Zero Trust Network Access Design for Software-defined Data Centers and its Performance Evaluation

Recently, with the emergence of flexible system access approaches, the concept of ZTA has regained attention as a response to network threat environments.While traditional network security methods focus on access control at external and internal boundary, the ZTA concept requires verification at all times and does not trust any user or device.This paper proposes an SDN-based ZTNA solution that can be flexibly applied to SDDC and presents an implementation strategy for ZTNA-enabled SDDC through the implementation of a testbed using an enterprise-grade open-source SDDC solution.Additionally, by performing performance evaluations of access control based on traffic flows within the implementation testbed, we show that it is possible to flexibly enhance the security of SDDC by blocking unauthorized access not only at the boundaries of external and internal networks but also within the internal network.