Credible Routing Scheme of SDN-Based Cloud Using Blockchain

Credible Routing Scheme of SDN-Based CloudUsing BlockchainQin Qiao1,2,3,Xinghua Li1,2,3(&),Yunwei Wang1,2,3,Bin Luo1,2,3,Yanbing Ren1,2,3,and Jianfeng Ma1,2,31School of Cyber Engineering,Xidian University,Xi’an710071,Shaanxi,People’s Republic of Chinaxhli1@2State Key Laboratory of Integrated Services Networks,Xidian University,Xi’an710071,Shaanxi,People’s Republic of China3Shaanxi Key Laboratory of Network and System Security,Xidian University,Xi’an710071,Shaanxi,People’s Republic of ChinaAbstract.Software-defined networks(SDN)have been widely used in CloudData Centers in recent years.With the development of cloud technologies,different organizations need to share network resources to achieve commonbusiness goals,which requires distributed SDN controllers to collaborativelymanage cloud networks and realize cross-domain routing.However,existingdistributed controller cooperative routing schemes require a third-party trustcenter to establish trusted relationships for controllers.Since both trust centersand certified entities are vulnerable to various attacks and security risks,theexisting works cannot effectively ensure cross-domain routing is credible.Toaddress this problem,Blockchain is employed to establish trusted relationshipsbetween distributed controllers,then a cross-domain routing mechanism wasdevised based on the trusted relationships.Security analysis and experimentsindicate that the proposed scheme can establish trust relationships and providecredible cross-domain routing cooperation for distributed SDN controllers.Besides,the required overhead of storage and bandwidth are very limited,whichimplies good practicability.Keywords:SDNÁCross-domain routingÁBlockchainÁCloud1IntroductionWith the development of Cloud computing,Cloud data centers have become widely used as a new network model.To realize the management of Cloud data center, Software Defined Networks(SDN)is introduced due to its high efficiency andflexi-bility.SDN abstracts the network into a control layer composed of controllers and a data layer composed of forwarding devices and manages the network through con-trollers.Since Cloud computing enables cross-organizational collaboration,and each Cloud data center can share resources to achieve common business goals[1,2],SDN controllers are required to manage cross-domain routing collaboratively.Therefore, how to achieve an efficient and secure collaboration of distributed SDN controllers has attracted extensive attention of researchers.©Springer Nature Singapore Pte Ltd.2019X.Cheng et al.(Eds.):ICPCSEE2019,CCIS1058,pp.189–206,2019.https:///10.1007/978-981-15-0118-0_15Credible Routing Scheme of SDN-Based Cloud Using Blockchain205 6ConclusionThe existing SDN distributed controller collaboration solutions cannot guarantee credible routing in Cloud data centers environment of a multi-organization alliance. The reason for this problem is that the trust relationship between controllers depends on trust center.The vulnerability of the trust center and the authenticated entities may lead to malicious routes in the network.To address this problem,this paper builds trusted relationships based on the Consortium Blockchain for distributed controllers,defines the content of the block,establishes the on-demand update mechanism of the Con-sortium Blockchain in combination with the sliding window.Subsequently,a routing mechanism was proposed to enable the controller to cooperatively route relying on the consensus data.Security analysis and experiments show that this scheme can establish decentralized trust relationships for controllers and effectively ensure cross-domain routing is credible.Further,the proposed scheme has good practicability. Acknowledgements.This work was supported by National Natural Science Foundation of China(Grant Nos.U1708262,U1736203,61772173,61672413),National Key R&D Program of China(2017YFB0801805),the Fundamental Research Funds for the Central Universities and the Innovation Fund of Xidian University.References1.Alansari,S.,Paci,F.,Sassone,V.:A distributed access control system for cloud federations.In:2017IEEE37th International Conference on Distributed Computing Systems(ICDCS) [Internet].IEEE,June2017.https:///10.1109/icdcs.2017.2412.Yan,Q.,Yu,R.,Gong,Q.,et al.:Software-defined networking(SDN)and distributed denialof service(DDoS)attacks in cloud computing environments:a survey,some research issues, and challenges.IEEE Commun.Surv.Tutor.1(2015).https:///10.1109/comst.2015.24873613.Tootoonchian,A.,Ganjali,Y.:HyperFlow:a distributed control plane for OpenFlow.In:Internet Network Management Conference on Research on Enterprise NETWORKING,p.3.USENIX Association(2011)4.Koponen,T.,Casado,M.,Gude,N.,et al.:Onix:a distributed control platform for large-scale production networks.In:Usenix Conference on Operating Systems Design and Implementation,pp.351–ENIX Association(2010)5.Berde,P.,Hart,J.,et al.:ONOS:towards an open,distributed SDN OS.In:The Workshopon Hot Topics in Software Defined NETWORKING,pp.1–6.ACM(2014).https:///10.1145/2620728.26207446.Lin,P.,Bi,J.,Wang,Y.:WEBridge:west-east bridge for distributed heterogeneous SDNNOSes w.8(10),1926–1942(2015).https:///10.1002/ sec.10307.Medved,J.,Varga,R.,Tkacik,A.,et al.:OpenDaylight:towards a model-driven SDNcontroller architecture.In:IEEE,International Symposium on a World of Wireless,Mobile and Multimedia Networks,pp.1–6.IEEE(2014).https:///10.1109/wowmom.2014.6918985206Q.Qiao et al.8.Nascimento,M.R.,Rothenberg,C.E.,Salvador,M.R.,et al.:Virtual routers as a service:theRouteFlow approach leveraging software-defined networks.In:International Conference on Future Internet Technologies,pp.34–37.ACM(2011)9.Hydrogen[EB/OL]./.Accessed1Oct201810.Yin,H.,Xie,H.,Tsou,T.,et al.:SDNi:a message exchange protocol for software definednetworks(SDNS)across multiple domains.IETF Draft,work in progress(2012)11.Phemius,K.,Bouet,M.,Leguay,J.:DISCO:distributed multi-domain SDN controllers.In:Network Operations and Management Symposium,pp.1–4.IEEE(2014).https:///10.1109/noms.2014.683833012.Gupta,A.,Vanbever,L.,Shahbaz,M.,et al.:SDX:a software defined internet exchange.ACM SIGCOMM mun.Rev.44(4),579–580(2014).https:///10.1145/ 2740070.263147313.Restrepo,J.C.C.,Stanojevic,R.:A history of an internet exchange point.ACM SIGCOMMmun.Rev.42(2),58–64(2012).https:///10.1145/2185376.2185384 14.Castro,M.,Liskov,B.:Practical Byzantine fault tolerance.Oper.Syst.Des.Implementation99,173–186(1999)15.Kokoris-Kogias, E.,et al.:OmniLedger:a secure,scale-out,decentralized ledger viasharding.In:2018IEEE Symposium on Security and Privacy(SP)(2018).https:///10.1109/sp.2018.000-5。