首页 > 最新文献

Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research最新文献

英文 中文
Measuring control plane latency in SDN-enabled switches 测量sdn交换机控制平面时延
Keqiang He, Junaid Khalid, Aaron Gember, Sourav Das, Chaithan Prakash, Aditya Akella, Erran L. Li, M. Thottan
Timely interaction between an SDN controller and switches is crucial to many SDN applications---e.g., fast rerouting during link failure and fine-grained traffic engineering in data centers. However, it is not well understood how the control plane in SDN switches impacts these applications. To this end, we conduct a comprehensive measurement study using four types of production SDN switches. Our measurements show that control actions, such as rule installation, have surprisingly high latency, due to both software implementation inefficiencies and fundamental traits of switch hardware.
SDN控制器和交换机之间的及时交互对许多SDN应用至关重要。、链路故障时的快速重路由和数据中心的细粒度流量工程。然而,SDN交换机中的控制平面如何影响这些应用还不是很清楚。为此,我们使用四种类型的生产SDN交换机进行了全面的测量研究。我们的测量表明,由于软件实现效率低下和交换机硬件的基本特征,控制动作(如规则安装)具有惊人的高延迟。
{"title":"Measuring control plane latency in SDN-enabled switches","authors":"Keqiang He, Junaid Khalid, Aaron Gember, Sourav Das, Chaithan Prakash, Aditya Akella, Erran L. Li, M. Thottan","doi":"10.1145/2774993.2775069","DOIUrl":"https://doi.org/10.1145/2774993.2775069","url":null,"abstract":"Timely interaction between an SDN controller and switches is crucial to many SDN applications---e.g., fast rerouting during link failure and fine-grained traffic engineering in data centers. However, it is not well understood how the control plane in SDN switches impacts these applications. To this end, we conduct a comprehensive measurement study using four types of production SDN switches. Our measurements show that control actions, such as rule installation, have surprisingly high latency, due to both software implementation inefficiencies and fundamental traits of switch hardware.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129863887","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 138
SDNRacer: detecting concurrency violations in software-defined networks ssnracer:在软件定义的网络中检测并发性违规
Jeremie Miserez, Pavol Bielik, Ahmed El-Hassany, L. Vanbever, Martin T. Vechev
Software-Defined Networking (SDN) control software executes in highly asynchronous environments where unexpected concurrency errors can lead to performance or, worse, reachability errors. Unfortunately, detecting such errors is notoriously challenging, and SDN is no exception. Fundamentally, two ingredients are needed to build a concurrency analyzer: (i) a model of how different events are ordered, and (ii) the memory locations on which event accesses can interfere. In this paper we formulate the first happens-before (HB) model for SDNs enabling one to reason about ordering between events. We also present a commutativity specification of the network switch, allowing us to elegantly capture interference between concurrent events. Based on the above, we present the first dynamic concurrency analyzer for SDNs, called SdnRacer. SdnRacer uses the HB model and the commutativity rules to identify concurrency violations. Preliminary results indicate that the detector is practically effective---it can detect harmful violations quickly.
软件定义网络(SDN)控制软件在高度异步的环境中执行,在这种环境中,意外的并发性错误可能导致性能或更糟糕的可达性错误。不幸的是,检测此类错误非常具有挑战性,SDN也不例外。从根本上说,构建并发分析器需要两个要素:(i)不同事件如何排序的模型,以及(ii)事件访问可能干扰的内存位置。本文建立了sdn的先发生-先发生(HB)模型,使人们能够对事件之间的顺序进行推理。我们还提出了网络交换机的交换性规范,使我们能够优雅地捕获并发事件之间的干扰。在此基础上,我们提出了第一个sdn动态并发分析器,称为SdnRacer。SdnRacer使用HB模型和交换性规则来识别并发违例。初步结果表明,该检测器实际上是有效的-它可以快速检测有害违规。
{"title":"SDNRacer: detecting concurrency violations in software-defined networks","authors":"Jeremie Miserez, Pavol Bielik, Ahmed El-Hassany, L. Vanbever, Martin T. Vechev","doi":"10.1145/2774993.2775004","DOIUrl":"https://doi.org/10.1145/2774993.2775004","url":null,"abstract":"Software-Defined Networking (SDN) control software executes in highly asynchronous environments where unexpected concurrency errors can lead to performance or, worse, reachability errors. Unfortunately, detecting such errors is notoriously challenging, and SDN is no exception. Fundamentally, two ingredients are needed to build a concurrency analyzer: (i) a model of how different events are ordered, and (ii) the memory locations on which event accesses can interfere. In this paper we formulate the first happens-before (HB) model for SDNs enabling one to reason about ordering between events. We also present a commutativity specification of the network switch, allowing us to elegantly capture interference between concurrent events. Based on the above, we present the first dynamic concurrency analyzer for SDNs, called SdnRacer. SdnRacer uses the HB model and the commutativity rules to identify concurrency violations. Preliminary results indicate that the detector is practically effective---it can detect harmful violations quickly.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132214732","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 30
Identifying SDN state inconsistency in OpenStack 识别OpenStack中SDN状态不一致
Yang Xu, Yong Liu, Rahul Singh, S. Tao
In Software Defined Networks (SDN), users manage network services by abstracting high level service policies from lower level network functions. Edge-based SDN, which relies on end hosts to implement lower-level network functions, has been rapidly developed and widely adopted in cloud. A critical challenge in such an environment is to ensure that lower level network configurations, which are distributed in many end hosts, are in sync with high-level network service definitions, which are maintained in the central controller, as state inconsistency often arises in practice due to unreliable state dissemination, human errors, or software bugs. In this paper, we propose an approach to systematically extracting and analyzing the network states of OpenStack from both controller and end hosts, and identifying the inconsistencies between them across multiple network layers. Through extensive experiments, we demonstrate that our system can correctly identify network state inconsistencies with little system and network overhead, therefore can be adopted in large-scale production cloud to ensure healthy operations of its network services.
在软件定义网络(SDN)中,用户通过从低级网络功能中抽象高级服务策略来管理网络服务。边缘SDN依靠终端主机实现底层网络功能,在云中得到了快速发展和广泛应用。在这种环境中,一个关键的挑战是确保分布在许多终端主机上的低级网络配置与在中央控制器中维护的高级网络服务定义保持同步,因为在实践中,由于不可靠的状态传播、人为错误或软件错误,经常会出现状态不一致。本文提出了一种从控制器和终端主机上系统地提取和分析OpenStack的网络状态的方法,并在多个网络层上识别它们之间的不一致。通过大量的实验,我们证明了我们的系统可以在很小的系统和网络开销下正确识别网络状态不一致,因此可以在大规模生产云中采用,以确保其网络服务的健康运行。
{"title":"Identifying SDN state inconsistency in OpenStack","authors":"Yang Xu, Yong Liu, Rahul Singh, S. Tao","doi":"10.1145/2774993.2775067","DOIUrl":"https://doi.org/10.1145/2774993.2775067","url":null,"abstract":"In Software Defined Networks (SDN), users manage network services by abstracting high level service policies from lower level network functions. Edge-based SDN, which relies on end hosts to implement lower-level network functions, has been rapidly developed and widely adopted in cloud. A critical challenge in such an environment is to ensure that lower level network configurations, which are distributed in many end hosts, are in sync with high-level network service definitions, which are maintained in the central controller, as state inconsistency often arises in practice due to unreliable state dissemination, human errors, or software bugs. In this paper, we propose an approach to systematically extracting and analyzing the network states of OpenStack from both controller and end hosts, and identifying the inconsistencies between them across multiple network layers. Through extensive experiments, we demonstrate that our system can correctly identify network state inconsistencies with little system and network overhead, therefore can be adopted in large-scale production cloud to ensure healthy operations of its network services.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"65 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126463999","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 18
VT-Mininet: Virtual-time-enabled Mininet for Scalable and Accurate Software-Define Network Emulation VT-Mininet:支持虚拟时间的Mininet,用于可扩展和精确的软件定义网络仿真
Jiaqi Yan, Dong Jin
The advancement of software-defined networking (SDN) technology is highly dependent on the successful transformations from in-house research ideas to real-life products. To enable such transformations, a testbed offering scalable and high fidelity networking environment for testing and evaluating new/existing designs is extremely valuable. Mininet, the most popular SDN emulator by far, is designed to achieve both accuracy and scalability by running unmodified code of network applications in lightweight Linux Containers. However, Mininet cannot guarantee performance fidelity under high workloads, in particular when the number of concurrent active events is more than the number of parallel cores. In this project, we develop a lightweight virtual time system in Linux container and integrate the system with Mininet, so that all the containers have their own virtual clocks rather than using the physical system clock which reflects the serialized execution of multiple containers. With the notion of virtual time, all the containers perceive virtual time as if they run independently and concurrently. As a result, interactions between the containers and the physical system are artificially scaled, making a network appear to be ten times faster from the viewpoint of applications within the containers than it actually is. We also design an adaptive virtual time scheduling subsystem in Mininet, which is responsible to balance the experiment speed and fidelity. Experimental results demonstrate that embedding virtual time into Mininet significantly enhances its performance fidelity, and therefore, results in a useful platform for the SDN community to conduct scalable experiments with high fidelity.
软件定义网络(SDN)技术的进步高度依赖于从内部研究理念到实际产品的成功转变。为了实现这样的转换,为测试和评估新的/现有的设计提供可扩展和高保真网络环境的测试平台是非常有价值的。Mininet是目前最流行的SDN仿真器,其设计目的是通过在轻量级Linux容器中运行未经修改的网络应用程序代码来实现准确性和可伸缩性。但是,Mininet不能保证在高工作负载下的性能保真度,特别是当并发活动事件的数量超过并行核的数量时。在这个项目中,我们在Linux容器中开发了一个轻量级的虚拟时间系统,并将该系统与Mininet集成,这样所有的容器都有自己的虚拟时钟,而不是使用反映多个容器序列化执行的物理系统时钟。有了虚拟时间的概念,所有容器都将虚拟时间视为独立且并发地运行。因此,容器和物理系统之间的交互被人为地扩展,使得从容器内的应用程序的角度来看,网络看起来比实际快十倍。我们还在Mininet中设计了一个自适应虚拟时间调度子系统,负责平衡实验速度和保真度。实验结果表明,将虚拟时间嵌入到Mininet中可以显著提高其性能保真度,因此为SDN社区提供了一个有用的平台,可以进行高保真度的可扩展实验。
{"title":"VT-Mininet: Virtual-time-enabled Mininet for Scalable and Accurate Software-Define Network Emulation","authors":"Jiaqi Yan, Dong Jin","doi":"10.1145/2774993.2775012","DOIUrl":"https://doi.org/10.1145/2774993.2775012","url":null,"abstract":"The advancement of software-defined networking (SDN) technology is highly dependent on the successful transformations from in-house research ideas to real-life products. To enable such transformations, a testbed offering scalable and high fidelity networking environment for testing and evaluating new/existing designs is extremely valuable. Mininet, the most popular SDN emulator by far, is designed to achieve both accuracy and scalability by running unmodified code of network applications in lightweight Linux Containers. However, Mininet cannot guarantee performance fidelity under high workloads, in particular when the number of concurrent active events is more than the number of parallel cores. In this project, we develop a lightweight virtual time system in Linux container and integrate the system with Mininet, so that all the containers have their own virtual clocks rather than using the physical system clock which reflects the serialized execution of multiple containers. With the notion of virtual time, all the containers perceive virtual time as if they run independently and concurrently. As a result, interactions between the containers and the physical system are artificially scaled, making a network appear to be ten times faster from the viewpoint of applications within the containers than it actually is. We also design an adaptive virtual time scheduling subsystem in Mininet, which is responsible to balance the experiment speed and fidelity. Experimental results demonstrate that embedding virtual time into Mininet significantly enhances its performance fidelity, and therefore, results in a useful platform for the SDN community to conduct scalable experiments with high fidelity.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"215 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115064692","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 60
mSwitch: a highly-scalable, modular software switch mSwitch:一个高度可扩展的模块化软件交换机
Michio Honda, Felipe Huici, G. Lettieri, L. Rizzo
In recent years software network switches have regained eminence as a result of a number of growing trends, including the prominence of software-defined networks, as well as their use as back-ends to virtualization technologies, to name a few. Consequently, a number of high performance switches have been recently proposed in the literature, though none of these simultaneously provide (1) high packet rates, (2) high throughput, (3) low CPU usage, (4) high port density and (5) a flexible data plane. This is not by chance: these features conflict, and while achieving one or a few of them is (now) a solved problem, addressing the combination requires significant new design effort. In this paper we fill the gap by presenting mSwitch. To prove the flexibility and performance of our approach, we use mSwitch to build four distinct modules: a learning bridge consisting of 45 lines of code that outperforms FreeBSD's bridge by up to 8 times; an accelerated Open vSwitch module requiring small changes to the code and boosting performance by 2.6--3 times; a protocol demultiplexer for userspace protocol stacks; and a filtering module that can direct packets to virtualized middleboxes.
近年来,软件网络交换机由于一些不断增长的趋势,包括软件定义网络的突出,以及它们作为虚拟化技术的后端使用等,重新获得了突出地位。因此,最近在文献中提出了许多高性能交换机,尽管这些交换机都不能同时提供(1)高分组速率,(2)高吞吐量,(3)低CPU使用率,(4)高端口密度和(5)灵活的数据平面。这不是偶然的:这些功能相互冲突,虽然实现其中一个或几个功能(现在)是一个解决的问题,但解决这些组合需要大量的新设计工作。在本文中,我们通过mSwitch来填补这一空白。为了证明我们的方法的灵活性和性能,我们使用mSwitch来构建四个不同的模块:一个由45行代码组成的学习桥,其性能比FreeBSD的桥高出8倍;一个加速的Open vSwitch模块,需要对代码进行微小的更改,并将性能提高2.6- 3倍;用于用户空间协议栈的协议解复用器;还有一个过滤模块,可以将数据包引导到虚拟的中间盒。
{"title":"mSwitch: a highly-scalable, modular software switch","authors":"Michio Honda, Felipe Huici, G. Lettieri, L. Rizzo","doi":"10.1145/2774993.2775065","DOIUrl":"https://doi.org/10.1145/2774993.2775065","url":null,"abstract":"In recent years software network switches have regained eminence as a result of a number of growing trends, including the prominence of software-defined networks, as well as their use as back-ends to virtualization technologies, to name a few. Consequently, a number of high performance switches have been recently proposed in the literature, though none of these simultaneously provide (1) high packet rates, (2) high throughput, (3) low CPU usage, (4) high port density and (5) a flexible data plane. This is not by chance: these features conflict, and while achieving one or a few of them is (now) a solved problem, addressing the combination requires significant new design effort. In this paper we fill the gap by presenting mSwitch. To prove the flexibility and performance of our approach, we use mSwitch to build four distinct modules: a learning bridge consisting of 45 lines of code that outperforms FreeBSD's bridge by up to 8 times; an accelerated Open vSwitch module requiring small changes to the code and boosting performance by 2.6--3 times; a protocol demultiplexer for userspace protocol stacks; and a filtering module that can direct packets to virtualized middleboxes.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"70 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115706435","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 81
NetPaxos: consensus at network speed NetPaxos:网络速度一致
Huynh Tu Dang, Daniele Sciascia, M. Canini, F. Pedone, R. Soulé
This paper explores the possibility of implementing the widely deployed Paxos consensus protocol in network devices. We present two different approaches: (i) a detailed design description for implementing the full Paxos logic in SDN switches, which identifies a sufficient set of required OpenFlow extensions; and (ii) an alternative, optimistic protocol which can be implemented without changes to the OpenFlow API, but relies on assumptions about how the network orders messages. Although neither of these protocols can be fully implemented without changes to the underlying switch firmware, we argue that such changes are feasible in existing hardware. Moreover, we present an evaluation that suggests that moving Paxos logic into the network would yield significant performance benefits for distributed applications.
本文探讨了在网络设备中实现广泛部署的Paxos共识协议的可能性。我们提出了两种不同的方法:(i)在SDN交换机中实现完整Paxos逻辑的详细设计描述,它确定了一组足够的所需OpenFlow扩展;(ii)一种替代的、乐观的协议,它可以在不改变OpenFlow API的情况下实现,但依赖于对网络如何排序消息的假设。虽然这两种协议都不能在不改变底层交换机固件的情况下完全实现,但我们认为这种改变在现有硬件中是可行的。此外,我们提出了一项评估,该评估表明将Paxos逻辑移动到网络中将为分布式应用程序带来显著的性能优势。
{"title":"NetPaxos: consensus at network speed","authors":"Huynh Tu Dang, Daniele Sciascia, M. Canini, F. Pedone, R. Soulé","doi":"10.1145/2774993.2774999","DOIUrl":"https://doi.org/10.1145/2774993.2774999","url":null,"abstract":"This paper explores the possibility of implementing the widely deployed Paxos consensus protocol in network devices. We present two different approaches: (i) a detailed design description for implementing the full Paxos logic in SDN switches, which identifies a sufficient set of required OpenFlow extensions; and (ii) an alternative, optimistic protocol which can be implemented without changes to the OpenFlow API, but relies on assumptions about how the network orders messages. Although neither of these protocols can be fully implemented without changes to the underlying switch firmware, we argue that such changes are feasible in existing hardware. Moreover, we present an evaluation that suggests that moving Paxos logic into the network would yield significant performance benefits for distributed applications.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117286680","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 176
Scalable programmable inbound traffic engineering 可扩展的可编程入站流量工程
Peng Sun, L. Vanbever, J. Rexford
With the rise of video streaming and cloud services, enterprise and access networks receive much more traffic than they send, and must rely on the Internet to offer good end-to-end performance. These edge networks often connect to multiple ISPs for better performance and reliability, but have only limited ways to influence which of their ISPs carries the traffic for each service. In this paper, we present Sprite, a software-defined solution for flexible inbound traffic engineering (TE). Sprite offers direct, fine-grained control over inbound traffic, by announcing different public IP prefixes to each ISP, and performing source network address translation (SNAT) on outbound request traffic. Our design achieves scalability in both the data plane (by performing SNAT on edge switches close to the clients) and the control plane (by having local agents install the SNAT rules). The controller translates high-level TE objectives, based on client and server names, as well as performance metrics, to a dynamic network policy based on real-time traffic and performance measurements. We evaluate Sprite with live data from "in the wild" experiments on an EC2-based testbed, and demonstrate how Sprite dynamically adapts the network policy to achieve high-level TE objectives, such as balancing YouTube traffic among ISPs to improve video quality.
随着视频流和云服务的兴起,企业和接入网接收的流量远远超过它们发送的流量,并且必须依赖互联网来提供良好的端到端性能。这些边缘网络通常连接到多个isp,以获得更好的性能和可靠性,但只有有限的方法来影响哪个isp承载每个服务的流量。在本文中,我们提出了Sprite,一个灵活的入站流量工程(TE)的软件定义解决方案。Sprite通过向每个ISP宣布不同的公共IP前缀,并对出站请求流量执行源网络地址转换(SNAT),对入站流量提供直接的、细粒度的控制。我们的设计在数据平面(通过在靠近客户端的边缘交换机上执行SNAT)和控制平面(通过让本地代理安装SNAT规则)实现了可伸缩性。控制器将基于客户端和服务器名称以及性能指标的高级TE目标转换为基于实时流量和性能度量的动态网络策略。我们使用基于ec2的测试平台上的“野外”实验的实时数据来评估Sprite,并演示Sprite如何动态调整网络策略以实现高级TE目标,例如在isp之间平衡YouTube流量以提高视频质量。
{"title":"Scalable programmable inbound traffic engineering","authors":"Peng Sun, L. Vanbever, J. Rexford","doi":"10.1145/2774993.2775063","DOIUrl":"https://doi.org/10.1145/2774993.2775063","url":null,"abstract":"With the rise of video streaming and cloud services, enterprise and access networks receive much more traffic than they send, and must rely on the Internet to offer good end-to-end performance. These edge networks often connect to multiple ISPs for better performance and reliability, but have only limited ways to influence which of their ISPs carries the traffic for each service. In this paper, we present Sprite, a software-defined solution for flexible inbound traffic engineering (TE). Sprite offers direct, fine-grained control over inbound traffic, by announcing different public IP prefixes to each ISP, and performing source network address translation (SNAT) on outbound request traffic. Our design achieves scalability in both the data plane (by performing SNAT on edge switches close to the clients) and the control plane (by having local agents install the SNAT rules). The controller translates high-level TE objectives, based on client and server names, as well as performance metrics, to a dynamic network policy based on real-time traffic and performance measurements. We evaluate Sprite with live data from \"in the wild\" experiments on an EC2-based testbed, and demonstrate how Sprite dynamically adapts the network policy to achieve high-level TE objectives, such as balancing YouTube traffic among ISPs to improve video quality.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"43 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116177451","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 22
The case for an intermediate representation for programmable data planes 可编程数据平面的中间表示形式
M. Shahbaz, N. Feamster
Software-Defined Networking (SDN) switch vendors are interested in extending switch data planes to support new and continuously evolving network protocols (e.g., NVGRE, VXLAN). Numerous commercial programmable data plane devices already enable a programmer to specify various aspects of the data plane including packet parsing, actions, and the layout of packet processing on the hardware device itself. Unlike OpenFlow-based devices, which only expose a series of fixed match-action table (MAT) abstraction, these specialized devices provide a more flexible abstraction for packet processing. Despite the increased programmability that these devices offer, however, the architecture of the target restricts the features that can be exposed to the programmer. Similarly, existing languages for programming the data planes in such devices (e.g., P4) assume a specific computational model, resembling the architecture of the device for which they are targeted for. Unfortunately, this model leads to similar limitations as in OpenFlow, where the high-level specification is coupled to the underlying device model. In this paper, we introduce NetASM, an intermediate representation for programmable data planes. NetASM is a device-independent language that is expressive enough to act as the target language for compilers for high-level languages, yet low-level enough to be efficiently assembled on various device architectures. It enables conventional compiler optimization techniques to significantly improve the performance and resource utilization of custom packet-processing pipelines on a variety of targets.
软件定义网络(SDN)交换机供应商有兴趣扩展交换机数据平面,以支持新的和不断发展的网络协议(例如,NVGRE, VXLAN)。许多商业可编程数据平面设备已经使程序员能够指定数据平面的各个方面,包括数据包解析、动作和硬件设备本身上的数据包处理布局。基于openflow的设备只公开一系列固定的匹配-动作表(MAT)抽象,与之不同,这些专用设备为数据包处理提供了更灵活的抽象。尽管这些设备提供了更高的可编程性,但是,目标的体系结构限制了可以向程序员公开的特性。类似地,为这些设备(例如P4)中的数据平面编程的现有语言假定了一个特定的计算模型,类似于它们所针对的设备的体系结构。不幸的是,该模型导致了与OpenFlow类似的限制,在OpenFlow中,高级规范与底层设备模型耦合在一起。本文介绍了一种可编程数据平面的中间表示——NetASM。NetASM是一种与设备无关的语言,它具有足够的表现力,可以作为高级语言编译器的目标语言,但又足够低,可以在各种设备体系结构上有效地组装。它使传统的编译器优化技术能够在各种目标上显著提高自定义包处理管道的性能和资源利用率。
{"title":"The case for an intermediate representation for programmable data planes","authors":"M. Shahbaz, N. Feamster","doi":"10.1145/2774993.2775000","DOIUrl":"https://doi.org/10.1145/2774993.2775000","url":null,"abstract":"Software-Defined Networking (SDN) switch vendors are interested in extending switch data planes to support new and continuously evolving network protocols (e.g., NVGRE, VXLAN). Numerous commercial programmable data plane devices already enable a programmer to specify various aspects of the data plane including packet parsing, actions, and the layout of packet processing on the hardware device itself. Unlike OpenFlow-based devices, which only expose a series of fixed match-action table (MAT) abstraction, these specialized devices provide a more flexible abstraction for packet processing. Despite the increased programmability that these devices offer, however, the architecture of the target restricts the features that can be exposed to the programmer. Similarly, existing languages for programming the data planes in such devices (e.g., P4) assume a specific computational model, resembling the architecture of the device for which they are targeted for. Unfortunately, this model leads to similar limitations as in OpenFlow, where the high-level specification is coupled to the underlying device model. In this paper, we introduce NetASM, an intermediate representation for programmable data planes. NetASM is a device-independent language that is expressive enough to act as the target language for compilers for high-level languages, yet low-level enough to be efficiently assembled on various device architectures. It enables conventional compiler optimization techniques to significantly improve the performance and resource utilization of custom packet-processing pipelines on a variety of targets.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116248950","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 38
CherryPick: tracing packet trajectory in software-defined datacenter networks CherryPick:在软件定义的数据中心网络中跟踪数据包轨迹
Praveen Tammana, R. Agarwal, Myungjin Lee
SDN-enabled datacenter network management and debugging can benefit by the ability to trace packet trajectories. For example, such a functionality allows measuring traffic matrix, detecting traffic anomalies, localizing network faults, etc. Existing techniques for tracing packet trajectories require either large data collection overhead or large amount of data plane resources such as switch flow rules and packet header space. We present CherryPick, a scalable, yet simple technique for tracing packet trajectories. The core idea of our technique is to cherry-pick the links that are key to representing an end-to-end path of a packet, and to embed them into its header on its way to destination. Preliminary evaluation on a fat-tree topology shows that CherryPick requires minimal switch flow rules, while using header space close to state-of-the-art techniques.
支持sdn的数据中心网络管理和调试可以从跟踪数据包轨迹的能力中获益。例如,这样的功能允许测量流量矩阵、检测流量异常、定位网络故障等。现有的跟踪数据包轨迹的技术要么需要大量的数据收集开销,要么需要大量的数据平面资源,如交换流规则和数据包报头空间。我们提出了CherryPick,一个可扩展的,但简单的技术,用于跟踪数据包轨迹。我们技术的核心思想是挑选对表示包的端到端路径至关重要的链接,并在其到达目的地的途中将它们嵌入到其报头中。对胖树拓扑的初步评估表明,CherryPick需要最小的交换流规则,同时使用接近最先进技术的标题空间。
{"title":"CherryPick: tracing packet trajectory in software-defined datacenter networks","authors":"Praveen Tammana, R. Agarwal, Myungjin Lee","doi":"10.1145/2774993.2775066","DOIUrl":"https://doi.org/10.1145/2774993.2775066","url":null,"abstract":"SDN-enabled datacenter network management and debugging can benefit by the ability to trace packet trajectories. For example, such a functionality allows measuring traffic matrix, detecting traffic anomalies, localizing network faults, etc. Existing techniques for tracing packet trajectories require either large data collection overhead or large amount of data plane resources such as switch flow rules and packet header space. We present CherryPick, a scalable, yet simple technique for tracing packet trajectories. The core idea of our technique is to cherry-pick the links that are key to representing an end-to-end path of a packet, and to embed them into its header on its way to destination. Preliminary evaluation on a fat-tree topology shows that CherryPick requires minimal switch flow rules, while using header space close to state-of-the-art techniques.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"106 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115813576","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 66
NoEncap: overlay network virtualization with no encapsulation overheads NoEncap:覆盖网络虚拟化,没有封装开销
Sergey Guenender, K. Barabash, Y. Ben-Itzhak, A. Levin, E. Raichstein, L. Schour
Overlay network virtualization quickly gains traction in today's multi-tenant data centers due to its ability to provide independent virtual networks, at scale, along with complete isolation from the underlying physical network. Despite the benefits, performance degradation due to the imposed perpacket encapsulation overhead is a serious impediment. Mitigation approaches are mostly hardware based and thus depend on costly networking gear upgrades and suffer from lesser flexibility and longer times to market, compared to software solutions. Software optimizations proposed so far are limited in scope, applicability, and interoperability. In this paper we present NoEncap, a software-only opt mization, capable of eliminating almost completely the overheads, while fully preserving the benefits of an overlay-based network virtualization.
由于能够大规模地提供独立的虚拟网络,并且完全与底层物理网络隔离,覆盖网络虚拟化在当今的多租户数据中心中迅速获得了吸引力。尽管有这些好处,但由于强加的每包封装开销而导致的性能下降是一个严重的障碍。缓解方法大多基于硬件,因此依赖于昂贵的网络设备升级,与软件解决方案相比,灵活性较低,上市时间较长。目前提出的软件优化在范围、适用性和互操作性方面是有限的。在本文中,我们介绍了NoEncap,这是一种纯软件优化,能够消除几乎所有的开销,同时充分保留基于覆盖的网络虚拟化的好处。
{"title":"NoEncap: overlay network virtualization with no encapsulation overheads","authors":"Sergey Guenender, K. Barabash, Y. Ben-Itzhak, A. Levin, E. Raichstein, L. Schour","doi":"10.1145/2774993.2775003","DOIUrl":"https://doi.org/10.1145/2774993.2775003","url":null,"abstract":"Overlay network virtualization quickly gains traction in today's multi-tenant data centers due to its ability to provide independent virtual networks, at scale, along with complete isolation from the underlying physical network. Despite the benefits, performance degradation due to the imposed perpacket encapsulation overhead is a serious impediment. Mitigation approaches are mostly hardware based and thus depend on costly networking gear upgrades and suffer from lesser flexibility and longer times to market, compared to software solutions. Software optimizations proposed so far are limited in scope, applicability, and interoperability. In this paper we present NoEncap, a software-only opt mization, capable of eliminating almost completely the overheads, while fully preserving the benefits of an overlay-based network virtualization.","PeriodicalId":316190,"journal":{"name":"Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127718640","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 19
期刊
Proceedings of the 1st ACM SIGCOMM Symposium on Software Defined Networking Research
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1