Jae Woo Lee, Roberto Francescangeli, Wonsang Song, Jan Janak, Suman - - PowerPoint PPT Presentation

Jae Woo Lee, Roberto Francescangeli, Wonsang Song, Jan Janak, Suman Srinivasan, Michael S. Kester, Salman Baset, Eric Liu and Henning Schulzrinne Internet Real-Time Lab, Columbia University

In collaboration with Volker Hilt at Bell Labs/Alcatel-Lucent and Zoran Despotovic and Wolfgang Kellerer at DOCOMO Euro-Labs

What
is
NetServ?


• In‐network
service
container

• Java‐programmable,
signal‐driven
router

• “GENI
Lite”
–
deploy
modules,
not
VMs

• Active
networking
2.0


Bridging
two
worlds


10+
interfaces
 0
GB
disk
 1
low‐end
processor
 1
interface
 TB
disk
 1‐32
multi‐core
processors


NetServ
packet
transport
 Virtual
execution
 
environment
 Building
block
layer
 Virtual
execution
 
environment
 Building
block
layer
 Virtual
execution
 
environment
 Building
block
layer


Service
modules
 Service
modules
 Service
modules


NetServ
controller


Module
download
 Module
install
 Signaling
message
 to
install
module
 Signaling
message
 forwarded
to
next
hop
 Data
packets
processed
 by
service
modules


NetServ
node
architecture


Current
prototype


!"#$"%&' !$()' *+$,'

!"#$%&'()*+% ,-+*.(*&+,/-% 01"2% 3/()*+%

!"#$"%&'

• ./#%.00"%'

(1/23'4"%/"0' ,%5/67.%#'058"%'

$"%&19"'

• ./#51/"%'

$"%&19"'

• ./#51/"%'

$"%&19"'

• ./#51/"%'

:5&5';$*1' :5&5';$*1' :5&5';$*1'

$"%&"%' 5770195#1./' <.=20"6' 4/-+',-*.%(/-+./5%(/66'-73%

• 01"/#>'

$"%&"%' =5#5' 7594"#6' ?.%@5%="= =5#5' 7594"#6' $1A/501/A' 7594"#6' ,&+'85*3% (/66'-7% !"#B10#"%'

19:0;0;%<=% 19:0;0;%<>%

1*+#*.?%4/-+./5% @*33'A*3% )594"#' 7%.9"661/A' 5770195#1./' <.=20"6' !$+$'61A/501/A'=5"<./6'

Service
container
in
detail


!"#$%$%&

!"#$%&'()#(* & +$"*,"#-&.*/0'&*12() & 345*(6(*&78&9&*%0&!"#$%&:/#;1"#()&<&

!".)1)2&=/,$*(> & 42>;(=&=/,$*(> & ?)1@@()>&A/)&#1;"6(& & A$#0;"/#> &

B10'(;& @)/0(>>"#- & 1@@*"01;"/#& =/,$*(&C &

4()6() & 1@@*"01;"/# & =/,$*(&C &

'())*+,&

• .()&

!/01/.2& 3(+0.(44/. &

D78&E&34F"&

:*"(#;5>()6()& ,1;1&@10'(;> &

!"#$%&'()*+%!!,-&,*.')##.*/&("#012

G/)H1),(,& ,1;1& & @10'(;> &

!"#$%&'"!&%()*+%+%,

&B10'(;&,">@1;0I() & J & 4()6*(;&KBL & M$--*() & M8!5NB: & J & J & B10'(;& @)/0(>>"#- & 1@@*"01;"/#& =/,$*(&O &

The
grand
vision


• NetServ
everywhere


 Common
service
API
on
router,
PC,
set‐top
box,
...
  Storage
and
computation
on
network
nodes
  Enabling
platform
for
NGI


• Internet
is
a
multi‐user
computer


 Code
modules
run
anywhere
  Secure
and
extensible
  Active
networking
redux!


Not‐so‐grand
initial
focus


• Activate
the
network
edge


 Eyeball
ISPs
sell
router
resources
to
content


publishers


 Content
publishers
install
servers
and
packet


processors
on
edge
routers


• Economic
incentives


 New
revenue
source
for
ISPs
  Alternative
to
CDN
for
content
publishers


Overview
of
operation


!"#$%&"'()*+,%*"#'-)#'./0'1'

12'34"#'5"6/"4+' 72'8*4+,99':);/9"' <2'=!8!'!%>*,9' ./09%4?"#'1 @*;'34"#4' 12'34"#'5"6/"4+' 72'8*4+,99':);/9"' <2'=!8!'!%>*,9' ./09%4?"#'< @*;'34"#4'

="+!"#$'5)/+"#'

="+!"#$'()*+#)99"#'

!"#$%&"'()*+,%*"#'-)#'./0'<'

NSIS
Signaling


!"

#$%&$'

!$(#$')!*+*'$ ,--./0*(/1%

!"

23!#4#3"%(/(5

!"

!$(#$') 617($' 483617($' 6$0$/)$' 239*(*3:$;;*<$; =*;( !1&$ 23#/<%*./%<3:$;;*<$;

!"

!$(#$') 617($'

4>?8 @/:$17(

Application:
ActiveCDN


!"#$%&'($ )'*+'(,$ (-%*'($ )'*+'(,$ (-%*'($ .'/%01($ (-%*'($ .'/%01($ (-%*'($ 2-"*'"*$ 3%405&6'(

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

)$ )$

7R9$2-"*'"*$3%405&6'($3(-4'&$C-($5"&*100'#$J>*5,'2K)$A-#%0'&$ 7889$J>*5,'2K)$>1"$10&-$3(->'&&$>-"*'"*$

Application:
Media
relay


• Standard
media
relay


– Required
due
to
NAT
 – Out‐of‐path
 – Inefficient
and
Costly


• NetServ
media
relay


– Closer
to
users
 – Improved
call
quality
 – Reduced
cost
for
ITSP


Application:
Keep‐alive
responder


• NAT
Keep‐alive
responder
off


– UA
behind
NAT
must
send
keep‐alive
messages
 – Major
boJleneck
for
SIP
server


• NAT
Keep‐alive
responder
on


– Module
responds
on
behalf
of
SIP
server
 – No
traffic
to
server


Application:
Overload
control


NetServ
Module


• Controlled
by
SIP
server

• ThroJles
incoming
traffic

• Randomized
traffic
rejecLon


SIP
Server


• Installs
NetServ
module
on
demand

• Controls
all
NetServ
modules

• Real‐Lme
feedback
to
modules


Evaluation


!"#$%&'()#(*&

+(,-().&/0#,1"#() &

+(,20#",0)& '((34*".(&

5-6" & 782 &

/0#9&:& /0#9&;& /0#9&<& /0#9&=& /0#9&>& /0#9&?&

+(,9"*,()&

100 200 300 400 500 100 200 300 400 500 Forwarding rate [kpps] Input rate [kpps] Conf 1: Plain Linux Conf 2: Linux with packet filser Conf 3: NetServ Container with Java removed Conf 4: NetServ Container with no module Conf 5: NetServ Container with NetMonitor Conf 6: NetServ Container with KeepAlive

Java
packet
processing
overhead:


• Overhead
significant,
but
not
prohibitive

• Handles
typical
edge
router
traffic
on
modest
PC
hardware


So
what’s
new?


Three
design
goals:


• 1. Wide‐area
deployment




Signaling
for
deployment
w/o
precise
target


• 2. Multi‐user
execution
environment




Packet
processing
in
user
space




Multiple
layers
of
resource
control
&
isolation




Module
authentication
&
filter
authorization


• 3. Clear
economic
benefit




Compelling
use
cases


Future
work


• OpenFlow
integration


 NetServ
node
as
a
side‐car


• NetServ
on
commercial
router


 JUNOS
SDK


• Internet
multicast
using
NetServ


 Hybrid
of
ALM
and
IP
multicast


• Authentication
and
authorization
using
RPKI


NetServ
project
roadmap


• Nov
2010:
Demo
at
GEC9
plenary
session


 Video
available
at
http://vimeo.com/16474575


• June
2011:
Presentation
at
FutureNet
IV

• Full
conference
paper
in
the
works


 Current
status
available
in
tech
report:


http://www.cs.columbia.edu/~jae/papers/netserv‐ tech‐report‐1.0.pdf


• July
2011:
NetServ
tutorial
at
GEC11


 NetServ
as
GENI
Lite


• Open‐source
release
shortly
afterwards