Stratos: Virtual Middleboxes as First-Class Entities

نویسندگان

  • Aaron Gember
  • Robert Grandl
  • Ashok Anand
  • Theophilus Benson
  • Aditya Akella
چکیده

Enhancing application deployments in today’s clouds using virtual middleboxes is challenging due to the lack of network control and the inherent difficult in intelligently scaling middleboxes to cope with application demands. Our position is that application and middlebox composition and scaling must occur in concert, and addressing the challenges that arise requires a framework that recognizes middleboxes as first-class entities. In this paper, we present the design, implementation, and evaluation of such a framework, called Stratos, that is targeted for immediate deployment overor under-the-cloud today. In Stratos, tenants specify rich middlebox and application topologies using high-level abstractions, and desired middlebox traversals are realized using a novel distributed programmable data plane design. To avoid degradation in middlebox performance, middleboxes are automatically scaled using a greedy heuristic to meet application demands. Under-the-cloud deployments using networkaware flow distribution and placement provide further performance and scaling benefits. Our evaluation of an overthe-cloud deployment atop EC2 and simulation of an underthe-cloud deployment shows Stratos provides significant benefits to both tenants and providers.

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Stratos: A Network-Aware Orchestration Layer for Virtual Middleboxes in Clouds

Enterprises want their in-cloud services to leverage the performance and security benefits that middleboxes offer in traditional deployments. Such virtualized deployments create new opportunities (e.g., flexible scaling) as well as new challenges (e.g., dynamics, multiplexing) for middlebox management tasks such as service composition and provisioning. Unfortunately, enterprises lack systematic...

متن کامل

Stratos: A Network-Aware Orchestration Layer for Middleboxes in the Cloud

We see an increasing demand for in-the-cloud middlebox processing as applications and enterprises want their cloud deployments to leverage the same benefits that such services offer in traditional deployments. Unfortunately, today’s cloud middlebox deployments lack the same abstractions for flexible deployment and elastic scaling that have been instrumental to the adoption and success of cloud-...

متن کامل

Split/Merge: System Support for Elastic Execution in Virtual Middleboxes

Developing elastic applications should be easy. This paper takes a step toward the goal of generalizing elasticity by observing that a broadly deployed class of software— the network middlebox—is particularly well suited to dynamic scale. Middleboxes tend to achieve a clean separation between a small amount of per-flow network state and a large amount of complex application logic. We present a ...

متن کامل

How to Detect Middleboxes: Guidelines on a Methodology

Internet middleboxes such as VPNs, firewalls, and proxies can significantly change handling of traffic streams. They play an increasingly important role in various types of IP networks. If end hosts can detect them, these hosts can make beneficial, and in some cases, crucial improvements in security and performance But because middleboxes have widely varying behavior and effects on the traffic ...

متن کامل

Some Complexity Results for Stateful Network Verification

In modern networks, forwarding of packets often depends on the history of previously transmitted traffic. Such networks contain stateful middleboxes, whose forwarding behavior depends on a mutable internal state. Firewalls and load balancers are typical examples of stateful middleboxes. This paper addresses the complexity of verifying safety properties, such as isolation, in networks with finit...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2012