Edutech Pub Date : 2023-06-12 DOI: 10.23919/IFIPNetworking57963.2023.10186399

A. Botta, R. Canonico, Annalisa Navarro, Giovanni Stanco, G. Ventre

{"title":"Scalable Reinforcement Learning for Dynamic Overlay Selection in SD-WANs","authors":"A. Botta, R. Canonico, Annalisa Navarro, Giovanni Stanco, G. Ventre","doi":"10.23919/IFIPNetworking57963.2023.10186399","DOIUrl":"https://doi.org/10.23919/IFIPNetworking57963.2023.10186399","url":null,"abstract":"SD-WAN promises distributed enterprises to satisfy their dynamic communication requirements over the public Internet with a substantial cost reduction and enhanced performance compared to dedicated lines. It builds interconnections between users or applications in remote sites by exploiting all available transport connections (e.g. Internet, MPLS, …), but how to combine them to enhance communication performance is still an open challenge. Previous work investigated the use of Reinforcement Learning in the SD-WAN control logic to solve this problem, but they only considered simple scenarios consisting of two sites connected by two paths. In this paper we move a step forward and pose the question of whether such a promising approach can scale to WANs spanning multiple distributed sites connected through several paths. We first conduct an analytical study of the complexity of Reinforcement Learning that considers the increase of action and state spaces when the number of sites and paths grows. We then propose a solution based on Multi-Agent Reinforcement Learning (MARL) that helps reducing the overall complexity by leveraging an agent for each site. Finally, we show the effectiveness of our solution with real experiments in an emulated environment, showing that not only it is viable, but it also achieves a reduction in network policy violations, latency, and transit costs in a multi-site scenario.","PeriodicalId":31737,"journal":{"name":"Edutech","volume":"1 1","pages":"1-9"},"PeriodicalIF":0.0,"publicationDate":"2023-06-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"84804095","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Secure Middlebox-Assisted QUIC 安全的middlebox辅助QUIC

Edutech Pub Date : 2023-06-12 DOI: 10.23919/IFIPNetworking57963.2023.10186363

Mike Kosek, B. Spies, J. Ott

{"title":"Secure Middlebox-Assisted QUIC","authors":"Mike Kosek, B. Spies, J. Ott","doi":"10.23919/IFIPNetworking57963.2023.10186363","DOIUrl":"https://doi.org/10.23919/IFIPNetworking57963.2023.10186363","url":null,"abstract":"While the evolution of the Internet was driven by the end-to-end model, it has been challenged by many flavors of middleboxes over the decades. Yet, the basic idea is still fundamental: reliability and security are usually realized end-to-end, where the strong trend towards ubiquitous traffic protection supports this notion. However, reasons to break up, or redefine the ends of, end-to-end connections have always been put forward in order to improve transport layer performance. Yet, the consolidation of the transport layer with the end-to-end security model as introduced by QUIC protects most protocol information from the network, thereby eliminating the ability to modify protocol exchanges. In this paper, we enhance QUIC to selectively expose information to intermediaries, thereby enabling endpoints to consciously insert middleboxes into an end-to-end encrypted QUIC connection while preserving its privacy, integrity, and authenticity. We evaluate our design in a distributed Performance Enhancing Proxy environment over satellite networks, finding that the performance improvements are dependent on the path and application layer properties: the higher the round-trip time and loss, and the more data is transferred over a connection, the higher the benefits of Secure Middlebox-Assisted QUIC.","PeriodicalId":31737,"journal":{"name":"Edutech","volume":"69 1","pages":"1-9"},"PeriodicalIF":0.0,"publicationDate":"2023-06-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"84230235","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Wrapping DNS into HTTP(S): An Empirical Study on Name Resolution in Mobile Applications 将DNS封装到HTTP(S)中:移动应用中域名解析的实证研究

Edutech Pub Date : 2023-06-12 DOI: 10.23919/IFIPNetworking57963.2023.10186431

Baiyang Li, Yujia Zhu, Qingyun Liu, Yong Sun, Yuedong Zhang, Li Guo

{"title":"Wrapping DNS into HTTP(S): An Empirical Study on Name Resolution in Mobile Applications","authors":"Baiyang Li, Yujia Zhu, Qingyun Liu, Yong Sun, Yuedong Zhang, Li Guo","doi":"10.23919/IFIPNetworking57963.2023.10186431","DOIUrl":"https://doi.org/10.23919/IFIPNetworking57963.2023.10186431","url":null,"abstract":"Wrapping DNS into HTTP(S) is a promising way to mitigate the privacy and security issues of the traditional DNS. It has been standardized by IETF, i.e., DNS-over-HTTPS (DoH). This approach allows the application to choose open resolvers that it trusts, protecting its activities from potential snooping. Moreover, an application can establish a connection with its resolvers, incorporating specific handles and identifiers for customized use. How is the name resolution process performed on the client side? What are the criteria for an application to choose a resolver? These questions are still unclear. In this paper, we examine the application-level name resolution practices of 25 popular apps on Android and iOS platforms, revealing their adoption and usage patterns. We present the following findings: (i) non-standard, self-defined HTTP(S)DNS is more prevalent than DoH in practice, (ii) popular apps tend to use dispersed resolvers, some of which are self-owned, (iii) HTTP(S)DNS usage patterns differ across apps. These findings raise new issues related to the transparency and security of DNS configuration inside apps. We also explore the implications of these changes on the DNS ecosystem and analyze the potential security risks.","PeriodicalId":31737,"journal":{"name":"Edutech","volume":"28 1","pages":"1-9"},"PeriodicalIF":0.0,"publicationDate":"2023-06-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"82577397","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Optimizing DNS Resolvers for High Loads 针对高负载优化DNS解析器

Edutech Pub Date : 2023-06-12 DOI: 10.23919/IFIPNetworking57963.2023.10186425

Itay Alayoff, Gil Einziger

引用次数: 1

Flow Prioritization for TSN Asynchronous Traffic Shapers TSN异步流量整形器的流量优先级

Edutech Pub Date : 2023-06-12 DOI: 10.23919/IFIPNetworking57963.2023.10186427

Julia Caleya-Sanchez, Jonathan Prados-Garzon, Lorena Chinchilla-Romero, P. Muñoz, P. Ameigeiras

引用次数: 0

Hercules: High-Speed Bulk-Transfer over SCION 大力神:通过SCION进行高速批量传输

Edutech Pub Date : 2023-06-12 DOI: 10.23919/IFIPNetworking57963.2023.10186366

Marten Gartner, Jean-Pierre Smith, Matthias Frei, F. Wirz, Cédric Neukom, D. Hausheer, A. Perrig