# DOCSDN: Dynamic and Optimal Configuration of Software-Defined Networks

## TL;DR

This paper presents DOCSDN, a layered framework for optimizing software-defined network configurations to satisfy multiple conflicting requirements like security, performance, and reachability, with quick reconfiguration capabilities.

## Contribution

The paper introduces a novel layered optimization framework for SDN configuration that jointly considers multiple network properties and constraints.

## Key findings

- Configurations are generated within 1-5 minutes.
- Framework effectively balances security and performance.
- Validated on fat tree topology in data center networks.

## Abstract

Networks are designed with functionality, security, performance, and cost in mind. Tools exist to check or optimize individual properties of a network. These properties may conflict, so it is not always possible to run these tools in series to find a configuration that meets all requirements. This leads to network administrators manually searching for a configuration. This need not be the case. In this paper, we introduce a layered framework for optimizing network configuration for functional and security requirements. Our framework is able to output configurations that meet reachability, bandwidth, and risk requirements. Each layer of our framework optimizes over a single property. A lower layer can constrain the search problem of a higher layer allowing the framework to converge on a joint solution. Our approach has the most promise for software-defined networks which can easily reconfigure their logical configuration. Our approach is validated with experiments over the fat tree topology, which is commonly used in data center networks. Search terminates in between 1-5 minutes in experiments. Thus, our solution can propose new configurations for short term events such as defending against a focused network attack.