## 6 Conclusions  
This paper introduces a novel architecture that takes advantage of the benefits introduced by SDNFV-based architecture, and it allows the detection and mitigation of DoS attacks by utilizing virtualized functions within a Docker cluster. The presented architecture represents a straightforward and cost-efficient SDN-based network that scrutinizes flows and identifies attacks through an entropy mechanism developed within the controller. This mechanism demonstrates heightened capabilities in detection and mitigation by specifically targeting the flow involved in the attack. Moreover, it can discriminate among various attributes such as IP addresses, ports, or protocols.  
The framework enables the deployment of diverse virtualized functionalities, which are contingent on the application running atop the RYU controller. While this work focuses on the presentation of the firewall virtualized function, the framework's versatility allows for the deployment of other functions, such as traffic conformation, packet deep inspection, sFlow collectors, and analyzers.  
The potential of the framework lies in ensuring a transparent implementation of network functionalities for end-users. Moreover, the control plane is managed by the controller/orchestrator, efficiently handling network resources to enhance overall performance.  
In future works, the algorithm used to detect and mitigate the DoS attack can be extended to detect other threats, as explained in Table 1. By leveraging the network's  
Figure 10: CPU usage: (**a**) without any mitigation mechanism and (**b**) with the proposed mitigation mechanism.  
programmability, the advantages offered by the OpenState framework, and the adaptability of virtualized functions, numerous other scenarios can be examined utilizing this innovative architecture. Additionally, the impact in more complex scenarios will be studied in depth in future work, where a greater number of nodes will be used to deploy the infrastructure to analyze the performance of the scenarios in detail.  
Conceptualization, M.D.-D., J.C.-C., and D.C.-P.; Methodology, J.C.-C., D.C.-P., and F.-J.R.-P.; Software, M.D.-D., J.C.-C., D.C.-P., J.G.-B., and F.-J.R.-P. Funding acquisition, D.C.-P.; Validation, M.D.-D., J.G.-B., and D.C.-P.; Formal analysis, M.D.-D., J.C.-C., and D.C.-P.; Investigation, M.D.-D., J.C.-C., and D.C.-P.; Resources, F.-J.-R.-P. and D.C.-P.; Data Curation, J.C.-C.; Writing--original draft preparation, M.D.-D., J.C.-C., and D.C.-P.; Writing--review and editing, M.D.-D., J.C.-C., D.C.-P., J.G.-B., and F.-J.R.-P.; Supervision, D.C.-P. and J.C.-C.; Project Administration, D.C.-P. All authors have read and agreed to the published version of the manuscript.  
This research was funded in part by TED2021-131699B-I00 AEI/10.13039/501100011033/Union Europea NextGenerationEU/PRTRR and by the Spanish Ministry of Science and Innovation [PID2020-112545 RB-C54, PDC2022-133900-I00].  
Not applicable.  
Data Availability Statement: Data is contained within the article.  
Author [PERSON] was employed by the company Department of Domains, Systems and Digital Toolkit, Public Business Entity Red.es. The remaining authors declare that the research was conducted in the absence of any commercial or financial relationships that could be construed as a potential conflict of interest.