FIA: Collaborative Research: NEBULA: A Future Internet That Supports Trustworthy Cloud Computing

FIA：合作研究：NEBULA：支持可信云计算的未来互联网

• 批准号: 1040023
• 负责人: William Lehr
• 金额: $ 20.24万
• 依托单位: Massachusetts Institute of Technology
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2014-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1040023&HistoricalAwards=false
• 关键词: FIA; Collaborative; Research; NEBULA; Future

Cloud computing provides economic advantages from shared resources, but security is a major risk for remote operations and a major barrier to the approach, with challenges for both hosts and the network. NEBULA is a potential future Internet architecture providing trustworthy networking for the emerging cloud computing model of always-available network services. NEBULA addresses many network security issues, including data availability with a new core architecture (NCore) based on redundant connections to and between NEBULA core routers, accountability and trust with a new policy-driven data plane (NDP), and extensibility with a new control plane (NVENT) that supports network virtualization, enabling results from other future Internet architectures to be incorporated in NEBULA. NEBULA?s data plane uses cryptographic tokens as demonstrable proofs that a path was both authorized and followed. The NEBULA control plane provides one or more authorized paths to NEBULA edge nodes; multiple paths provide reliability and load-balancing. The NEBULA core uses redundant high-speed paths between data centers and core routers, as well as fault-tolerant router software, for always-on core networking. The NEBULA architecture removes network (in) security as a prohibitive factor that would otherwise prevent the realization of many cloud computing applications, such as electronic health records and data from medical sensors. NEBULA will produce a working system that is deployable on core routers and is viable from both an economic and a regulatory perspective.

云计算通过共享资源提供了经济优势，但安全性是远程操作的主要风险，也是该方法的主要障碍，对主机和网络都构成挑战。 NEBULA 是一种潜在的未来互联网架构，为始终可用的网络服务的新兴云计算模型提供值得信赖的网络。 NEBULA 解决了许多网络安全问题，包括基于 NEBULA 核心路由器之间的冗余连接的新核心架构 (NCore) 的数据可用性、新策略驱动数据平面 (NDP) 的责任和信任，以及新控制的可扩展性支持网络虚拟化的平面（NVENT），使其他未来互联网架构的成果能够纳入 NEBULA 中。 NEBULA 的数据平面使用加密令牌作为路径被授权和遵循的可证明的证据。 NEBULA控制平面提供一条或多条到NEBULA边缘节点的授权路径；多条路径提供可靠性和负载平衡。 NEBULA核心在数据中心和核心路由器之间使用冗余高速路径，以及容错路由器软件，以实现始终在线的核心网络。 NEBULA 架构消除了网络（内）安全这一阻碍因素，否则该因素将阻碍许多云计算应用的实现，例如电子健康记录和来自医疗传感器的数据。 NEBULA 将产生一个可部署在核心路由器上的工作系统，并且从经济和监管角度来看都是可行的。