FIA: Collaborative Research: NEBULA: A Future Internet That Supports Trustworthy Cloud Computing

FIA：合作研究：NEBULA：支持可信云计算的未来互联网

• 批准号: 1038695
• 负责人: Ion Stoica
• 金额: $ 50.26万
• 依托单位: University of California-Berkeley
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1038695&HistoricalAwards=false
• 关键词: FIA; Collaborative; Research; NEBULA; Future

Cloud computing provides economic advantages from shared resources, but security is a major risk for remote operations and a major barrier to the approach, with challenges for both hosts and the network. NEBULA is a potential future Internet architecture providing trustworthy networking for the emerging cloud computing model of always-available network services. NEBULA addresses many network security issues, including data availability with a new core architecture (NCore) based on redundant connections to and between NEBULA core routers, accountability and trust with a new policy-driven data plane (NDP), and extensibility with a new control plane (NVENT) that supports network virtualization, enabling results from other future Internet architectures to be incorporated in NEBULA. NEBULA?s data plane uses cryptographic tokens as demonstrable proofs that a path was both authorized and followed. The NEBULA control plane provides one or more authorized paths to NEBULA edge nodes; multiple paths provide reliability and load-balancing. The NEBULA core uses redundant high-speed paths between data centers and core routers, as well as fault-tolerant router software, for always-on core networking. The NEBULA architecture removes network (in) security as a prohibitive factor that would otherwise prevent the realization of many cloud computing applications, such as electronic health records and data from medical sensors. NEBULA will produce a working system that is deployable on core routers and is viable from both an economic and a regulatory perspective.

云计算通过共享资源提供经济优势，但安全是远程操作的主要风险和方法的主要障碍，主机和网络都面临挑战。星云是一种潜在的未来互联网架构，为始终可用的网络服务的新兴云计算模式提供可靠的网络。星云解决了许多网络安全问题，包括基于到星云核心路由器和星云核心路由器之间的冗余连接的新核心架构(Ncore)的数据可用性，利用新的策略驱动的数据平面(NDP)的责任和信任，以及支持网络虚拟化的新控制平面(NVENT)的可扩展性，使来自其他未来互联网架构的结果能够被纳入星云。星云？S数据平面使用密码令牌作为路径既被授权又被遵循的可证明证据。星云控制平面向星云边缘节点提供一条或多条授权路径；多条路径提供可靠性和负载平衡。星云核心使用数据中心和核心路由器之间的冗余高速路径，以及容错路由器软件，以实现始终在线的核心网络。星云架构消除了网络(In)安全这一令人望而却步的因素，否则将阻碍许多云计算应用的实现，例如来自医疗传感器的电子健康记录和数据。星云将生产一种可在核心路由器上部署的工作系统，从经济和监管角度来看都是可行的。