Design and implementation of a consolidated middlebox architecture

Proceedings of NSDI 2012: 9th USENIX Symposium on Networked Systems Design and Implementation

Volumn , Issue , 2012, Pages 323-336

  Sekar, Vyas ^a   Egi, Norbert ^d   Ratnasamy, Sylvia ^b   Reiter, Michael K ^c   Shi, Guangyu ^d  

^a INTEL CORPORATION   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c UNIVERSITY OF NORTH CAROLINA   (United States)

^d HUAWEI TECHNOLOGIES CO LTD   (China)

Author keywords

[No Author keywords available]

Indexed keywords

SYSTEMS ANALYSIS;

BOTTOM UP APPROACH; DESIGN AND IMPLEMENTATIONS; NETWORK DEPLOYMENT; NETWORK PROVISIONING; NETWORK REQUIREMENTS; PROTOTYPE IMPLEMENTATIONS; SPECIALIZED NETWORKS; STAND-ALONE DEVICES;

NETWORK ARCHITECTURE;

EID: 84996432988     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (40)

1. IBM Network Intrusion Prevention System Virtual Appliance. http://www-01.ibm.com/software/tivoli/ products/virtualized-network-security/ requirements.html.
2. Big-IP hardware datasheet. www.f5.com/pdf/products/ big-ip-platforms-ds.pdf.
3. Crossbeam network consolidation. http://www.crossbeam.com/why-crossbeam/ network-consolidation/.
4. Intel 82599 10 gigabit ethernet. http://download.intel.com/design/network/ datashts/82599-datasheet.pdf.
5. Linux containers. http://lxc.sourceforge.net/man/lxc.html.
6. Middlebox Communications (MIDCOM) Protocol Semantics. RFC 3989.
7. Silver Peak releases software-only WAN optimization. http://www.networkworld.com/news/2 011/ 0 71311-silver-peak-releases-software-only-wan. html.
8. SR-IOV. http://www.pcisig.com/ specifications/iov/single-root/.
9. World Enterprise Network and Data Security Markets. http://www.abiresearch.com/press/ 35 91-Enterprise+Network+and+Data+Security+ Spending+Shows+Remarkable+Resilience.
10. M. Allman. On the Performance of Middleboxes. In Proc. IMC, 2003.
11. A. Anand, A. Gupta, A. Akella, S. Seshan, and S. Shenker. Packet Caches on Routers: The Implications of Universal Redundant Traffic Elimination. In Proc. of SIGCOMM, 2008.
12. J. Anderson. Consistent Cloud Computing Storage as the Basis for Distributed Applications, chapter 7. University of California, San Diego, 2012.
13. T. Benson, A. Akella, and A. Shaikh. Demystifying configuration challenges and trade-offs in network-based isp services. In Proc. SIGCOMM, 2011.
14. S. Boyd-Wickizer, A. T. Clements, Y. Mao, A. Pesterev, M. F. Kaashoek, R. Morris, and N. Zeldovich. An Analysis of Linux Scalability to Many Cores. In Proc. OSDI, 2010.
15. M. Caesar, D. Caldwell, N. Feamster, J. Rexford, A. Shaikh, and J. van der Merwe. Design and implementation of a Routing Control Platform. In Proc. of NSDI, 2005.
16. M. Dobrescu, K. Argyarki, and S. Ratnasamy. Toward Predictable Performance in Software Packet-Processing Platforms. In Proc. NSDI, 2012.
17. M. Dobrescu, K. Argyraki, M. Manesh, G. Iannaccone, and S. Ratnasamy. Controlling Parallelism in Multi-core Software Routers. In Proc. PRESTO, 2010.
18. M. Dobrescu, N. Egi, K. Argyraki, B.-G. Chun, K. Fall, G. Iannaccone, A. Knies, M. Manesh, and S. Ratnasamy. RouteBricks: Exploiting Parallelism to Scale Software Routers. In Proc. SOSP, 2009.
19. N. Egi, A. Greenhalgh, M. Handley, M. Hoerdt, F. Huici, and L. Mathy. Towards high performance virtual routers on commodity hardware. In Proc. CoNEXT, 2008.
20. A. Feldmann, A. G. Greenberg, C. Lund, N. Reingold, J. Rexford, and F. True. Deriving Traffic Demands for Operational IP Networks: Methodology and Experience. In Proc. of ACM SIGCOMM, 2000.
21. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Meyers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang. A Clean Slate 4D Approach to Network Control and Management. ACM SIGCOMM CCR, 35(5), Oct. 2005.
22. A. Greenlagh, M. Handley, M. Hoerdt, F. Huici, L. Mathy, and P. Papadimitriou. Flow Processing and the Rise of Commodity Network Hardware. ACM CCR, Apr. 2009.
23. S. Han, K. Jang, K. Park, and S. Moon. PacketShader: a GPU-Accelerated Software Router. In Proc. SIGCOMM, 2010.
24. M. Honda, Y. Nishida, C. Raiciu, A. Greenhalgh, M. Handley, and H. Tokuda. Is it still possible to extend TCP? In Proc. IMC, 2011.
25. D. Joseph and I. Stoica. Modeling middleboxes. IEEE Network, 2008.
26. D. A. Joseph, A. Tavakoli, and I. Stoica. A Policy-aware Switching Layer for Data Centers. In Proc. SIGCOMM, 2008.
27. G. Lu, C. Guo, Y. Li, Z. Zhou, T. Yuan, H. Wu, Y. Xiong, R. Gao, and Y. Zhang. ServerSwitch: A Programmable and High Performance Platform for Data Center Networks. In Proc. NSDI, 2011.
28. Y. Ma, S. Banerjee, S. Lu, and C. Estan. Leveraging Parallelism for Multi-dimensional Packet Classification on Software Routers. In Proc. SIGMETRICS, 2010.
29. M. Mitzenmacher, A. W. Richa, and R. Sitaraman. The Power of Two Random Choices: A Survey of Techniques and Results. Handbook of Randomized Computing, 2000.
30. R. Morris, E. Kohler, J. Jannotti, and M. F. Kaashoek. The click modular router. SIGOPS Operating Systems Review, 33(5):217-231, 1999.
31. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. OpenFlow: enabling innovation in campus networks. ACM SIGCOMM Computer Communication Review, 38(2):69-74, 2008.
32. V. Paxson. Bro: A System for Detecting Network Intruders in Real-Time. In Proc. USENIX Security Symposium, 1998.
33. L. Rizzo, M. Carbone, and G. Catalli. Transparent acceleration of software packet forwarding using netmap. In Proc. Infocom, 2012.
34. M. Roughan. Simplifying the Synthesis of Internet Traffic Matrices. ACM SIGCOMM CCR, 35(5), 2005.
35. V. Sekar, N. Egi, S. Ratnasamy, M. K. Reiter, and G. Shi. Design and implementation of a consolidated middlebox architecture. Technical Report UCB/EECS-2011-110, EECS Department, University of California, Berkeley, Oct 2011.
36. V. Sekar, S. Ratnasamy, M. K. Reiter, N. Egi, and G. Shi. The Middlebox Manifesto: Enabling Innovation in Middlebox Deployments. In Proc. HotNets, 2011.
37. V. Sekar, M. K. Reiter, W. Willinger, H. Zhang, R. Kompella, and D. G. Andersen. cSamp: A System for Network-Wide Flow Monitoring. In Proc. of NSDI, 2008.
38. N. Spring, R. Mahajan, and D. Wetherall. Measuring ISP Topologies with Rocketfuel. In Proc. of ACM SIGCOMM, 2002.
39. M. Vallentin, R. Sommer, J. Lee, C. Leres, V. Paxson, and B. Tierney. The NIDS Cluster: Scalable, Stateful Network Intrusion Detection on Commodity Hardware. In Proc. of RAID, 2007.
40. H. Zhiteng. I/O Virtualization Performance. http://xen.org/files/xensummit-intel0 9/ xensummit2 0 0 9-IOVirtPerf.pdf