On the Design and Implementation of IP-over-P2P Overlay Virtual Private Networks
On the Design and Implementation of IP-over-P2P Overlay Virtual Private Networks
复制标题
DOI：
10.1587/transcom.2019cpi0001
复制
发表时间：
2020-01
期刊：
影响因子：
--
通讯作者：
Kensworth C. Subratie;Saumitra Aditya;Vahid Daneshmand;Koheix Ichikawa;R. Figueiredo
中科院分区：
文献类型：
--
作者：
Kensworth C. Subratie;Saumitra Aditya;Vahid Daneshmand;Koheix Ichikawa;R. Figueiredo
互联网及其协议IP的成功和规模刺激了新兴的分布式技术，如雾/边缘计算和基于分布式容器化微服务的新应用模型。物联网和互联社区正准备建立在这些技术和模型的基础上，并受益于点对点（P2P）通信的能力。无处不在的传感、驱动和计算意味着打破集中式云计算模型的规模。有限的IPv4公共地址、传输层身份验证需求、机密性和完整性带来的挑战成为开发针对网络边缘设计的新中间件和应用程序的负担。一种不依赖于缓慢采用IPv6的方法是使用虚拟化覆盖网络，它抽象了底层异构网络的复杂性，这些网络跨越分布式雾应用程序和中间件的组件。本文介绍了IP-over-P2P（IPOP）的设计和实现的演变-从其纯粹的P2P的开端，一个务实的混合模型的影响，并结合标准。混合客户端-服务器/P2P方法允许IPOP利用现有的强大和成熟的云基础设施，同时仍然提供边缘所需的特性。IPOP是一种网络化的网络基础设施，它提供了一个覆盖的虚拟专用网络，该网络通过对等节点的动态成员关系自组织成一个可扩展的结构。IPOP对分区有弹性，支持其结构内的冗余路径，并提供交换规则的软件定义编程以利用其拓扑的这些属性。
SUMMARY The success and scale of the Internet and its protocol IP has spurred emergent distributed technologies such as fog/edge computing and new application models based on distributed containerized microservices. The Internet of Things and Connected Communities are poised to build on these technologies and models and to benefit from the ability to communicate in a peer-to-peer (P2P) fashion. Ubiquitous sensing, actuating and computing implies a scale that breaks the centralized cloud computing model. Challenges stemming from limited IPv4 public addresses, the need for transport layer authentication, confidentiality and integrity become a burden on developing new middleware and applications designed for the network’s edge. One approach - not reliant on the slow adoption of IPv6 - is the use of virtualized overlay networks, which abstract the complexities of the underlying heterogeneous networks that span the components of distributed fog applications and middleware. This paper describes the evolution of the design and implementation of IP-over-P2P (IPOP) - from its purist P2P inception, to a pragmatic hybrid model which is influenced by and incorporates standards. The hybrid client-server/P2P approach allows IPOP to leverage existing robust and mature cloud infrastructure, while still providing the characteristics needed at the edge. IPOP is networking cyber infrastructure that presents an overlay virtual private network which self-organizes with dynamic membership of peer nodes into a scalable structure. IPOP is resilient to partitioning, supports redundant paths within its fabric, and provides software defined programming of switching rules to utilize these properties of its topology.