FIA: Collaborative Research: NEBULA: A Future Internet That Supports Trustworthy Cloud Computing

云计算通过共享资源提供了经济优势，但安全性是远程操作的主要风险，也是该方法的主要障碍，对主机和网络都是挑战。NEBULA是一种潜在的未来互联网架构，为新兴的始终可用的网络服务的云计算模型提供可靠的网络。NEBULA解决了许多网络安全问题，包括基于与NEBULA核心路由器之间冗余连接的新核心架构（NCore）的数据可用性，基于新的策略驱动数据平面（NDP）的责任和信任，以及支持网络虚拟化的新控制平面（NVENT）的可扩展性，使其他未来互联网架构的结果能够被纳入NEBULA。星云?S数据平面使用加密令牌作为路径被授权和遵循的可证明证据。星云控制平面为星云边缘节点提供一条或多条授权路径；多路径提供可靠性和负载均衡。星云核心使用数据中心和核心路由器之间的冗余高速路径，以及容错路由器软件，用于始终在线的核心网络。NEBULA架构消除了网络安全这一令人望而却步的因素，否则它将阻碍许多云计算应用的实现，例如电子健康记录和医疗传感器的数据。NEBULA将生产一个可部署在核心路由器上的工作系统，从经济和监管的角度来看都是可行的。

Cloud computing provides economic advantages from shared resources, but security is a major risk for remote operations and a major barrier to the approach, with challenges for both hosts and the network. NEBULA is a potential future Internet architecture providing trustworthy networking for the emerging cloud computing model of always-available network services. NEBULA addresses many network security issues, including data availability with a new core architecture (NCore) based on redundant connections to and between NEBULA core routers, accountability and trust with a new policy-driven data plane (NDP), and extensibility with a new control plane (NVENT) that supports network virtualization, enabling results from other future Internet architectures to be incorporated in NEBULA. NEBULA?s data plane uses cryptographic tokens as demonstrable proofs that a path was both authorized and followed. The NEBULA control plane provides one or more authorized paths to NEBULA edge nodes; multiple paths provide reliability and load-balancing. The NEBULA core uses redundant high-speed paths between data centers and core routers, as well as fault-tolerant router software, for always-on core networking. The NEBULA architecture removes network (in) security as a prohibitive factor that would otherwise prevent the realization of many cloud computing applications, such as electronic health records and data from medical sensors. NEBULA will produce a working system that is deployable on core routers and is viable from both an economic and a regulatory perspective.