FT-FW: Efficient connection failover in cluster-based stateful firewall

Proceedings of the 16th Euromicro Conference on Parallel, Distributed and Network-Based Processing, PDP 2008

Volumn , Issue , 2008, Pages 573-580

  Neira, P ^a   Gasea, R M ^a   Lefevre L ^b  

^a UNIVERSITY OF SEVILLE   (Spain)

^b UNIVERSITÉ DE LYON   (France)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER VIRUSES; INTERNET; NETWORK ARCHITECTURE; SOLUTIONS; TELECOMMUNICATION NETWORKS;

CLUSTER-BASED; CONNECTIONS (STRUCTURAL); FAIL OVER; FAILOVER MECHANISM; FAULT TOLERANT SOLUTIONS; FAULT-TOLERANT; LOW COSTS; NETWORK TRAFFICS; OFF-THE-SHELF SYSTEMS; REPLICATION TECHNIQUES; SECURITY SOLUTION (TSS); SINGLE POINT; SOFTWARE-BASED; STATEFUL FIREWALLS;

COMPUTER SYSTEM FIREWALLS;

EID: 47349105904     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PDP.2008.87     Document Type: Conference Paper

References (19)

1. P. Watson, "Slipping in the window: Tcp reset attacks," 2003. [Online]. Available: http://osvdb.org/reference/SlippingInTheWindow_v1.0.doc
2. P. Neira-Ayuso, "Conntrack-tools: Test case," 2007. [Online]. Available: http://people.netfilter.org/pablo/conntrack-tools/testcase.html
3. P. Neira, "Netfilter's connection tracking system," In :LOGIN:, The USENIX magazine, Vol. 32, No. 3, pages 34-39, 2006.
4. X. Zhang, M. A. Hiltunen, K. Marzullo, and R. D. Schlichting, "Customizable service state durability for service oriented architectures," in IEEE Proceedings of EDCC-6: European Dependable Computing Conference, Coimbra, Portugal, oct 2006.
5. R. Hinden, "Rfc 3768: Virtual router redundancy protocol (vrrp)," apr 2004.
6. A. Cassen, "Keepalived: Health checking for lvs & high availability," http://www.linuxvirtualserver.org.
7. "Rfc 908: Reliable data protocol," Jul 1984.
8. "Rfc 2960: Stream control transmission protocol," oct 2000.
9. "Rfc 4340: Datagram congestion control protocol," mar 2006.
10. P. Neira, "conntrackd: The netfilter's connection tracking userspace daemon," http://people.netfilter.org/pablo/.
11. A. Morton, "cyclesoack: a tool to accurately measure cpu consumption on linux systems," http://www.zip.com.au/akpm/linux/.
12. N. Aghdaie and Y. Tamir, "Client-transparent fault-tolerant web service," in 20th IEEE International Performance, Computing, and Communication conference, 2001, pp. 209-216.
13. N. aghdaie and Y. tamir, "Implementation and evaluation of transparent fault-tolerant web service with kernel-level support," in 20th IEEE International Conference on Computer Communications and Networks, 2002.
14. F. Sultan, K. Srinivasan, D. Iyer, and L. Ifnode, "Migratory tcp: Connection migration for service continuity in the internet," in 22nd International Conference on Distributed Computing Systems, 2002.
15. R. Zhang, T. Adelzaher, and J. Stankovic, "Efficient tcp connection failover in web server cluster," in IEEE INFOCOM 2004, Hong Kong, China, mar 2004.
16. M. Marwah, S. Mishra, and C. Fetzer, "Tcp server fault tolerance using connection migration to a backup server," In Proc. IEEE Intl. Conf. on Dependable Systems and Networks (DSN), pages 373-382, San Francisco, California, USA, Jun 2003.
17. F. Sultan, A. Bohra, S. Smaldone, Y. Pan, P. Gallard, I. Neamtiu, and L. Iftode, "Recovering internet service sessions from operating system failures," in IEEE Internet Computing, apr 2005.
18. P. Neira, L. Lefevre, and R. M. Gasea, "High availability support for the design of stateful networking equipments," in IEEE proceeding ARES '06: The First International Conference on Availability, Reliability and Security, Vienna, Austria, apr 2006.
19. A. Gorti, "A faul tolerant voip implementation based on open standards," in IEEE Proceedings EDCC-6, pag. 35-38, Coimbra, Portugal, oct 2006.