PACE: Policy-Aware Application Cloud Embedding

Li, Li Erran; Liaghat, Vahid; Zhao, Hu; Hajiaghay, MohammadTaghi; Li, Dan; Wilfong, Gordon; Yang, Yufan; Guo, Chuanxiong

doi:10.1109/infcom.2013.6566849

Cited by 45 publications

(32 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To prevent policy violation, PACE [10] presented an online algorithm for application mapping onto DC topology, however, it only considers one-off VM placement, which poses a problem of adaptability with dynamic workloads.…”

Section: Resources Utilisationmentioning

confidence: 99%

Experimental evaluation of SDN-controlled, joint consolidation of policies and virtual machines

Hajji

Tso

Cui

et al. 2017

2017 IEEE Symposium on Computers and Communications (ISCC)

View full text Add to dashboard Cite

Abstract-Middleboxes (MBs) are ubiquitous in modern data centre (DC) due to their crucial role in implementing network security, management and optimisation. In order to meet network policy's requirement on correct traversal of an ordered sequence of MBs, network administrators rely on static policy based routing or VLAN stitching to steer traffic flows. However, dynamic virtual server migration in virtual environment has greatly challenged such static traffic steering.In this paper, we design and implement Sync, an efficient and synergistic scheme to jointly consolidate network policies and virtual machines (VMs), in a readily deployable Mininet environment. We present the architecture of Sync framework and open source its code. We also extensively evaluate Sync over diverse workload and policies. Our results show that in an emulated DC of 686 servers, 10k VMs, 8k policies, and 100k flows, Sync processes a group of 900 VMs and 10 VMs in 634 seconds and 4 seconds respectively.

show abstract

Section: Resources Utilisationmentioning

confidence: 99%

Experimental evaluation of SDN-controlled, joint consolidation of policies and virtual machines

Hajji

Tso

Cui

et al. 2017

2017 IEEE Symposium on Computers and Communications (ISCC)

View full text Add to dashboard Cite

show abstract

“…As these virtual machines are managed, secure control by the hypervisor because new instance that is guest operating system used in virtual machines are installed on a hypervisor and this hypervisor works as a middleware between virtual machines and the hardware. That's why hypervisors are the main target of the hackers or attackers for performing malicious activities [6].…”

Section: Virtualized Technologymentioning

confidence: 99%

“…In this figure a VPN Firewall is installed which uses the concept of IP tunneling the tunnel is generated from router A to router D in this scenario .As we want that sales clients A and C can access the database and remote login, that's why there is a need of IP tunneling to encapsulate the packets [6]. Now in this scenario sales client D and B can't access the database and the remote login access, because there is no tunnel between router B to router D. So difference between the only Firewall and VPN Firewall is Firewall block or filter the services for all users, but VPN Firewall can block some required users or allow some required users also [7].…”

Section: Fig 2: Network With Vpn_firewallmentioning

confidence: 99%

Performance Evaluation of Dynamic Routing Protocols using Firewall and VPN_Firewall under Cloud Computing

Kimmy¹,

Khurana²

2014

IJCA

View full text Add to dashboard Cite

Cloud Computing is buzzword in market now days. It has been developed to reduce the overall expenses as it provides the on demand services at any time on pay-per-use pattern. Internet is the medium for deploying cloud computing services for users to access the required application and services .It allows the users to access the services which are actually not reside in their own data centers. It provides an efficient and very flexible way for the services, applications to meet business needs. Its infrastructure consist three layers-IAAS, PAAS and SAAS. Cloud computing deploy its services through:-Private, Public and Hybrid Cloud. As the Cloud Computing is still on its initial stage of development and can say in its growing phase, so it suffers from various threats, attacks and vulnerabilities that sometime prevent the user, customers from trusting on it. User's sensitive data resides on Cloud, but due to its lack of security control the confidential data of the clients are comes under the risk of malicious activities or the unauthorized access from illegal users. So it needs an efficient method for ensuring security. In this paper it is recommend to use of Firewalls and VPN_Firewall (virtual private network) in cloud networks for its security. There is a performance evaluation of OSPF, IGRP and EIGRP protocols under two scenarios-with Firewall, and VPN_Firewall. KeywordsFirewall, VPN, EIGRP, OSPF, IGRP, Cloud Computing. 1.INTRODUCTIONThe traditional Computing uses hardware, software and storage resources to getting the desired computational services whereas Cloud Computing has separating the number of applications, services from the underlined hardware and from resources ( Networks, Servers, Storage ) users, customers are no longer bother to purchase the Hardware, Software, Storages. They have to pay on the consumption basis only [1]. Architecture of Cloud Computing includes -Infrastructure as a service which provides the virtual infrastructure for users to deploy their services. Platform as a service provides the platforms or environments for deploying the application and services and with Software as a service you can access the software online on your desktops without any installation. Before starting the journey to cloud the customers, organizations must keep in mind the various attacks, threats and vulnerabilities which can intrude their confidential data [11]. Cloud Computing Technology is not trustworthy as it can easily effect by the threats and attacks, the data can be loss and misused by unauthorized access. In order to create awareness and to protect the users of cloud from malicious activities there must be an powerful and trustworthy security policies, measures or techniques which can protect or secure the user's data on Cloud. In this paper Firewall and Virtual Private Networks are discussed for the purpose of Security in Cloud Computing. This paper uses three services Database, Remote login and FTP. This paper evaluates the performance of dynamic routing protocols using Firewall, VPN_firew...

show abstract

“…Applications over DC networks have complex communication patterns which are governed by a collection of network policies regarding security and performance. In order to implement these policies, network operators typically deploy a diverse range of network appliances or "middleboxes", including firewalls, traffic shapers, load balancers, Intrusion Detection and Prevention Systems (IDS/IPS), and application enhancement boxes [1]. Across all network sizes, the number of middleboxes is on par with the number of routers in a network, hence such deployments are large and require high up-front investment in hardware totalling thousands to millions of dollars [2] [3].…”

Section: Introductionmentioning

confidence: 99%

PLAN: Joint Policy- and Network-Aware VM Management for Cloud Data Centers

Cui

Tso

Pezaros

et al. 2017

IEEE Trans. Parallel Distrib. Syst.

View full text Add to dashboard Cite

Abstract-Policies play an important role in network configuration and therefore in offering secure and high performance services especially over multi-tenant Cloud Data Center (DC) environments. At the same time, elastic resource provisioning through virtualization often disregards policy requirements, assuming that the policy implementation is handled by the underlying network infrastructure. This can result in policy violations, performance degradation and security vulnerabilities. In this paper, we define PLAN, a PoLicy-Aware and Network-aware VM management scheme to jointly consider DC communication cost reduction through Virtual Machine (VM) migration while meeting network policy requirements. We show that the problem is NP-hard and derive an efficient approximate algorithm to reduce communication cost while adhering to policy constraints. Through extensive evaluation, we show that PLAN can reduce topology-wide communication cost by 38% over diverse aggregate traffic and configuration policies.

show abstract

PACE: Policy-Aware Application Cloud Embedding

Cited by 45 publications

References 14 publications

Experimental evaluation of SDN-controlled, joint consolidation of policies and virtual machines

Experimental evaluation of SDN-controlled, joint consolidation of policies and virtual machines

Performance Evaluation of Dynamic Routing Protocols using Firewall and VPN_Firewall under Cloud Computing

PLAN: Joint Policy- and Network-Aware VM Management for Cloud Data Centers

Contact Info

Product

Resources

About