Collaborative Research: CNS Core: Small: Creating An Extensible Internet Through Interposition

通俗地说，互联网是一组我们可以从手机、笔记本电脑和其他个人设备访问的应用程序和服务。然而，在网络研究领域，术语“互联网”更具体地指的是这些应用程序和服务所建立在其上的基本通信基础设施。许多人感到惊讶的是，尽管应用程序和服务的集合在过去几年中发生了巨大变化，但互联网本身的基本架构--即通信基础设施中的功能安排--自大约40年前首次形成以来几乎完全没有变化。这种缺乏变化不是自愿的；我们知道有许多方法可以改善基础设施，为用户提供更好的安全性、保密性和性能。相反，缺乏改变是因为发展如此大型的基础设施本身就是一个困难的设计挑战。更具体地说，任何互联网架构改变的提议都必须应对双重挑战：(I)如何在不破坏旧设计的情况下部署新设计，以及(Ii)如何创造激励机制，使基础设施的所有主要提供商都能从这种改变中受益(否则这种改变不太可能发生)。这项研究项目旨在通过一种我们称为可扩展互联网的设计来克服这些障碍。如果成功，这将不只是一次一次性的变化，而是将把互联网变成一个可以轻松地在持续的基础上纳入变化的平台。更严格地说，这项工作建立在一个核心洞察力之上，即原始互联网体系结构的狭小IP融合了两个角色：将所有第二层(L2)网络捆绑在一起，以及向终端主机提供服务模型。可扩展互联网通过在层L3和L4之间插入插入层来分离这两个角色，该插入层(I)构建在L3之上，并且可以在不改变的情况下使用当前L3，以及(Ii)向终端主机提供服务模型。可扩展互联网设计的全部重点是设计这一新的层，以便可以在此中间层之上无缝地部署一组可扩展的服务--从安全证明到改进的隐私，再到多点交付和各种其他交付模式。研究挑战包括：如何构建数据路径，使其既完全灵活又高效；如何构建具有高度弹性的全球服务；以及如何可行地支持不断发展但统一的服务模型(即，由所有网络提供商支持)。我们将在各种网络试验台上演示最终的设计，包括NSF自己的结构试验台。此外，我们在这个项目中创建的所有软件都将是公开可用和开源的。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

In common parlance, the Internet is the set of applications and services that we can access from our phones, laptops, and other personal devices. However, in the networking research community, the term “the Internet” refers more specifically to the basic communication infrastructure on which these applications and services have been built. What many find surprising is that while the set of applications and services have changed dramatically over the years, the basic architecture of the Internet itself – that is, the arrangement of functionality in the communication infrastructure – has remained almost completely unchanged since it first took shape roughly forty years ago. This lack of change is not by choice; we know many ways the infrastructure could be improved to provide users with better security, privacy, and performance. Instead, the lack of change is because evolving such a large infrastructure is a difficult design challenge in itself. More specifically, any proposal for architectural change in the Internet must meet the twin challenges of: (i) how to deploy the new design without breaking the old, and (ii) how to create incentives so that all the major providers of the infrastructure benefit from this change (or else it is unlikely to happen). This research project aims to overcome these barriers with a design we call the Extensible Internet. If successful, this will not just be a one-time change, but will turn the Internet into a platform that can easily incorporate change on an ongoing basis. More technically, this work is built on the central insight that the original Internet architecture’s narrow waist of IP conflated two roles: that of tying all layer-2 (L2) networks together, and that of providing a service model to end hosts. The Extensible Internet separates these two roles by inserting an Interposition Layer between layers L3 and L4 that (i) is built on top of L3, and can use the current L3 without change, and (ii) provide the service model to end hosts. The entire focus of the Extensible Internet design is architecting this new layer so that an extensible set of services – ranging from secure attestation to improved privacy to multipoint delivery to various other delivery models – can be seamlessly deployed on top of this Interposition Layer. The research challenges include: how to structure the data path so that it can be both fully flexible and highly efficient; how to structure global services to be highly resilient; and how to feasibly support an evolving yet uniform service model (i.e., supported by all network providers). We will demonstrate the resulting design on various network testbeds, including NSF’s own FABRIC testbed. In addition, all software we create in this project will be publicly available and open source.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.