Browsing by Subject "YANG"

Now showing 1 - 3 of 3
  • Thumbnail Image
    Publication
    Open Access
    A Framework for Dynamic Configuration of TLS Connections Based on Standards
    (Springer, 2022-01-20) Pastor-Galindo, Javier; López-Millán, Gabriel; Marín-López, Rafael; Cánovas, Óscar; Pereñíguez García, Fernando; Ingeniería y Tecnología de Computadores
    The Transport Layer Security (TLS) protocol is widely used for protecting end-to-end communications between network peers (applications or nodes). However, the administrators usually have to configure parameters (e.g., cryptography algorithms or authentication credentials) to establish TLS connections manually. However, this way of managing security connections becomes infeasible when the number of network peers is high. This paper proposes a TLS management framework that configures and manages TLS connections in a dynamic and autonomous manner. The solution is based on well-known standardized protocols and models that allow providing the necessary configuration parameters to establish a TLS connection between two network nodes. Nowadays, this is required in several application scenarios such as virtual private networks, virtualized network functions, or service function chains. Our framework is based on standard elements of the Software Defined Networking paradigm, widely adopted to provide flexibility to network management, such as for the scenarios aforementioned. The proposed framework has been implemented in a proof of concept to validate the suitability of the proposed solution to manage the dynamic configuration of TLS connections. The experimental results confirm that the implementation of this framework enables an operable and flexible procedure to manage TLS connections between network nodes in different scenarios.
  • Thumbnail Image
    Publication
    Restricted
    CORECONF implementation as SDN southboundInterface for IoT: an OSCORE/EDHOC use case
    (Institute of Electrical and Electronics Engineers Inc., 2025) Fernández, Javier A.; Marín López, Rafael; López Millán, Gabriel; Toutain, Laurent; Ingeniería de la Información y las Comunicaciones; Facultades de la UMU::Facultad de Informática
    The Internet of Things (IoT) aims to gather valuable data from our surroundings through resource-constrained networks and devices. For this reason, efficient and lightweight communication protocols are required to be developed and adopted. CORECONF, a network management protocol designed for constrained environments, provides a promising solution for IoT device configuration. This work introduces pycoreconf, an open-source implementation of CORECONF, with the goal of testing the protocol and making it more accessible to researchers and developers by enabling its use in real-world scenarios and experimental setups. In this paper, we evaluate its performance and applicability as a southbound interface in an SDN-based architecture, demonstrating its potential for configuring security contexts between IoT devices. Potential for other use cases remains to be explored in future work. Our results suggest that pycoreconf is a viable tool for those interested in exploring and adopting CORECONF in IoT scenarios.
  • Thumbnail Image
    Publication
    Open Access
    SDN-AAA: towards the standard management of AAA infrastructures
    (Elsevier, 2025-01-26) López Gómez, Francisco; Marín López, Rafael; Cánovas Reverte, Óscar; López Millán, Gabriel; Periniguez García, Fernando; Ingeniería de la Información y las Comunicaciones; Facultades de la UMU::Facultad de Informática
    Software Defined Networking (SDN) is a widely adopted technology that enables agile and flexible management of networks and services. This paradigm is a strong candidate for addressing the dynamic and secure management of large and complex Authentication, Authorization and Accounting (AAA) infrastructures. In those infrastructures, multiple nodes must securely exchange information to interconnect different realms, and the manual configuration of these nodes represents a significant point of failure and a challenge for administrators. This paper presents a novel SDN-based framework, named SDN-AAA, that follows a data model-driven approach using the YANG standard. This framework enables the dynamic management of routing and security configurations in AAA scenarios. Additionally, empirical results demonstrate that the proposed framework can handle increasing numbers of nodes without significant performance degradation in mesh and star topologies, with configuration and routing times that linearly or exponentially scale depending on the topology used. This validates the feasibility of the solution in real-world scenarios.