hFT-FW: Hybrid fault-tolerance for cluster-based stateful firewalls

Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS

Volumn , Issue , 2008, Pages 525-532

  Neira, P ^a   Gasca, R M ^a   Lefevre L ^b  

^a UNIVERSITY OF SEVILLE   (Spain)

^b UNIVERSITÉ DE LYON   (France)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL LINGUISTICS; COMPUTER SYSTEM FIREWALLS; ERROR DETECTION; INFORMATION THEORY; INTERNET; QUALITY ASSURANCE;

BANDWIDTH RESOURCES; BAYESIAN TECHNIQUES; CLUSTER-BASED; COMMERCIAL OFF THE SHELVES; FAULT-TOLERANT; HARDWARE ERRORS; INTERNET SERVICES; LAZY REPLICATIONS; PRO-ACTIVE APPROACHES; PROACTIVE FAULTS; REACTIVE MODELS; REACTIVE STATE; STATEFUL FIREWALLS; WIDE SPECTRUMS;

FAULT TOLERANCE;

EID: 60649087791     PISSN: 15219097     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICPADS.2008.124     Document Type: Conference Paper

References (21)

1. M. Wiesmann, F. Pedone, A. Schiper, B. Kemme, and G. Alonso, "Understanding replication in databases and distributed systems," ICDCS, 2000.
2. R. Jimenez-Peris, M. Patino-Martinez, B. Kemme, and G. Alonso, "How to select a replication protocol according to scalability, availability, and communication overhead," SRDS, p. 24, 2001.
3. R. Zhang, T. Adelzaher, and J. Stankovic, "Efficient TCP Connection Failover in Web Server Cluster," in IEEE INFOCOM 2004, Hong Kong, China, mar 2004.
4. F. Sultan, K. Srinivasan, D. Iyer, and L. Iftode, "Migratory TCP: Connection Migration for Service Continuity in the Internet," in 22nd International Conference on Distributed Computing Systems, 2002.
5. M. Marwah, S. Mishra, and C. Fetzer, "TCP server fault tolerance using connection migration to a backup server," In Proc. IEEE Intl. Conf. on Dependable Systems and Networks (DSN), pages 373-382, San Francisco, California, USA, Jun 2003.
6. N. Ayari, D. Barbaron, L. Lefevre, and P. Primet, "T2CP-AR: A system for Transparent TCP Active Replication," in AINA '07: Proceedings of the 21st International Conference on Advanced Networking and Applications. Washington, DC, USA: IEEE Computer Society, 2007, pp. 648-655.
7. A. Gorti, "A faul tolerant VoIP implementation based on Open Standards," in IEEE Proceedings EDCC-6, pag. 35-38, Coimbra, Portugal, Oct. 2006.
8. P. N. Ayuso, R. M. Gasca, and L. Lefevre, "FT-FW: Efficient Connection Failover in Cluster-based Stateful Firewalls," in Proceedings of the 16th Euromicro Conference on Parallel, Distributed and Network-Based Processing (PDP 2008). Washington, DC, USA: IEEE Computer Society, 2008, pp. 573-580.
9. P. Neira Ayuso, L. Lefevre, and R. M. Gasca, "Multiprimary support for the availability of cluster-based stateful firewalls using FT-FW," in Proceedings ESORICS'08: European Symposium on Research in Computer Security, Malaga, Spain, Oct. 2008.
10. P. Narasimhan, T. A. Dumitras, A. M. Paulos, S. M. Pertet, C. F. Reverte, J. G. Slember, and D. Srivastava, "Mead: support for real-time fault-tolerant corba: Research articles," Concurr. Comput.: Pract. Exper., vol. 17, no. 12, pp. 1527-1545, 2005.
11. "Linux edac (error detection and correction) project," http://bluesmoke.sourceforge.net.
12. N. A. D. Turnbull, "Failure prediction in hardware systems," Departament of Computer Science. University of California, CA, USA, Tech. Rep., 2003.
13. G. Vallee and K. Charoenpornwattana, "A framework for proactive fault tolerance," in Proceedings of 3rd international conference on Availability, Reliability and Security (ARES), Mar. 2008.
14. A. B. Nagarajan, F. Mueller, C. Engelmann, and S. L. Scott, "Proactive fault tolerance for hpc with xen virtualization," in ICS '07: Proceedings of the 21st annual international conference on Supercomputing. New York, NY, USA: ACM, 2007, pp. 23-32.
15. G. Vallee, T. Naughton, C. Engelmann, H. Ong, and S. L. Scott, "System-level virtualization for high performance computing," Proceedings of the 16th Euromicro Conference on Parallel, Distributed and Network-Based Processing (PDP 2008, vol. 0, pp. 636-643, 2008.
16. M. Gouda and A. Liu, "A model of stateful firewalls and its properties," Proceedings of International Conference on Dependable Systems and Networks, 2005 (DSN), pp. 128-137, 28 June-1 July 2005.
17. R. Hinden, "Rfc 3768: Virtual router redundancy protocol (vrrp)," apr 2004.
18. A. Cassen, "Keepalived: Health checking for lvs & high availability," http://www.linuxvirtualserver.org.
19. I. Good, "The estimation of probabilities: An essay on modern bayesian methods," MIT press, 1965.
20. P. Neira, "conntrackd: The netfilter's connection tracking userspace daemon," http://people.netfilter.org/pablo/.
21. -, "Extension to implement naive bayes state replication," 2008. [Online]. Available: http://dune.lsi.us.es/bayes.tgz