NeTS: Small: Collaborative Research: Tng, a Next Generation Transport Services Architecture

该奖项是根据2009年美国复苏和再投资法案(公法111-5)资助的。互联网传统上将许多正交函数结合到传输协议中，为传输服务的发展制造了重大的技术和管理障碍。新的或专门的传输协议现在几乎无法部署，因为它们不能穿越过去20年如雨后春笋般涌现的NAT、防火墙、性能增强代理等中间盒；新的拥塞控制方案受到竞争？公平？的要求的限制。TNG(传输下一代)是一种新的但可增量部署的传输体系结构，它通过模块化传输层来打破上述发展僵局。TNG将传输分为四个显式层-端点命名、流调节、身份/安全和语义-外加跨层协商服务。通过将面向网络的端点命名和流量调节功能与面向应用的传输语义分开，TNG使网络中的中间盒能够在不同的网络技术和管理域之间干净地实施网络策略和优化流量性能，而不会干扰端到端语义。TNG的身份/安全层反过来又加强了面向网络和面向应用的功能之间的分离，避免了中间盒和IPSEC之间过去的冲突。通过开发一个工作原型，并分析其在各种真实和模拟网络环境中的性能和适应性，我们预计TNG将被证明是打破运营商、新网络技术和最终用户之间长期僵局的重要一步。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5).The Internet has traditionally combined many orthogonal functions into transport protocols, creating significant technical and administrative hurdles to transport service evolution. New or specialized transport protocols are now nearly undeployable because they cannot traverse middleboxes such as NATs, firewalls, performance enhancing proxies, which have mushroomed in the past two decades; new congestion control schemes are restricted by the requirement to compete ?fairly? against traditional TCP flows; and deploying new features such as multi-homing is difficult because applications must be adapted to new naming and communication models.Tng ("Transport next generation") is a new but incrementally deployable transport architecture that breaks the above evolutionary impasse by modularizing the transport layer. Tng breaks transports into four explicit layers - Endpoint Naming, Flow Regulation, Identity/Security, and Semantics - plus a cross-layer Negotiation service. By separating the network-oriented functions of endpoint naming and flow regulation from application-oriented transport semantics, Tng enables middleboxes in the network to enforce network policies and optimize flow performance cleanly across diverse network technologies and administrative domains, without interfering with end-to-end semantics. Tng's identity/security layer in turn enforces this separationbetween network- and appliation-oriented functions, avoiding past conflicts between middleboxes and IPsec.By developing a working prototype and analyzing its performance and adaptability across a variety of real and simulated network environments, we expect that Tng will prove an important step towards breaking long-standing deadlocks between operators, new network technologies, and end-users.