research-article

Links as a Service (LaaS): Guaranteed Tenant Isolation in the Shared Cloud

Authors:

Alexander Shpiner,

Ori Rottenstreich,

Avinoam Kolodny,

Isaac KeslassyAuthors Info & Claims

ANCS '16: Proceedings of the 2016 Symposium on Architectures for Networking and Communications Systems

Pages 87 - 98

https://doi.org/10.1145/2881025.2881028

Published: 17 March 2016 Publication History

Abstract

The most demanding tenants of shared clouds require complete isolation from their neighbors, in order to guarantee that their application performance is not affected by other tenants. Unfortunately, while shared clouds can offer an option whereby tenants obtain dedicated servers, they do not offer any network provisioning service, which would shield these tenants from network interference. In this paper, we introduce Links as a Service (LaaS), a new abstraction for cloud service that provides isolation of network links. Each tenant gets an exclusive set of links forming a virtual fat-tree, and is guaranteed to receive the exact same bandwidth and delay as if it were alone in the shared cloud. Consequently, each tenant can use the forwarding method that best ?ts its application. Under simple assumptions, we derive theoretical conditions for enabling LaaS without capacity over-provisioning in fat-trees. New tenants are only admitted in the network when they can be allocated hosts and links that maintain these conditions. LaaS is implementable with common network gear, tested to scale to large networks and provides full tenant isolation at the worst cost of a 10% reduction in the cloud utilization.

References

[1]

LaaS source code, experiments and simulation conditions. https://www.dropbox.com/sh/uzla7rcmdiqrxig/AADpw5ALG-q8VFzMSVcmYvmJa/ .

[2]

OpenSM - InfiniBand Open SDN Controller.

[3]

OpenStack ironic. https://wiki.openstack.org/wiki/Ironic.

[4]

D. Abts, M. R. Marty, P. M. Wells, P. Klausler, and H. Liu. Energy proportional datacenter networks. SIGARCH Comput. Archit. News, 2010.

Digital Library

[5]

Y. Ajima, S. Sumimoto, and T. Shimizu. Tofu: A 6d mesh/torus interconnect for exascale computers. Computer, 2009.

Digital Library

[6]

M. Al-Fares, A. Loukissas, and A. Vahdat. A scalable, commodity data center network architecture. SIGCOMM Comput. Commun. Rev., 2008.

Digital Library

[7]

M. Al-Fares, S. Radhakrishnan, B. Raghavan, N. Huang, and A. Vahdat. Hedera: Dynamic flow scheduling for data center networks. NSDI, 2010.

Digital Library

[8]

A. Altin, H. Yaman, and M. C. Pinar. The robust network loading problem under hose demand uncertainty. INFORMS Journal on Computing, 2010.

Digital Library

[9]

A. Andreyev. Introducing data center fabric, the next-generation Facebook the next generation datacenter network, 2014.

[10]

S. Angel, H. Ballani, T. Karagiannis, G. O'Shea, and E. Thereska. End-to-end performance isolation through virtual datacenters. phUSENIX OSDI, Berkeley, CA, USA, 2014.

Digital Library

[11]

D. Artz. The secret weapons of the AOL optimization team. Velocity Conference, 2009.

[12]

H. Ballani, P. Costa, T. Karagiannis, and A. Rowstron. Towards predictable datacenter networks. SIGCOMM, 2011.

Digital Library

[13]

A. Bhatele, K. Mohror, S. H. Langer, and K. E. Isaacs. There goes the neighborhood: Performance degradation due to nearby jobs. ACM SC, 2013.

Digital Library

[14]

M. Chowdhury, M. R. Rahman, and R. Boutaba. ViNEYard: Virtual network embedding algorithms. IEEE/ACM ToN, 2012.

Digital Library

[15]

M. Chowdhury and I. Stoica. Coflow: A networking abstraction for cluster applications. ACM HotNets, 2012.

Digital Library

[16]

M. Chowdhury, M. Zaharia, J. Ma, M. I. Jordan, and I. Stoica. Managing data transfers in computer clusters with orchestra. ACM SIGCOMM, 2011.

Digital Library

[17]

A. Curtis, W. Kim, and P. Yalagandula. Mahout: Low-overhead datacenter traffic management using end-host-based elephant detection. IEEE Infocom, 2011.

[18]

A. Dixit, P. Prakash, Y. Hu, and R. Kompella. On the impact of packet spraying in data center networks. IEEE Infocom, 2013.

[19]

J. Domke, T. Hoefler, and W. E. Nagel. Deadlock-free oblivious routing for arbitrary topologies. IEEE IPDPS, 2011.

Digital Library

[20]

R. Doriguzzi Corin, M. Gerola, R. Riggio, F. De Pellegrini, and E. Salvadori. VeRTIGO: Network virtualization and beyond. EWSDN, 2012.

Digital Library

[21]

N. G. Duffield, P. Goyal, A. Greenberg, P. Mishra, K. K. Ramakrishnan, and J. E. van der Merive. A flexible model for resource management in virtual private networks. ACM SIGCOMM '99, New York, NY, USA, 1999.

Digital Library

[22]

Y. Gong, B. He, and J. Zhong. Network performance aware MPI collective communication operations in the cloud. IEEE TPDS, 2013.

Digital Library

[23]

E. Gran, S.-A. Reinemo, O. Lysne, T. Skeie, E. Zahavi, and G. Shainer. Exploring the scope of the InfiniBand congestion control Mechanism. IEEE IPDPS, 2012.

Digital Library

[24]

C. Guo, G. Lu, H. J. Wang, S. Yang, C. Kong, P. Sun, W. Wu, and Y. Zhang. Secondnet: a data center network virtualization architecture with bandwidth guarantees. ACM CoNext, 2010.

Digital Library

[25]

C. E. Hopps. Analysis of an equal-cost multi-path algorithm.

[26]

C. E. Hopps. Analysis of an equal-cost multi-path algorithm. http://tools.ietf.org/html/rfc2992, 2015.

Digital Library

[27]

A. Iosup, S. Ostermann, M. N. Yigitbasi, R. Prodan, T. Fahringer, and D. H. J. Epema. Performance analysis of cloud computing services for many-tasks scientific computing. IEEE TPDS, 2011.

Digital Library

[28]

A. Iosup, N. Yigitbasi, and D. Epema. On the performance variability of production cloud services. CCGrid, 2011.

Digital Library

[29]

A. Jajszczyk. Nonblocking, repackable, and rearrangeable clos networks. IEEE Communications Magazine, 2003.

Digital Library

[30]

K. Jang, J. Sherry, H. Ballani, and T. Moncaster. Silo: predictable message latency in the cloud. ACM SIGCOMM, 2015.

Digital Library

[31]

V. Jeyakumar, M. Alizadeh, D. Mazières, B. Prabhakar, C. Kim, and A. Greenberg. EyeQ: practical network performance isolation at the edge. NSDI USENIX, 2013.

Digital Library

[32]

A. Jokanovic, G. Rodriguez, J. Sancho, and J. Labarta. Impact of inter-application contention in current and future HPC systems. IEEE HotI, 2010.

Digital Library

[33]

A. Jokanovic, J. Sancho, J. Labarta, G. Rodriguez, and C. Minkenberg. Effective quality-of-service policy for capacity high-performance computing systems. IEEE HPCC, 2012.

Digital Library

[34]

A. Jokanovic, J. C. Sancho, G. Rodriguez, A. Lucero, C. Minkenberg, and J. Labarta. Quiet neighborhoods: key to protect job performance predictability. IEEE IPDPS 2015, Hyderabad, India, 2015.

Digital Library

[35]

K. LaCurts, J. C. Mogul, H. Balakrishnan, and Y. Turner. Cicada: Introducing predictive guarantees for cloud networks. USENIX HotCloud, 2014.

Digital Library

[36]

V. T. Lam, S. Radhakrishnan, R. Pan, A. Vahdat, and G. Varghese. Netshare predictable bandwidth allocation for data centers. SIGCOMM Comput. Commun. Rev., 2012.

Digital Library

[37]

G. Linden. Make data useful, 2006.

[38]

M. Mayer. In search of a better, faster, stronger web. Velocity Conference, 2009.

[39]

J. C. Mogul and L. Popa. What we talk about when we talk about cloud network performance. SIGCOMM Comput. Commun. Rev., 2012.

Digital Library

[40]

S. Ohring, M. Ibel, S. Das, and M. Kumar. On generalized fat trees. IPPS, 1995.

Digital Library

[41]

J. Orduna, F. Silla, and J. Duato. A new task mapping technique for communication-aware scheduling strategies. ICPP Workshops, 2001.

Digital Library

[42]

S. Ostermann, A. Iosup, N. Yigitbasi, R. Prodan, T. Fahringer, and D. Epema. A performance analysis of EC2 cloud computing services for scientific computing. LNICST. Springer, Jan. 2010.

[43]

J. A. Pascual, J. Navaridas, and J. Miguel-Alonso. Effects of topology-aware allocation policies on scheduling performance. Job Scheduling Strategies for Parallel Processing. 2009.

Digital Library

[44]

J. Perry, A. Ousterhout, H. Balakrishnan, D. Shah, and H. Fugal. Fastpass: A centralized zero-queue datacenter network. ACM SIGCOMM, 2014.

Digital Library

[45]

F. Petrini and M. Vanneschi. k-ary n-trees: high performance networks for massively parallel architectures. IPPS, 1997.

Digital Library

[46]

L. Popa, G. Kumar, M. Chowdhury, A. Krishnamurthy, S. Ratnasamy, and I. Stoica. FairCloud: Sharing the network in cloud computing. ACM SIGCOMM, 2012.

Digital Library

[47]

L. Popa, P. Yalagandula, S. Banerjee, J. C. Mogul, Y. Turner, and J. R. Santos. ElasticSwitch: Practical Work-conserving Bandwidth Guarantees for Cloud Computing. ACM SIGCOMM, New York, NY, USA, 2013.

Digital Library

[48]

B. Raghavan, K. Vishwanath, S. Ramabhadran, K. Yocum, and A. C. Snoeren. Cloud control with distributed rate limiting. ACM SIGCOMM, 2007.

Digital Library

[49]

T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, you, get off of my cloud. ACM CCS, 2009.

Digital Library

[50]

H. Rodrigues, J. R. Santos, Y. Turner, P. Soares, and D. Guedes. Gatekeeper: Supporting bandwidth guarantees for multi-tenant datacenter networks. In WIOV, 2011.

Digital Library

[51]

G. Rodriguez, C. Minkenberg, R. Beivide, R. Luijten, J. Labarta, and M. Valero. Oblivious routing schemes in extended generalized Fat Tree networks. IEEE CLUSTER, 2009.

[52]

J. Schad, J. Dittrich, and J.-A. Quiané-Ruiz. Runtime measurements in the cloud. VLDB Endowment, 2010.

Digital Library

[53]

R. Sherwood, G. Gibb, K.-K. Yap, G. Appenzeller, M. Casado, N. McKeown, and G. Parulkar. Flowvisor: A network virtualization layer. OpenFlow Switch Consortium, Tech. Rep, 2009.

[54]

A. Shieh, S. Kandula, A. Greenberg, and C. Kim. Seawall: performance isolation for cloud datacenter networks. USENIX HotCloud, 2010.

Digital Library

[55]

K. C. Webb, A. C. Snoeren, and K. Yocum. Topology switching for data center networks. Hot-ICE Workshop, 2011.

Digital Library

[56]

X. Wu and X. Yang. DARD: Distributed adaptive routing for datacenter networks. IEEE ICDCS, 2012.

Digital Library

[57]

M. Yu, Y. Yi, J. Rexford, and M. Chiang. Rethinking virtual network embedding. SIGCOMM Comput. Commun. Rev., 2008.

Digital Library

[58]

E. Zahavi. Fat-tree routing and node ordering providing contention free traffic for MPI global collectives. JPDC, 2012.

Digital Library

[59]

D. Zats, T. Das, P. Mohan, D. Borthakur, and R. Katz. DeTail: reducing the flow completion time tail in datacenter networks. SIGCOMM Comput. Commun. Rev., 2012.

Digital Library

Cited By

M. Abdelmoniem ABensaou B(2023)Enhancing TCP via Hysteresis Switching: Theoretical Analysis and Empirical EvaluationIEEE/ACM Transactions on Networking10.1109/TNET.2023.326256431:6(2614-2623)Online publication date: Dec-2023
https://doi.org/10.1109/TNET.2023.3262564
Priya RVidyarthi D(2022)DEVINE: Distributed Energy-related Virtual Network Embedding Approach utilizing Multiple Objective Optimization2022 Second International Conference on Computer Science, Engineering and Applications (ICCSEA)10.1109/ICCSEA54677.2022.9936155(1-6)Online publication date: 8-Sep-2022
https://doi.org/10.1109/ICCSEA54677.2022.9936155
Savoie LLowenthal DSupinski BMohror KJain N(2021)Mitigating Inter-Job Interference via Process-Level Quality-of-ServiceACM Transactions on Parallel Computing10.1145/34343978:1(1-26)Online publication date: 4-Jan-2021
https://dl.acm.org/doi/10.1145/3434397
Show More Cited By

Index Terms

Links as a Service (LaaS): Guaranteed Tenant Isolation in the Shared Cloud
1. Networks
  1. Network services
    1. Cloud computing
2. Software and its engineering
  1. Software organization and properties
    1. Contextual software domains
      1. Software infrastructure
        Virtual machines

Recommendations

Towards cloud, service and tenant classification for cloud computing
CCGRID '14: Proceedings of the 14th IEEE/ACM International Symposium on Cluster, Cloud, and Grid Computing

One of the major concerns cloud computing platforms face today is the lack of a unique identification of the "who" within the network infrastructure. State-of-the-art technologies (such as VLANs or IP addresses) lack functionality to cope with the ...
Using Lightweight Virtual Machines to Run High Performance Computing Applications: The Case of the Weather Research and Forecasting Model
UCC '11: Proceedings of the 2011 Fourth IEEE International Conference on Utility and Cloud Computing

There are many scientific applications that have high performance computing demands. Such demands are traditionally supported by cluster-or Grid-based systems. Cloud computing, which has experienced a tremendous growth, emerged as an approach to provide ...
Sandpiper: Black-box and gray-box resource management for virtual machines

Virtualization can provide significant benefits in data centers by enabling dynamic virtual machine resizing and migration to eliminate hotspots. We present Sandpiper, a system that automates the task of monitoring and detecting hotspots, determining a ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

ANCS '16: Proceedings of the 2016 Symposium on Architectures for Networking and Communications Systems

March 2016

148 pages

ISBN:9781450341837

DOI:10.1145/2881025

General Chair:
Patrick Crowley
Washington University in St. Louis, USA
,
Program Chairs:
Luigi Rizzo
Università di Pisa, Italy
,
Laurent Mathy
Université de Liège, Belgium

Copyright © 2016 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 17 March 2016

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Conference

ANCS '16

Sponsor:

ANCS '16: Symposium on Architectures for Networking and Communications Systems

March 17 - 18, 2016

California, Santa Clara, USA

Acceptance Rates

ANCS '16 Paper Acceptance Rate 12 of 58 submissions, 21%;

Overall Acceptance Rate 88 of 314 submissions, 28%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

16
Total Citations
View Citations
296
Total Downloads

Downloads (Last 12 months)11
Downloads (Last 6 weeks)3

Reflects downloads up to 15 Oct 2024

Other Metrics

View Author Metrics

Citations

Cited By

M. Abdelmoniem ABensaou B(2023)Enhancing TCP via Hysteresis Switching: Theoretical Analysis and Empirical EvaluationIEEE/ACM Transactions on Networking10.1109/TNET.2023.326256431:6(2614-2623)Online publication date: Dec-2023
https://doi.org/10.1109/TNET.2023.3262564
Priya RVidyarthi D(2022)DEVINE: Distributed Energy-related Virtual Network Embedding Approach utilizing Multiple Objective Optimization2022 Second International Conference on Computer Science, Engineering and Applications (ICCSEA)10.1109/ICCSEA54677.2022.9936155(1-6)Online publication date: 8-Sep-2022
https://doi.org/10.1109/ICCSEA54677.2022.9936155
Savoie LLowenthal DSupinski BMohror KJain N(2021)Mitigating Inter-Job Interference via Process-Level Quality-of-ServiceACM Transactions on Parallel Computing10.1145/34343978:1(1-26)Online publication date: 4-Jan-2021
https://dl.acm.org/doi/10.1145/3434397
Smith SLowenthal DLaure EMarkidis SVerbanescu ALofstead G(2021)JigsawProceedings of the 30th International Symposium on High-Performance Parallel and Distributed Computing10.1145/3431379.3460635(201-213)Online publication date: 21-Jun-2021
https://dl.acm.org/doi/10.1145/3431379.3460635
Zheng LXu HChen SHuang L(2020)Performance Guaranteed Single Link Failure Recovery in SDN Overlay Networks2020 IEEE 26th International Conference on Parallel and Distributed Systems (ICPADS)10.1109/ICPADS51040.2020.00100(703-708)Online publication date: Dec-2020
https://doi.org/10.1109/ICPADS51040.2020.00100
Moro VPillon MMiers CKoslovski G(2020)Analysis of Virtualized Congestion Control in Applications Based on Hadoop MapReduceHigh Performance Computing Systems10.1007/978-3-030-41050-6_3(37-52)Online publication date: 14-Feb-2020
https://doi.org/10.1007/978-3-030-41050-6_3
Pham MHoang DChaczko Z(2019)Realization of congestion-aware energy-aware virtual link embedding2019 29th International Telecommunication Networks and Applications Conference (ITNAC)10.1109/ITNAC46935.2019.9077957(1-6)Online publication date: Nov-2019
https://doi.org/10.1109/ITNAC46935.2019.9077957
Abdelmoniem ABensaou B(2019)Hysteresis-based Active Queue Management for TCP Traffic in Data CentersIEEE INFOCOM 2019 - IEEE Conference on Computer Communications10.1109/INFOCOM.2019.8737369(1621-1629)Online publication date: Apr-2019
https://doi.org/10.1109/INFOCOM.2019.8737369
Zhang RXie MYang L(2019)Isoflat: Flat Provider Network Multiplexing and Firewalling in OpenStack CloudICC 2019 - 2019 IEEE International Conference on Communications (ICC)10.1109/ICC.2019.8761652(1-7)Online publication date: May-2019
https://doi.org/10.1109/ICC.2019.8761652
Zhang LZheng WShi LZhu X(2019)RecEvent: Multiple Features Hybrid Event Recommendation in Social NetworksICC 2019 - 2019 IEEE International Conference on Communications (ICC)10.1109/ICC.2019.8761649(1-6)Online publication date: May-2019
https://doi.org/10.1109/ICC.2019.8761649
Show More Cited By

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents