User-Specific Network Service Functions in an SDN-enabled Network Node

Network Functions Virtualization can enable each user (tenant) to define his desired set of network services, called (network) service graph. For instance, a User1may want his traffic to traverse a firewall before reaching his terminal, while a User2 may be interested in a different type of firewall and in a network monitor as well. This paper presents a prototype of an SDN-enabled node that, given anew user connected to one of its physical ports, it is able to dynamically instantiate the user's network service graph and force all his traffic to traverse the proper set of network functions.