Middlebox is a device that a network administrator manually sets behavior policies. The advent of SDN has made it possible to diversify the possibilities of implementing a middlebox implementation strategy. In order to improve the security of the information service center, this paper proposed an SDN-based dynamic intermediate policy implementation architecture which could respond to network events without administrators' participation, and proposed an interface which could satisfy the communication between the controller and the middlebox. This paper implemented a middlebox prototype with firewall and IPS in the virtual machine to evaluate the policy execution system and verified the experimental results obtained by the prototype. The results show that the architecture can dynamically execute the middlebox policy without affecting network performance, so that the network application can run normally.

[2020-01-05] Printed Article /doc/2018.06.0458/v2