Ally: OS-transparent packet inspection using sequestered cores

Proceedings - 2011 7th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2011

Volumn , Issue , 2011, Pages 1-11

  Huang, Jen Cheng ^a   Monchiero, Matteo ^b   Turner, Yoshio ^c   Lee, Hsien Hsin S ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

^b Intel Labs   (Spain)

^c HEWLETT PACKARD LABORATORIES   (United States)

Author keywords

computer architecture; isolation; multicore; multicore partitioning; packet inspection

Indexed keywords

DATA CENTERS; DEEP PACKET INSPECTION; DISTRIBUTED DEPLOYMENT; HARDWARE MECHANISM; ISOLATION; LOW OVERHEAD; MANAGEMENT SERVICE; MANAGEMENT TASKS; MULTI CORE; MULTI-CORE PROCESSOR; NETWORK PACKETS; PACKET INSPECTION; PACKET PROCESSING; SERVER PLATFORM; SOFTWARE ENVIRONMENTS; SYSTEM EMULATION; VIRTUAL MACHINES;

COMPUTER ARCHITECTURE; COMPUTER HARDWARE; COMPUTER OPERATING SYSTEMS; ENVIRONMENTAL MANAGEMENT; INSPECTION; NETWORK ARCHITECTURE;

PACKET NETWORKS;

EID: 81255150503     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ANCS.2011.11     Document Type: Conference Paper

References (24)

1. Deep packet inspection: 2009 market forecast. Lightreading Insider, 8(11), December 2008.
2. Colin Dixon, Hardeep Uppal, Vjekoslav Brajkovic, Dane Brandon, Thomas Anderson, and Arvind Krishnamurthy. Ettm: a scalable fault tolerant network manager. In Proceedings of the 8th USENIX conference on Networked systems design and implementation, NSDI'11, pages 7-7, Berkeley, CA, USA, 2011. USENIX Association.
3. Intel. Introducing Intel many integrated core architecture, Online: http://www.intel.com/technology/architecturesilicon/ mic/index.htm.
4. Fabrice Bellard. Qemu, a fast and portable dynamic translator. In ATEC '05: Proceedings of the annual conference on USENIX Annual Technical Conference, pages 41-41. USENIX Association, 2005.
5. Intel Active Management Technology. Online: http://www.intel.com/ technology/platformtechnology/ intel-amt.
6. HP Integrated Lights-Out (iLO) Standard. Online: http://www.hp.com/go/ ilo.
7. Aravind Menon, Simon Schubert, and Willy Zwaenepoel. Twindrivers: semi-automatic derivation of fast and safe hypervisor network drivers from guest os drivers. In Proceeding of the 14th international conference on Architectural support for programming languages and operating systems, ASPLOS '09, pages 301-312, New York, NY, USA, 2009. ACM.
8. Vinod Ganapathy, Matthew J. Renzelmann, Arini Balakrishnan, Michael M. Swift, and Somesh Jha. The design and implementation of microdrivers. In Proceedings of the 13th international conference on Architectural support for programming languages and operating systems, ASPLOS XIII, pages 168-178, New York, NY, USA, 2008. ACM.
9. Luigi Rizzo and Matteo Landi. netmap: memory mapped access to network devices. In SIGCOMM 2011 Poster, Aug 2011.
10. Jose Renato Santos, Yoshio Turner, G. Janakiraman, and Ian Pratt. Bridging the gap between software and hardware techniques for i/o virtualization. In USENIX 2008 Annual Technical Conference on Annual Technical Conference, pages 29-42, Berkeley, CA, USA, 2008. USENIX Association.
11. Kaushik Kumar Ram, Jose Renato Santos, Yoshio Turner, Alan L. Cox, and Scott Rixner. Achieving 10 gb/s using safe and transparent network interface virtualization. In VEE '09: Proceedings of the 2009 ACM SIGPLAN/SIGOPS international conference on Virtual execution environments, pages 61-70, New York, NY, USA, 2009. ACM.
12. Moinuddin K. Qureshi and Yale N. Patt. Utility-based cache partitioning: A low-overhead, high-performance, runtime mechanism to partition shared caches. In Proceedings of the 39th Annual IEEE/ACM International Symposium on Microarchitecture, MICRO 39, pages 423-432, Washington, DC, USA, 2006. IEEE Computer Society.
13. CloudShield Technologies. Online: http://www.cloudshield.com.
14. Intel Vpro Technology. Online: http://www.intel.com/vpro.
15. Joshua LeVasseur, Volkmar Uhlig, Jan Stoess, and Stefan Götz. Unmodified device driver reuse and improved system dependability via virtual machines. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation, San Francisco, CA, December 2004.
16. Keir Fraser, Steve Hand, Rolf Neugebauer, Ian Pratt, Andrew Warfield, and Mark Williams. Safe hardware access with the Xen virtual machine monitor. In OASIS '04: Proceedings of the 1st Workshop on Operating System and Architectural Support for the on demand IT Infrastructure, October 2004.
17. Derek McAuley and Rolf Neugebauer. A case for virtual channel processors. In NICELI '03: Proceedings of the ACM SIGCOMM workshop on Network-I/O convergence, pages 237-242, New York, NY, 2003. ACM.
18. Muli Ben-Yehuda, Michael D. Day, Zvi Dubitzky, Michael Factor, Nadav Har'El, Abel Gordon, Anthony Liguori, Orit Wasserman, and Ben-Ami Yassour. The turtles project: Design and implementation of nested virtualization. In OSDI: 9th USENIX Symposium on Operating Systems Design and Implementation, 2010.
19. Jonathan M. McCune, Bryan J. Parno, Adrian Perrig, Michael K. Reiter, and Hiroshi Isozaki. Flicker: an execution infrastructure for tcb minimization. In Eurosys '08: Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008, pages 315-328, 2008.
20. Eric Keller, Jakub Szefer, Jennifer Rexford, and Ruby B. Lee. Nohype: virtualized cloud infrastructure without the virtualization. In ISCA '10: Proceedings of the 37th annual international symposium on Computer architecture, pages 350-361, New York, NY, 2010. ACM.
21. Takahiro Shinagawa, Hideki Eiraku, Kouichi Tanimoto, Kazumasa Omote, Shoichi Hasegawa, Takashi Horie, Manabu Hirano, Kenichi Kourai, Yoshihiro Oyama, Eiji Kawai, Kenji Kono, Shigeru Chiba, Yasushi Shinjo, and Kazuhiko Kato. Bitvisor: a thin hypervisor for enforcing i/o device security. In VEE '09: Proceedings of the 2009 ACM SIGPLAN/SIGOPS international conference on Virtual execution environments, pages 121-130, 2009.
22. Weidong Shi, Hsien-Hsin S. Lee, Laura Falk, and Mrinmoy Ghosh. An integrated framework for dependable and revivable architectures using multicore processors. In ISCA '06: Proceedings of the 33rd annual international symposium on Computer Architecture, pages 102-113, 2006.
23. Shimin Chen, Michael Kozuch, Theodoros Strigkos, Babak Falsafi, Phillip B. Gibbons, Todd C. Mowry, Vijaya Ramachandran, Olatunji Ruwase, Michael Ryan, and Evangelos Vlachos. Flexible hardware acceleration for instruction-grain program monitoring. In ISCA '08: Proceedings of the 35th International Symposium on Computer Architecture, pages 377-388, 2008.
24. Yaozu Dong, Zhao Yu,, and Greg Rose. SR-IOV networking in Xen: Architecture, design and implementation. In WIOV '08: Proceedings of the 1st Workshop on I/O Virtualization, December 2008.