Making middleboxes someone else's problem

TLDR

Modern enterprises almost ubiquitously deploy middlebox processing services to improve security and performance in their networks. The paper argues that outsourcing middlebox processing to the cloud can reduce costs, simplify management, and enhance elasticity, and presents APLOMB as a practical solution. APLOMB is designed to functionally match traditional middleboxes while preserving performance, guided by a data‑driven survey of 57 enterprise networks. APLOMB reduces cost and complexity, enabling outsourcing of over 90 % of middlebox hardware with only a 1.1 ms average latency increase and 3.8 % median bandwidth inflation, addressing the high expense and failure modes of traditional middlebox infrastructure.

Abstract

Modern enterprises almost ubiquitously deploy middlebox processing services to improve security and performance in their networks. Despite this, we find that today's middlebox infrastructure is expensive, complex to manage, and creates new failure modes for the networks that use them. Given the promise of cloud computing to decrease costs, ease management, and provide elasticity and fault-tolerance, we argue that middlebox processing can benefit from outsourcing the cloud. Arriving at a feasible implementation, however, is challenging due to the need to achieve functional equivalence with traditional middlebox deployments without sacrificing performance or increasing network complexity. In this paper, we motivate, design, and implement APLOMB, a practical service for outsourcing enterprise middlebox processing to the cloud. Our discussion of APLOMB is data-driven, guided by a survey of 57 enterprise networks, the first large-scale academic study of middlebox deployment. We show that APLOMB solves real problems faced by network administrators, can outsource over 90% of middlebox hardware in a typical large enterprise network, and, in a case study of a real enterprise, imposes an average latency penalty of 1.1ms and median bandwidth inflation of 3.8%.