VIP Lanes: High-Speed Custom Communication Paths for Authorized Flows
VIP Lanes: High-Speed Custom Communication Paths for Authorized Flows
复制标题
VIP 通道：授权流的高速自定义通信路径
DOI：
10.1109/icccn.2017.8038429
复制
发表时间：
2017
期刊：
影响因子：
--
通讯作者：
Hussamuddin Nasir
中科院分区：
文献类型：
--
作者：
James N. Griffioen;K. Calvert;Zongming Fei;Sergio Rivera;Jacob Chappell;M. Hayashida;Charles Carpenter;Yongwook Song;Hussamuddin Nasir
校园网和企业网络越来越依赖于中间件（如防火墙、NAT、负载平衡器、IDS/IDP）来提供基本服务或执行网络策略。这些中间设备通常会限制网络应用程序的性能，尤其是那些涉及大数据传输的应用程序。为了解决这个问题，我们提出了一种名为VIP Lanes的软件定义网络（SDN）校园网架构，它为预先授权的、受信任的用户提供了创建绕过中间框的流的能力，从而使这些用户能够在保持其他网络流量的安全性和策略遵从性的同时获得更好的性能。在本文中，我们提出了VIP通道抽象，并描述了用于建立可信VIP通道的授权和策略实施服务。我们描述了一个最初的原型实现，它不仅展示了VIP通道方法的可行性，而且还给出了可能的性能改进类型的指示-在某些情况下，传输时间接近两个数量级的减少。
Campus networks and enterprise networks increasingly depend on middleboxes (e.g., firewalls, NAT, load balancers, IDS/IDP) to provide essential services or enforce network policies. These middleboxes often limit the performance of network applications, especially those involved in big data transfer. To address this problem, we propose a Software Defined Networking (SDN) campus network architecture, called VIP Lanes, that provides the ability for pre-authorized, trusted users to create flows that bypass middleboxes, thereby enabling those users to achieve substantially better performance while maintaining security and policy compliance for other network traffic. In this paper, we present the VIP Lanes abstraction and describe an authorization and policy-enforcement service used to establish trusted VIP Lanes. We describe an initial prototype implementation that not only demonstrates the viability of the VIP Lanes approach, but also gives an indication of the types of performance improvements that are possible - in some cases approaching a two order of magnitude reduction in transmission times.