ABSTRACT

No abstract

No abstract

No abstract

No abstract

No abstract

Abstract. The FPL-3 packet filtering language incorporates explicit support for distributed processing into the language. FPL-3 supports not only generic headerbased filtering, but also more demanding tasks, such as payload scanning, packet replication and traffic splitting. By distributing FPL-3 based tasks across a possibly heterogeneous network of processing nodes, the NET-FFPF network monitoring architecture facilitates very high speed packet processing. Results show that NET-FFPF can perform complex processing at gigabit speeds. The proposed framework can be used to execute such diverse tasks as load balancing, traffic monitoring, firewalling and intrusion detection directly at the critical highbandwidth links (e.g., in enterprise gateways).

Abstract.This paper highlights the concepts and results of our research leading to demonstrations during the period [2005][2006][2007] use their own dedicated network infrastructure, designed to handle the required data volumes without being tightly coupled to computational resources. In our paper we will not target such applications but consider data intensive applications that are expected to benefit from the ability of a network to dynamically allocate and reserve lightpaths that are shared at different times with other applications. Several examples of these applications within areas such as data mining and visualisation can be found within the realm of the OptIPuter project. We will also consider network situations were multiple network providers must work together in order to create end-to-end lightpaths. We will assume that providers will allow applications or its middleware to make lightpath reservations. As lightpaths typically do not use network layer data forwarding techniques and rely on layer-2 or below technologies, access control to a lightpath becomes more difficult, in particular if a lightpath needs to be specifically bound to an application. During the course of this paper we will see that network domains and applications can work together in different ways to make sure applications, which reserve a lightpath, actually get unique access to their reserved lightpath. and GEANT2 Autobahn 8 allow applications to reserve and use a lightpath on demand. Within these networks it is however unclear how particular applications can be given exclusive access to a reserved lightpath, whilst preventing other applications from using the same lightpath during its use. In this paper, we show a token based access control mechanism that can be used for this purpose. Recent research and development projects such as Phosphorus 9 and Internet2 DCN aim at making network resources Grid middleware enabled. The token approach is being incorporated and tested in these projects.A token provides a flexible mechanism that allows the right to access a lightpath to be