2013 · 120 citations · 29 references
ComputingComputer EngineeringComputer SystemsFault ToleranceFault-tolerant SystemsVirtualizationAvailability EngineeringData ReplicationHigh AvailabilityCheckpointsEnd-to-end LatencyEnd-to-end Latency GuaranteesFault-tolerant Distributed SystemsHigh-availability SystemsPerformance OverheadPerformance Overhead AnalysisReplication Performance
Middleboxes are being rearchitected to be service oriented, composable, extensible, and elastic. Yet system-level support for high availability (HA) continues to introduce significant performance overhead. In this paper, we propose Pico Replication (PR), a system-level framework for middleboxes that exploits their flow-centric structure to achieve low overhead, fully customizable HA. Unlike generic (virtual machine level) techniques, PR operates at the flow level. Individual flows can be checkpointed at very high frequencies while the middlebox continues to process other flows. Furthermore, each flow can have its own checkpoint frequency, output buffer and target for backup, enabling rich and diverse policies that balance---per-flow---performance and utilization. PR leverages OpenFlow to provide near instant flow-level failure recovery, by dynamically rerouting a flow's packets to its replication target. We have implemented PR and a flow-based HA policy. In controlled experiments, PR sustains checkpoint frequencies of 1000Hz, an order of magnitude improvement over current VM replication solutions. As a result, PR drastically reduces the overhead on end-to-end latency from 280% to 15.5% and throughput overhead from 99.5% to 3.2%.
29
Ion Stoica, Robert Morris, David R. Karger et al. · 2001 · 9.7K citations
Xen and the art of virtualization
Paul Barham, Boris Dragovic, Keir Fraser et al. · ACM SIGOPS Operating Systems Review · 2003 · 5.9K citations
Giuseppe DeCandia, Deniz Hastorun, Madan Jampani et al. · 2007 · 3.5K citations
Live migration of virtual machines
Christopher J. Clark, Keir Fraser, Steven Hand et al. · 2005 · 2.6K citations
Bro: a system for detecting network intruders in real-time
Vern Paxson · Computer Networks · 1999 · 2.4K citations