FORTRESS: An Efficient and Distributed Firewall for Stateful Data Plane SDN

<table class="fixed-width table-group" id="tab3"><tr><td><table class="table"><colgroup><col style="width:5.31em"/><col style="width:8.93em"/></colgroup><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_center" colspan="2">State Table</td></tr><tr class="thead"><td class="align_center">Flow Key</td><td class="align_center">State</td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_center"> <svg height="6.01072pt" id="M29" style="vertical-align:-0.04980993pt" version="1.1" viewbox="-0.0498162 -5.96091 7.75925 6.01072" width="7.75925pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M471 153C471 170 463 194 452 212C400 220 373 229 322 255C373 281 400 290 452 298C463 316 471 339 471 357C456 366 431 371 410 370C377 329 356 310 308 279C311 336 317 364 336 413C326 432 310 451 294 459C279 451 262 432 252 413C271 364 277 336 280 279C232 310 211 329 178 370C157 371 132 367 117 357C117 340 125 316 136 298C188 290 215 281 266 255C215 229 188 220 136 212C125 194 117 171 117 153C132 144 157 139 178 140C211 181 232 200 280 231C277 174 271 146 252 97C262 78 278 59 294 51C309 59 326 78 336 97C317 146 311 174 308 231C356 200 377 181 410 140C431 139 456 143 471 153Z"></path></g></svg></td><td class="align_center"> Default</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_center"><span style="width: 52.5816ptpx;"><svg height="14.5316pt" id="M30" style="vertical-align:-3.9384pt" version="1.1" viewbox="-0.0498162 -10.5932 52.5816 14.5316" width="52.5816pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,2.33939e-05)"><path d="M407 -259L172 270L407 799H344L109 273V267L344 -259H407Z"></path></g><g transform="matrix(.013,0,0,-0.013,6.12,0)"><path d="M478 437H297V411C355 404 361 392 349 355C329 292 285 174 257 106L167 356C153 394 158 404 205 411L204 437H2V411C57 404 66 391 88 336C117 265 162 144 202 30C208 13 209 0 204 -15C199 -28 191 -49 173 -84C149 -128 130 -153 98 -172C81 -184 73 -193 73 -209C73 -233 101 -257 129 -257C143 -257 156 -252 161 -232C175 -179 197 -122 264 38C333 203 364 286 390 339C417 395 425 403 478 411V437Z"></path></g><g transform="matrix(.013,0,0,-0.013,12.335,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,17.478,0)"><path d="M474 0V26C414 34 401 43 364 100L267 248C300 297 324 332 345 358C381 400 394 405 455 411V437H272V411C316 406 323 401 305 370C287 337 267 306 247 276L188 369C169 397 173 405 215 411V437H16V411C71 404 83 396 114 348L201 212C171 167 144 127 116 92C77 42 66 34 4 26V0H190V26C139 34 136 43 156 77C175 113 198 150 220 183L294 66C311 39 302 31 260 26V0H474Z"></path></g><g transform="matrix(.013,0,0,-0.013,23.64,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,28.783,0)"><path d="M152 404V712C115 698 54 683 7 677V654C71 648 73 642 73 579V24C128 -2 179 -12 220 -12C353 -12 471 92 471 238C471 357 381 449 274 449C262 449 249 446 233 439L152 404ZM152 374C170 384 202 393 230 393C313 393 382 326 382 213C382 97 330 26 246 26C194 26 165 62 158 81C154 91 152 101 152 116V374Z"></path></g><g transform="matrix(.013,0,0,-0.013,35.387,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,40.53,0)"><path d="M433 39L423 65C413 59 399 54 387 54C370 54 352 69 352 114V299C352 352 342 392 307 422C285 440 255 449 225 449C168 437 102 399 75 379C56 365 44 353 44 339C44 315 69 296 87 296C101 296 111 303 116 319C124 349 133 371 145 385C156 397 171 404 190 404C241 404 275 364 275 291V274C253 256 180 229 120 209C65 190 39 159 39 110C39 47 88 -12 159 -12C189 -12 237 25 277 52C282 35 288 21 301 8C312 -3 333 -12 348 -12L433 39ZM275 84C256 65 221 48 195 48C164 48 124 73 124 124C124 161 146 180 185 198C206 208 254 229 275 240V84Z"></path></g><g transform="matrix(.013,0,0,-0.013,46.237,2.33939e-05)"><path d="M360 267V273L125 799H62L297 270L62 -259H125L360 267Z"></path></g></svg></span></td><td class="align_center"> Second Handshake</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_center"><span style="width: 52.5816ptpx;"><svg height="14.5316pt" id="M31" style="vertical-align:-3.9384pt" version="1.1" viewbox="-0.0498162 -10.5932 52.5816 14.5316" width="52.5816pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,2.33939e-05)"><path d="M407 -259L172 270L407 799H344L109 273V267L344 -259H407Z"></path></g><g transform="matrix(.013,0,0,-0.013,6.12,0)"><path d="M474 0V26C414 34 401 43 364 100L267 248C300 297 324 332 345 358C381 400 394 405 455 411V437H272V411C316 406 323 401 305 370C287 337 267 306 247 276L188 369C169 397 173 405 215 411V437H16V411C71 404 83 396 114 348L201 212C171 167 144 127 116 92C77 42 66 34 4 26V0H190V26C139 34 136 43 156 77C175 113 198 150 220 183L294 66C311 39 302 31 260 26V0H474Z"></path></g><g transform="matrix(.013,0,0,-0.013,12.282,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,17.425,0)"><path d="M478 437H297V411C355 404 361 392 349 355C329 292 285 174 257 106L167 356C153 394 158 404 205 411L204 437H2V411C57 404 66 391 88 336C117 265 162 144 202 30C208 13 209 0 204 -15C199 -28 191 -49 173 -84C149 -128 130 -153 98 -172C81 -184 73 -193 73 -209C73 -233 101 -257 129 -257C143 -257 156 -252 161 -232C175 -179 197 -122 264 38C333 203 364 286 390 339C417 395 425 403 478 411V437Z"></path></g><g transform="matrix(.013,0,0,-0.013,23.64,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,28.783,0)"><path d="M433 39L423 65C413 59 399 54 387 54C370 54 352 69 352 114V299C352 352 342 392 307 422C285 440 255 449 225 449C168 437 102 399 75 379C56 365 44 353 44 339C44 315 69 296 87 296C101 296 111 303 116 319C124 349 133 371 145 385C156 397 171 404 190 404C241 404 275 364 275 291V274C253 256 180 229 120 209C65 190 39 159 39 110C39 47 88 -12 159 -12C189 -12 237 25 277 52C282 35 288 21 301 8C312 -3 333 -12 348 -12L433 39ZM275 84C256 65 221 48 195 48C164 48 124 73 124 124C124 161 146 180 185 198C206 208 254 229 275 240V84Z"></path></g><g transform="matrix(.013,0,0,-0.013,34.49,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,39.633,0)"><path d="M152 404V712C115 698 54 683 7 677V654C71 648 73 642 73 579V24C128 -2 179 -12 220 -12C353 -12 471 92 471 238C471 357 381 449 274 449C262 449 249 446 233 439L152 404ZM152 374C170 384 202 393 230 393C313 393 382 326 382 213C382 97 330 26 246 26C194 26 165 62 158 81C154 91 152 101 152 116V374Z"></path></g><g transform="matrix(.013,0,0,-0.013,46.237,2.33939e-05)"><path d="M360 267V273L125 799H62L297 270L62 -259H125L360 267Z"></path></g></svg></span></td><td class="align_center"> Third Handshake</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>State table after receiving <span class="nowrap"><svg height="12.6721pt" id="M28" style="vertical-align:-3.38377pt" version="1.1" viewbox="-0.0498162 -9.28833 120.487 12.6721" width="120.487pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M360 -163L167 270L360 703H298L106 273V267L298 -163H360Z"></path></g><g transform="matrix(.013,0,0,-0.013,5.369,0)"><path d="M478 437H297V411C355 404 361 392 349 355C329 292 285 174 257 106L167 356C153 394 158 404 205 411L204 437H2V411C57 404 66 391 88 336C117 265 162 144 202 30C208 13 209 0 204 -15C199 -28 191 -49 173 -84C149 -128 130 -153 98 -172C81 -184 73 -193 73 -209C73 -233 101 -257 129 -257C143 -257 156 -252 161 -232C175 -179 197 -122 264 38C333 203 364 286 390 339C417 395 425 403 478 411V437Z"></path></g><g transform="matrix(.013,0,0,-0.013,11.584,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,16.727,0)"><path d="M474 0V26C414 34 401 43 364 100L267 248C300 297 324 332 345 358C381 400 394 405 455 411V437H272V411C316 406 323 401 305 370C287 337 267 306 247 276L188 369C169 397 173 405 215 411V437H16V411C71 404 83 396 114 348L201 212C171 167 144 127 116 92C77 42 66 34 4 26V0H190V26C139 34 136 43 156 77C175 113 198 150 220 183L294 66C311 39 302 31 260 26V0H474Z"></path></g><g transform="matrix(.013,0,0,-0.013,22.889,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,28.032,0)"><path d="M152 404V712C115 698 54 683 7 677V654C71 648 73 642 73 579V24C128 -2 179 -12 220 -12C353 -12 471 92 471 238C471 357 381 449 274 449C262 449 249 446 233 439L152 404ZM152 374C170 384 202 393 230 393C313 393 382 326 382 213C382 97 330 26 246 26C194 26 165 62 158 81C154 91 152 101 152 116V374Z"></path></g><g transform="matrix(.013,0,0,-0.013,34.636,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,39.779,0)"><path d="M433 39L423 65C413 59 399 54 387 54C370 54 352 69 352 114V299C352 352 342 392 307 422C285 440 255 449 225 449C168 437 102 399 75 379C56 365 44 353 44 339C44 315 69 296 87 296C101 296 111 303 116 319C124 349 133 371 145 385C156 397 171 404 190 404C241 404 275 364 275 291V274C253 256 180 229 120 209C65 190 39 159 39 110C39 47 88 -12 159 -12C189 -12 237 25 277 52C282 35 288 21 301 8C312 -3 333 -12 348 -12L433 39ZM275 84C256 65 221 48 195 48C164 48 124 73 124 124C124 161 146 180 185 198C206 208 254 229 275 240V84Z"></path></g><g transform="matrix(.013,0,0,-0.013,45.486,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,50.63,0)"><path d="M300 -147C201 -63 143 98 143 270S200 602 300 686L282 710C136 610 70 450 70 271V270C70 89 136 -72 282 -170L300 -147Z"></path></g><g transform="matrix(.013,0,0,-0.013,55.128,0)"><path d="M409 504C401 567 396 607 392 642C354 654 312 665 266 665C137 665 60 583 60 487C60 374 161 325 225 290C300 250 355 215 355 141C355 68 311 21 235 21C131 21 86 122 71 183L41 176C48 128 61 42 68 21C78 16 93 8 118 0C142 -7 175 -15 216 -15C349 -15 438 69 438 174C438 287 344 333 265 374C186 414 138 449 138 522C138 576 172 631 249 631C336 631 363 562 380 499L409 504Z"></path></g><g transform="matrix(.013,0,0,-0.013,61.055,0)"><path d="M620 650H399V622C477 614 480 606 457 556C429 495 375 397 338 331C295 406 246 488 203 568C185 601 182 613 254 622V650H15V622C75 617 86 606 126 537C180 445 217 379 252 318C269 287 273 278 273 258V125C273 40 265 34 176 28V0H458V28C366 34 358 41 358 125V261C358 287 361 298 375 324C422 412 456 470 501 543C539 604 551 614 620 622V650Z"></path></g><g transform="matrix(.013,0,0,-0.013,69.297,0)"><path d="M719 650H483V622C553 619 576 606 581 560C585 532 588 487 588 394V148H585L167 650H20V622C67 618 88 610 109 585C127 562 129 557 129 484V264C129 173 126 124 123 93C118 44 92 31 35 28V0H272V28C204 32 181 44 176 95C173 124 170 172 170 264V515H172L598 -9H629V394C629 487 631 532 635 563C639 606 663 619 719 622V650Z"></path></g><g transform="matrix(.013,0,0,-0.013,78.956,0)"><path d="M95 130C70 130 46 113 46 88C46 72 54 64 59 64C93 55 121 33 121 -3C121 -41 93 -68 44 -88L55 -117C117 -98 186 -56 186 22C186 91 131 130 95 130Z"></path></g><g transform="matrix(.013,0,0,-0.013,84.099,0)"><path d="M673 0V28C608 34 594 43 563 129C499 303 432 494 370 665L339 656L132 132C98 43 84 37 20 28V0H238V28C162 35 154 45 175 108C188 150 203 192 219 237H432C454 176 474 122 487 83S491 36 428 28V0H673ZM418 280H234C265 362 296 450 328 535H330L418 280Z"></path></g><g transform="matrix(.013,0,0,-0.013,92.716,0)"><path d="M614 175C564 76 510 21 408 21C256 21 146 149 146 336C146 488 235 629 402 629C510 629 570 586 597 480L626 488C620 541 614 582 606 638C578 643 510 665 429 665C206 665 44 527 44 316C44 157 153 -15 402 -15C474 -15 558 5 586 11C604 45 629 119 643 165L614 175Z"></path></g><g transform="matrix(.013,0,0,-0.013,101.361,0)"><path d="M667 0V28C619 34 599 43 546 100C496 154 386 277 311 372C378 440 449 512 488 547C551 605 575 615 650 622V650H410V622L433 619C478 614 479 604 449 568C404 513 337 443 282 390C254 364 234 350 212 345V520C212 609 222 616 299 622V650H41V622C120 616 128 611 128 520V128C128 41 120 34 44 28V0H304V28C221 34 212 41 212 128V318C229 321 242 318 266 291C355 185 436 87 514 0H667Z"></path></g><g transform="matrix(.013,0,0,-0.013,110.11,0)"><path d="M275 270C275 450 212 609 64 710L45 686C145 604 203 442 203 270S147 -63 45 -147L64 -170C213 -68 275 89 275 270Z"></path></g><g transform="matrix(.013,0,0,-0.013,114.608,0)"><path d="M307 267V273L115 703H53L246 270L53 -163H115L307 267Z"></path></g></svg>.</span></div>

Security and Communication Networks

tab3

Table 3

Table 3: FORTRESS: An Efficient and Distributed Firewall for Stateful Data Plane SDN 