Deep Packet inspection as a service

Anat Bremler-Barr, Yotam Harchol, David Hay, Yaron Koral

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

87 Scopus citations

Abstract

Middleboxes play a major role in contemporary networks, as forwarding packets is often not enough to meet operator demands, and other functionalities (such as security, QoS/QoE provisioning, and load balancing) are required. Traffic is usually routed through a sequence of such middleboxes, which either reside across the network or in a single, consolidated location. Although middleboxes provide a vast range of different capabilities, there are components that are shared among many of them. A task common to almost all middleboxes that deal with L7 protocols is Deep Packet Inspection (DPI). Today, traffic is inspected from scratch by all the middleboxes on its route. In this paper, we propose to treat DPI as a service to the middleboxes, implying that traffic should be scanned only once, but against the data of all middleboxes that use the service. The DPI service then passes the scan results to the appropriate middleboxes. Having DPI as a service has significant advantages in performance, scalability, robustness, and as a catalyst for innovation in the middlebox domain. Moreover, technologies and solutions for current Software Defined Networks (SDN) (e.g., SIMPLE [41]) make it feasible to implement such a service and route traffic to and from its instances.

Original languageAmerican English
Title of host publicationCoNEXT 2014 - Proceedings of the 2014 Conference on Emerging Networking Experiments and Technologies
PublisherAssociation for Computing Machinery
Pages271-282
Number of pages12
ISBN (Electronic)9781450332798
DOIs
StatePublished - 2 Dec 2014
Event10th ACM International Conference on Emerging Networking Experiments and Technologies, CoNEXT 2014 - Sydney, Australia
Duration: 2 Dec 20145 Dec 2014

Publication series

NameCoNEXT 2014 - Proceedings of the 2014 Conference on Emerging Networking Experiments and Technologies

Conference

Conference10th ACM International Conference on Emerging Networking Experiments and Technologies, CoNEXT 2014
Country/TerritoryAustralia
CitySydney
Period2/12/145/12/14

Bibliographical note

Publisher Copyright:
© 2014 ACM.

Fingerprint

Dive into the research topics of 'Deep Packet inspection as a service'. Together they form a unique fingerprint.

Cite this