Building extensible networks with rule-based forwarding

Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation, OSDI 2010

Volumn , Issue , 2019, Pages 379-392

  Popa, Lucian ^a,b   Egi, Norbert ^c   Ratnasamy, Sylvia ^d   Stoica, Ion ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b ICSI   (United States)

^c LANCASTER UNIVERSITY   (United Kingdom)

^d INTEL CORPORATION   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SYSTEMS ANALYSIS;

ARCHITECTURAL CONCEPTS; CONTENT CACHING; FORWARD PACKETS; MIDDLEBOXES; NETWORK DESIGN; NETWORK EQUIPMENT; RULE BASED;

RADIAL BASIS FUNCTION NETWORKS;

EID: 85076913300     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (54)

1. AMD Opteron Server Processor. http://www.amd.com/.
2. Arbor Networks Peakflow: www.arbornetworks.com/en/peakflow-ip-flowbased-technology.html.
3. Arista 7100 Series Switches. http://www.aristanetworks.com/en/7100Series.
4. CAIDA: www.caida.org/data/realtime/.
5. Certicom Suite B IP Core, http://www.certicom.com.
6. Cisco Traffic Anomaly Detector: www.cisco.com/en/us/products/ps5892/.
7. CLP-17: High Performance Elliptic Curve Cryptography (ECC) Point Multiplier Core, http://www.ellipticsemi.com/products-clp-17.php.
8. Elliptic Curve Point Multiply and Verify Core, http://www.ipcores.com/ elliptic curve crypto ip core.htm.
9. Internet Systems Consortium, Internet Host Count History, https://www.isc.org/solutions/survey/history, 2009.
10. Lincoln laboratory: Darpa intrusion detection data set (week 6). http://www.ll.mit.edu/mission/communications/ist/corpora/ideval/data/.
11. NLANR: Internet Measurement and Analysis. http://moat.nlanr.net.
12. Open Flow Switch Consortium. http://www.openflowswitch.org.
13. Snort IDS/IPS, http://www.snort.org.
14. RFC 1305 - Network Time Protocol. 1992.
15. Juniper Networks Delivers Platform for Customer and Partner Application Development. Juniper Press Release, Dec. 2007.
16. Cisco Opens Routers to Customers and Third-Party Applications. Cisco Press Release, April 2008.
17. Next Generation Intel Microarchitecture (Nehalem). http://intel.com, 2008.
18. Digital Signature Standard (DSS). Federal Information Processing Standards Publication, June 2009.
19. T. Akin. Hardening Cisco Routers. O'Reilly, 2002.
20. K. Argyraki and D. R. Cheriton. Loose Source Routing as a Mechanism for Traffic Policies. In ACM SIGCOMM Workshops, 2004.
21. K. Argyraki and D. R. Cheriton. Active Internet Traffic Filtering: Real-time Response to Denialof-Service Attacks. In USENIX Annual Conf., 2005.
22. H. Ballani, Y. Chawathe, S. Ratnasamy, T. Roscoe, and S. Shenker. Off by Default! In ACM HotNets, 2005.
23. R. Beverly and S. Bauer. The Spoofer project: Inferring the extent of source address filtering on the Internet. In SRUTI Workshop, 2005.
24. S. Boyd-Wickizer, R. Morris, and M. F. Kaashoek. Reinventing Scheduling for Multicore Systems. In HotOS, 2009.
25. K. L. Calvert, J. Griffioen, and S. Wen. Lightweight Network Support for Scalable End-to-End Services. In ACM SIGCOMM, August 2002.
26. M. Dobrescu, N. Egi, K. Argyraki, B.G. Chun, K. Fall, G. Iannaccone, A. Knies, M. Manesh, and S. Ratnasamy. RouteBricks: Exploiting Parallelism to Scale Software Routers. In ACM SOSP, 2009.
27. N. Egi, A. Greenhalgh, M. Handley, M. Hoerdt, F. Huici, and L. Mathy. Towards High Performance Virtual Routers on Commodity Hardware. In Proceedings of 4th Conference on Future Networking Technologies (ACM CoNEXT 2008), Madrid, Spain, December 2008.
28. A. Greenhalgh, F. Huici, M. Hoerdt, P. Papadimitriou, M. Handley, and L. Mathy. Flow processing and the rise of commodity network hardware. SIGCOMM Comput. Commun. Rev., 39(2), April 2009.
29. S. Guha and P. Francis. An End-Middle-End Approach to Connection Establishment. In ACM SIGCOMM, 2007.
30. J. W. Haines, R. P. Lippmann, D. J. Fried, E. Tran, S. Boswell, and M. A. Zissman. 1999 DARPA Intrusion Detection System Evaluation: Design and Procedures. In MIT Lincoln Laboratory Technical Report.
31. S. Han, K. Jang, K. Park, and S. Moon. PacketShader: A GPU-Accelerated Software Router. In ACM SIGCOMM, 2010.
32. J. Ioannidis and S. M. Bellovin. Implementing Pushback: Router-Based Defense Against DDoS Attacks. In NDDS, 2002.
33. V. Jacobson, D. K. Smetters, J. D. Thornton, M. F. Plass, N. H. Briggs, and R. L. Braynard. Networking Named Content. In ACM CoNEXT), 2009.
34. K. Järvinen et al. Fast point multiplication on Koblitz curves: Parallelization method and implementations. Microprocess. Microsyst., 33(2), 2009.
35. T. Koponen, M. Chawla, B.-G. Chun, A. Ermolinskiy, K. H. Kim, S. Shenker, and I. Stoica. A data-oriented (and beyond) network architecture. In ACM SIGCOMM, 2007.
36. X. Liu, A. Li, X. Yang, and D. Wetherall. Passport: Secure and Adoptable Source Authentication. In USENIX NSDI, 2008.
37. X. Liu, X. Yang, and Y. Lu. To Filter or to Authorize: Network-Layer DoS Defense Against Multimillion-node Botnets. In ACM SIGCOMM, 2008.
38. J. C. Mogul, P. Yalagandula, J. Tourrilhes, R. McGeer, S. Banerjee, T. Connors, and P. Sharma. API Design Challenges for Open Router Platforms on Proprietary Hardware. In ACM Hotnets, 2008.
39. R. Morris, E. Kohler, J. Jannotti, and M. F. Kaashoek. The click modular router. SIGOPS Oper. Syst. Rev., 33(5):217-231, 1999.
40. B. Parno, A. Perrig, and D. G. Andersen. SNAPP: Stateless Network-Authenticated Path Pinning. In ACM ASIACCS, 2008.
41. B. Parno, D. Wendlandt, E. Shi, A. Perrig, B. Maggs, and Y.-C. Hu. Portcullis: Protecting Connection Setup from Denial-of-Capability Attacks. In ACM SIGCOMM, 2007.
42. L. Popa, N. Egi, S. Ratnasamy, and I. Stoica. Rule-based Forwarding (RBF): Improving the Internet's Flexibility and Security. UCB Technical Report, 2010. http://www.eecs.berkeley.edu/%7Epopa/rbfTechReport.pdf.
43. L. Popa, I. Stoica, and S. Ratnasamy. Rule-based Forwarding (RBF): improving the Internet's flexibility and security. In ACM Hotnets, 2009.
44. B. Raghavan and A. C. Snoeren. A System for Authenticated Policy-Compliant Routing. In ACM SIGCOMM, 2004.
45. T. Roscoe, S. Hand, R. Isaacs, R. Mortier, and P. Jardetzky. Predicate Routing: Enabling Controlled Networking. In ACM Hotnets, 2002.
46. A. Seehra, J. Nous, M. Walfish, D. Mazieres, A. Nicolosi, and S. Shenker. A Policy Framework for the Future Internet. In ACM Hotnets, 2009.
47. I. Stoica, D. Adkins, S. Zhuang, S. Shenker, and S. Surana. Internet Indirection Infrastructure. In ACM SIGCOMM, 2002.
48. D. L. Tennenhouse, J. M. Smith, W. D. Sincoskie, D. J. Wetherall, and G. J. Minden. A Survey of Active Network Research. IEEE Comm., 1997.
49. M. Walfish, J. Stribling, M. Krohn, H. Balakrishnan, R. Morris, and S. Shenker. Middleboxes no longer considered harmful. In OSDI, 2004.
50. D. Wetherall. Active network vision and reality: Lessons from a capsulebased system. In ACM SOSP, 1999.
51. A. Yaar, A. Perrig, and D. Song. SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks. In IEEE Symp. on Sec. and Priv., 2004.
52. X. Yang, D. J. Wetherall, and T. Anderson. A DoS-limiting Network Architecture. In ACM SIGCOMM, 2005.
53. Y. Zhang, D. Chen, Y. Choi, L. Chen, and S.-B. Ko. A high performance ECC hardware implementation with instruction-level parallelism over GF(2163). Microprocess. Microsyst., 34(6), 2010.
54. S. Zhuravleva, S. Blagodurov, et al. Addressing Shared Resource Contention in Multicore Processors via Scheduling. In ASPLOS, 2010.