SIMPLE-fying middlebox policy enforcement using SDN

SIGCOMM 2013 - Proceedings of the ACM SIGCOMM 2013 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication

Volumn , Issue , 2013, Pages 27-38

  Qazi, Zafar Ayyub ^a   Tu, Cheng Chun ^a   Chiang, Luis ^a   Miao, Rui ^b   Sekar, Vyas ^a   Yu, Minlan ^b  

^a STONY BROOK UNIVERSITY   (United States)

^b UNIVERSITY OF SOUTHERN CALIFORNIA   (United States)

Author keywords

middlebox; network management; software defined networking

Indexed keywords

DESIGN CHALLENGES; MIDDLEBOXES; PACKET MODIFICATIONS; POLICY COMPLIANCE; POLICY COMPOSITIONS; POLICY ENFORCEMENT; RESOURCE MANAGEMENT; SOFTWARE-DEFINED NETWORKINGS;

COMMUNICATION; COMPUTER ARCHITECTURE; NETWORK MANAGEMENT;

NETWORK ARCHITECTURE;

EID: 84883284152     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2486001.2486022     Document Type: Conference Paper

References (46)

1. Mininet. http://yuba.stanford.edu/foswiki/bin/view/OpenFlow/Mininet.
2. NEC's Simple Middlebox Configuration (SIMCO) Protocol. RFC 4540.
3. Open vSwitch. http://openvswitch.org/.
4. Palo Alto Networks. http://www.paloaltonetworks.com/.
5. POX Controller. http://www.noxrepo.org/pox/about-pox/.
6. Top million US websites. http://ak.quantcast.com/quantcast-top-million. zip.
7. World Enterprise Network Security Markets. http://www.abiresearch.com/ research/product/1006059-world-enterprise-network-and-data-security/.
8. A. Anand et al. Packet Caches on Routers: The Implications of Universal Redundant Traffic Elimination. In Proc. SIGCOMM, 2008.
9. J. W. Anderson, R. Braud, R. Kapoor, G. Porter, and A. Vahdat. xOMB: Extensible Open Middleboxes with Commodity Servers. In Proc. ANCS, 2012.
10. T. Benson, A. Akella, A. Shaikh, and S. Sahu. CloudNaaS: A Cloud Networking Platform for Enterprise Applications. In Proc. SOCC, 2011.
11. T. Benson, A. Anand, A. Akella, and M. Zhang. The Case for Fine-Grained Traffic Engineering in Data Centers. In Proc. INM/WREN, 2010.
12. M. Casado et al. Ethane: Taking Control of the Enterprise. In Proc. SIGCOMM, 2007.
13. T. Cormen, C. Leiserson, R. Rivest, and C. Stein. The Rabin-Karp algorithm. Introduction to Algorithms, 2001.
14. A. R. Curtis et al. DevoFlow: Scaling Flow Management for High-Performance Networks. In Proc. SIGCOMM, 2011.
15. M. Dobrescu et al. RouteBricks: Exploiting Parallelism to Scale Software Routers. In Proc. SOSP, 2009.
16. S. Fayazbakhsh, V. Sekar, M. Yu, and J. Mogul. FlowTags: Enforcing Network-Wide Policies in the Presence of Dynamic Middlebox Actions. In Proc. HotSDN, 2013 (to appear).
17. A. Feldmann et al. Deriving Traffic Demands for Operational IP Networks: Methodology and Experience. In Proc. SIGCOMM, 2000.
18. A. Gember, P. Prabhu, Z. Ghadiyali, and A. Akella. Toward Software-Defined Middlebox Networking. In Proc. HotNets-XI, 2012.
19. G. Gibb, H. Zeng, and N. McKeown. Outsourcing Network Functionality. In Proc. HotSDN, 2012.
20. P. Gill et al. Understanding Network Failures in Data Centers: Measurement, Analysis, and Implications. In Proc. SIGCOMM, 2011.
21. A. Greenlagh et al. Flow Processing and the Rise of Commodity Network Hardware. In CCR, 2009.
22. N. Gude et al. NOX: Towards an Operating System for Networks. In CCR, 2008.
23. V. Heorhiadi, M. K. Reiter, and V. Sekar. New Opportunities for Load Balancing in Network-Wide Intrusion Detection Systems. In Proc. CoNEXT, 2012.
24. X. Jin, L. E. Li, L. Vanbever, and J. Rexford. SoftCell: Taking Control of Cellular Core Networks. In TR-950-13, Princeton University, 2013.
25. D. Joseph and I. Stoica. Modeling middleboxes. IEEE Network, 2008.
26. D. A. Joseph, A. Tavakoli, and I. Stoica. A Policy-aware Switching Layer for Data Centers. In Proc. SIGCOMM, 2008.
27. P. Kazemian, G. Varghese, and N. McKeown. Header Space Analysis: Static Checking for Networks. In Proc. NSDI, 2012.
28. E. Kohler, R. Morris, B. Chen, J. Jannotti, and M. F. Kaashoek. The Click Modular Router. ACM TOS, Aug 2000.
29. T. Koponen et al. Onix: A Distributed Control Platform for Large-scale Production Network. In Proc. OSDI, 2010.
30. L. E. Li et al. PACE: Policy-Aware Application Cloud Embedding. In Proc. INFOCOM, 2013.
31. C. Monsanto, J. Reich, N. Foster, J. Rexford, and D. Walker. Composing Software Defined Networks. In Proc. NSDI, 2013.
32. M. Moshref, M. Yu, A. Sharma, and R. Govindan. vCRIB: Virtualized Rule Management in the Cloud. In Proc. NSDI, 2013.
33. V. Paxson. Bro: A System for Detecting Network Intruders in Real-Time. In Computer Networks, pages 2435-2463, 1999.
34. H. Pucha, D. G. Andersen, and M. Kaminsky. Exploiting Similarity for Multi-Source Downloads using File Handprints. In Proc. NSDI, 2007.
35. S. Raza et al. MeasuRouting: A Framework for Routing Assisted Traffic Monitoring. In Proc. INFOCOM, 2010.
36. C. Rotsos, N. Sarrar, S. Uhlig, R. Sherwood, and A. Moore. OFLOPS: An Open Framework for Openflow Switch Evaluation. In Proc. PAM, 2012.
37. V. Sekar et al. The middlebox manifesto: enabling innovation in middlebox deployment. In Proc. HotNets, 2011.
38. V. Sekar et al. Design and Implementation of a Consolidated Middlebox Architecture. In Proc. NSDI, 2012.
39. J. Sherry et al. Making Middleboxes Someone Else's Problem: Network Processing as a Cloud Service. In Proc. SIGCOMM, 2012.
40. N. Spring, R. Mahajan, and D. Wetherall. Measuring ISP Topologies with Rocketfuel. In Proc. SIGCOMM, 2002.
41. M. Stiemerling, J. Quittek, and T. Taylor. Middlebox communication (MIDCOM) protocol semantics. RFC 5189.
42. R. Wang, D. Butnariu, and J. Rexford. Openflow-Based Server Load Balancing Gone Wild. In Proc. Hot-ICE, 2011.
43. Z. Wang, Z. Qian, Q. Xu, Z. Mao, and M. Zhang. An Untold Story of Middleboxes in Cellular Networks. In Proc. SIGCOMM, 2011.
44. B. White et al. An Integrated Experimental Environment for Distributed Systems and Networks. In Proc. of OSDI, 2002.
45. M. Yu, J. Rexford, M. J. Freedman, and J. Wang. Scalable Flow-Based Networking with DIFANE. In Proc. SIGCOMM, 2010.
46. Y. Zhang and V. Paxson. Detecting Stepping Stones. In Proc. USENIX Security Symposium, 2000.