| 摘要 |
A method of providing access control for a software defined network (SDN) controller, wherein said controller (4) comprises an interface for interacting with one or more applications (6) that are installed to run at the control plane (2) of said software defined network atop said controller (4), and wherein said controller (4) is configured to program flow tables of network resources at the data plane (1) of said software defined network in accordance with configuration requests from said one or more applications (6), is characterized in the steps of establishing a cascaded flow of flow table entries by linking together flow table entries of flow tables that are installed at said network resources and that apply to the same packets or network flows, analyzing the impact of configuration requests from said one or more applications (6) regarding the installation, modification and/or removal of flow table entries on existing cascaded flows, and rejecting configuration requests in case the according installation, modification and/or removal of flow table entries would destroy an existing cascaded flow. Furthermore, a corresponding software defined network (SDN) with access control and a corresponding SDN controller are disclosed. |
