[Sdn] new draft on SDN for DDoS mitigation

[Wesley Eddy <[e-mail]>]

Hello, we wanted to make people aware of a new I-D that uses SDN (or
more specifically OpenFlow) as a tool to improve DDoS mitigation:

https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/

The interesting part of this for SDNRG is probably the sub-controller
concept, which is how we allow OpenFlow to be used inter-domain (for
customers to control aspects of their ISP's network), and the three-
stage organization of flow tables.

The content is fairly specific to DDoS, but could be extended and
generalized for other uses.

Much of the other interdomain SDN work has the ISPs setting up virtual
networks for each customer, or slice-based constructions, which are not
required by this sub-controller approach.  It may be of interest as
an alternative construction with its own set of advantages and
disadvantages in comparison to other interdomain SDN approaches.

We're eager to hear your comments, criticisms, and questions.

-- 
Wes Eddy
MTI Systems