3 ms·
Your comment makes no sense. SDN just provides the same barriers as regular network hardware in an automated and more flexible nature. It has nothing to do wit
by hueving 10y ago
Your comment makes no sense. SDN just provides the same barriers as regular network hardware in an automated and more flexible nature. It has nothing to do with data plane confidentiality.
- vog 10y ago> SDN just provides the same barriers as regular network hardware in an automated and more flexible nature Unless the implementation has bugs. Then, the sensitive area is just a single zeroday away. Airgaps don't have that attack surface.
- vidarh 10y agoBut it's not a replacement for air gaps. It's a replacement for things like logging into your switch to manually set up vlans. I agree with your previous point that we should encrypt point to point, but that's one layer up from the problems SDN is solving.
- vog 10y ago> I agree with your previous point that we should encrypt point to point ... Just for clarification: That was written by bluejekyll, not by me.
- bluejekyll 10y agoSDNs add complexity, and are only necessary because of limitations in the networking protocols. They add extra failure modes and reduce throughput by decreasing MTU. This is almost all because people want virtual networks with their VMs, rather than just embracing IPv6.