Browsing by Subject "IPSec"

Now showing 1 - 1 of 1
  • Thumbnail Image
    Publication
    Open Access
    Analysis and practical validation of a standard SDN-based framework for IPsec management
    (Elsevier, 2023-01) Marín-López, Rafael; Cánovas, Óscar; Parra-Espín, José Antonio; López Millán, Gabriel; Pereñíguez García, Fernando; Ingeniería y Tecnología de Computadores
    The Internet Engineering Task Force (IETF), the international standardization organism for the Internet, has recently approved a standard, RFC 9061, which defines an interface and framework with which to manage IPsec SAs autonomously by using the Software Defined Networking (SDN) paradigm. In this framework, a centralized entity, the controller, sends configuration information to IPsec-enabled nodes in the network in order to create IPsec SAs. Two cases are presented: IKE-case, in which the nodes ship an IKE implementation that is configured by the controller or IKE-less, in which the controller sends the IPsec SAs directly to the nodes, among other relevant security information. This paper analyzes both cases in depth, provides a design for the controller’s operation based on Mealy state machines and obtains experimental results from a virtualized testbed so as to compare these cases, which are missing parts in the standard.