FIA: Collaborative Research: NEBULA: A Future Internet That Supports Trustworthy Cloud Computing

FIA：合作研究：NEBULA：支持可信云计算的未来互联网

• 批准号: 1040708
• 负责人: Michael Freedman
• 金额: $ 50.26万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1040708&HistoricalAwards=false
• 关键词: FIA; Collaborative; Research; NEBULA; Future

Cloud computing provides economic advantages from shared resources, but security is a major risk for remote operations and a major barrier to the approach, with challenges for both hosts and the network. NEBULA is a potential future Internet architecture providing trustworthy networking for the emerging cloud computing model of always-available network services. NEBULA addresses many network security issues, including data availability with a new core architecture (NCore) based on redundant connections to and between NEBULA core routers, accountability and trust with a new policy-driven data plane (NDP), and extensibility with a new control plane (NVENT) that supports network virtualization, enabling results from other future Internet architectures to be incorporated in NEBULA. NEBULA?s data plane uses cryptographic tokens as demonstrable proofs that a path was both authorized and followed. The NEBULA control plane provides one or more authorized paths to NEBULA edge nodes; multiple paths provide reliability and load-balancing. The NEBULA core uses redundant high-speed paths between data centers and core routers, as well as fault-tolerant router software, for always-on core networking. The NEBULA architecture removes network (in) security as a prohibitive factor that would otherwise prevent the realization of many cloud computing applications, such as electronic health records and data from medical sensors. NEBULA will produce a working system that is deployable on core routers and is viable from both an economic and a regulatory perspective.

云计算从共享资源中提供了经济优势，但安全性是远程操作的主要风险，也是该方法的主要障碍，对主机和网络都有挑战。NEBcycle是一种潜在的未来互联网架构，为始终可用的网络服务的新兴云计算模型提供值得信赖的网络。NEBEE解决了许多网络安全问题，包括基于NEBEE核心路由器之间冗余连接的新核心架构（NCore）的数据可用性，新策略驱动数据平面（NDP）的责任和信任，以及支持网络虚拟化的新控制平面（NVENT）的可扩展性，使其他未来互联网架构的结果能够纳入NEBEE。NEBELLY？的数据平面使用加密令牌作为路径既被授权又被遵循的可证明的证据。NEBcycle控制平面提供一个或多个到NEBcycle边缘节点的授权路径;多个路径提供可靠性和负载平衡。NEBtron核心在数据中心和核心路由器之间使用冗余高速路径，以及容错路由器软件，以实现始终在线的核心网络。NEBEE架构消除了网络（内部）安全性这一阻碍因素，否则会阻碍许多云计算应用程序的实现，例如电子健康记录和来自医疗传感器的数据。NEBSTOM将产生一个可在核心路由器上部署的工作系统，从经济和监管的角度来看都是可行的。