Accuracy-aware adaptive traffic monitoring for software dataplanes

Gioacchino Tangari*, Marinos Charalambides, Daphne Tuncer, George Pavlou

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

1 Citation (Scopus)

Abstract

Network operators have recently been developing multi-Gbps traffic monitoring tools on commodity hardware, as part of the packet-processing pipelines realizing software dataplanes. These solutions allow the execution of sophisticated per-packet monitoring using the processing power available on servers. Although advances in packet capture have enabled the interception of packets at high rates, bottlenecks can still arise in the monitoring process as a result of concurrent access to shared processor resources, variations of the traffic skew, and unbalanced packet-rate spikes. In this paper we present an adaptive monitoring framework, MONA, which is resilient to bottlenecks while maintaining the accuracy of monitoring reports above a user-specified threshold. MONA dynamically reduces the measurement task sets under adverse conditions, and reconfigures them to recover potential accuracy degradations. To quantify the monitoring accuracy at run time, MONA adopts a novel task-independent technique that generates accuracy estimates according to recently observed traffic characteristics. With a prototype implementation based on a generic packet-processing pipeline, and using well-known measurements tasks, we show that MONA achieves lossless traffic monitoring for a wide range of conditions, significantly enhances the level of monitoring accuracy, and performs adaptations at the time scale of milliseconds with limited overhead.

Original languageEnglish
Pages (from-to)986-1001
Number of pages16
JournalIEEE/ACM Transactions on Networking
Volume28
Issue number3
DOIs
Publication statusPublished - Jun 2020

Keywords

  • dynamic resource allocation
  • Network monitoring
  • software packet processing

Fingerprint

Dive into the research topics of 'Accuracy-aware adaptive traffic monitoring for software dataplanes'. Together they form a unique fingerprint.

Cite this