# Enforcing Optimal ACL Policies Using K-Partite Graph in Hybrid SDN
## 4 Proposed Solution
### Decision Tree Traversing for Multiple ACL Policies
#### 5.2.2 Traffic Optimization by Varying Number of Switches

In Figure 19(a),b, traffic optimizations for different policy schemes, i.e., near the source policy implementation, near the destination policy implementation and optimum policy placement are compared by varying the number of switches. We keep the number of policies constant at 20, and number of nodes is 40 and changes the number of switches as 5, 10, 15, 20, 25, 30, 35, and 40 as shown in Figure 19(b). When there is less number of switches, then unwanted traffic ratio is less, and it is increased when the number of switches are increased. In Figure 19(b), we varied the number of switches with a difference of 2 switches. The graph shows the variation of unwanted traffic for all three schemes. In our proposed scheme, less unwanted traffic is generated. ### Number of ACL Implementations against ACL Policies

ACL policies are implemented on the ports of network devices; however, some ACL policies implementation varies for different schemes. If near the destination scheme or near the source scheme is adopted, then a large number of policies are implemented at the ports of network devices. Figure 20(b) shows the variation in the number ACL implementations concerning the number of policies. The figure shows that the optimal policy implementation scheme requires fewer policy implementation. Policy implementation increases with an increase in the number of policies. Figure 20(a) shows the policy implementations with a different number of switches while the number of policies is constant, i.e., 20. Figure 12.0 Simulation results of proposed and existing approaches for Traffic Optimization. (**a**) Traffic Optimization when the Number of policies is varying, and the number of switches is constant; (**b**) Traffic Optimization when the Number of policies is varying and number of switches is constant. Figure 12.1 Simulation results of proposed and existing approaches for Traffic Optimization. (**a**) Traffic Optimization when Number of switches is varying, and the number of policies is constant; (**b**) Traffic Optimization when Number of switches is varying and number of policies is constant. The figure represents the variation in the policy implementations when the number of switches is changed. In the case of near the source ACL policy implementation, a large number of policy implementations are required. ### End-to-End Delay Computation

End-to-End delay computation is the key element to evaluate the improvement in the proposed system. If policies are implanted near the source or near the destination, then packets must traverse the longer path to reach the destination or to be discarded. In the proposed approach, ACL policies are implemented at the optimal places in the network, so unnecessary packets travelling is limited. In this way, the overall efficiency of the system is improved. #### 5.4.1 When Number of Switches Are Varying

When policies are applied near the source node then it requires a lot of effort to filter the traffic for a specific flow. So, End-to-End delay is very high for the existing approach. Figure 22a shows that the existing approach has a high delay when policies are implemented near source nodes or near the destination nodes. Our proposed approach indicates a relatively small end to end delay because it automatically implements policies on the optimal places in the network. #### 5.4.2 When Number of Policies Are Varying

Figure 22b represents the condition when policies are varying while the number of switches is constant. In this case, when the number of policies is increasing in number, then end-to-end delay increases. A small number of polices are implemented at a small number of interfaces so the chances of congestion are very low. Surely, this decreases the time delay for each individual packet to reach the destination node. Figure 12.2 Simulation results of proposed and existing approaches for No. of ACL Implementations.