首页 > 最新文献

2021 IEEE 29th International Conference on Network Protocols (ICNP)最新文献

英文 中文
RPO: Receiver-driven Transport Protocol Using Opportunistic Transmission in Data Center RPO:数据中心中使用机会传输的接收方驱动传输协议
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651980
Jinbin Hu, Jiawei Huang, Zhaoyi Li, Yijun Li, Wenchao Jiang, Kai Chen, Jianxin Wang, Tian He
Modern datacenter applications bring fundamental challenges to transport protocols as they simultaneously require low latency and high throughput. Recent receiver-driven trans-port protocols transmit only one data packet once receiving each grant or credit packet from the receiver to achieve ultra-low queueing delay and zero packet loss. However, the round-trip time variation and the highly dynamic background traffic significantly deteriorate the performance of receiver-driven transport protocols, resulting in under-utilized bandwidth. This paper designs a simple yet effective solution called RPO that retains the advantages of receiver-driven transmission while efficiently utilizing the available bandwidth. Specifically, RPO rationally uses low-priority opportunistic packets to ensure high network utilization without increasing the queueing delay of high-priority normal packets. In addition, since RPO only uses Explicit Congestion Notification (ECN) marking function and priority queues, RPO is ready to deploy on switches. We implement RPO in Linux hosts with DPDK. Our small-scale testbed experiments and large-scale simulations show that RPO significantly improves the network utilization by up to 35% under high workload over the state-of-the-art receiver-driven transmission schemes, without introducing additional queueing delay.
现代数据中心应用程序同时要求低延迟和高吞吐量,这给传输协议带来了根本性的挑战。最近的接收方驱动的传输协议在接收到接收方的每个授权或信用包后只发送一个数据包,以实现超低的排队延迟和零丢包。然而,往返时间的变化和高度动态的后台流量显著降低了接收端驱动传输协议的性能,导致带宽利用率不足。本文设计了一种简单而有效的RPO解决方案,它保留了接收机驱动传输的优点,同时有效地利用了可用带宽。RPO在不增加高优先级正常报文排队延迟的前提下,合理使用低优先级机会报文,保证较高的网络利用率。此外,由于RPO只使用显式拥塞通知(ECN)标记功能和优先级队列,因此RPO可以部署在交换机上。我们使用DPDK在Linux主机上实现RPO。我们的小规模测试平台实验和大规模模拟表明,在高工作负载下,与最先进的接收器驱动的传输方案相比,RPO显著提高了35%的网络利用率,而不会引入额外的队列延迟。
{"title":"RPO: Receiver-driven Transport Protocol Using Opportunistic Transmission in Data Center","authors":"Jinbin Hu, Jiawei Huang, Zhaoyi Li, Yijun Li, Wenchao Jiang, Kai Chen, Jianxin Wang, Tian He","doi":"10.1109/ICNP52444.2021.9651980","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651980","url":null,"abstract":"Modern datacenter applications bring fundamental challenges to transport protocols as they simultaneously require low latency and high throughput. Recent receiver-driven trans-port protocols transmit only one data packet once receiving each grant or credit packet from the receiver to achieve ultra-low queueing delay and zero packet loss. However, the round-trip time variation and the highly dynamic background traffic significantly deteriorate the performance of receiver-driven transport protocols, resulting in under-utilized bandwidth. This paper designs a simple yet effective solution called RPO that retains the advantages of receiver-driven transmission while efficiently utilizing the available bandwidth. Specifically, RPO rationally uses low-priority opportunistic packets to ensure high network utilization without increasing the queueing delay of high-priority normal packets. In addition, since RPO only uses Explicit Congestion Notification (ECN) marking function and priority queues, RPO is ready to deploy on switches. We implement RPO in Linux hosts with DPDK. Our small-scale testbed experiments and large-scale simulations show that RPO significantly improves the network utilization by up to 35% under high workload over the state-of-the-art receiver-driven transmission schemes, without introducing additional queueing delay.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125670681","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
R-AQM: Reverse ACK Active Queue Management in Multi-tenant Data Centers R-AQM:多租户数据中心中的反向ACK活动队列管理
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651922
Xinle Du, Tong Li, Lei Xu, Kai Zheng, Meng Shen, Bo Wu, Ke Xu
TCP incast has become a practical problem for high-bandwidth, low-latency transmissions, resulting in throughput degradation of up to 90% and delays of hundreds of milliseconds, severely impacting application performance. However, in virtualized multi-tenant data centers, host-based advancements in the TCP stack are hard to deploy from the operators perspective. Operators only provide infrastructure in the form of virtual machines, in which only tenants can directly modify the end-host TCP stack. In this paper, we present R-AQM, a switch-powered reverse ACK active queue management (R-AQM) mechanism for enhancing ACK-clocking effects through assisting legacy TCP. Specifically, R-AQM proactively intercepts ACKs and paces the ACK-clocked in-flight data packets, preventing TCP from suffering incast collapse. We implement and evaluate R-AQM in NS-3 simulation and NetFPGA-based hardware switch. Both simulation and testbed results show that R-AQM greatly improves TCP performance under heavy incast workloads by significantly lowering packet loss rate, reducing retransmission timeouts, and supporting 16 times (i.e., 60 → 1000) more senders. Meanwhile, the forward queuing delays are also reduced by 4.6 times.
TCP连播已经成为高带宽、低延迟传输的一个实际问题,导致吞吐量下降高达90%,延迟达数百毫秒,严重影响应用性能。然而,在虚拟化的多租户数据中心中,从运营商的角度来看,TCP堆栈中基于主机的改进很难部署。运营商只以虚拟机的形式提供基础设施,只有租户可以直接修改终端主机TCP堆栈。在本文中,我们提出了一种开关供电的反向ACK主动队列管理(R-AQM)机制,通过辅助传统TCP来增强ACK时钟效果。具体来说,R-AQM主动拦截ack,并对飞行中的ack时钟数据包进行调整,防止TCP遭受突然崩溃。我们在NS-3仿真和基于netfpga的硬件交换机中实现并评估了R-AQM。仿真和测试结果表明,R-AQM可以显著降低丢包率,减少重传超时,并支持16倍(即60→1000)的发送方,从而大大提高TCP在重投工作负载下的性能。同时,前向排队延迟也减少了4.6倍。
{"title":"R-AQM: Reverse ACK Active Queue Management in Multi-tenant Data Centers","authors":"Xinle Du, Tong Li, Lei Xu, Kai Zheng, Meng Shen, Bo Wu, Ke Xu","doi":"10.1109/ICNP52444.2021.9651922","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651922","url":null,"abstract":"TCP incast has become a practical problem for high-bandwidth, low-latency transmissions, resulting in throughput degradation of up to 90% and delays of hundreds of milliseconds, severely impacting application performance. However, in virtualized multi-tenant data centers, host-based advancements in the TCP stack are hard to deploy from the operators perspective. Operators only provide infrastructure in the form of virtual machines, in which only tenants can directly modify the end-host TCP stack. In this paper, we present R-AQM, a switch-powered reverse ACK active queue management (R-AQM) mechanism for enhancing ACK-clocking effects through assisting legacy TCP. Specifically, R-AQM proactively intercepts ACKs and paces the ACK-clocked in-flight data packets, preventing TCP from suffering incast collapse. We implement and evaluate R-AQM in NS-3 simulation and NetFPGA-based hardware switch. Both simulation and testbed results show that R-AQM greatly improves TCP performance under heavy incast workloads by significantly lowering packet loss rate, reducing retransmission timeouts, and supporting 16 times (i.e., 60 → 1000) more senders. Meanwhile, the forward queuing delays are also reduced by 4.6 times.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"149 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127267296","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Advertising DNS Protocol Use to Mitigate DDoS Attacks 发布DNS协议用于防范DDoS攻击
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651929
Jacob Davis, C. Deccio
The Domain Name System (DNS) has been frequently abused for distributed denial-of-service (DDoS) attacks and cache poisoning because it relies on the User Datagram Protocol (UDP). Since UDP is connection-less, it is trivial for an attacker to spoof the source of a DNS query or response. While other secure transport mechanisms provide identity management, such as the Transmission Control Protocol (TCP) and DNS Cookies, there is currently no method for a client to state that they only use a given protocol. This paper presents a new method to allow protocol enforcement: DNS Protocol Advertisement Records (DPAR). Advertisement records allow Internet Protocol (IP) address subnets to post a public record in the reverse DNS zone stating which DNS mechanisms are used by their clients. DNS servers may then look up this record and require a client to use the stated mechanism, in turn preventing an attacker from sending spoofed messages over UDP. In this paper, we define the specification for DNS Protocol Advertisement Records, considerations that were made, and comparisons to alternative approaches. We additionally estimate the effectiveness of advertisements in preventing DDoS attacks and the expected burden to DNS servers.
域名系统(DNS)经常被滥用于分布式拒绝服务(DDoS)攻击和缓存中毒,因为它依赖于用户数据报协议(UDP)。由于UDP是无连接的,所以攻击者欺骗DNS查询或响应的来源是微不足道的。虽然其他安全传输机制提供了身份管理,比如传输控制协议(TCP)和DNS cookie,但目前还没有办法让客户机声明它们只使用给定的协议。本文提出了一种允许协议强制执行的新方法:DNS协议发布记录(DPAR)。发布记录允许互联网协议(IP)地址子网在反向DNS区域发布公共记录,说明其客户端使用哪些DNS机制。然后,DNS服务器可能会查找此记录并要求客户端使用所述机制,从而防止攻击者通过UDP发送欺骗消息。在本文中,我们定义了DNS协议发布记录的规范、所做的考虑以及与替代方法的比较。我们还估计了广告在防止DDoS攻击方面的有效性以及对DNS服务器的预期负担。
{"title":"Advertising DNS Protocol Use to Mitigate DDoS Attacks","authors":"Jacob Davis, C. Deccio","doi":"10.1109/ICNP52444.2021.9651929","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651929","url":null,"abstract":"The Domain Name System (DNS) has been frequently abused for distributed denial-of-service (DDoS) attacks and cache poisoning because it relies on the User Datagram Protocol (UDP). Since UDP is connection-less, it is trivial for an attacker to spoof the source of a DNS query or response. While other secure transport mechanisms provide identity management, such as the Transmission Control Protocol (TCP) and DNS Cookies, there is currently no method for a client to state that they only use a given protocol. This paper presents a new method to allow protocol enforcement: DNS Protocol Advertisement Records (DPAR). Advertisement records allow Internet Protocol (IP) address subnets to post a public record in the reverse DNS zone stating which DNS mechanisms are used by their clients. DNS servers may then look up this record and require a client to use the stated mechanism, in turn preventing an attacker from sending spoofed messages over UDP. In this paper, we define the specification for DNS Protocol Advertisement Records, considerations that were made, and comparisons to alternative approaches. We additionally estimate the effectiveness of advertisements in preventing DDoS attacks and the expected burden to DNS servers.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"81 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130886563","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
DeltaINT: Toward General In-band Network Telemetry with Extremely Low Bandwidth Overhead DeltaINT:以极低的带宽开销实现通用带内网络遥测
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651963
Siyuan Sheng, Qun Huang, P. Lee
In-band network telemetry (INT) enriches network management at scale through the embedding of complete device-internal states into each packet along its forwarding path, yet such embedding of INT information also incurs significant band-width overhead in the data plane. We propose DeltaINT, a general INT framework that achieves extremely low bandwidth overhead and supports various packet-level and flow-level applications in network management. DeltaINT builds on the insight that state changes are often negligible at most time, so it embeds a state into a packet only when the state change is deemed significant. We theoretically derive the time/space complexities and the bounds of bandwidth mitigation for DeltaINT. We implement DeltaINT in both software and P4. Our evaluation shows that DeltaINT reduces up to 93% of INT bandwidth, and its deployment in a Barefoot Tofino switch incurs limited hardware resource usage.
带内网络遥测(INT)通过将完整的设备内部状态沿其转发路径嵌入到每个数据包中来大规模地丰富网络管理,但这种INT信息的嵌入也会在数据平面上产生显着的带宽开销。我们提出DeltaINT,这是一个通用的INT框架,它实现了极低的带宽开销,并支持网络管理中的各种包级和流级应用。DeltaINT基于这样一种认识,即状态变化在大多数情况下通常是可以忽略不计的,因此,只有当状态变化被认为是重要的时,它才会将状态嵌入到数据包中。我们从理论上推导了DeltaINT的时间/空间复杂度和带宽缓解的界限。我们在软件和P4中都实现了DeltaINT。我们的评估表明,DeltaINT减少了高达93%的INT带宽,并且在赤脚Tofino交换机中部署它会导致有限的硬件资源使用。
{"title":"DeltaINT: Toward General In-band Network Telemetry with Extremely Low Bandwidth Overhead","authors":"Siyuan Sheng, Qun Huang, P. Lee","doi":"10.1109/ICNP52444.2021.9651963","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651963","url":null,"abstract":"In-band network telemetry (INT) enriches network management at scale through the embedding of complete device-internal states into each packet along its forwarding path, yet such embedding of INT information also incurs significant band-width overhead in the data plane. We propose DeltaINT, a general INT framework that achieves extremely low bandwidth overhead and supports various packet-level and flow-level applications in network management. DeltaINT builds on the insight that state changes are often negligible at most time, so it embeds a state into a packet only when the state change is deemed significant. We theoretically derive the time/space complexities and the bounds of bandwidth mitigation for DeltaINT. We implement DeltaINT in both software and P4. Our evaluation shows that DeltaINT reduces up to 93% of INT bandwidth, and its deployment in a Barefoot Tofino switch incurs limited hardware resource usage.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133593632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 17
Poster : Loading Programmable Data Plane Programs to Virtual Plane 海报:加载可编程数据平面程序到虚拟平面
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651939
YuXin Zhao
Virtualization of the programmable data plane allows multiple virtual pipelines to be placed on the same physical programmable device, enabling more flexible network function composition, debugging, etc. Existing proposals realize virtualization with a hypervisor-like program to emulate users’ programs, which becomes the mainstream of the current methods. In spite of the progress achieved, their designs lack study of how to load other programs on this hypervisor. In this poster, we present HyperC, the first compiler for virtualization in programmable data plane, which helps to build a complete virtualization system. HyperC specially optimizes its IR, which makes the hypervisor acquire a decreasing delay by 26.3% on average. At the same time, we solve the placement problem of different users under the restriction of virtual plane resources.
可编程数据平面的虚拟化允许在同一个物理可编程设备上放置多个虚拟管道,从而实现更灵活的网络功能组合、调试等。现有的方案采用类似管理程序的程序来模拟用户的程序来实现虚拟化,已成为当前的主流方法。尽管取得了进展,但他们的设计缺乏对如何在此管理程序上加载其他程序的研究。在这张海报中,我们介绍了HyperC,第一个可编程数据平面虚拟化编译器,它有助于构建一个完整的虚拟化系统。HyperC特别优化了它的IR,这使得管理程序的延迟平均减少了26.3%。同时,解决了在虚拟平面资源限制下不同用户的布局问题。
{"title":"Poster : Loading Programmable Data Plane Programs to Virtual Plane","authors":"YuXin Zhao","doi":"10.1109/ICNP52444.2021.9651939","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651939","url":null,"abstract":"Virtualization of the programmable data plane allows multiple virtual pipelines to be placed on the same physical programmable device, enabling more flexible network function composition, debugging, etc. Existing proposals realize virtualization with a hypervisor-like program to emulate users’ programs, which becomes the mainstream of the current methods. In spite of the progress achieved, their designs lack study of how to load other programs on this hypervisor. In this poster, we present HyperC, the first compiler for virtualization in programmable data plane, which helps to build a complete virtualization system. HyperC specially optimizes its IR, which makes the hypervisor acquire a decreasing delay by 26.3% on average. At the same time, we solve the placement problem of different users under the restriction of virtual plane resources.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114969877","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Cooperatively Constructing Cost-Effective Content Distribution Networks upon Emerging Low Earth Orbit Satellites and Clouds 在新兴的低地球轨道卫星和云上协同构建具有成本效益的内容分发网络
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651950
Zeqi Lai, Hewu Li, Qi Zhang, Qian Wu, Jianping Wu
Internet content providers typically exploit cloud-based content delivery/distribution networks (CDNs) to provide wide-area data access with high availability and low latency. However, from a global perspective, a large portion of users still suffer from high content access latency due to the insufficient deployment of terrestrial cloud infrastructures.This paper presents StarFront, a cost-effective content distribution framework to optimize global CDNs and enable low content access latency anywhere. StarFront builds CDNs upon emerging low Earth orbit (LEO) constellations and existing cloud platforms to satisfy the low-latency requirements while minimizing the operational cost. Specifically, StarFront exploits a key insight that emerging mega-constellations will consist of thousands of LEO satellites equipped with high-speed data links and storage, and thus can potentially work as "cache in space" to enable pervasive and low-latency data access. StarFront judiciously places replicas on either LEO satellites or clouds, and dynamically assigns user requests to proper cache servers based on constellation parameters, cloud/user distributions and pricing policies. Extensive trace-driven evaluations covering geo-distributed vantage points have demonstrated that: StarFront can effectively reduce the global content access latency with acceptable operational cost under representative CDN traffic.
Internet内容提供商通常利用基于云的内容交付/分发网络(cdn)来提供具有高可用性和低延迟的广域数据访问。然而,从全球范围来看,由于地面云基础设施部署不足,很大一部分用户仍然存在较高的内容访问延迟。本文提出了一种具有成本效益的内容分发框架StarFront,用于优化全球cdn并在任何地方实现低内容访问延迟。StarFront在新兴的低地球轨道(LEO)星座和现有云平台上构建cdn,以满足低延迟要求,同时最大限度地降低运营成本。具体来说,StarFront利用了一个关键的洞察力,即新兴的巨型星座将由数千颗配备高速数据链路和存储的LEO卫星组成,因此可以作为“太空缓存”,实现普遍和低延迟的数据访问。StarFront明智地将副本放置在LEO卫星或云上,并根据星座参数、云/用户分布和定价策略动态地将用户请求分配到适当的缓存服务器。覆盖地理分布优势点的广泛跟踪驱动评估表明:StarFront可以在代表性CDN流量下以可接受的运营成本有效地减少全球内容访问延迟。
{"title":"Cooperatively Constructing Cost-Effective Content Distribution Networks upon Emerging Low Earth Orbit Satellites and Clouds","authors":"Zeqi Lai, Hewu Li, Qi Zhang, Qian Wu, Jianping Wu","doi":"10.1109/ICNP52444.2021.9651950","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651950","url":null,"abstract":"Internet content providers typically exploit cloud-based content delivery/distribution networks (CDNs) to provide wide-area data access with high availability and low latency. However, from a global perspective, a large portion of users still suffer from high content access latency due to the insufficient deployment of terrestrial cloud infrastructures.This paper presents StarFront, a cost-effective content distribution framework to optimize global CDNs and enable low content access latency anywhere. StarFront builds CDNs upon emerging low Earth orbit (LEO) constellations and existing cloud platforms to satisfy the low-latency requirements while minimizing the operational cost. Specifically, StarFront exploits a key insight that emerging mega-constellations will consist of thousands of LEO satellites equipped with high-speed data links and storage, and thus can potentially work as \"cache in space\" to enable pervasive and low-latency data access. StarFront judiciously places replicas on either LEO satellites or clouds, and dynamically assigns user requests to proper cache servers based on constellation parameters, cloud/user distributions and pricing policies. Extensive trace-driven evaluations covering geo-distributed vantage points have demonstrated that: StarFront can effectively reduce the global content access latency with acceptable operational cost under representative CDN traffic.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"130 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116336266","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
OBF: A Guaranteed IP Lookup Performance Scheme for Flexible IP Using One Bloom Filter OBF:使用一个Bloom过滤器的灵活IP的保证IP查找性能方案
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651925
Shi-Hai Liu, Wanming Luo, Xu Zhou, Bin Yang, YiHao Jia, Zhe Chen, Sheng Jiang
The conventional IP address is designed with fixed length and lacking of extensibility, while the demand for addresses varies greatly in different scenarios. Flexible IP (FlexIP), as a variable length IP address, proactively makes address structure flexible enough to adapt to various network cases. Different lengths of the addresses could be used to accommodate different demands. However, how to efficiently addressing with length variable addresses is still a problem to be solved. The Bloom filter-based addressing scheme appears to be an excellent candidate with the possibility of compact storage and efficient member query. In this paper, we propose an OBF-based scheme using only one Bloom filter. While keeping nearly the same false positive ratio as the conventional Bloom filter-based scheme, the OBF-based scheme significantly improves the addressing efficiency. OBF-based has two key features, one is that it achieves constant, yet small IP lookup time, and another is that it is insensitive to the length of the address. Simulation results show that the addressing scheme we proposed is more suitable for FlexIP addressing than well known schemes.
传统的IP地址设计固定长度,缺乏可扩展性,而不同场景对地址的需求差异很大。灵活IP (Flexible IP)是一种可变长度的IP地址,主动使地址结构灵活,以适应各种网络情况。不同长度的地址可以用来满足不同的需求。然而,如何有效地对变长地址进行寻址仍然是一个有待解决的问题。基于Bloom过滤器的寻址方案具有紧凑存储和高效成员查询的可能性,是一个很好的候选方案。在本文中,我们提出了一个基于obf的方案,该方案只使用一个Bloom滤波器。基于obf的寻址方案在保持与传统布隆滤波器几乎相同的误报率的同时,显著提高了寻址效率。基于obf的有两个关键特性,一个是它实现了恒定的,但较小的IP查找时间,另一个是它对地址的长度不敏感。仿真结果表明,所提出的寻址方案比现有的寻址方案更适合于FlexIP寻址。
{"title":"OBF: A Guaranteed IP Lookup Performance Scheme for Flexible IP Using One Bloom Filter","authors":"Shi-Hai Liu, Wanming Luo, Xu Zhou, Bin Yang, YiHao Jia, Zhe Chen, Sheng Jiang","doi":"10.1109/ICNP52444.2021.9651925","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651925","url":null,"abstract":"The conventional IP address is designed with fixed length and lacking of extensibility, while the demand for addresses varies greatly in different scenarios. Flexible IP (FlexIP), as a variable length IP address, proactively makes address structure flexible enough to adapt to various network cases. Different lengths of the addresses could be used to accommodate different demands. However, how to efficiently addressing with length variable addresses is still a problem to be solved. The Bloom filter-based addressing scheme appears to be an excellent candidate with the possibility of compact storage and efficient member query. In this paper, we propose an OBF-based scheme using only one Bloom filter. While keeping nearly the same false positive ratio as the conventional Bloom filter-based scheme, the OBF-based scheme significantly improves the addressing efficiency. OBF-based has two key features, one is that it achieves constant, yet small IP lookup time, and another is that it is insensitive to the length of the address. Simulation results show that the addressing scheme we proposed is more suitable for FlexIP addressing than well known schemes.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121509455","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
PIPO: Efficient Programmable Scheduling for Time Sensitive Networking 时间敏感网络的高效可编程调度
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651944
Chuwen Zhang, Zhikang Chen, Haoyu Song, Ruyi Yao, Yang Xu, Yi Wang, J. Miao, B. Liu
Time Sensitive Networking (TSN) is an emerging Ethernet technology for real-time systems. To address different Quality-of-Service (QoS) requirements of applications, IEEE 802.1 TSN Task Group has standardized several packet scheduling and shaping algorithms. The software implementation of these algorithms is hard to meet the performance requirements, while the hardware implementation in Application-Specific Integrated Circuit (ASIC) is inflexible. A hardware-programmable scheduler is necessary to deal with this dilemma. Among the existing primitives, the most expressive one is Push-In-Extract-Out (PIEO), but its complexity makes the implementation very expensive. A relatively lower-cost implementation of PIEO cannot guarantee the scheduling correctness for the most critical Time-Triggered (TT) traffic in TSN. As a remedy, in this paper we propose a new Push-In-Pick-Out (PIPO) primitive under a TSN programmable scheduling framework. Composed of simple priority queues, PIPO can express all existing TSN scheduling and shaping algorithms, and is flexible enough to support future ones. Our PIPO implementation guarantees the TT traffic scheduling correctness. The simulation results corroborate the theoretical analysis that the low-cost PIPO can closely approximate PIEO and sustain a high bandwidth utilization. The prototype on Xilinx FPGA shows that, with 2,048 inputs, the PIPO-based scheduler achieves a throughput of 70 Mpps, which is 1.64x higher than the PIEO-based one, but using only 14.7% Look-Up Tables (LUTs) and 40.5% Block RAMs of the latter.
时间敏感网络(TSN)是一种新兴的实时系统以太网技术。为了满足不同应用的服务质量(QoS)需求,IEEE 802.1 TSN任务组对几种分组调度和整形算法进行了标准化。这些算法的软件实现难以满足性能要求,而专用集成电路(ASIC)的硬件实现又缺乏灵活性。硬件可编程调度器是处理这种困境所必需的。在现有的原语中,最有表现力的是推入-提取-取出(PIEO),但其复杂性使得实现非常昂贵。一个相对低成本的PIEO实现不能保证TSN中最关键的时间触发(TT)流量的调度正确性。作为一种补救措施,本文在TSN可编程调度框架下提出了一种新的推入-提取(PIPO)原语。PIPO由简单的优先级队列组成,可以表达现有的所有TSN调度和整形算法,并具有足够的灵活性来支持未来的算法。我们的PIPO实现保证了TT流量调度的正确性。仿真结果证实了理论分析的正确性,即低成本的PIPO可以近似于pio并保持较高的带宽利用率。Xilinx FPGA上的原型表明,在2,048个输入时,基于pipo的调度程序实现了70 Mpps的吞吐量,比基于pipo的调度程序高1.64倍,但仅使用14.7%的查找表(lut)和40.5%的块ram。
{"title":"PIPO: Efficient Programmable Scheduling for Time Sensitive Networking","authors":"Chuwen Zhang, Zhikang Chen, Haoyu Song, Ruyi Yao, Yang Xu, Yi Wang, J. Miao, B. Liu","doi":"10.1109/ICNP52444.2021.9651944","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651944","url":null,"abstract":"Time Sensitive Networking (TSN) is an emerging Ethernet technology for real-time systems. To address different Quality-of-Service (QoS) requirements of applications, IEEE 802.1 TSN Task Group has standardized several packet scheduling and shaping algorithms. The software implementation of these algorithms is hard to meet the performance requirements, while the hardware implementation in Application-Specific Integrated Circuit (ASIC) is inflexible. A hardware-programmable scheduler is necessary to deal with this dilemma. Among the existing primitives, the most expressive one is Push-In-Extract-Out (PIEO), but its complexity makes the implementation very expensive. A relatively lower-cost implementation of PIEO cannot guarantee the scheduling correctness for the most critical Time-Triggered (TT) traffic in TSN. As a remedy, in this paper we propose a new Push-In-Pick-Out (PIPO) primitive under a TSN programmable scheduling framework. Composed of simple priority queues, PIPO can express all existing TSN scheduling and shaping algorithms, and is flexible enough to support future ones. Our PIPO implementation guarantees the TT traffic scheduling correctness. The simulation results corroborate the theoretical analysis that the low-cost PIPO can closely approximate PIEO and sustain a high bandwidth utilization. The prototype on Xilinx FPGA shows that, with 2,048 inputs, the PIPO-based scheduler achieves a throughput of 70 Mpps, which is 1.64x higher than the PIEO-based one, but using only 14.7% Look-Up Tables (LUTs) and 40.5% Block RAMs of the latter.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"25 3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125980091","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
ATRIA: Autonomous Traffic-Aware Scheduling for Industrial Wireless Sensor-Actuator Networks 工业无线传感器-执行器网络的自主交通感知调度
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651914
Xia Cheng, M. Sha
Recent years have witnessed rapid adoption of low-power Wireless Sensor-Actuator Networks (WSANs) in process industries. To meet the critical demand for reliable and real-time communication in harsh industrial environments, the industrial WSAN standards, such as WirelessHART, ISA100, WIA-FA, and 6TiSCH, make a set of specific design choices, such as employing the Time Slotted Channel Hopping (TSCH) technique. Such design choices distinguish industrial WSANs from traditional Wireless Sensor Networks (WSNs), which were designed for best-effort services. Recently, there has been increasing interest in developing new methods to enable autonomous transmission scheduling for industrial WSANs that run TSCH and the Routing Protocol for Low-Power and Lossy Networks (RPL). Our study shows that the current approaches fail to consider the traffic loads of different devices when assigning time slots and channels, which significantly compromises network performance when facing high data rates. In this paper, we introduce ATRIA, a novel Autonomous Traffic-Aware transmission scheduling method for industrial WSANs. The device that runs ATRIA can detect its traffic load based on its local routing information and then schedule its transmissions accordingly without the need to exchange information with neighboring devices. Experimental results show that ATRIA provides significantly higher end-to-end network reliability and lower end-to-end latency without introducing additional overhead compared with a state-of-the-art baseline.
近年来,低功耗无线传感器-执行器网络(wsan)在过程工业中得到了迅速的应用。为了满足恶劣工业环境中对可靠和实时通信的关键需求,工业WSAN标准,如WirelessHART, ISA100, wiia - fa和6TiSCH,做出了一组特定的设计选择,例如采用时隙信道跳频(TSCH)技术。这样的设计选择将工业无线传感器网络与传统的无线传感器网络(wsn)区分开来,后者是为尽力而为的服务而设计的。最近,人们对开发新方法来实现运行TSCH和低功耗和有损网络路由协议(RPL)的工业WSANs的自主传输调度越来越感兴趣。我们的研究表明,当前的方法在分配时隙和信道时没有考虑不同设备的流量负载,这在面对高数据速率时严重影响了网络性能。本文介绍了一种新的基于流量感知的工业无线局域网传输调度方法——ATRIA。运行ATRIA的设备可以根据其本地路由信息检测流量负载,然后相应地调度传输,而不需要与邻近设备交换信息。实验结果表明,与最先进的基线相比,ATRIA提供了更高的端到端网络可靠性和更低的端到端延迟,而不会引入额外的开销。
{"title":"ATRIA: Autonomous Traffic-Aware Scheduling for Industrial Wireless Sensor-Actuator Networks","authors":"Xia Cheng, M. Sha","doi":"10.1109/ICNP52444.2021.9651914","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651914","url":null,"abstract":"Recent years have witnessed rapid adoption of low-power Wireless Sensor-Actuator Networks (WSANs) in process industries. To meet the critical demand for reliable and real-time communication in harsh industrial environments, the industrial WSAN standards, such as WirelessHART, ISA100, WIA-FA, and 6TiSCH, make a set of specific design choices, such as employing the Time Slotted Channel Hopping (TSCH) technique. Such design choices distinguish industrial WSANs from traditional Wireless Sensor Networks (WSNs), which were designed for best-effort services. Recently, there has been increasing interest in developing new methods to enable autonomous transmission scheduling for industrial WSANs that run TSCH and the Routing Protocol for Low-Power and Lossy Networks (RPL). Our study shows that the current approaches fail to consider the traffic loads of different devices when assigning time slots and channels, which significantly compromises network performance when facing high data rates. In this paper, we introduce ATRIA, a novel Autonomous Traffic-Aware transmission scheduling method for industrial WSANs. The device that runs ATRIA can detect its traffic load based on its local routing information and then schedule its transmissions accordingly without the need to exchange information with neighboring devices. Experimental results show that ATRIA provides significantly higher end-to-end network reliability and lower end-to-end latency without introducing additional overhead compared with a state-of-the-art baseline.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125228174","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
DNSonChain: Delegating Privacy-Preserved DNS Resolution to Blockchain DNSonChain:将保护隐私的DNS解析委托给区块链
Pub Date : 2021-11-01 DOI: 10.1109/ICNP52444.2021.9651951
Lin Jin, Shuai Hao, Yan Huang, Haining Wang, Chase Cotton
Domain Name System (DNS) is known to present privacy concerns. To this end, decentralized blockchains have been used to host DNS records, so that users can synchronize with the blockchain to maintain a local DNS database and resolve domain names locally. However, existing blockchain-based solutions either do not guarantee a domain name is controlled by its "true" owner; or have to resort to DNSSEC, a not yet widely adopted protocol, for verifying ownership. In this paper, we present DNSonChain, a new blockchain-based naming service compatible with DNS. It allows domain owners to claim their domain ownership on the blockchain where DNS records are hosted. The core function of DNSonChain is to validate the domain ownership in a decentralized manner. We propose a majority vote mechanism that randomly selects multiple participants (i.e., voters) in the system to vote for the authority of domain ownership. To provide resistance to attacks from fraudulent voters, DNSonChain requires two rounds of voting processes. Our security analysis shows that DNSonChain is robust against several types of security failures, able to recover from various attacks. We implemented a prototype of DNSonChain as an Ethereum decentralized application and evaluate it on an Ethereum Testnet.
众所周知,域名系统(DNS)存在隐私问题。为此,分散的区块链被用于托管DNS记录,以便用户可以与区块链同步,以维护本地DNS数据库并在本地解析域名。然而,现有的基于区块链的解决方案要么不能保证域名由其“真正”所有者控制;或者不得不求助于DNSSEC(一种尚未被广泛采用的协议)来验证所有权。在本文中,我们提出了DNSonChain,一种兼容DNS的基于区块链的新命名服务。它允许域名所有者在托管DNS记录的区块链上声明其域名所有权。DNSonChain的核心功能是以去中心化的方式验证域名所有权。我们提出了一种多数投票机制,该机制随机选择系统中的多个参与者(即投票人)来投票决定域所有权的权威。为了抵抗欺诈性选民的攻击,DNSonChain需要两轮投票过程。我们的安全分析表明,DNSonChain对几种类型的安全故障具有鲁棒性,能够从各种攻击中恢复。我们实现了DNSonChain的原型作为以太坊去中心化应用程序,并在以太坊测试网上对其进行了评估。
{"title":"DNSonChain: Delegating Privacy-Preserved DNS Resolution to Blockchain","authors":"Lin Jin, Shuai Hao, Yan Huang, Haining Wang, Chase Cotton","doi":"10.1109/ICNP52444.2021.9651951","DOIUrl":"https://doi.org/10.1109/ICNP52444.2021.9651951","url":null,"abstract":"Domain Name System (DNS) is known to present privacy concerns. To this end, decentralized blockchains have been used to host DNS records, so that users can synchronize with the blockchain to maintain a local DNS database and resolve domain names locally. However, existing blockchain-based solutions either do not guarantee a domain name is controlled by its \"true\" owner; or have to resort to DNSSEC, a not yet widely adopted protocol, for verifying ownership. In this paper, we present DNSonChain, a new blockchain-based naming service compatible with DNS. It allows domain owners to claim their domain ownership on the blockchain where DNS records are hosted. The core function of DNSonChain is to validate the domain ownership in a decentralized manner. We propose a majority vote mechanism that randomly selects multiple participants (i.e., voters) in the system to vote for the authority of domain ownership. To provide resistance to attacks from fraudulent voters, DNSonChain requires two rounds of voting processes. Our security analysis shows that DNSonChain is robust against several types of security failures, able to recover from various attacks. We implemented a prototype of DNSonChain as an Ethereum decentralized application and evaluate it on an Ethereum Testnet.","PeriodicalId":343813,"journal":{"name":"2021 IEEE 29th International Conference on Network Protocols (ICNP)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114710912","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
期刊
2021 IEEE 29th International Conference on Network Protocols (ICNP)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1