FIA: Collaborative Research: NEBULA: A Future Internet That Supports Trustworthy Cloud Computing

FIA：合作研究：NEBULA：支持可信云计算的未来互联网

• 批准号: 1038695
• 负责人: Ion Stoica
• 金额: $ 50.26万
• 依托单位: University of California-Berkeley
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2013-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1038695&HistoricalAwards=false
• 关键词: FIA; Collaborative; Research; NEBULA; Future

Cloud computing provides economic advantages from shared resources, but security is a major risk for remote operations and a major barrier to the approach, with challenges for both hosts and the network. NEBULA is a potential future Internet architecture providing trustworthy networking for the emerging cloud computing model of always-available network services. NEBULA addresses many network security issues, including data availability with a new core architecture (NCore) based on redundant connections to and between NEBULA core routers, accountability and trust with a new policy-driven data plane (NDP), and extensibility with a new control plane (NVENT) that supports network virtualization, enabling results from other future Internet architectures to be incorporated in NEBULA. NEBULA?s data plane uses cryptographic tokens as demonstrable proofs that a path was both authorized and followed. The NEBULA control plane provides one or more authorized paths to NEBULA edge nodes; multiple paths provide reliability and load-balancing. The NEBULA core uses redundant high-speed paths between data centers and core routers, as well as fault-tolerant router software, for always-on core networking. The NEBULA architecture removes network (in) security as a prohibitive factor that would otherwise prevent the realization of many cloud computing applications, such as electronic health records and data from medical sensors. NEBULA will produce a working system that is deployable on core routers and is viable from both an economic and a regulatory perspective.

云计算从共享资源中提供了经济优势，但是安全是远程操作的主要风险，也是该方法的主要障碍，对主机和网络都面临挑战。星云是一种潜在的未来互联网体系结构，为始终可用的网络服务的新兴云计算模型提供了可信赖的网络。 NEBULA解决了许多网络安全问题，包括基于新的核心体系结构（NCORE）的数据可用性（基于Nebula核心路由器之间和之间的冗余连接，通过新的政策驱动数据平面（NDP）以及新的控制平面（NVENT）的可扩展性（NVENT）的可扩展性，该网络虚拟化，支持其他Internet Architectures的结果，并将其与其他互联网架构结合起来。星云的数据平面使用加密令牌作为证明路径的授权和遵循的可证明证据。星云控制平面提供了通往星云边缘节点的一条或多个授权路径。多个路径提供可靠性和负载平衡。 Nebula Core使用数据中心和核心路由器之间的冗余高速路径以及易于故障的路由器软件来始终在核心网络上。星云架构将网络（IN）安全性作为一个过于良好的因素，否则将阻止许多云计算应用程序的实现，例如电子健康记录和医疗传感器的数据。星云将产生一个可在核心路由器上部署的工作系统，并且可以从经济和监管的角度来看。