L360 703H298L106 273V267L298 -163H360Z"></path></g></svg>x, y, a, b, (SYN)<span class="nowrap"><svg height="11.439pt" id="M25" style="vertical-align:-2.15067pt" version="1.1" viewbox="-0.0498162 -9.28833 5.48877 11.439" width="5.48877pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M307 267V273L115 703H53L246 270L53 -163H115L307 267Z"></path></g></svg>.</span></div>

Security and Communication Networks

tab2

Table 2

Table 2: FORTRESS: An Efficient and Distributed Firewall for Stateful Data Plane SDN 