QASM:一种面向 QUIC 的状态ful 中间盒新框架
QASM: A Novel Framework for QUIC-Aware Stateful Middleboxes
AI总结:
QASM 提出了一种面向 QUIC 的状态ful 中间盒框架,通过可靠跟踪 QUIC 连接,有效解决 QUIC 加密和连接迁移对中间盒功能的影响。
摘要:
状态ful 中间盒是企业网络和校园网络中的重要组成部分,提供必要的内网、安全和增值服务。这些状态ful 中间盒依赖于精确的网络流识别。然而,HTTP/3 使用 QUIC 协议的采用对这些设备的正常运行构成了重大挑战。QUIC 的加密和连接迁移特性会掩盖流语义,破坏中间盒的可见性和功能。我们研究了 QUIC 如何破坏 NAT、速率限制器、负载均衡器等中间盒,以及影响基于 Kubernetes 的服务部署。为了解决这些挑战,我们提出了一种新的、通用的框架,使状态ful 中间盒能够可靠地跟踪 QUIC 连接,即使端点更改其互联网协议 (IP) 地址或端口号。我们的原型实现表明,所提出的方法在 HTTP/3 下保留中间盒功能,性能开销极小 (<5%),在吞吐量和延迟方面均有效,即使在高达 100 Hz 的 QUIC 连接迁移率下也能有效工作。
英文摘要:
Stateful Middleboxes are integral part of enterprise and campus networks that provide essential in-network, security, and value-added services. These stateful middleboxes rely on precise network flow identification. However, the adoption of HTTP/3, which uses the QUIC protocol, poses significant challenges to the proper functioning of these devices. QUIC's encryption and connection migration features obscure flow semantics, disrupting middlebox visibility and functionality. We examine how QUIC disrupts middleboxes like Network Address Translators (NATs), Rate Limiters, Load Balancers, etc., and affects Kubernetes-based service deployments. To address these challenges, we propose a novel, generalized framework that enables stateful middleboxes to reliably track QUIC connections, even when the endpoints change their internet protocol (IP) address or port numbers. Our prototype implementation demonstrates that the proposed approach preserves middlebox functionality with HTTP/3 with negligible performance overhead (< 5%) on both throughput and latency, and works effectively even under high QUIC connection migration rates of up to 100 Hz.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。