Abstract

SDN has introduced a new networking paradigm, and its programmability enables the effective deployment of new services for today's networks, which have constantly changing needs. Through its decoupled control plane and programmable forwarding devices, SDN has addressed critical issues of administration and scalability. The NFV paradigm uses hypervisors for computational functions to virtualize networking functions, and it uses VMs to deliver a whole set of networking services. In addition to facilitating dynamic administration of software-based network activities, SDN also offers more flexibility in directing packet flows. Applications of these enabling technologies range from managing the direction packets go via a device or a chain of network function services to shaping traffic in a network to specify pathways programmatically. Proactive Intrusion-Prevention filters at strategic nodes are possible because to the network's software-defined nature, which also allows for effective traffic-dynamics management and response to cyber-attacks in today's virtualized datacenters. Despite the many advantages of SDN, its design introduces new vulnerabilities due to the proliferation of attack vectors made possible by its central characteristics (such as the separation of the control and data planes). Moreover, the existing separation of an intelligent control plane and an excessively simplistic, stateless data plane prevents full utilisation of a network's software-based adaptability

Description