Stratos: Virtual Middleboxes as First-Class Entities
نویسندگان
چکیده
Enhancing application deployments in today’s clouds using virtual middleboxes is challenging due to the lack of network control and the inherent difficult in intelligently scaling middleboxes to cope with application demands. Our position is that application and middlebox composition and scaling must occur in concert, and addressing the challenges that arise requires a framework that recognizes middleboxes as first-class entities. In this paper, we present the design, implementation, and evaluation of such a framework, called Stratos, that is targeted for immediate deployment overor under-the-cloud today. In Stratos, tenants specify rich middlebox and application topologies using high-level abstractions, and desired middlebox traversals are realized using a novel distributed programmable data plane design. To avoid degradation in middlebox performance, middleboxes are automatically scaled using a greedy heuristic to meet application demands. Under-the-cloud deployments using networkaware flow distribution and placement provide further performance and scaling benefits. Our evaluation of an overthe-cloud deployment atop EC2 and simulation of an underthe-cloud deployment shows Stratos provides significant benefits to both tenants and providers.
منابع مشابه
Stratos: A Network-Aware Orchestration Layer for Virtual Middleboxes in Clouds
Enterprises want their in-cloud services to leverage the performance and security benefits that middleboxes offer in traditional deployments. Such virtualized deployments create new opportunities (e.g., flexible scaling) as well as new challenges (e.g., dynamics, multiplexing) for middlebox management tasks such as service composition and provisioning. Unfortunately, enterprises lack systematic...
متن کاملStratos: A Network-Aware Orchestration Layer for Middleboxes in the Cloud
We see an increasing demand for in-the-cloud middlebox processing as applications and enterprises want their cloud deployments to leverage the same benefits that such services offer in traditional deployments. Unfortunately, today’s cloud middlebox deployments lack the same abstractions for flexible deployment and elastic scaling that have been instrumental to the adoption and success of cloud-...
متن کاملSplit/Merge: System Support for Elastic Execution in Virtual Middleboxes
Developing elastic applications should be easy. This paper takes a step toward the goal of generalizing elasticity by observing that a broadly deployed class of software— the network middlebox—is particularly well suited to dynamic scale. Middleboxes tend to achieve a clean separation between a small amount of per-flow network state and a large amount of complex application logic. We present a ...
متن کاملHow to Detect Middleboxes: Guidelines on a Methodology
Internet middleboxes such as VPNs, firewalls, and proxies can significantly change handling of traffic streams. They play an increasingly important role in various types of IP networks. If end hosts can detect them, these hosts can make beneficial, and in some cases, crucial improvements in security and performance But because middleboxes have widely varying behavior and effects on the traffic ...
متن کاملSome Complexity Results for Stateful Network Verification
In modern networks, forwarding of packets often depends on the history of previously transmitted traffic. Such networks contain stateful middleboxes, whose forwarding behavior depends on a mutable internal state. Firewalls and load balancers are typical examples of stateful middleboxes. This paper addresses the complexity of verifying safety properties, such as isolation, in networks with finit...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2012