Re: [Sdn] new draft on SDN for DDoS mitigation

Hi Patrick,

All IRTF/IETF participation is very welcome!

There are often differences between contributing to an IRTF Research Group (RG) and an IETF Working Group (WG). In the SDN RG we tend to encourage initial discussion via the SDN mailing list or an RG presentation to aid formulation of the research challenge and setting context and/or scope, rather than the typical IETF approach of submitting a 00 Internet-Draft (I-D). Then if the topic/work merits further investigation an Internet-Draft would be a fine way forward.

If you followed the recent SDN RG session at IETF 93 we had a dedicated session on SDN Security:

https://www.ietf.org/proceedings/93/agenda/agenda-93-sdnrg

Identifying a few SDN use cases and subsequent Security requirements would be a great way to help initiate and steer SDN RG list discussion. A reasonable output could then be an SDN Security I-D that summarises the challenges and available methods/technologies for mitigating Security risks and issues. The I-D could also identify gaps and possible candidate solutions via existing IETF WG protocols and mechanisms, recent WG proposals, or indeed the need for something entirely new (seeding a bar-BOF, further discussions, etc.).

BR, Dan.

From: sdn [mailto:sdn-bounces@mail.ietf.org] On Behalf Of Patrick Lismore
Sent: 27 August 2015 15:59
Cc: sdn@irtf.org
Subject: Re: [Sdn] new draft on SDN for DDoS mitigation

Hello everyone,

I have been reading the emails for this list for a while and wanted to contribute.

My research this year as part of my MSc was on Threat Mitigation & Digital Forensics in Software Defined Networks.

I have never contributed to IETF before but would like to get more involved with the SDNRG.

What is the best way to engage?

Should I help some contributors with their research?, submit a paper or throw out some ideas.

best regards

Patrick Lismore
@patricklismore

On Wed, Aug 12, 2015 at 2:16 PM, Wesley Eddy <wes@mti-systems.com<mailto:wes@mti-systems.com>> wrote:
Hello, we wanted to make people aware of a new I-D that uses SDN (or
more specifically OpenFlow) as a tool to improve DDoS mitigation:

https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/

The interesting part of this for SDNRG is probably the sub-controller
concept, which is how we allow OpenFlow to be used inter-domain (for
customers to control aspects of their ISP's network), and the three-
stage organization of flow tables.

The content is fairly specific to DDoS, but could be extended and
generalized for other uses.

Much of the other interdomain SDN work has the ISPs setting up virtual
networks for each customer, or slice-based constructions, which are not
required by this sub-controller approach.  It may be of interest as
an alternative construction with its own set of advantages and
disadvantages in comparison to other interdomain SDN approaches.

We're eager to hear your comments, criticisms, and questions.

--
Wes Eddy
MTI Systems

_______________________________________________
sdn mailing list
sdn@mail.ietf.org<mailto:sdn@mail.ietf.org>
https://mail.ietf.org/mailman/listinfo/sdn