The state of the art in locally distributed Web-server systems
ACM Computing Surveys (CSUR)
The Switch Book: The Complete Guide to LAN Switching Technology
The Switch Book: The Complete Guide to LAN Switching Technology
An Active Splitter Architecture for Intrusion Detection and Prevention
IEEE Transactions on Dependable and Secure Computing
Rethinking hardware support for network analysis and intrusion prevention
HOTSEC'06 Proceedings of the 1st USENIX Workshop on Hot Topics in Security
A Dynamic Adaptive Load Balance Algorithm in Parallel Intrusion Detection System
ISCSCT '08 Proceedings of the 2008 International Symposium on Computer Science and Computational Technology - Volume 01
The NIDS cluster: scalable, stateful network intrusion detection on commodity hardware
RAID'07 Proceedings of the 10th international conference on Recent advances in intrusion detection
A clustering and traffic-redistribution scheme for high-performance IPsec VPNs
HiPC'05 Proceedings of the 12th international conference on High Performance Computing
Hi-index | 0.00 |
Clustering multiple devices to form a single powerful device is a common method for improving performance. Most designs of the clustering schemes in the current literature are deploying a traffic splitter in front of devices in the cluster which acts as a centralized job dispatcher splitting workloads to backend devices. In this paper, we propose a decentralized clustering scheme, with no traffic splitter deployed, as an alternative solution on building a cluster system for those devices configured in transparent mode, such as bandwidth controllers, NIPSs, and traffic monitors. Devices in the cluster process the network traffic in parallel in a decentralized manner to scale the throughput. A device can also migrate its workload to others for the purpose of load balance or fault tolerance. Experiment results suggest that the proposed scheme can effectively improve performance of transparent mode devices in terms of throughput, load balance, and fault tolerance.