{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,8,29]],"date-time":"2024-08-29T20:35:21Z","timestamp":1724963721970},"reference-count":24,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2018,4,27]],"date-time":"2018-04-27T00:00:00Z","timestamp":1524787200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["SIGCOMM Comput. Commun. Rev."],"published-print":{"date-parts":[[2018,4,27]]},"abstract":"Major cloud providers offer networks of virtual machines with private IP addresses as a service on the cloud. To isolate the address space of different customers, customers are required to tunnel their traffic to a Virtual Private Network (VPN) gateway, which is typically a middlebox inside the cloud that internally tunnels each packet to the correct destination. To improve performance, an increasing number of enterprises connect directly to the cloud provider's network at the edge, to a device we call the provider's edge (PE). PE is a chokepoint for customer's traffic to the cloud, and therefore a natural candidate for implementing network functions concerning customers' virtual networks, including the VPN gateway, to avoid a detour to middleboxes inside the cloud.<\/jats:p>\n At the scale of today's cloud providers, VPN gateways need to maintain information for around a million internal tunnels. We argue that no single commodity device can handle these many tunnels while providing a high enough port density to connect to hundreds of cloud customers at the edge. Thus, in this paper, we propose a hybrid architecture for the PE, consisting of a commodity switch, connected to a commodity server which uses Data-Plane Development Kit (DPDK) for fast packet processing. This architecture enables a variety of network functions at the edge by offering the benefits of both hardware and software data planes. We implement a scalable VPN gateway on our proposed PE and show that it matches the scale requirements of today's cloud providers while processing packets close to line rate.<\/jats:p>","DOI":"10.1145\/3211852.3211860","type":"journal-article","created":{"date-parts":[[2018,4,30]],"date-time":"2018-04-30T11:58:18Z","timestamp":1525089498000},"page":"49-55","update-policy":"http:\/\/dx.doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":14,"title":["A Scalable VPN Gateway for Multi-Tenant Cloud Services"],"prefix":"10.1145","volume":"48","author":[{"given":"Mina Tahmasbi","family":"Arashloo","sequence":"first","affiliation":[{"name":"Princeton University"}]},{"given":"Pavel","family":"Shirshov","sequence":"additional","affiliation":[{"name":"Microsoft"}]},{"given":"Rohan","family":"Gandhi","sequence":"additional","affiliation":[{"name":"Carnegie Mellon University"}]},{"given":"Guohan","family":"Lu","sequence":"additional","affiliation":[{"name":"Microsoft"}]},{"given":"Lihua","family":"Yuan","sequence":"additional","affiliation":[{"name":"Microsoft"}]},{"given":"Jennifer","family":"Rexford","sequence":"additional","affiliation":[{"name":"Princeton University"}]}],"member":"320","published-online":{"date-parts":[[2018,4,27]]},"reference":[{"key":"e_1_2_1_1_2","unstructured":"Cloud Computing Trends: 2016 State of the Cloud Survey. http:\/\/www.rightscale.com\/blog\/cloud-industry-insights\/cloud-computing-trends-2016-state-cloud-survey#enterpriseworkloads. Accessed: January 2018. Cloud Computing Trends: 2016 State of the Cloud Survey. http:\/\/www.rightscale.com\/blog\/cloud-industry-insights\/cloud-computing-trends-2016-state-cloud-survey#enterpriseworkloads. Accessed: January 2018."},{"key":"e_1_2_1_2_2","unstructured":"DPDK. http:\/\/dpdk.org\/. Accessed: January 2018. DPDK. http:\/\/dpdk.org\/. Accessed: January 2018."},{"key":"e_1_2_1_3_2","unstructured":"Enterprise Adoption Driving Strong Growth of Public Cloud Infrastructure as a Service According to IDC. https:\/\/www.idc.com\/getdoc.jsp?containerId=prUS41599716. Accessed: January 2018. Enterprise Adoption Driving Strong Growth of Public Cloud Infrastructure as a Service According to IDC. https:\/\/www.idc.com\/getdoc.jsp?containerId=prUS41599716. Accessed: January 2018."},{"key":"e_1_2_1_4_2","unstructured":"ExpressRoute. https:\/\/azure.microsoft.com\/en-us\/services\/expressroute. Accessed: January 2018. ExpressRoute. https:\/\/azure.microsoft.com\/en-us\/services\/expressroute. Accessed: January 2018."},{"key":"e_1_2_1_5_2","unstructured":"Google Cloud Interconnect. https:\/\/cloud.google.com\/interconnect\/. Accessed: January 2018. Google Cloud Interconnect. https:\/\/cloud.google.com\/interconnect\/. Accessed: January 2018."},{"key":"e_1_2_1_6_2","unstructured":"IxNetwork. https:\/\/www.ixiacom.com\/products\/ixnetwork. Accessed: January 2018. IxNetwork. https:\/\/www.ixiacom.com\/products\/ixnetwork. Accessed: January 2018."},{"key":"e_1_2_1_7_2","unstructured":"Next-Generation Enterprise Branch Network Communications in a Cloud-Connect Environment. https:\/\/www.globalservices.bt.com\/static\/assets\/pdf\/campaign\/Network%20like%20never%20before\/IDC_Analyst_Connections_Briefing_Document.pdf. Accessed: January 2018. Next-Generation Enterprise Branch Network Communications in a Cloud-Connect Environment. https:\/\/www.globalservices.bt.com\/static\/assets\/pdf\/campaign\/Network%20like%20never%20before\/IDC_Analyst_Connections_Briefing_Document.pdf. Accessed: January 2018."},{"key":"e_1_2_1_8_2","unstructured":"Roundup of Cloud Computing Forecasts and Market Estimates 2016. http:\/\/www.forbes.com\/sites\/louiscolumbus\/2016\/03\/13\/roundup-of-cloud-computing-forecasts-and-market-estimates-2016\/#1c86a8c774b0. Accessed: January 2018. Roundup of Cloud Computing Forecasts and Market Estimates 2016. http:\/\/www.forbes.com\/sites\/louiscolumbus\/2016\/03\/13\/roundup-of-cloud-computing-forecasts-and-market-estimates-2016\/#1c86a8c774b0. Accessed: January 2018."},{"key":"e_1_2_1_9_2","unstructured":"The World's Fastet & Most Programmable Networks. https:\/\/barefootnetworks.com\/resources\/worlds-fastest-most-programmable-networks\/. Accessed: January 2018. The World's Fastet & Most Programmable Networks. https:\/\/barefootnetworks.com\/resources\/worlds-fastest-most-programmable-networks\/. Accessed: January 2018."},{"key":"e_1_2_1_10_2","unstructured":"AWS Direct Connect. https:\/\/aws.amazon.com\/directconnect. Accessed: January 2018. AWS Direct Connect. https:\/\/aws.amazon.com\/directconnect. Accessed: January 2018."},{"key":"e_1_2_1_11_2","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"key":"e_1_2_1_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934875"},{"key":"e_1_2_1_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/3041027.3041030"},{"key":"e_1_2_1_14_2","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626317"},{"key":"e_1_2_1_15_2","volume-title":"NSDI","author":"Jose L.","year":"2015"},{"key":"e_1_2_1_16_2","doi-asserted-by":"publisher","DOI":"10.1145\/2890955.2890969"},{"key":"e_1_2_1_17_2","doi-asserted-by":"publisher","DOI":"10.1145\/2741948.2741969"},{"key":"e_1_2_1_18_2","volume-title":"NSDI","author":"Koponen T.","year":"2014"},{"key":"e_1_2_1_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934897"},{"key":"e_1_2_1_20_2","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098829"},{"key":"e_1_2_1_21_2","volume-title":"NSDI","author":"Pfaff B.","year":"2015"},{"key":"e_1_2_1_22_2","volume-title":"NSDI","author":"Radhakrishnan S.","year":"2014"},{"key":"e_1_2_1_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098852"},{"key":"e_1_2_1_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/2628136.2628157"}],"container-title":["ACM SIGCOMM Computer Communication Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3211852.3211860","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,31]],"date-time":"2022-12-31T19:48:32Z","timestamp":1672516112000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3211852.3211860"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,4,27]]},"references-count":24,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2018,4,27]]}},"alternative-id":["10.1145\/3211852.3211860"],"URL":"https:\/\/doi.org\/10.1145\/3211852.3211860","relation":{},"ISSN":["0146-4833"],"issn-type":[{"value":"0146-4833","type":"print"}],"subject":[],"published":{"date-parts":[[2018,4,27]]},"assertion":[{"value":"2018-04-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}