SmartX Multi-View Visibility Framework with Flow-Centric Visibility for SDN-Enabled Multisite Cloud Playground

2021

IEEE Access

Self Cite

Recently, to match the emerging demands for multi-site edge clouds, the cloud-based information and communication technology (ICT) infrastructure is rapidly expanding. To protect distributed edge-based cloud assets from networking-based threats by recognizing suspicious traffic, cloud operators should monitor the overall underlying topology to categorize and identify diversified networking packet traffic, flowing through various paths among virtualized and containerized cloud nodes. Perimeter-based networking security, which employs security appliances in fixed locations, cannot address this visibility challenge. As a result, in this paper, we propose the SmartX Multi-tier Security (Multi-Sec) framework, which aims to provide intuitive and systematic visibility for multi-site edge-cloud security. SmartX Multi-Sec abstracts the underlying networking topology among multi-site edge clusters as multiple onion-ringbased tiers of physical, virtualized, and containerized cloud nodes. It also provides collective DevSecOps automation features for monitoring, visualizing, and filtering targeted networking traffic from the respective tiers of the abstracted networking topology. The resulting flow-centric visibility using SmartX Multi-Sec can be featured with extended Berkeley Packet Filter and eXpress Data Path (eBPF/XDP)-leveraged lightweight flow capture and filtering, three-dimensional onion-ring visualization, and automated deployment of DevSecOps functions. By integrating these features, the Proof-of-Concept (PoC)-version of the SmartX Multi-Sec framework is realized to verify the flexible and scalable flow-centric security for multi-site cloudnative edge clouds.INDEX TERMS automated function deployment, lightweight flow capture and filtering, multi-site cloudnative edge clouds, security-oriented flow-centric visibility, three-dimensional visualization

Section: A the Flow-centric Multi-tiered Visibility Framework With 3d Onion-ring Visualizationmentioning

confidence: 99%

SmartX Multi-Sec: A Visibility-Centric Multi-Tiered Security Framework for Multi-Site Cloud-Native Edge Clusters

Shin¹,

2021

IEEE Access

Self Cite

“…1 For multi-layer visibility, SmartX MVF is a useful framework. 7 However, minimal consideration was given at the requirements needed to support resource-constrained nodes reachable only over unreliable or bandwidth-limited network connections or thought about the needs of applications that demand very high bandwidth, low latency, or widespread compute capacity across many sites. In comparison, we adopted an approach to provide persistent operations for OF@TEIN+ playground developers and operators to effectively operate and maintain the playground.…”

Section: Related Workmentioning

confidence: 99%

“…Moreover, for reliable and consistent collection, we select specific metrics for active monitoring as shown in Table 5. Site connectivity is evaluated by throughput 7 and latency. 8 IO Visor employs the extended Berkeley Packet Filtering (a.k.a.…”

Section: Flow Summarization and Optimal Polling For Maintaining Network And Storage Loadmentioning

confidence: 99%

“…To address this particular limitation, "SmartX Multi-View Visibility Framework" (MVF) provides multi-layered visibility (underlay, physical, and virtual resource-layers and flow layer). 6,7 In comparison to the monitoring that mainly focuses on measurement data, the term Multi-View visibility referred here covers both measurement data and data for tracing. 6 SmartX MVF leveraged monitoring enables monitoring of dynamic status metrics for both physical and virtualized resources and associated flows 7 of the playground for OF@TEIN+ playground.…”

mentioning

confidence: 99%

“…6,7 In comparison to the monitoring that mainly focuses on measurement data, the term Multi-View visibility referred here covers both measurement data and data for tracing. 6 SmartX MVF leveraged monitoring enables monitoring of dynamic status metrics for both physical and virtualized resources and associated flows 7 of the playground for OF@TEIN+ playground. 8 Maintaining persistent visibility 1 is one of the major operational challenges where SmartX MVF and related tools fall short.…”

mentioning

confidence: 99%

See 2 more Smart Citations

Maintaining SmartX multi‐view visibility for OF@TEIN+ distributed cloud‐native edge boxes

Rathore

Trans Emerging Tel Tech

2020

Self Cite

Maintaining knowledge of infrastructure has always been a key element to ensure the performance of complex distributed systems, being the first step to control quality of service, identify key performance bottlenecks, or make decisions about resource allocation and job scheduling, to name a few. In cloud-native edge boxes, edge computing leverages cloud-native applications to process/analyze some of their computing/storage own close to the location where the data is generated by a large number of heterogeneous devices. Some of the differences between this approach and more conventional architecture, like cloud are that in a distributed environment, these resources/applications have varying running conditions depending on resource availability, quality of network connection, and being geo-distributed. These aforementioned challenges in operations, however, contribute to a requirement toward identifying efficient methods for monitoring operational environment with continuity in order to maintain and sustain services. In this article, we present setup and configuration of distributed resources with cloud-native edge capabilities and having centralized connectivity in a specialized multi-site cloud testbed. Second, we propose a solution to persistently maintain multi-view (ie, resource-layer and flow layer) visibility data (monitoring) collection under varying situations and environments. Third, we present verification results on a prototype implementation and interactive visualization support. This solution allows maintaining monitoring visibility data that conform to the specific demands of cloud-native edge computing resources. We evaluate the research by maintaining visibility data of multi-site cloud at 14 research institutes for several months and we demonstrate that it fulfills the requirements we previously enumerated. INTRODUCTIONMaintaining a stable monitoring state has been a key element in ensuring the sustainable performance of complex distributed systems, as the first step in managing quality of service, detect failures, or making decisions about resource allocation, to name a few. Edge cloud 1 is a broad distribution of storage/-compute resources around geographic locations with cloud-like capabilities located at the infrastructure edge. Cloud-native application is a methodology of building

SmartX Multi‐View Visibility Framework for unified monitoring of SDN‐enabled multisite clouds

Trans Emerging Tel Tech

2019

Self Cite

Modern ICT infrastructures are getting complicated to cope with the various demands to accommodate the emerging technology paradigms such as cloud, SDN, and IoT. In these ICT infrastructures, unified monitoring is essential to easily pinpoint server faults, network bottlenecks, and application performance issues for effective operation. Although many traditional monitoring solutions are now available, unified monitoring has not kept pace, creating a big gap when operating these modern infrastructures. To address this particular limitation, in this paper, a futuristic multilayer visibility framework, denoted as SmartX Multi-View Visibility Framework (MVF), is proposed by unifying the visibility of physical and virtual resource, flow, and workload layers for timely detection and mitigation of various operational issues. Based on our experience of working with Future Internet testbeds, we first design SmartX MVF to enable visibility collection and validation from distributed MPs. Then, we link it with subsequent visibility integration capability empowered by DataLake-based visibility storage for interactive visualization of collected visibility. Furthermore, a prototype implementation of SmartX MVF is developed and deployed in OF@TEIN