Joseph Kithinji; Makau S. Mutua; Gitonga D. Mwathi

An Enhanced List Based Packet Classifier for Performance Isolation in Internet Protocol Storage Area Networks

Full Text (PDF, 757KB), PP.51-63

Views: 0 Downloads: 0

Author(s)

Joseph Kithinji ^1,* Makau S. Mutua ² Gitonga D. Mwathi ³

1. Meru University of Science and Technology, Meru, Kenya

2. Department of Computer Science, Meru University of Science and Technology, Meru, Kenya

3. Department of Computer Science, Chuka University, Chuka Kenya

* Corresponding author.

DOI: https://doi.org/10.5815/ijitcs.2021.05.05

Received: 31 Jul. 2021 / Revised: 10 Aug. 2021 / Accepted: 23 Aug. 2021 / Published: 8 Oct. 2021

Index Terms

Performance Isolation, Storage Area Network, Throttling, Optimization, Metrics

Abstract

Consolidation of storage into IP SANs (Internet protocol storage area network) has led to a combination of multiple workloads of varying demands and importance. To ensure that users get their Service level objective (SLO) a technique for isolating workloads is required. Solutions that exist include cache partitioning and throttling of workloads. However, all these techniques require workloads to be classified in order to be isolated. Previous works on performance isolation overlooked the classification process as a source of overhead in implementing performance isolation. However, it’s known that linear search based classifiers search linearly for rules that match packets in order to classify flows which results in delays among other problems especially when rules are many. This paper looks at the various limitation of list based classifiers. In addition, the paper proposes a technique that includes rule sorting, rule partitioning and building a tree rule firewall to reduce the cost of matching packets to rules during classification. Experiments were used to evaluate the proposed solution against the existing solutions and proved that the linear search based classification process could result in performance degradation if not optimized. The results of the experiments showed that the proposed solution when implemented would considerably reduce the time required for matching packets to their classes during classification as evident in the throughput and latency experienced.

Cite This Paper

Joseph Kithinji, Makau S. Mutua, Gitonga D. Mwathi, "An Enhanced List Based Packet Classifier for Performance Isolation in Internet Protocol Storage Area Networks", International Journal of Information Technology and Computer Science(IJITCS), Vol.13, No.5, pp.51-63, 2021. DOI:10.5815/ijitcs.2021.05.05

Reference

[1]Barzegaran, Mohammadreza, Anton Cervin, and Paul Pop. "Performance optimization of control applications on fog computing platforms using scheduling and isolation." IEEE Access 8 (2020): 104085-104098.
[2]J. Danielsson, T. Seceleanu, M. Jagemar, M. Behnam, and M. Sjodin, “Testing Performance-Isolation in Multi-Core Systems,” 2019 IEEE 43rd Annu. Comput. Softw. Appl. Conf., vol. 1, pp. 604–609, 2019.
[3]Riggio, Roberto, Francesco De Pellegrini, and Domenico Siracusa. "The price of virtualization: Performance isolation in multi-tenants networks." In 2014 IEEE Network Operations and Management Symposium (NOMS), pp. 1-7. IEEE, 2014.
[4]Muhammad Usman Ashraf, Sabah Arif, Abdul Basit, Malik Sheraaz Khan, "Provisioning Quality of Service for Multimedia Applications in Cloud Computing", International Journal of Information Technology and Computer Science, Vol.10, No.5, pp.40-47, 2018.
[5]Nam, Yoonsung, Yongjun Choi, Byeonghun Yoo, Hyeonsang Eom, and Yongseok Son. "EdgeIso: Effective Performance Isolation for Edge Devices." In 2020 IEEE International Parallel and Distributed Processing Symposium (IPDPS), pp. 295-305. IEEE, 2020.
[6]A. Blenk, W. Kellerer, and S. Schmid, “On The Impact of the Network Hypervisor on Virtual Network Performance,” 2019 IFIP Netw. Conf. (IFIP Networking), pp. 1–9, 2019.
[7]Lumb, Christopher R., Arif Merchant, and Guillermo A. Alvarez. "Façade: Virtual Storage Devices with Performance Guarantees." In FAST, vol. 3, pp. 131-144. 2003.
[8]M. Karlsson, C. Karamanolis, and X. Zhu, “Triage: Performance Differentiation for Storage Systems Using Adaptive Control,” ACM Trans. Storage, vol. 1, no. 4, pp. 457–480, 2005.
[9]Gulati, Ajay, Irfan Ahmad, and Carl A. Waldspurger. "PARDA: Proportional Allocation of Resources for Distributed Storage Access." In FAST, vol. 9, pp. 85-98. 2009.
[10]Gulati, Ajay, Arif Merchant, and Peter J. Varman. "pClock: an arrival curve based approach for QoS guarantees in shared storage systems." ACM SIGMETRICS Performance Evaluation Review 35, no. 1 (2007): 13-24.
[11]Wachs, Matthew, Michael Abd-El-Malek, Eno Thereska, and Gregory R. Ganger. "Argon: Performance Insulation for Shared Storage Servers." In FAST, vol. 7, pp. 5-5. 2007.
[12]Kim, Hwajung, Heon Young Yeom, and Yongseok Son. "An i/o isolation scheme for key-value store on multiple solid-state drives." In 2019 IEEE 4th International Workshops on Foundations and Applications of Self* Systems (FAS* W), pp. 170-175. IEEE, 2019.
[13]Gulder, Semra, and Mathieu Déziel. "Quality of Service Mechanism for MANET using Linux." In Proc. INSC Symposium, NATO C3 Agency. 2003.
[14]Chang, Hsung-Pin, Yu-Cheng Yu, and Pei-Yao Chung. "Design and implementation of a shared multi-tiered storage system." In 2018 3rd International Conference on Computer and Communication Systems (ICCCS), pp. 94-98. IEEE, 2018.
[15]Almesberger, Werner. "Linux Network Tra c Control| Implementation Overview." Available at EPFL ICA http://diffserv. sourceforge. net (1999).
[16]Madhumita Kathuria, Sapna Gambhir,"Performance Optimization in WBAN Using Hybrid BDT and SVM Classifier", International Journal of Information Technology and Computer Science, Vol.8, No.12, pp.83-90, 2016.
[17]Hamed, Hazem, and Ehab Al-Shaer. "Dynamic rule-ordering optimization for high-speed firewall filtering." In Proceedings of the 2006 ACM Symposium on Information, computer and communications security, pp. 332-342. 2006.
[18]A. El-Atawy, T. Samak, E. Al-Shaer, and L. Hong, “Using online traffic statistical matching for optimizing packet filtering performance,” Proc. - IEEE INFOCOM, pp. 866–874, 2007.
[19]A. Ganesh, A. Sudarsan, A. K. Vasu, D. Ramalingam, and T. Nadu, “I MPROVING F IREWALL P ERFORMANCE BY USING A C ACHE,” vol. 7, no. 5, pp. 1594–1607, 2014.
[20]C. Wang, D. Sun, Y. Chai, and F. Zhou, “Enabling Accurate Performance Isolation on Hybrid Storage Devices in Cloud Environment,” pp. 2018–2021, 2018.
[21]Cherian, Mimi, and Madhumita Chatterjee. "Optimized Firewall with Traffic Awareness." Int. J. Comput. Networks Appl 3, no. 2 (2016): 32-37.
[22]Z. Trabelsi and S. Zeidan, “Multilevel early packet filtering technique based on traffic statistics and splay trees for firewall performance improvement,” IEEE Int. Conf. Commun., pp. 1074–1078, 2012.
[23]Suresh, Nagulavancha, and B. Mathura Bai. "Predictive Modelling of Tree Rule Firewall for the Efficient Packet Filtering." International Journal of Computer Science and Information Security 14, no. 10 (2016): 189.
[24]H. Named and E. Al-Shaer, “Dynamic rule-ordering optimization for high-speed firewall filtering,” Proc. 2006 ACM Symp. Information, Comput. Commun. Secur. ASIACCS ’06, vol. 2006, pp. 332–342, 2006.
[25]A. K. Vasu and A. Ganesh, “Improving Firewall Performance by Eliminating Redundancies In Access Control Lists,” Priya Ayyappan Anirudhan Sudarsan Int. J. Comput. Networks, no. 6, p. 92, 2014.
[26]Acharya, Subrata, Bryan N. Mills, Mehmud Abliz, Taieb Znati, Jia Wang, Zihui Ge, and Albert G. Greenberg. "OPTWALL: A Hierarchical Traffic-Aware Firewall." In NDSS. 2007.
[27]M. Abbasi and A. Shokrollahi, “Enhancing the performance of decision tree-based packet classification algorithms using CPU cluster,” Cluster Comput., vol. 7, 2020.
[28]Mini, T. V., R. Nedunchezhian, and V. Vijayakumar. "Development of an efficient association rule classifier with temporal characteristics and hierarchical partitioning." In 2016 Eighth International Conference on Advanced Computing (ICoAC), pp. 19-25. IEEE, 2017.
[29]X. He, T. Chomsiri, P. Nanda, and Z. Tan, “Improving Cloud Network Security Using Tree-Rule Firewall,” Futur. Gener. Comput. Syst., 2013.
[30]S. Zhao and J. Li, “An Efficient Tuple Pruning Scheme for Packet Classification Using On-chip Filtering and Indexing,” NOMS 2018 - 2018 IEEE/IFIP Netw. Oper. Manag. Symp., pp. 1–7, 2018.
[31]W. Yu, S. Sivakumar, and D. Pao, “Pseudo-TCAM: SRAM-Based Architecture for Packet Classification in One Memory Access,” IEEE Netw. Lett., vol. 1, no. 2, pp. 89–92, 2019.
[32]X. He, T. Chomsiri, P. Nanda, and Z. Tan, “Improving cloud network security using the Tree-Rule firewall,” Futur. Gener. Comput. Syst., 2013.
[33]S. Yingchareonthawornchai, J. Daly, A. X. Liu, and E. Torng, “A Sorted-Partitioning Approach to Fast and Scalable Dynamic Packet Classification,” IEEE/ACM Trans. Netw., vol. PP, pp. 1–14, 2018.
[34]Shen, Tong, Da-Fang Zhang, Gao-Gang Xie, and Xin-Yi Zhang. "Optimizing multi-dimensional packet classification for multi-core systems." Journal of Computer Science and Technology 33, no. 5 (2018): 1056-1071.
[35]Acharya, Subrata, Jia Wang, Zihui Ge, Taieb Znati, and Albert Greenberg. "Simulation study of firewalls to aid improved performance." In 39th Annual Simulation Symposium (ANSS'06), pp. 8-pp. IEEE, 2006.
[36]Abbasi, Mahdi, and Milad Rafiee. "A calibrated asymptotic framework for analyzing packet classification algorithms on GPUs." The Journal of Supercomputing 75, no. 10 (2019): 6574-6611.
[37]Narodytska, Nina, Leonid Ryzhyk, Igor Ganichev, and Soner Sevinc. "BDD-Based Algorithms for Packet Classification." In 2019 Formal Methods in Computer Aided Design (FMCAD), pp. 64-68. IEEE, 2019.
[38]Zhao, Liang, Yuji Inoue, and Hideo Yamamoto. "Delay Reduction for Liner-Search Based Packet Filters." In ITC-CSCC: International Technical Conference on Circuits Systems, Computers and Communications, pp. 160-163. 2004.
[39]Storage Performance Council", Spcresults.org, 2021. [Online]. Available: http://spcresults.org/. [Accessed: 17- Jul- 2021].
[40]Live Optics - Real-world data for IT decisions : Live Optics", Liveoptics.com, 2021. [Online]. Available: https://www.liveoptics.com/. [Accessed: 17- Jul- 2021].
[41]Kim, Youngjae, Sudhanva Gurumurthi, and Anand Sivasubramaniam. "Understanding the performance-temperature interactions in disk i/o of server workloads." In The Twelfth International Symposium on High-Performance Computer Architecture, 2006., pp. 176-186. IEEE, 2006.
[42]Indira, B., K. Valarmathi, and D. Devaraj. "An approach to enhance packet classification performance of software-defined network using deep learning." Soft Computing 23, no. 18 (2019): 8609-8619.
[43]S. Hung, N. Iliev, B. Vamanan, A. R. Trivedi, H. I. S. Elf, and R. M. Ap, “Self-Organizing Maps-based Flexible and High-Speed Packet Classification in Software Defined Networking,” 2019 32nd Int. Conf. VLSI Des. 2019 18th Int. Conf. Embed. Syst., pp. 545–546, 2019.
[44]Li, Rui, Bohan Zhao, Ruixin Chen, and Jin Zhao. "Taming the Wildcards: Towards Dependency-free Rule Caching with FreeCache." In 2020 IEEE/ACM 28th International Symposium on Quality of Service (IWQoS), pp. 1-10. IEEE, 2020.
[45]Li, Wenjun, Tong Yang, Ori Rottenstreich, Xianfeng Li, Gaogang Xie, Hui Li, Balajee Vamanan, Dagang Li, and Huiping Lin. "Tuple space assisted packet classification with high performance on both search and update." IEEE Journal on Selected Areas in Communications 38, no. 7 (2020): 1555-1569.
[46]W. Li, T. Yang, Y. Chang, T. Li, and H. Li, “TabTree : A TSS-assisted Bit-selecting Tree Scheme for Packet Classification with Balanced Rule Mapping,” 2019 ACM/IEEE Symp. Archit. Netw. Commun. Syst., pp. 1–8, 2019.
[47]W. Li, X. Li, H. Li, and G. Xie, “CutSplit : A Decision-Tree Combining Cutting and Splitting for Scalable Packet Classification,” IEEE INFOCOM 2018 - IEEE Conf. Comput. Commun., pp. 2645–2653, 2018.
[48]Li, Wenjun, Dagang Li, Yongjie Bai, Wenxia Le, and Hui Li. "Memory-efficient recursive scheme for multi-field packet classification." IET Communications 13, no. 9 (2019): 1319-1325.
[49]Li, Chuanhong, Xuewen Zeng, Lei Song, and Yan Jiang. "A Fast, Smart Packet Classification Algorithm Based on Decomposition." Journal of Control Science and Engineering 2020 (2020).
[50]Zhao, Liang, Akira Shimae, and Hiroshi Nagamochi. "Linear-tree rule structure for firewall optimization." In Communications, Internet, and Information Technology, pp. 67-72. 2007.
[51]T. Harada, K. Tanaka, and K. Mikawa, “Acceleration of Packet Classification via Inclusive,” 2018 IEEE Conf. Commun. Netw. Secur., no. 3, pp. 1–2, 2018.
[52]Li, Chenglong, Tao Li, Junnan Li, Zilin Shi, and Baosheng Wang. "Update Latency Optimization of Packet Classification for SDN Switch on FPGA." In 2020 IEEE 28th Annual International Symposium on Field-Programmable Custom Computing Machines (FCCM), pp. 213-213. IEEE, 2020.
[53]Li, Chenglong, Tao Li, Junnan Li, Zilin Shi, and Baosheng Wang. "Enabling Packet Classification with Low Update Latency for SDN Switch on FPGA." Sustainability 12, no. 8 (2020): 3068.
[54]Li, Chenglong, Tao Li, Junnan Li, Dagang Li, Hui Yang, and Baosheng Wang. "Memory optimization for bit-vector-based packet classification on FPGA." Electronics 8, no. 10 (2019): 1159.
[55]Kekely, Michal, Lukáš Kekely, and Jan Kořenek. "General memory efficient packet matching FPGA architecture for future high-speed networks." Microprocessors and Microsystems 73 (2020): 102950.
[56]B. Rouzbehani, L. M. Correia, and L. Caeiro, “An Optimised RRM Approach with Multi-Tenant Performance Isolation in Virtual RANs,” IEEE Int. Symp. Pers. Indoor Mob. Radio Commun. PIMRC, vol. 2018-Septe, pp. 6–11, 2018.
[57]Q. Pan, K. Huang, H. Tang, and W. You, “A network slicing deployment method for guaranteeing service performance,” 2018 IEEE 4th Int. Conf. Comput. Commun. ICCC 2018, pp. 579–584, 2018.
[58]H. U. A. Wang, W. Rafique, and Z. Anwar, “Cyberpulse : A Machine Learning Based Link Flooding Attack Mitigation System for Software Defined Networks,” IEEE Access, vol. 7, pp. 34885–34899, 2019.

International Journal of Information Technology and Computer Science (IJITCS)