SPA Scalability in Software Defined PerimeterKrmelj, Gregor Robert (Avtor) Ciglarič, Mojca (Mentor) Pančur, Matjaž (Komentor) SPAFirewallNetwork SecurityeBPFXDPNetwork Protocol DesignHidden ServicesSingle Packet Authorization (SPA) is a method of gaining network access to a network service by sending a single IP packet which contains all the necessary data to authenticate and authorize a particular client. The result of the exchange is a temporary firewall rule that enables the client access to the requested service. OpenSPA is an implementation of SPA which we have re-implemented from the ground up with countermeasures for Denial of Service (DoS) attacks and replaced the binary encoding protocol with a TLV variant. Using our testing environment with a 100 Gbit/s network we were able to defend against a 6.7 Mpps DoS attacks using a single CPU core and a 106 Mpps attack using 16 CPU cores.20222022-12-06 14:15:01Magistrsko delo/naloga142965sl