The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. ex. Some numerals are expressed as "XNUMX".
Copyrights notice
The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. Copyrights notice
Kertas kerja ini mencadangkan sistem pemantauan trafik yang pantas dan berskala yang dipanggil Fast xFlow Proxy. Untuk rangkaian peruntukan dan pengendalian yang cekap, xFlow seperti IPFIX dan NetFlow ialah teknologi yang menjanjikan untuk menggambarkan matriks trafik terperinci dalam rangkaian. Walau bagaimanapun, paket protokol internet (IP) dalam rangkaian pembawa yang besar dikapsulkan dengan pelbagai pengepala luar, cth, protokol terowong lapisan 2 (L2TP) atau label pensuisan label berbilang protokol (MPLS). Memandangkan teknologi xFlow asli digunakan pada pengepala luar, maklumat dalaman yang dikehendaki tidak dapat digambarkan. Daripada motivasi ini, kami mencadangkan Fast xFlow Proxy, yang meneroka paket pembawa yang rumit, mengekstrak maklumat dalaman dengan betul dan menyampaikan maklumat dalaman kepada pengumpul aliran umum. Proksi xFlow yang pantas seharusnya dapat mengendalikan pelbagai operasi pemprosesan paket yang mungkin (cth, analisis pengepala, penyingkiran pengepala dan statistik) pada kadar wayar. Untuk merealisasikan kelajuan pemprosesan yang diperlukan, kami melaksanakan Fast xFlow Proxy menggunakan kit pembangunan satah data (DPDK) dan tatasusunan gerbang boleh diprogramkan medan (FPGA). Dengan mengoptimumkan penggunaan proses antara DPDK dan FPGA, Fast xFlow Proxy mencapai pemprosesan kadar wayar. Daripada penilaian, kami boleh mencapai prestasi lebih 20 Gbps dengan menggunakan pelayan tunggal dan prestasi 100 Gbps dengan menggunakan seni bina skala kecil. Kami juga menunjukkan bahawa prestasi ini cukup praktikal untuk memantau rangkaian pembawa seluruh negara.
Shohei KAMAMURA
NTT Corporation
Yuhei HAYASHI
NTT Corporation
Yuki MIYOSHI
NTT Corporation
Takeaki NISHIOKA
NTT Corporation
Chiharu MORIOKA
NTT Corporation
Hiroyuki OHNISHI
NTT Corporation
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Salinan
Shohei KAMAMURA, Yuhei HAYASHI, Yuki MIYOSHI, Takeaki NISHIOKA, Chiharu MORIOKA, Hiroyuki OHNISHI, "Fast xFlow Proxy: Exploring and Visualizing Deep Inside of Carrier Traffic" in IEICE TRANSACTIONS on Communications,
vol. E105-B, no. 5, pp. 512-521, May 2022, doi: 10.1587/transcom.2021EBP3086.
Abstract: This paper proposes a fast and scalable traffic monitoring system called Fast xFlow Proxy. For efficiently provisioning and operating networks, xFlow such as IPFIX and NetFlow is a promising technology for visualizing the detailed traffic matrix in a network. However, internet protocol (IP) packets in a large carrier network are encapsulated with various outer headers, e.g., layer 2 tunneling protocol (L2TP) or multi-protocol label switching (MPLS) labels. As native xFlow technologies are applied to the outer header, the desired inner information cannot be visualized. From this motivation, we propose Fast xFlow Proxy, which explores the complicated carrier's packet, extracts inner information properly, and relays the inner information to a general flow collector. Fast xFlow Proxy should be able to handle various packet processing operations possible (e.g., header analysis, header elimination, and statistics) at a wire rate. To realize the processing speed needed, we implement Fast xFlow Proxy using the data plane development kit (DPDK) and field-programmable gate array (FPGA). By optimizing deployment of processes between DPDK and FPGA, Fast xFlow Proxy achieves wire rate processing. From evaluations, we can achieve over 20 Gbps performance by using a single server and 100 Gbps performance by using scale-out architecture. We also show that this performance is sufficiently practical for monitoring a nationwide carrier network.
URL: https://global.ieice.org/en_transactions/communications/10.1587/transcom.2021EBP3086/_p
Salinan
@ARTICLE{e105-b_5_512,
author={Shohei KAMAMURA, Yuhei HAYASHI, Yuki MIYOSHI, Takeaki NISHIOKA, Chiharu MORIOKA, Hiroyuki OHNISHI, },
journal={IEICE TRANSACTIONS on Communications},
title={Fast xFlow Proxy: Exploring and Visualizing Deep Inside of Carrier Traffic},
year={2022},
volume={E105-B},
number={5},
pages={512-521},
abstract={This paper proposes a fast and scalable traffic monitoring system called Fast xFlow Proxy. For efficiently provisioning and operating networks, xFlow such as IPFIX and NetFlow is a promising technology for visualizing the detailed traffic matrix in a network. However, internet protocol (IP) packets in a large carrier network are encapsulated with various outer headers, e.g., layer 2 tunneling protocol (L2TP) or multi-protocol label switching (MPLS) labels. As native xFlow technologies are applied to the outer header, the desired inner information cannot be visualized. From this motivation, we propose Fast xFlow Proxy, which explores the complicated carrier's packet, extracts inner information properly, and relays the inner information to a general flow collector. Fast xFlow Proxy should be able to handle various packet processing operations possible (e.g., header analysis, header elimination, and statistics) at a wire rate. To realize the processing speed needed, we implement Fast xFlow Proxy using the data plane development kit (DPDK) and field-programmable gate array (FPGA). By optimizing deployment of processes between DPDK and FPGA, Fast xFlow Proxy achieves wire rate processing. From evaluations, we can achieve over 20 Gbps performance by using a single server and 100 Gbps performance by using scale-out architecture. We also show that this performance is sufficiently practical for monitoring a nationwide carrier network.},
keywords={},
doi={10.1587/transcom.2021EBP3086},
ISSN={1745-1345},
month={May},}
Salinan
TY - JOUR
TI - Fast xFlow Proxy: Exploring and Visualizing Deep Inside of Carrier Traffic
T2 - IEICE TRANSACTIONS on Communications
SP - 512
EP - 521
AU - Shohei KAMAMURA
AU - Yuhei HAYASHI
AU - Yuki MIYOSHI
AU - Takeaki NISHIOKA
AU - Chiharu MORIOKA
AU - Hiroyuki OHNISHI
PY - 2022
DO - 10.1587/transcom.2021EBP3086
JO - IEICE TRANSACTIONS on Communications
SN - 1745-1345
VL - E105-B
IS - 5
JA - IEICE TRANSACTIONS on Communications
Y1 - May 2022
AB - This paper proposes a fast and scalable traffic monitoring system called Fast xFlow Proxy. For efficiently provisioning and operating networks, xFlow such as IPFIX and NetFlow is a promising technology for visualizing the detailed traffic matrix in a network. However, internet protocol (IP) packets in a large carrier network are encapsulated with various outer headers, e.g., layer 2 tunneling protocol (L2TP) or multi-protocol label switching (MPLS) labels. As native xFlow technologies are applied to the outer header, the desired inner information cannot be visualized. From this motivation, we propose Fast xFlow Proxy, which explores the complicated carrier's packet, extracts inner information properly, and relays the inner information to a general flow collector. Fast xFlow Proxy should be able to handle various packet processing operations possible (e.g., header analysis, header elimination, and statistics) at a wire rate. To realize the processing speed needed, we implement Fast xFlow Proxy using the data plane development kit (DPDK) and field-programmable gate array (FPGA). By optimizing deployment of processes between DPDK and FPGA, Fast xFlow Proxy achieves wire rate processing. From evaluations, we can achieve over 20 Gbps performance by using a single server and 100 Gbps performance by using scale-out architecture. We also show that this performance is sufficiently practical for monitoring a nationwide carrier network.
ER -