Mille-Feuille: Putting ISP traffic under the scalpel
Abstract
For Internet Service Provider (ISP) operators, getting an accurate picture of how their network behaves is challenging. Given the traffic volumes that their networks carry and the impossibility to control end-hosts, ISP operators are typically forced to randomly sample traffic, and rely on aggregated statistics. This provides coarse-grained visibility, at a time resolution that is far from ideal (seconds or minutes). In this paper, we present Mille-Feuille, a novel monitoring architecture that provides fine-grained visibility over ISP traffic. Mille-Feuille schedules activation and deactivation of traffic-mirroring rules, that are then provisioned network-wide from a central location, within milliseconds. By doing so, Mille-Feuille combines the scalability of sampling with the visibility and controllability of traffic mirroring. As a result, it supports a set of monitoring primitives, ranging from checking key performance indicators (e.g., one-way delay) for single destinations to estimating traffic matrices in sub-seconds. Our preliminary measurements on existing routers confirm that Mille-Feuille is viable in practice.
People
BibTex
@INPROCEEDINGS{tilmans2016mille-feuille,
isbn = {978-1-4503-4661-0},
doi = {10.1145/3005745.3005762},
year = {2016-11},
booktitle = {Proceedings of the 15th ACM Workshop on Hot Topics in Networks (HotNets '16)},
type = {Conference Paper},
author = {Tilmans, Olivier and Bühler, Tobias and Vissicchio, Stefano and Vanbever, Laurent},
abstract = {For Internet Service Provider (ISP) operators, getting an accurate picture of how their network behaves is challenging. Given the traffic volumes that their networks carry and the impossibility to control end-hosts, ISP operators are typically forced to randomly sample traffic, and rely on aggregated statistics. This provides coarse-grained visibility, at a time resolution that is far from ideal (seconds or minutes). In this paper, we present Mille-Feuille, a novel monitoring architecture that provides fine-grained visibility over ISP traffic. Mille-Feuille schedules activation and deactivation of traffic-mirroring rules, that are then provisioned network-wide from a central location, within milliseconds. By doing so, Mille-Feuille combines the scalability of sampling with the visibility and controllability of traffic mirroring. As a result, it supports a set of monitoring primitives, ranging from checking key performance indicators (e.g., one-way delay) for single destinations to estimating traffic matrices in sub-seconds. Our preliminary measurements on existing routers confirm that Mille-Feuille is viable in practice.},
language = {en},
address = {New York, NY},
publisher = {Association for Computing Machinery},
title = {Mille-Feuille: Putting ISP traffic under the scalpel},
PAGES = {113 - 119},
Note = {15th ACM Workshop on Hot Topics in Networks (HotNets 2016); Conference Location: Atlanta, GA, USA; Conference Date: November 9-10, 2016}
}Research Collection: 20.500.11850/125259
Slide Sources: https://gitlab.ethz.ch/projects/41216