Paper Info
Title
Deep Packet Inspection as a Service.
Abstract
Middleboxes play a major role in contemporary networks, as forwarding packets is often not enough to meet operator demands, and other functionalities (such as security, QoS/QoE provisioning, and load balancing) are required. Traffic is usually routed through a sequence of such middleboxes, which either reside across the network or in a single, consolidated location. Although middleboxes provide a vast range of different capabilities, there are components that are shared among many of them. A task common to almost all middleboxes that deal with L7 protocols is Deep Packet Inspection (DPI). Today, traffic is inspected from scratch by all the middleboxes on its route. In this paper, we propose to treat DPI as a service to the middleboxes, implying that traffic should be scanned only once, but against the data of all middleboxes that use the service. The DPI service then passes the scan results to the appropriate middleboxes. Having DPI as a service has significant advantages in performance, scalability, robustness, and as a catalyst for innovation in the middlebox domain. Moreover, technologies and solutions for current Software Defined Networks (SDN) (e.g., SIMPLE [41]) make it feasible to implement such a service and route traffic to and from its instances.
Year
DOI
Venue
2014
10.1145/2674005.2674984
CoNEXT
Keywords
Field
DocType
deep packet inspection,software defined networks,network function virtualization
Deep packet inspection,Middlebox,Computer science,Load balancing (computing),Network packet,Quality of service,Computer network,Provisioning,Software-defined networking,Distributed computing,Scalability
Conference
ISBN
Citations 
PageRank 
978-1-4503-3279-8
33
1.56
References 
Authors
27
4
Name
Order
Citations
PageRank
Anat Bremler-Barr150539.95
Yotam Harchol21359.07
David Hay318512.25
Yaron Koral4975.74