{"id":"https://openalex.org/W2243256781","doi":"https://doi.org/10.1109/nfv-sdn.2015.7387413","title":"NFShunt: A Linux firewall with OpenFlow-enabled hardware bypass","display_name":"NFShunt: A Linux firewall with OpenFlow-enabled hardware bypass","publication_year":2015,"publication_date":"2015-11-01","ids":{"openalex":"https://openalex.org/W2243256781","doi":"https://doi.org/10.1109/nfv-sdn.2015.7387413","mag":"2243256781"},"language":"en","primary_location":{"id":"doi:10.1109/nfv-sdn.2015.7387413","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nfv-sdn.2015.7387413","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080162108","display_name":"Simeon Miteff","orcid":null},"institutions":[{"id":"https://openalex.org/I192619145","display_name":"University of the Witwatersrand","ror":"https://ror.org/03rp50x72","country_code":"ZA","type":"education","lineage":["https://openalex.org/I192619145"]}],"countries":["ZA"],"is_corresponding":false,"raw_author_name":"Simeon Miteff","raw_affiliation_strings":["CSIR Meraka Institute, Pretoria, South Africa","University of the Witwatersrand, Johannesburg, South Africa"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CSIR Meraka Institute, Pretoria, South Africa","institution_ids":[]},{"raw_affiliation_string":"University of the Witwatersrand, Johannesburg, South Africa","institution_ids":["https://openalex.org/I192619145"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010060892","display_name":"Scott Hazelhurst","orcid":"https://orcid.org/0000-0002-0581-149X"},"institutions":[{"id":"https://openalex.org/I192619145","display_name":"University of the Witwatersrand","ror":"https://ror.org/03rp50x72","country_code":"ZA","type":"education","lineage":["https://openalex.org/I192619145"]}],"countries":["ZA"],"is_corresponding":false,"raw_author_name":"Scott Hazelhurst","raw_affiliation_strings":["University of the Witwatersrand, Johannesburg, South Africa"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of the Witwatersrand, Johannesburg, South Africa","institution_ids":["https://openalex.org/I192619145"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I192619145"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"100","last_page":"106"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.9739627838134766},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.8341043591499329},{"id":"https://openalex.org/keywords/context-based-access-control","display_name":"Context-based access control","score":0.8061321377754211},{"id":"https://openalex.org/keywords/dmz","display_name":"DMZ","score":0.769910454750061},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7628953456878662},{"id":"https://openalex.org/keywords/openflow","display_name":"OpenFlow","score":0.7596052289009094},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.7470239996910095},{"id":"https://openalex.org/keywords/application-firewall","display_name":"Application firewall","score":0.6995034217834473},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.552724301815033},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5031804442405701},{"id":"https://openalex.org/keywords/packet-loss","display_name":"Packet loss","score":0.49317020177841187},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.37618911266326904},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.2699611783027649},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.2018900215625763}],"concepts":[{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.9739627838134766},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.8341043591499329},{"id":"https://openalex.org/C42934231","wikidata":"https://www.wikidata.org/wiki/Q1128692","display_name":"Context-based access control","level":5,"score":0.8061321377754211},{"id":"https://openalex.org/C23103841","wikidata":"https://www.wikidata.org/wiki/Q1074209","display_name":"DMZ","level":3,"score":0.769910454750061},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7628953456878662},{"id":"https://openalex.org/C192697461","wikidata":"https://www.wikidata.org/wiki/Q4045918","display_name":"OpenFlow","level":3,"score":0.7596052289009094},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7470239996910095},{"id":"https://openalex.org/C86444895","wikidata":"https://www.wikidata.org/wiki/Q451816","display_name":"Application firewall","level":4,"score":0.6995034217834473},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.552724301815033},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5031804442405701},{"id":"https://openalex.org/C54108766","wikidata":"https://www.wikidata.org/wiki/Q391064","display_name":"Packet loss","level":3,"score":0.49317020177841187},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.37618911266326904},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.2699611783027649},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2018900215625763},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C74650414","wikidata":"https://www.wikidata.org/wiki/Q11397","display_name":"Classical mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0},{"id":"https://openalex.org/C124017977","wikidata":"https://www.wikidata.org/wiki/Q11412","display_name":"Gravitation","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/nfv-sdn.2015.7387413","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nfv-sdn.2015.7387413","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Network Function Virtualization and Software Defined Network (NFV-SDN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1548849615","https://openalex.org/W1976381032","https://openalex.org/W2013221213","https://openalex.org/W2029780870","https://openalex.org/W2057141851","https://openalex.org/W2057639824","https://openalex.org/W2097980166","https://openalex.org/W2135265564","https://openalex.org/W2136451165","https://openalex.org/W2147118406","https://openalex.org/W2167159238","https://openalex.org/W2189948602","https://openalex.org/W2620485168"],"related_works":["https://openalex.org/W2891274976","https://openalex.org/W4310291187","https://openalex.org/W2495628081","https://openalex.org/W2916429898","https://openalex.org/W2057573940","https://openalex.org/W4363647490","https://openalex.org/W2144255176","https://openalex.org/W4240856555","https://openalex.org/W2222333653","https://openalex.org/W2006007939"],"abstract_inverted_index":{"Data-intensive":[0],"research":[1],"computing":[2],"requires":[3],"the":[4,36,61,97,119,160,176],"capability":[5,45],"to":[6,21,60,91,100,137,143,169,174],"transfer":[7],"files":[8],"over":[9],"long":[10],"distances":[11],"at":[12,131],"high":[13,27],"throughput.":[14],"Stateful":[15],"firewalls":[16],"introduce":[17],"sufficient":[18],"packet":[19,43,127],"loss":[20,128],"prevent":[22],"researchers":[23],"from":[24],"fully":[25],"exploiting":[26],"bandwidth-delay":[28],"network":[29],"links.":[30],"To":[31],"work":[32],"around":[33],"this":[34],"challenge,":[35],"Science":[37,62],"DMZ":[38,63],"design":[39,162],"trades":[40],"off":[41],"stateful":[42],"filtering":[44],"for":[46],"loss-free":[47],"forwarding":[48],"via":[49],"an":[50,67,86,106],"ordinary":[51],"Ethernet":[52],"switch":[53],"[1].":[54],"We":[55],"propose":[56],"a":[57,74,144,166,171],"novel":[58],"extension":[59],"design,":[64],"which":[65],"uses":[66],"SDN-based":[68],"firewall.":[69,147],"This":[70],"paper":[71],"introduces":[72],"NFShunt,":[73],"firewall":[75,108,154,173],"based":[76],"on":[77],"Linux's":[78],"Netfilter":[79],"combined":[80],"with":[81,135],"OpenFlow":[82,87],"switching.":[83],"Implemented":[84],"as":[85,103,140,142],"1.0":[88],"controller":[89],"coupled":[90],"Netfilter's":[92],"connection":[93],"tracking,":[94],"NFShunt":[95,164],"allows":[96],"bypass-switching":[98],"policy":[99],"be":[101],"expressed":[102],"part":[104],"of":[105,118,163,179],"iptables":[107],"rule-set.":[109],"Our":[110],"implementation":[111],"is":[112,122,129,165],"described":[113],"in":[114],"detail,":[115],"and":[116,126,157],"latency":[117],"control-plane":[120],"mechanism":[121],"reported.":[123],"TCP":[124],"throughput":[125],"shown":[130],"various":[132],"round-trip":[133],"latencies,":[134],"comparisons":[136],"pure":[138],"switching,":[139],"well":[141],"high-end":[145],"Cisco":[146],"The":[148],"results":[149],"support":[150],"reported":[151],"observations":[152],"regarding":[153],"introduced":[155],"packet-loss,":[156],"indicate":[158],"that":[159],"SDN":[161],"viable":[167],"approach":[168],"enhancing":[170],"traditional":[172],"meet":[175],"performance":[177],"needs":[178],"data-intensive":[180],"researchers.":[181]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}