Firewall using ODL.

asked 2015-07-21 08:56:43 -0700

singnikhil
3 ●1 ●2 ●2

I'm using mininet to simulate a network and the controller is ODL. I want to have a control over the packet flows. For example, upon finding certain anomolous activity I want to sent a REST call to ODL to drop all the packets from one host or block request coming from certain port or allow request going to certain port.

I found out that it can be done by SFC, but I couldn't find any documentation regarding firewall, and certain things in userguide are hard to understand.

Also, I found out that I can manipulte the flowtable to do same, but I'm still trying to understand it.

I'm new to SDN and ODL , so any help will is appreciated.

edit retag flag offensive close merge delete

0

answered 2015-07-22 00:47:02 -0700

subhash

596 ●21 ●26 ●33 https://twitter.com/subh_...

updated 2015-07-22 00:47:27 -0700

@singhnikhil you can try to install the flows to the switch to drop the packets with required match fields.

you can refer to following wiki for the installation of flow :

https://wiki.opendaylight.org/view/OpenDaylightOpenFlowPlugin:EndtoEnd_Flows

edit flag offensive delete publish link

Comments

Hi Subhash, Thanks for replying. I tried it but it worked only for MAC Address. When I'm giving IP Addresses, it's not wokring. flow dump is for blocking icmp: cookie=0xa, duration=1.726s, table=0, n_packets=0, n_bytes=0, priority=6200,icmp,nw_src=10.0.0.1,nw_dst=10.0.0.2 actions=drop

singnikhil ( 2015-07-22 13:01:46 -0700 )edit

just remember that if you adding any rule based on the IP address then you must fulfil the prerequisite of match i.e. if you have match on ip address then there should be match on eth_type = ip.

subhash ( 2015-07-22 13:41:30 -0700 )edit

Oh yea.. It worked thanks..:) Also, if have any tutorial or could provide me with anything that could help me with SFC implementation, it'll be great. I've understood the concept behind it, but I'm not able to implement it.

singnikhil ( 2015-07-22 14:40:38 -0700 )edit

You are welcome :) Could you please accept the answer if the answer helped you, so that other can also refer the answer. !!

subhash ( 2015-07-22 23:18:26 -0700 )edit

Do you plan to use SFC only for firewall? If yes, it seems like overkill. Why not consider writing your own firewall application? It would be a good way to familiarize with ODL as well as get what you want out of it.

Vishal Thapar ( 2015-07-23 00:03:32 -0700 )edit

0

answered 2015-07-27 01:47:55 -0700

etscript
1

Do you solve the problem of Firewall using ODL ?

edit flag offensive delete publish link

Firewall using ODL.

2 answers

Comments

Question Tools

Stats

Related questions

Firewall using ODL.

2 answers

Comments

Question Tools

Public thread

Stats

Related questions