Tualatin: Towards network security service provision in cloud datacenters

Proceedings - International Conference on Computer Communications and Networks, ICCCN

Volumn , Issue , 2014, Pages

  Wang, Xiang ^a,b   Liu, Zhi ^a,b   Li, Jun ^b,c   Yang, Baohua ^d   Qi, Yaxuan ^e  

^a Department of Automation ^*  (China)

^b TSINGHUA UNIVERSITY   (China)

^c TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

^d IBM CHINA RESEARCH LAB   (China)

^e Yunshan Networks Inc   (China)

Author keywords

Cloud Datacenter; Network Security; Software Defined Networking

Indexed keywords

COMPUTER SOFTWARE; HARDWARE-SOFTWARE CODESIGN; SOFTWARE DEFINED NETWORKING;

CENTRALIZED CONTROLLERS; DATACENTER; FINE-GRAINED SECURITIES; HARDWARE AND SOFTWARE; NETWORK SECURITY SERVICES; SECURITY PROTECTION; SECURITY REQUIREMENTS; SOFTWARE DEFINED NETWORKING (SDN);

NETWORK SECURITY;

EID: 84908200467     PISSN: 10952055     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCCN.2014.6911782     Document Type: Conference Paper

References (28)

1. J. Sherry, S. Hasan, C. Scott, A. Krishnamurthy, S. Ratnasamy, and V. Sekar. Making middleboxes someone else's problem: network processing as a cloud service. In Proc. of SIGCOMM, 2012.
2. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. OpenFlow: enabling innovation in campus networks. In SIGCOMM CCR, 2008.
3. T. Koponen, M. Casado, N. Gude, J. Stribling, L. Poutievski, M. Zhu, R. Ramanathan, Y. Iwata, H. Inoue, T. Hama, and S. Shenker. Onix: A distributed control platform for large-scale production networks. In Proc. of OSDI, 2010.
4. Amazon Virtual Private Cloud. http://aws.amazon.com/vpc/
5. X. Wang, Z. Liu, Y. Qi, and J. Li. LiveCloud: A lucid orchestrator for cloud datacenters. In Proc. of CloudCom, 2012.
6. V. Sekar, N. Egi, S. Ratnasamy, M. Reiter, and G. Shi. Design and implementation of a consolidated middlebox architecture. In Proc. of NSDI, 2012.
7. J. W. Anderson, R. Braud, R. Kapoor, G. Porter, and A. Vahdat. xOMB: extensible open middleboxes with commodity servers. In Proc. of ANCS, 2012.
8. A. Gember, P. Prabhu, Z. Ghadiyali, and A. Akella. Toward softwaredefined middlebox networking. In Proc. of HotNets, 2012.
9. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson. FRESCO: Modular composable security services for software-defined networks. In Proc. of NDSS, 2013.
10. Z. A. Qazi, C. Tu, L. Chiang, R. Miao, V. Sekar, and M. Yu. SIMPLEfying middlebox policy enforcement using SDN. In Proc. of SIGCOMM, 2013.
11. K. Wang, Y. Qi, B. Yang, Y. Xue, and J. Li. LiveSec: towards effective security management in large-scale production networks. In Proc. of ICDCSW, 2012.
12. A. Gember, A. Krishnamurthy, S. St. John, R. Grandl, X. Gao, A. Anand, T. Benson, A. Akella, and V. Sekar. TR. Stratos: A networkaware orchestration layer for middleboxes in the cloud, 2013.
13. T. Koponen, K. Amidon, P. Balland, M. Casado, A. Chanda, B. Fulton, I. Ganichev, J. Gross, N. Gude, P. Ingram, E. Jackson, A. Lambeth, R. Lenglet, S. Li, A. Padmanabhan, J. Pettit, B. Pfaff, R. Ramanathan, S. Shenker, A. Shieh, J. Stribling, P. Thakkar, D. Wendlandt, A. Yip, R. Zhang. Network Virtualization inMulti-tenant Datacenters. VMWare TR-2013-001E, 2013.
14. J. Mudigonda, P. Yalagandula, J. Mogul, B. Stiekes, and Y. Pouffary. NetLord: A scalable multi-tenant network architecture for virtualized datacenters. In Proc. of SIGCOMM, 2011.
15. STT: A Stateless Transport Tunneling Protocol for Network Virtualization. http://tools.ietf.org/id/draft-davie-stt-04.txt
16. NVGRE: Network Virtualization using Generic Routing Encapsulation. http://tools.ietf.org/id/draft-sridharan-virtualization-nvgre-04.txt
17. VXLAN: A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks. http://tools.ietf.org/id/draft-mahalingam-duttdcops-vxlan-08.txt
18. V. Soundararajan and K. Govil. Challenges in building scalable virtualized datacenter management. In SIGOPS OSR, 2010.
19. NetFlow. http://www.ietf.org/rfc/rfc3954.txt
20. Network Functions Virtualisation. http://portal.etsi.org
21. M. Moshref, M. Yu, A. Sharma, and R. Govindan. Scalable rule management for data centers. In Proc. of NSDI, 2013.
22. Open vSwitch. http://www.openvswitch.org
23. Y. Qi, F. He, X. Wang, X. Chen, Y. Xue, and Jun Li. OpenGate: towards an open network services gateway. In Computer Communications, 2010.
24. Next-Generation Firewalls (NGFWs). http://www.gartner.com/itglossary/ next-generation-firewalls-ngfws
25. BasicDesignTenets. https://wiki.openstack.org/wiki/BasicDesignTenets
26. OpenAppID. http://newsroom.cisco.com/release/1354502
27. Neutron. https://wiki.openstack.org/wiki/Neutron
28. OpenDaylight. http://www.opendaylight.org/