2016 IEEE 24th International Conference on Network Protocols (ICNP)最新文献

Bringing execution assurances of pattern matching in outsourced middleboxes 在外包中间件中提供模式匹配的执行保证

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-12-14 DOI: 10.1109/ICNP.2016.7784424

Xingliang Yuan, Huayi Duan, Cong Wang

{"title":"Bringing execution assurances of pattern matching in outsourced middleboxes","authors":"Xingliang Yuan, Huayi Duan, Cong Wang","doi":"10.1109/ICNP.2016.7784424","DOIUrl":"https://doi.org/10.1109/ICNP.2016.7784424","url":null,"abstract":"Migrating middleboxes to third-party service providers (e.g., clouds and ISPs) has drawn widespread attentions recently from both industry and academia. While its benefits on reduced local cost and increased service scalability are well understood, such deployment also introduces new security concerns, due to the fact that these boxes are no longer under the direct control of enterprises. Among others, one fundamental desideratum here is to ensure that those middleboxes consistently perform network functions as intended. In this work, we propose practical solutions towards enabling runtime execution assurances of outsourced middleboxes with high confidence. As an initial effort, we target on pattern matching based network functions, which cover a broad class of middlebox applications such as instruction detection, web firewall, and traffic classification. For efficiency, our design follows the same roadmap of probabilistic checking that provides tunable levels of assurance, as in outsourced computation and distributed computing literature. We show how to synthesize the design intuitions in the context of outsourced middleboxes and the dynamic network effect. We present diligent technical instantiations, in the case of single middlebox and the composition of multiple middlebox service chaining, respectively. For a large batch of packets, sufficiently high assurance levels can be achieved by pre-processing only a few randomly selected packets, with marginal overhead. Evaluations of our system prototype on Amazon EC2 show that, the processing of 1000 packets, which includes pattern matching and execution proof generation, results in 200-500ms latency and throughput up to 360Mbps.","PeriodicalId":115376,"journal":{"name":"2016 IEEE 24th International Conference on Network Protocols (ICNP)","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-12-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133275974","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 18

Optimal link-disjoint node-“somewhat disjoint” paths 最优链接-不相交节点-“有些不相交”路径

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-11 DOI: 10.1109/ICNP.2016.7784451

Jose Yallouz, Ori Rottenstreich, P. Babarczi, A. Mendelson, A. Orda

引用次数: 11

FIB efficiency in distributed platforms 分布式平台的FIB效率

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-08 DOI: 10.1109/ICNP.2016.7784452

Kirill Kogan, S. Nikolenko, P. Eugster, A. Shalimov, Ori Rottenstreich

引用次数: 15

We've got you covered: Failure recovery with backup tunnels in traffic engineering 我们已经为你准备好了:交通工程中的备用隧道故障恢复

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-01 DOI: 10.1109/ICNP.2016.7784449

Jiaqi Zheng, Hong Xu, Xiaojun Zhu, Guihai Chen, Yanhui Geng

{"title":"We've got you covered: Failure recovery with backup tunnels in traffic engineering","authors":"Jiaqi Zheng, Hong Xu, Xiaojun Zhu, Guihai Chen, Yanhui Geng","doi":"10.1109/ICNP.2016.7784449","DOIUrl":"https://doi.org/10.1109/ICNP.2016.7784449","url":null,"abstract":"We present Sentinel, a novel failure recovery system for traffic engineering that pre-computes and installs backup tunnels to improve the robustness of software defined wide area networks (WANs). When a link fails, switches locally redirect traffic to backup tunnels and recover immediately in the data plane, thus substantially reducing the transient congestion compared to reactive rescaling. On the other hand Sentinel completely avoids the bandwidth headroom required by existing proactive approaches like FFC, and improves efficiency of operating the expensive WAN. We make several technical contributions in designing Sentinel. We formulate traffic engineering with backup tunnels (TE-BT) as optimization programs. We propose an approximation algorithm to efficiently solve the problem. We further present a concrete design and implementation of the system based on Openflow group tables for backup tunnels. Extensive experiments on Mininet and numerical simulations show that similar to FFC, Sentinel reduces congestion by 45% compared with rescaling, and its algorithm runs much faster than FFC. Sentinel only introduces a small number of additional forwarding rules and can be readily implemented on today's Openflow switches.","PeriodicalId":115376,"journal":{"name":"2016 IEEE 24th International Conference on Network Protocols (ICNP)","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115401078","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 32

Towards verifiable outsourced middleboxes 走向可验证的外包中间体

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-01 DOI: 10.1109/ICNP.2016.7784466

Xingliang Yuan, Huayi Duan, Cong Wang

引用次数: 0

MS-LSTM: A multi-scale LSTM model for BGP anomaly detection MS-LSTM:用于BGP异常检测的多尺度LSTM模型

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-01 DOI: 10.1109/ICNP.2016.7785326

Min Cheng, Qian Xu, Jianming Lv, Wenyin Liu, Qing Li, Jianping Wang

引用次数: 54

Optimization-based network flow deadline scheduling 基于优化的网络流截止时间调度

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-01 DOI: 10.1109/ICNP.2016.7784415

Andrey Gushchin, Shih-Hao Tseng, A. Tang

{"title":"Optimization-based network flow deadline scheduling","authors":"Andrey Gushchin, Shih-Hao Tseng, A. Tang","doi":"10.1109/ICNP.2016.7784415","DOIUrl":"https://doi.org/10.1109/ICNP.2016.7784415","url":null,"abstract":"Many network flows nowadays, especially in a data center environment, have associated deadlines by which they must be fully transmitted. Nevertheless, traditional transport protocols such as TCP, focus on concepts like throughput and fairness, and do not aim to satisfy flow deadlines. Motivated by this limitation, several alternative transport designs and solutions have been recently proposed. These approaches generally achieve a better performance in terms of the number of satisfied deadlines and are usually built upon various heuristics. In contrast to these previous works, this article approaches the problem directly from an optimization perspective. We first prove that the problem belongs to the class of NP-hard problems that do not even admit a constant ratio approximation solution (unless P=NP), and formulate it as a mixed integer-linear optimization program. Then, using linear programming approximations, we further develop offline and online optimization-based rate control algorithms to approach the problem. Flow-level simulation results indicate that the proposed algorithms can be near-optimal, and hence they can be served as benchmarks against which other solutions to this problem can be evaluated. We additionally performed simulations incorporating such real network features as deployment delays and packet-level granularity to evaluate the performance of the proposed algorithms in a more realistic environment.","PeriodicalId":115376,"journal":{"name":"2016 IEEE 24th International Conference on Network Protocols (ICNP)","volume":"55 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125100051","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Consistent replication protocol for Named Data Networking 命名数据网络的一致复制协议

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-01 DOI: 10.1109/ICNP.2016.7784456

Lijing Wang, Wentao Shang, Wenbo He, Dongsheng Wang

引用次数: 0

Fit the elephant in a box - towards IP lookup at on-chip memory access speed 把大象装进盒子里——以片上存储器访问速度进行IP查找

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-01 DOI: 10.1109/ICNP.2016.7784462

Tong Yang, A. Liu, Qiaobin Fu, Dongsheng Yang, S. Uhlig, Xiaoming Li

引用次数: 0

Macroflow: A fine-grained networking abstraction for job completion time oriented scheduling in datacenters Macroflow:一个细粒度的网络抽象，用于数据中心中面向任务完成时间的调度

2016 IEEE 24th International Conference on Network Protocols (ICNP) Pub Date : 2016-11-01 DOI: 10.1109/ICNP.2016.7784473

Chen Tian, Junhua Yan, A. Liu, Yizhou Tang, Yuankun Zhong, Zi Li

引用次数: 2