Automatic Intent-Based Secure Service Creation Through a Multilayer SDN Network Orchestration

TL;DR

This paper proposes an automated, intent-based approach for secure service provisioning across multilayer SDN networks, utilizing an open-source orchestrator and experimental validation to optimize encryption layer selection.

Contribution

It introduces a novel architecture for automatic secure service creation in multilayer SDN networks, integrating encryption layer selection and experimental evaluation.

Findings

Secure channel creation has negligible processing impact on the controller.

Setup time varies across technologies and influences decision-making.

The approach effectively automates secure service provisioning in multilayer networks.

Abstract

Growing traffic demands and increasing security awareness are driving the need for secure services. Current solutions require manual configuration and deployment based on the customer's requirements. In this work, we present an architecture for an automatic intent-based provisioning of a secure service in a multilayer - IP, Ethernet, and optical - network while choosing the appropriate encryption layer using an open-source software-defined networking (SDN) orchestrator. The approach is experimentally evaluated in a testbed with commercial equipment. Results indicate that the processing impact of secure channel creation on a controller is negligible. As the time for setting up services over WDM varies between technologies, it needs to be taken into account in the decision-making process.