Detail publikace

Software Defined Monitoring of Application Protocols

Originální název

Software Defined Monitoring of Application Protocols

Anglický název

Software Defined Monitoring of Application Protocols

Jazyk

en

Originální abstrakt

With the ongoing shift of network services to the application layer also the monitoring systems focus more on the data from the application layer. The increasing speed of the network links, together with the increased complexity of application protocol processing, require a new way of hardware acceleration. We propose a new concept of hardware acceleration for flexible flow-based application level traffic monitoring which we call Software Defined Monitoring. Application layer processing is performed by monitoring tasks implemented in the software in conjunction with a configurable hardware accelerator. The accelerator is a high-speed application-specific processor tailored to stateful flow processing. The software monitoring tasks control the level of detail retained by the hardware for each flow in such a way that the usable information is always retained, while the remaining data is processed by simpler methods. Flexibility of the concept is provided by a plugin-based design of both hardware and software, which ensures adaptability in the evolving world of network monitoring. Our high-speed implementation using FPGA acceleration board in a commodity server is able to perform a 100 Gb/s flow traffic measurement augmented by a selected application-level protocol analysis.

Anglický abstrakt

With the ongoing shift of network services to the application layer also the monitoring systems focus more on the data from the application layer. The increasing speed of the network links, together with the increased complexity of application protocol processing, require a new way of hardware acceleration. We propose a new concept of hardware acceleration for flexible flow-based application level traffic monitoring which we call Software Defined Monitoring. Application layer processing is performed by monitoring tasks implemented in the software in conjunction with a configurable hardware accelerator. The accelerator is a high-speed application-specific processor tailored to stateful flow processing. The software monitoring tasks control the level of detail retained by the hardware for each flow in such a way that the usable information is always retained, while the remaining data is processed by simpler methods. Flexibility of the concept is provided by a plugin-based design of both hardware and software, which ensures adaptability in the evolving world of network monitoring. Our high-speed implementation using FPGA acceleration board in a commodity server is able to perform a 100 Gb/s flow traffic measurement augmented by a selected application-level protocol analysis.

BibTex


@article{BUT119889,
  author="Lukáš {Kekely} and Jan {Kučera} and Viktor {Puš} and Jan {Kořenek} and Athanasios {Vasilakos}",
  title="Software Defined Monitoring of Application Protocols",
  annote="With the ongoing shift of network services to the application layer also the
monitoring systems focus more on the data from the application layer. The
increasing speed of the network links, together with the increased complexity of
application protocol processing, require a new way of hardware acceleration. We
propose a new concept of hardware acceleration for flexible flow-based
application level traffic monitoring which we call Software Defined Monitoring.
Application layer processing is performed by monitoring tasks implemented in the
software in conjunction with a configurable hardware accelerator. The accelerator
is a high-speed application-specific processor tailored to stateful flow
processing. The software monitoring tasks control the level of detail retained by
the hardware for each flow in such a way that the usable information is always
retained, while the remaining data is processed by simpler methods. Flexibility
of the concept is provided by a plugin-based design of both hardware and
software, which ensures adaptability in the evolving world of network monitoring.
Our high-speed implementation using FPGA acceleration board in a commodity server
is able to perform a 100 Gb/s flow traffic measurement augmented by a selected
application-level protocol analysis.",
  address="NEUVEDEN",
  booktitle="IEEE Transactions on Computers",
  chapter="119889",
  doi="10.1109/TC.2015.2423668",
  edition="NEUVEDEN",
  howpublished="print",
  institution="NEUVEDEN",
  number="2",
  volume="65",
  year="2015",
  month="april",
  pages="615--626",
  publisher="NEUVEDEN",
  type="journal article in Web of Science"
}