RINGS: Deployable End-to-End Resilience for Critical Internet Applications via Modular Redundancy

对网络系统的依赖要求它们具有可预测性和可靠性。虽然这些系统旨在处理故障，但仍然存在异常情况的情况，无论是由故意攻击还是不幸的自然环境引起的，都会损害网络的执行能力。这些网络故障通常是单个组件对其他组件的可靠性做出隐含假设的结果，而实际上，这些组件本身也做出相同或类似的假设，从而导致同时发生故障。该研究项目采用了一种全面的多层系统级方法，通过提供一个影子网络来为不可避免的组件故障准备应用程序：如果主要服务、网络或路径失败，则预先计划的替代方案准备交付关键服务。影子网络不断寻找和分析应用程序和服务，以识别弹性，并使用混合的主要和专门设计的影子组件组合端到端服务，这样，如果发生故障，影子组件可以采取有效的行动。通过提高整个网络的可靠性，所有Internet应用程序的用户都将受益于减少“网络宕机”的频率。防止互联网故障自然地提供了与普通公众、标准机构、政策制定者以及任何对具有现实世界影响的研究感兴趣的学生（从中学到博士）的接触。该研究对影子网络的发展采取了三管齐下的方法。首先，设计考虑了应用程序各个方面的影子组件，为可靠性提供了基础。其次，该研究探讨了如何持续利用测量驱动的测试来评估整体和组件特定的可靠性，以便为广泛的潜在中断和故障场景做好准备。最后，该研究调查了现有和新兴组件的可编程性，以便在需要时扩展影子服务，并优先考虑关键应用程序和总体可用性。用于执行研究的方法包括弹性网络设计和部署、协议设计、实验、监测和测试以及建模和分析。评估包括原型、模拟和数学分析的组合，并根据效率、成本、弹性和可靠性进行评分。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Dependence on networked systems requires their predictability and reliability. While these systems are designed to cope with failures, there continue to be instances where anomalous conditions, whether brought about by an intentional attack or unfortunate natural circumstance, compromise the network’s ability to perform. These network failures are often the result of individual components that all make implicit assumptions about the dependability of other components that, in fact, are themselves making the same or similar assumptions, leading to simultaneous failure. This research project takes an overarching multi-layered, systems-level approach to prepare applications for the inevitable component failures by providing a shadow network: pre-planned alternatives ready to deliver critical services should the primary services, networks, or paths fail. The shadow network continually seeks out and analyzes applications and services to identify resilience and combine end-to-end services using a mix of primary and specifically designed shadow components, such that should failures occur, the shadow components can take effective action. By increasing the reliability of the network-at-large, users of all Internet applications will benefit by reducing the frequency in which the “network is down”. Preventing Internet failures naturally provides engagement with the general public, standards bodies, and policymakers, as well as any students, from secondary to Ph.D., interested in research with real-world impact.The research takes a three-pronged approach toward shadow network development. First, the design considers shadow components for every aspect of the application, providing the basis for reliability. Second, the research investigates how to continually utilize measurement-driven testing to assess overall and component-specific reliability to be ready for a wide range of potential outage and failure scenarios. Last, the research investigates the programmability of existing and emerging components to scale up the shadow services when they are needed and to prioritize critical applications and overall availability. The methods used to perform the research includes resilient network design and deployment, protocol design, experimentation, monitoring and testing, and modeling and analysis. Evaluation consists of a combination of prototype, simulation, and mathematical analysis, and is scored in terms of efficiency, cost, resiliency, and reliability.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.