Enhancing security, scalability and flexibility of virtual private LAN services

Liyanage, Madhusanka; Ylianttila, Mika; Gurtov, Andrei (2017-09-14)
 
Avaa tiedosto
Lataukset: 

URL:
https://doi.org/10.1109/CIT.2017.45

Liyanage, Madhusanka
Ylianttila, Mika
Gurtov, Andrei
Institute of Electrical and Electronics Engineers
14.09.2017

M. Liyanage, M. Ylianttila and A. Gurtov, "Enhancing Security, Scalability and Flexibility of Virtual Private LAN Services," 2017 IEEE International Conference on Computer and Information Technology (CIT), Helsinki, 2017, pp. 286-291. doi: 10.1109/CIT.2017.45

https://rightsstatements.org/vocab/InC/1.0/
© 2017 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
https://rightsstatements.org/vocab/InC/1.0/
doi:https://doi.org/10.1109/CIT.2017.45
Näytä kaikki kuvailutiedot
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi-fe2018080233260
Tiivistelmä

Abstract

Ethernet based VPLS (Virtual Private LAN Service) networks are now becoming attractive in many enterprise applications due to simple, protocol-independent and cost efficient operation. However, new VPLS applications demand additional requirements, such as elevated security, enhanced scalability and improved flexibility. This paper summarized the results of a thesis which focused to increase the scalability, flexibility and compatibility of secure VPLS networks. First, we propose a scalable secure flat-VPLS architecture based on Host Identity Protocol (HIP) to increase the forwarding and security plane scalability. Then, a secure hierarchical-VPLS architecture has been proposed by extending the previous proposal to achieve control plane scalability as well. To solve the compatibility issues of Spanning Tree Protocol (STP) in VPLS networks, a novel Distributed STP (DSTP) is proposed. Lastly, we propose a novel SDN (Software Defined Networking) based VPLS (SoftVPLS) architecture to overcome tunnel management limitations in legacy secure VPLS architectures. Simulation models and testbed implementations are used to verify the performance of proposed solutions.

Kokoelmat