Abstract

Modern enterprises almost ubiquitously deploy middlebox processing services to improve security and performance in their networks. Despite this, today’s middlebox infrastructure is expensive, complex to manage, and creates new failure modes for the networks that use them. Given the promise of cloud computing to decrease costs, ease management, and provide elasticity and fault tolerance, middlebox processing can benefit from outsourcing the cloud. Arriving at a feasible implementation, however, is challenging due to the need to achieve functional equivalence with traditional middlebox deployments without sacrificing performance or increasing network complexity.

In this talk, I will present APLOMB , a practical service for outsourcing enterprise middlebox processing to the cloud. APLOMB ’s motivation and design are data-driven, guided by a survey of 57 enterprise networks, the first large-scale academic study of middlebox deployment. Our analysis shows that APLOMB solves real problems faced by network administrators, can outsource over 90% of middlebox hardware in a typical large enterprise network, and, in a case study of a real enterprise, imposes an average latency penalty of 1.1ms and median bandwidth inflation of 3.8%.