Achieving Resilience in Software-Defined Networks
Establish architectures and mechanisms that ensure resilience of software-defined networks, including high availability of the logically centralized control plane and robust data-plane fault tolerance, to address the currently unresolved challenge of SDN resiliency.
References
SDN resiliency as a whole is an open challenge that will be further discussed in Section \ref{sec:resiliency}.
Finally, the current design assumes trustworthy telemetry and well-behaved participants; the effects of telemetry inaccuracies, controller failures, and adversarial clients remain open directions for future work.
Persisted datastores let a vehicle boot and operate with an unreachable controller, so management-plane availability is not on the critical path; controller redundancy, an explicit fail-safe policy, and the degradation logic that must gate revoking a safety-relevant actuator remain open, as it belongs to SDN resilience concepts.