SDN-Based Private Interconnection
Shlomi Dolev, Shimrit Tzur David · 2014
Private interconnection between datacenters is an essential goal due to the popularity of IaaS (Infrastructure as a Service) and SaaS (Software as a Service) architectures. Datacenters intercommunication is needed when an enterprise want to stretch its data center capacity by extending it with another data center on the cloud. This interconnection has to be private so this stretch will be considered only virtual. Our research focuses on achieving that privacy on top of SDN-based network. This privacy is achieved without the need to use keys. Namely, information theoretic secure rather than only computational secure. The general idea is to use SDN to enable the creation of several tunnels between each pair of datacenters that intercommunicate. The source uses secret sharing technique to encrypt its data and create n shares. In order to reconstruct the data, the destination needs to have at least k shares out of the n shares that were sent by the sender. We design an algorithm that creates these tunnels with the constraint that only less than k shares of the same information can reach a single router. This way we achieve a private and secure interconnection between the datacenters.