Ally: OS-transparent packet inspection using sequestered cores

  • Authors:
  • Jen-Cheng Huang;Matteo Monchiero;Yoshio Turner

  • Affiliations:
  • Georgia Institute of Technology, Atlanta, GA;Hewlett-Packard Laboratories, Palo Alto, CA;Hewlett-Packard Laboratories, Palo Alto, CA

  • Venue:
  • WIOV'10 Proceedings of the 2nd conference on I/O virtualization
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present Ally, a hardware/software framework proposed to deliver new compute-intensive management services on multicore processors. Ally enables deployment of software packet processing appliances (e.g. for Deep Packet Inspection, DPI) on sequestered cores of a multicore processor, independently of operating systems (OS) or hypervisor running on the other cores. Ally allows software appliances to transparently intercept network packets exchanged between network interfaces (NICs) and host OSes. Using full system emulation and a Linux-based prototype, we validate Ally functionality and demonstrate packet interception with minimal overhead.