Blockchain-Based Implementation of Service Function Chains in Multicloud and Multitenant Environments Over Containerized Networks

To address the growing demand for secure, flexible services, this paper emphasizes the integration of zero-trust security principles within service function chains (SFCs). Zero-trust model reduces security risks associated with the complex and customized nature of contemporary service delivery. SFCs deliver these flexible services, but current implementations often require configuring specific forwarding devices or network plugins, complicating deployment and maintenance. Additionally, these implementations generally lack robust mechanisms for ensuring trustworthiness and traceability, crucial for preventing data tampering and facilitating effective monitoring and rapid responses to security incidents. This paper presents a four-layer architecture, termed SFC-BC, which leverages Kubernetes for managing containerized networks and Hyperledger Fabric for blockchain-based management. Employing distributed databases with synchronization and hash verification, SFC-BC enhances the traceability and reliability of data. We have developed a prototype to demonstrate the practical implementation of SFC-BC, proving that it prevents unauthenticated access to SFCs. This holistic approach facilitates efficient SFC deployment across diverse environments without the intricacies typically involved in network configuration, operation, and management.