{'fraction_non_alphanumeric': 0.025454545454545455, 'fraction_numerical': 0.0, 'mean_word_length': 5.672727272727273, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Toward Taming Policy Enforcement for SDN in the RIGHT Way: Or Can We?

This paper explores a RIGHT framework for reliablepolicy enforcement in Software-Defined Networking (SDN). Current SDN uses overlapping rules with common matchingpackets. Even if a packet's expectant rule is inactive, it might hitanother rule and experience incorrect yet unnoticed processing. This leads to inconsistency between control plane and data plane, that is, unreliable policy enforcement. RIGHT advocates threeadaptations to respectively mitigate, detect, and correct packetprocessing errors. It is challenging for RIGHT to maintain bothaccuracy and efficiency. We explore lightweight modifications tocurrent SDN policy enforcement toward better reliability. Forexample, we decouple rules and priorities through tagging tomitigate matching ambiguity. We also use exact-match rulesto efficiently, correctly process packets in the same micro-flow. RIGHT can remedy mis-forwarded packets as well. We expectthat a comprehensive design and deployment of RIGHT helpsensure correct per-packet processing in real time for SDN.