2018 · 51 citations · 24 references
ComputingComputer ScienceComputer SystemsMessage PassingNetwork SecurityVirtualizationNetwork ProtocolsTransport LayerApplication LayerModular DesignNetwork FunctionsNetwork Protocol StacksNetwork Service ChainingNfv ArchitecturePublish-subscribe SystemsService Chaining
Existing network service chaining frameworks are based on a "packet-centric" model where each NF in a chain is given every packet for processing. This approach becomes both inefficient and inconvenient for more complex network functions that operate at higher levels of the protocol stack. We propose Microboxes, a novel service chaining abstraction designed to support transport- and application-layer middle-boxes, or even end-system like services. Simply including a TCP stack in an NFV platform is insufficient because there is a wide spectrum of middlebox types-from NFs requiring only simple TCP bytestream reconstruction to full endpoint termination. By exposing a publish/subscribe-based API for NFs to access packets or protocol events as needed, Microboxes eliminates redundant processing across a chain and enables a modular design. Our implementation on a DPDK-based NFV framework can double throughput by consolidating stack operations and provide a 51% throughput gain by customizing TCP processing to the appropriate level.
24
Pat Bosshart, Dan Daly, Glen Gibb et al. · ACM SIGCOMM Computer Communication Review · 2014 · 2.8K citations
Eddie Kohler, Robert Morris, Benjie Chen et al. · ACM Transactions on Computer Systems · 2000 · 2.4K citations · Full text
Bro: a system for detecting network intruders in real-time
Vern Paxson · Computer Networks · 1999 · 2.4K citations
ClickOS and the Art of Network Function Virtualization
2014 · 677 citations
Making middleboxes someone else's problem
Justine Sherry, Shaddi Hasan, Colin Scott et al. · 2012 · 627 citations