Port Knocking Implementation on Programmable Data Plane

This paper proposes the port knocking method to offload the network functions on Software-Defined Networks to programmable data plane. The main drawback of centralized SDN controller architecture is causing bottlenecks in the network because every packet that arrives at the switch must be forwarded to the controller first. The controller will decide whether the packet is allowed to be forwarded or dropped, resulting in increased processing delay for packet processing. There are several previous methods have been proposed. However, they could not meet the need of network performance. Thus, we decide to migrate the several controller functions in the data plane. This paper presents port knocking (PkoCK) implementation in programmable data plane. PKock successfully offloads the port knocking implementation to the data plane and reduces the processing delay 19% compared to SDN-based port knocking.