Towards load balancing in SDN-networks during DDoS-attacks
Mikhail Belyaev, S. Gaivoronski · 2014
Software Defined Networks (SDN) are becoming a trending technology in modern Internet. This technology helps to solve a significant number of well-known engineering problems in a effective and elegant way as they provide software-defined centralized network control. An SDN controller can be extended with application that effectively serve for concrete purposes and provide flexible management of network flows. This opens a great number of opportunities for a lot of network security problems such as maintaining of privileges in a proper way, splitting control and data planes, and attacks detection and mitigation. In this work we consider the opportunities of SDN for a “survival” mitigation during DDoS attacks, the load balancing problem. We propose two-level balancing solution in SDN networks, which includes traditional balancing between servers and load balancing between network devices as well. Experiments show that our solution increase “survival” time of a system during DDoS attack in times compared to existing balancing solution in SDN networks.