Port-security in Open vSwitch

Today, Software Defined Networking paradigm which separates control plane from data plane, has found special significance due to flexibility needed for implementing new unprecedented services. Thus, several implementations of data planes have been proposed. However, some important useful features from the perspective of network administrators are not included in any data plane. Port-Security is one of these features that enables admins to make policies about allowing devices to connect to the switch in Layer 2 level. This paper is a report of extending Open vSwitch, one of the most common data planes to support Port-Security. We add the feature to OVS in a way that the impact on the performance is minimized

Keywords:

Open vSwitch , Port-security , virtualized environments , SDN