skip to main content

DOE PAGESDOE PAGES

Title: Advance reservation access control using software-defined networking and tokens

Advance reservation systems allow users to reserve dedicated bandwidth connection resources from advanced high-speed networks. A common use case for such systems is data transfers in distributed science environments in which a user wants exclusive access to the reservation. However, current advance network reservation methods cannot ensure exclusive access of a network reservation to the specific flow for which the user made the reservation. We present in this paper a novel network architecture that addresses this limitation and ensures that a reservation is used only by the intended flow. We achieve this by leveraging software-defined networking (SDN) and token-based authorization. We use SDN to orchestrate and automate the reservation of networking resources, end-to-end and across multiple administrative domains, and tokens to create a strong binding between the user or application that requested the reservation and the flows provisioned by SDN. Finally, we conducted experiments on the ESNet 100G SDN testbed, and demonstrated that our system effectively protects authorized flows from competing traffic in the network.
Authors:
 [1] ; ORCiD logo [2] ;  [3] ;  [4] ; ORCiD logo [3] ;  [1] ;  [1]
  1. Georgia Inst. of Technology, Atlanta, GA (United States)
  2. Hongik Univ., Seoul (Korea, Republic of)
  3. Argonne National Lab. (ANL), Argonne, IL (United States)
  4. Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
Publication Date:
Grant/Contract Number:
AC05-00OR22725; AC02-06CH11357; ACI-1440761
Type:
Accepted Manuscript
Journal Name:
Future Generations Computer Systems
Additional Journal Information:
Journal Volume: 79; Journal ID: ISSN 0167-739X
Publisher:
Elsevier
Research Org:
Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
Sponsoring Org:
USDOE Office of Science (SC), Advanced Scientific Computing Research (ASCR) (SC-21); National Science Foundation (NSF)
Country of Publication:
United States
Language:
English
Subject:
97 MATHEMATICS AND COMPUTING; advance reservation system; admission control; software-defined networking; tokens
OSTI Identifier:
1394409
Alternate Identifier(s):
OSTI ID: 1435193