Title Virtualized Networks for Cloud Computing: state-of-the-art and open challenges



Similar documents
Allocating Bandwidth in Datacenter Networks: A Survey

Gatekeeper: Supporting Bandwidth Guarantees for Multi-tenant Datacenter Networks

The Price Is Right: Towards Location-Independent Costs in Datacenters

NicPic: Scalable and Accurate End-Host Rate Limiting

On Tackling Virtual Data Center Embedding Problem

Mohammad Alizadeh. Computer networks and systems, network algorithms, cloud computing

Workflow Specification and Scheduling with Security Constraints in Hybrid Clouds

A Reliability Analysis of Datacenter Topologies

Managing Network Reservation for Tenants in Oversubscribed Clouds

THE CLOUD AND ITS EFFECTS ON WEB DEVELOPMENT

Transparent and Flexible Network Management for Big Data Processing in the Cloud

Performance Evaluation Panda for Data Storage and Sharing Services in Cloud Computing

International Journal of Emerging Technology in Computer Science & Electronics (IJETCSE) ISSN: Volume 8 Issue 1 APRIL 2014.

Gatekeeper: Supporting Bandwidth Guarantees for Multi-tenant Datacenter Networks

Security and Privacy issues in Cloud Computing

On the Amplitude of the Elasticity Offered by Public Cloud Computing Providers

Enabling Practical SDN Security Applications with OFX (The OpenFlow extension Framework)

TinyFlow: Breaking Elephants Down Into Mice in Data Center Networks

A Cooperative Game Based Allocation for Sharing Data Center Networks

AIN: A Blueprint for an All-IP Data Center Network

IMPLEMENTATION CONCEPT FOR ADVANCED CLIENT REPUDIATION DIVERGE AUDITOR IN PUBLIC CLOUD

Geoprocessing in Hybrid Clouds

SECURITY ENHANCEMENT OF GROUP SHARING AND PUBLIC AUDITING FOR DATA STORAGE IN CLOUD

Data Center Load Balancing Kristian Hartikainen

Development of enhanced Third party Auditing Scheme for Secure Cloud Storage

Improving Flow Completion Time for Short Flows in Datacenter Networks

Networking in the Big Data Era

A Hybrid Load Balancing Policy underlying Cloud Computing Environment

International Journal of Computer Science Trends and Technology (IJCST) Volume 2 Issue 3, May-Jun 2014

Data Center Network Structure using Hybrid Optoelectronic Routers

Scalable Network Virtualization in Software-Defined Networks

Scalability of Control Planes for Software Defined Networks:Modeling and Evaluation

EFFICIENT AND SECURE DATA PRESERVING IN CLOUD USING ENHANCED SECURITY

Secure Cloud Computing with a Virtualized Network Infrastructure

Multi Tenancy Access Control Using Cloud Service in MVC

SDN Security Design Challenges

An Architecture Model of Sensor Information System Based on Cloud Computing

Dynamic Resource Pricing on Federated Clouds

Minimal Cost Data Sets Storage in the Cloud

Reallocation and Allocation of Virtual Machines in Cloud Computing Manan D. Shah a, *, Harshad B. Prajapati b

IMPACT OF DISTRIBUTED SYSTEMS IN MANAGING CLOUD APPLICATION

SECURE CLOUD STORAGE PRIVACY-PRESERVING PUBLIC AUDITING FOR DATA STORAGE SECURITY IN CLOUD

PRIVACY PRESERVING PUBLIC AUDITING FOR SECURED DATA STORAGE IN CLOUD USING BLOCK AUTHENTICATION CODE

Data Integrity Check using Hash Functions in Cloud environment

Secured Storage of Outsourced Data in Cloud Computing

Supply Chain Platform as a Service: a Cloud Perspective on Business Collaboration

Data Integrity for Secure Dynamic Cloud Storage System Using TPA

Index Terms: Cloud Computing, Third Party Auditor, Threats In Cloud Computing, Dynamic Encryption.

Demand-Aware Flow Allocation in Data Center Networks

OpenFlow based Load Balancing for Fat-Tree Networks with Multipath Support

CREATE: CoRrelation Enhanced traffic matrix Estimation in Data Center Networks

MODIFIED BITTORRENT PROTOCOL AND ITS APPLICATION IN CLOUD COMPUTING ENVIRONMENT

Agent Based Framework for Scalability in Cloud Computing

Cloud Networking an Enterprise View

TITLE: Secure Auditing and Deduplicating Data in Cloud(Survey Paper)

A Proposed Framework for Ranking and Reservation of Cloud Services Based on Quality of Service

A Comparative Study of Data Center Network Architectures

A Comparative Study of Applying Real- Time Encryption in Cloud Computing Environments

Virtualization Technologies (ENCS 691K Chapter 3)

Cloud Template, a Big Data Solution

Performance analysis of Windows Azure data storage options

An Efficient Secure Multi Owner Data Sharing for Dynamic Groups in Cloud Computing

HEY, YOU, GET OFF OF MY CLOUD: EXPLORING INFORMATION LEAKAGE

Load Balancing Mechanisms in Data Center Networks

Keywords-- Cloud computing, Encryption, Data integrity, Third Party Auditor (TPA), RC5 Algorithm, privacypreserving,

Figure 1. The cloud scales: Amazon EC2 growth [2].

Performance Evaluation of the Illinois Cloud Computing Testbed

A Study on the Cloud Computing Architecture, Service Models, Applications and Challenging Issues

Survey Paper on Integrity Auditing of Storage

Data Center Network Architectures

OperationCheckpoint: SDN Application Control

CLOUD COMPUTING: A NEW VISION OF THE DISTRIBUTED SYSTEM

Enable Public Audit ability for Secure Cloud Storage

Review of Cloud Computing Architecture for Social Computing

Nessus or Metasploit: Security Assessment of OpenStack Cloud

Optimizing Big Data Processing Performance in the Public Cloud: Opportunities and Approaches

Predictable Data Centers

Enabling Flow-based Routing Control in Data Center Networks using Probe and ECMP

Transcription:

ACM SAC 2013-28th Symposium On Applied Computing 7- March 18-22, 2013 - Coimbra, Portugal Title Virtualized Networks for Cloud Computing: state-of-the-art and open challenges Duration 3h Abstract Cloud computing and network virtualization represent two of the most important topics of the moment in computer science. While cloud computing has changed the landscape of Information Technology with a new operation model, network virtualization is a paradigm shift that fosters real innovation in computer networks by allowing multiple protocol stacks and network instances to coexist. This tutorial provides a fresh view on clouds and network virtualization, explores data center infrastructures, and then discusses how network virtualization can help improve current cloud infrastructures, with potential to solve several of the problems they face today. On each subject, special attention will be given to open challenges and research directions. Brief Summary to the Topic There is a growing number of applications that move to the cloud, as a way to reduce operational and infrastructural costs. Warehouse-scale data centers are a fundamental component in this context. They allow multiple tenants to lease computing resources on-demand over a flexible pay-per-use model. This model is quite attractive as each application may increase/decrease its capacity by requesting/leasing servers and network capacity, thus allowing them to adapt to market trends. Moreover, the datacenter provider is responsible for maintaining the infrastructure and planning hardware expansions [34]. As attractive as this model may be, its shared nature raises major challenges. For example, sharing a datacenter network may cause: performance unpredictability, as current sharing models may not properly isolate concurrent traffic; novel security concerns, since several resources may be shared among rival companies or malicious tenants; and misbehavior on conventional Internet protocols, such as routing, TCP fairness etc. [14, 16, 21, 30, 31, 33, 35]. We begin introducing the key concepts and benefits of Cloud Computing and of Network Virtualization, including recent advances such as Software-Defined Networks. We then discuss cloud infrastructures, with focus on data center networks, and how

these can be virtualized. The tutorial closes with research challenges that merit investigation. Motivation, target audience, and interest for the SAC community This tutorial should be attractive for postgraduate students and researchers interested in the fields of computer networks, distributed systems or computer security. In particular, the tutorial touches two very hot topics in different research communities: Cloud Computing and Network Virtualization (including Software-Defined Networks). Outline 1. Introduction 2. Cloud Computing 3. Network Virtualization 4. Cloud Networks (data center networking) 5. Virtualizing Cloud Networks 6. Research Challenges 7. Final Remarks Expected background of the audience Prospective attendees should understand the basic operating system and computer network principles, therefore any senior undergraduate should profit from the tutorial. The presentation style is more interactive, with key concepts and their applications being followed by questions to the audience. The set of slides contains the basis to guide the discussion on the subject, but the level of detail actually employed in the presentation is adapted on-the-fly according to the feedback received (with questions). Biography of the Lecturer Prof. Marinho P. Barcellos INF/UFRGS Federal University of Rio Grande do Sul Av. Bento Gonçalves, 9500 - Bloco IV Porto Alegre, RS Brazil - marinho@inf.ufrgs.br, marinho@acm.org Prof. Marinho P. Barcellos received BSc and MSc degrees in Computer Science from Federal University of Rio Grande do Sul (1989 and 1993, respectively) and PhD degree in Computer Science from University of Newcastle Upon Tyne (1998). In 2003-2004, he worked in a joint project between University of Manchester and British Telecomm research labs on high-performance multicast transport. Since 2008 Prof. Barcellos has been with the Federal University of Rio Grande do Sul (UFRGS), where he is an Associate Professor. He has authored many papers in leading journals and conferences related to computer networks, network and service management, distributed systems, and computer security, also serving as TPC member and chair. He has authored book

chapters and delivered several tutorials and invited talks. His work as a lecturer has been consistently distinguished by graduating students. Prof. Barcellos was the appointed chair of the Special Interest Group on Computer Security of the Brazilian Computer Society (CESeg/SBC) 2011-2012. He is a member of SBC, IEEE and ACM. His current research interests are cloud computing data center networks, softwaredefined networking, information-centric networks and security aspects of those networks. Please see http://www.inf.ufrgs.br/~marinho. Bibliography [1] M. Alizadeh, A. Kabbani, T. Edsall, B. Prabhakar, A. Vahdat, and M. Yasuda, Less is more: trading a little bandwidth for ultra-low latency in the data center, presented at the NSDI'12: Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation, 2012. [2] D. Arora, A. Feldmann, G. Schaffrath, and S. Schmid, On the benefit of virtualization: strategies for flexible server allocation, presented at the Hot-ICE'11: Proceedings of the 11th USENIX conference on Hot topics in management of internet, cloud, and enterprise networks and services, 2011. [3] H. Ballani, P. Costa, T. Karagiannis, and A. Rowstron, The price is right: towards locationindependent costs in datacenters, presented at the HotNets-X: Proceedings of the 10th ACM Workshop on Hot Topics in Networks, 2011. [4] T. Benson, A. Akella, A. Shaikh, and S. Sahu, CloudNaaS: a cloud networking platform for enterprise applications, presented at the SOCC '11: Proceedings of the 2nd ACM Symposium on Cloud Computing, 2011. [5] K. Chen, A. Singlay, A. Singhz, K. Ramachandranz, L. Xuz, Y. Zhangz, X. Wen, and Y. Chen, OSA: an optical switching architecture for data center networks with unprecedented flexibility, presented at the NSDI'12: Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation, 2012. [6] Q. Duan, Modeling and Performance Analysis on Network Virtualization for Composite Network- Cloud Service Provisioning, Services (SERVICES), 2011 IEEE World Congress on, pp. 548 555, 2011. [7] Z. Feng, H. Wu, and J. Su, Exploring potential vulnerabilities in data center network, presented at the CoNEXT '10 Student Workshop: Proceedings of the ACM CoNEXT Student Workshop, 2010. [8] C. Guo, G. Lu, H. J. Wang, S. Yang, C. Kong, P. Sun, W. Wu, and Y. Zhang, SecondNet: a data center network virtualization architecture with bandwidth guarantees, presented at the Co-NEXT '10: Proceedings of the 6th International COnference, 2010. [9] T. A. Henzinger, A. V. Singh, V. Singh, T. Wies, and D. Zufferey, A marketplace for cloud resources, presented at the EMSOFT '10: Proceedings of the tenth ACM international conference on Embedded software, 2010. [10] V. T. Lam, S. Radhakrishnan, R. Pan, A. Vahdat, and G. Varghese, Netshare and stochastic netshare: predictable bandwidth allocation for data centers, SIGCOMM Computer Communication Review, vol. 42, no. 3, Jun. 2012. [11] A. Li, X. Yang, S. Kandula, and M. Zhang, CloudCmp: comparing public cloud providers, presented at the IMC '10: Proceedings of the 10th annual conference on Internet measurement, 2010. [12] J. Matias, E. Jacob, D. Sanchez, and Y. Demchenko, An OpenFlow Based Network Virtualization Framework for the Cloud, presented at the Cloud Computing Technology and Science (CloudCom), 2011 IEEE Third International Conference on, 2011, pp. 672 678. [13] B. Peng, A. Hammad, R. Nejabati, S. Azodolmolky, D. Simeonidou, and V. Reijs, A Network Virtualization Framework for IP Infrastructure Provisioning, presented at the Cloud Computing Technology and Science (CloudCom), 2011 IEEE Third International Conference on, 2011, pp. 679 684.

[14] L. Popa, G. Kumar, N. M. M. K. Chowdhury, A. Krishnamurthy, S. Ratnasamy, and I. Stoica, FairCloud: sharing the network in cloud computing, presented at the ACM SIGCOMM 2012, 2012. [15] L. Popa, A. Krishnamurthy, S. Ratnasamy, and I. Stoica, FairCloud: sharing the network in cloud computing, presented at the HotNets-X: Proceedings of the 10th ACM Workshop on Hot Topics in Networks, 2011. [16] P. Prakash, A. Dixit, Y. C. Hu, and R. Kompella, The TCP outcast problem: exposing unfairness in data center networks, presented at the NSDI'12: Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation, 2012. [17] S. Radhakrishnan, R. Pan, and A. Vahdat, Netshare and stochastic netshare: predictable bandwidth allocation for data centers, ACM SIGCOMM Computer Communication Review, vol. 42, no. 3, Jul. 2012. [18] H. Rodrigues, J. R. Santos, Y. Turner, P. Soares, and D. Guedes, Gatekeeper: supporting bandwidth guarantees for multi-tenant datacenter networks, presented at the WIOV'11: Proceedings of the 3rd conference on I/O virtualization, 2011. [19] J. Schad, J. Dittrich, and J. A. Quiané-Ruiz, Runtime measurements in the cloud: observing, analyzing, and reducing variance, Proceedings of the VLDB Endowment, vol. 3, no. 1, pp. 460 471, 2010. [20] Z. Shen, S. Subbiah, X. Gu, and J. Wilkes, CloudScale: elastic resource scaling for multi-tenant cloud systems, presented at the SOCC '11: Proceedings of the 2nd ACM Symposium on Cloud Computing, 2011. [21] A. Shieh, S. Kandula, A. Greenberg, C. Kim, and B. Saha, Sharing the data center network, presented at the NSDI'11: Proceedings of the 8th USENIX conference on Networked systems design and implementation, 2011. [22] A. Shieh, S. Kandula, A. Greenberg, and C. Kim, Seawall: performance isolation for cloud datacenter networks, presented at the HotCloud'10: Proceedings of the 2nd USENIX conference on Hot topics in cloud computing, 2010. [23] A. Singla, C.-Y. Hong, L. Popa, and P. B. Godfrey, Jellyfish: networking data centers randomly, presented at the NSDI'12: Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation, 2012. [24] B. Tiwana, M. Balakrishnan, M. K. Aguilera, H. Ballani, and Z. M. Mao, Location, location, location!: modeling data proximity in the cloud, presented at the Hotnets-IX: Proceedings of the 9th ACM SIGCOMM Workshop on Hot Topics in Networks, 2010. [25] H.-M. Tseng, H.-L. Lee, J.-W. Hu, T.-L. Liu, J.-G. Chang, and W.-C. Huang, Network Virtualization with Cloud Virtual Switch, presented at the Parallel and Distributed Systems (ICPADS), 2011 IEEE 17th International Conference on, 2011, pp. 998 1003. [26] E. Walker, Benchmarking amazon EC2 for high-performance scientific computing, Usenix Login, vol. 33, no. 5, pp. 18 23, 2008. [27] G. Wang and T. S. E. Ng, The Impact of Virtualization on Network Performance of Amazon EC2 Data Center, INFOCOM, 2010 Proceedings IEEE, 2010, pp. 1 9. [28] K. C. Webb, A. C. Snoeren, and K. Yocum, Topology switching for data center networks, presented at the Hot-ICE'11: Proceedings of the 11th USENIX conference on Hot topics in management of internet, cloud, and enterprise networks and services, 2011. [29] C. Zhang, C. Huang, K. W. Ross, D. A. Maltz, and J. Li, Inflight modifications of content: who are the culprits?, presented at the LEET'11: Proceedings of the 4th USENIX conference on Large-scale exploits and emergent threats, 2011. [30] Y. Zhang, A. Juels, A. Oprea, and M. K. Reiter, HomeAlone: Co-residency Detection in the Cloud via Side-Channel Analysis, Security and Privacy (SP), 2011 IEEE Symposium on, pp. 313 328, 2011. [31] H. Ballani, P. Costa, T. Karagiannis, A. Rowstron, Towards predictable datacenter networks, In Proceedings of the ACM SIGCOMM 2011. ACM, New York, NY, USA, 242-253, 2011.

[32] J. Mudigonda, P. Yalagandula, J. Mogul, B. Stiekes, and Y. Pouffary, NetLord: a scalable multitenant network architecture for virtualized datacenters, In Proceedings of the ACM SIGCOMM 2011 conference (SIGCOMM '11). ACM, New York, NY, USA, 62-73, 2011. [33] T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds, In Proceedings of the 16th ACM conference on Computer and communications security (CCS '09). ACM, New York, NY, USA, 199-212, 2009. [34] M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, and M. Zaharia, A view of cloud computing, Commun. ACM 53, 4 (April 2010), 50-58, 2010. [35] D. Abts and B. Felderman, A guided tour of data-center networking, Commun. ACM 55, 6 (June 2012), 44-51, 2012. [36] P. Bodík, I. Menache, M. Chowdhury, P. Mani, D. Maltz, and I. Stoica, Surviving Failures in Bandwidth-Constrained Datacenters, ACM SIGCOMM 2012, 2012. [37] T. Benson, A. Akella, and D. Maltz, "Network traffic characteristics of data centers in the wild", IMC'10, 2010. [38] S. Kandula, S. Sengupta, A. Greenberg, P. Patel, and R. Chaiken, "The nature of data center traffic: measurements & analysis", IMC'09, 2009. [39] A. Khan, A. Zugenmaier, D. Jurca, and W. Kellerer, "Network virtualization: a hypervisor for the Internet?", Communications Magazine, Volume 50, Issue 1, 2012. [40] M. Chowdhury, R. Boutaba, "A survey of network virtualization", Computer Networks, Volume 54, Issue 5, 2010.