Tilmans, Olivier
[UCL]
Bühler, Tobias
[ETH Zürich]
Poese, Ingmar
[BENOCS]
Vissicchio, Stefano
[University College London]
Vanbever, Laurent
[ETH Zürich]
For an Internet Service Provider (ISP), getting an accurate picture of how its network behaves is challenging. Indeed, given the carried traffic volume and the impossibility to control end-hosts, ISPs often have no other choice but to rely on heavily sampled traffic statistics, which provide them with coarse-grained visibility at a less than ideal time resolution (seconds or minutes). We present Stroboscope, a system that enables fine-grained monitoring of any traffic flow by instructing routers to mirror millisecond-long traffic slices in a programmatic way. Stroboscope takes as input high-level monitoring queries together with a budget and automatically determines: (i) which flows to mirror; (ii) where to place mirroring rules, using fast and provably correct algorithms; and (iii) when to schedule these rules to maximize coverage while meeting the input budget. We implemented Stroboscope, and show that it scales well: it computes schedules for large networks and query sizes in few seconds, and produces a number of mirroring rules well within the limits of current routers. We also show that Stroboscope works on existing routers and is therefore immediately deployable.
Bibliographic reference |
Tilmans, Olivier ; Bühler, Tobias ; Poese, Ingmar ; Vissicchio, Stefano ; Vanbever, Laurent. Stroboscope: Declarative Network Monitoring on a Budget.16th USENIX Symposium on Networked Systems Design and Implementation (NSDI'18) (Renton, WA, USA, du 09/04/2018 au 11/04/2018). |
Permanent URL |
http://hdl.handle.net/2078.1/196032 |