On Proxy Server based Multipath Connections (PSMC)OutlineIntroductionWhy Multipath ConnectionsRelated Works on Multipath ConnectionsSlide 6Proxy Server based Multipath Connections (PSMC)The Key Idea of PSMCPSMC DiagramPowerPoint PresentationWhy PSMCAlgorithms for PSMCDiagram of Sever Selection / Placement ProblemRelated Work on AlgorithmsAlgorithms for Parallel Download ProblemParallel Download Algorithm PerformancePSMC Protocols: Packets HandlingPSMC Protocols: IP TunnelSpecial Issues for PSMC ProtocolsIP Tunnel and IPSecSlide 21PSMC ApplicationsSecure Collective Defense (SCOLD) networkSCOLD: victim under DDoS attacksSCOLD: raise alarm (1) and inform clients (2)SCOLD: set up new indirect route (3)SCOLD TestbedPreliminary result of SCOLDPSMC Applications EvaluationSecurity Issues Related to PSMCResearch PlanThank you!On Proxy Server based On Proxy Server based Multipath Connections Multipath Connections (PSMC)(PSMC)PhD Proposal PhD Proposal Yu CaiYu Cai12/200312/2003University of Colorado at Colorado SpringsUniversity of Colorado at Colorado SpringsOutlineOutline1. Introduction 1. Introduction 2. Related work2. Related work3. PSMC algorithms 3. PSMC algorithms 4. PSMC protocols4. PSMC protocols5. PSMC applications5. PSMC applications6. PSMC security6. PSMC security7. Conclusion7. ConclusionIntroductionIntroductionSingle path connection vs. multipath connectionsSingle path connectionSingle path connection: most commonly-used : most commonly-used network connection model in today’s network network connection model in today’s network environment. environment. Multipath connectionsMultipath connections: provide potentially multiple : provide potentially multiple paths between network nodes. The traffic from a paths between network nodes. The traffic from a source can be spread over multiple paths and source can be spread over multiple paths and transmitted in parallel through the network.transmitted in parallel through the network.Why Multipath ConnectionsWhy Multipath ConnectionsImprove the network Improve the network securitysecurity by providing alternate paths by providing alternate pathsImprove the network Improve the network reliabilityreliability, stability and availability, stability and availabilityImprove the network Improve the network performanceperformance by increasing the by increasing the aggregate bandwidth between network nodesaggregate bandwidth between network nodesUtilize the network resources more efficiently Utilize the network resources more efficiently Cope well with network congestion, link breakage, burst Cope well with network congestion, link breakage, burst traffic and potential attacks traffic and potential attacks Provide better quality-of-service Provide better quality-of-serviceRelated Works on Multipath ConnectionsRelated Works on Multipath ConnectionsMultipath connections have been studied since 70s.Multipath connections have been studied since 70s.The IBM Systems Network Architecture (SNA) in 1974 The IBM Systems Network Architecture (SNA) in 1974 Nicholas F. Maxemchuk in 1975, the dispersity routing Nicholas F. Maxemchuk in 1975, the dispersity routing Classification of multipath connections based on OSI Classification of multipath connections based on OSI 7-layer model.7-layer model.Physical layer: Multipath Interference; APhysical layer: Multipath Interference; Antenna Arrayntenna Array. . Data link layer: Link Aggregation, defined in IEEE 802.3ad. Data link layer: Link Aggregation, defined in IEEE 802.3ad. (requires additional hardware support)(requires additional hardware support)Related Works on Multipath ConnectionsRelated Works on Multipath ConnectionsNetwork layer: studied extensively as multipath Network layer: studied extensively as multipath routing. routing. Wired network. Wired network. (requires changes on routers) (requires changes on routers) Table-driven routing (link state or distance vector). Table-driven routing (link state or distance vector). MDVA(Multipath distance vector algorithm ) [VG01];MDVA(Multipath distance vector algorithm ) [VG01];[Chen98][Chen98]Wireless ad hoc network. Wireless ad hoc network. (only for ad hoc network)(only for ad hoc network)On-demand routing. On-demand routing. SMR(Split Multipath Routing ) [LG00], SMR(Split Multipath Routing ) [LG00], Source Routing. Source Routing. MSR(Multipath Source Routing ) [ZZS+02]MSR(Multipath Source Routing ) [ZZS+02]Transport layer: Linux multipath connections for Transport layer: Linux multipath connections for multiple ISP connections. multiple ISP connections. (no fail-over mechanism).(no fail-over mechanism).Proxy Server based Multipath Connections (PSMC)Proxy Server based Multipath Connections (PSMC)Existing multipath connection approaches have Existing multipath connection approaches have various limitations and drawbacks. various limitations and drawbacks. We want new solution: We want new solution: Must be compatible with current network and don’t require Must be compatible with current network and don’t require changes on network infrastructure; changes on network infrastructure; Must be robust and reliable with high performance; Must be robust and reliable with high performance; Must be flexible when deployed so more applications can Must be flexible when deployed so more applications can benefit from it.benefit from it.We propose to study a new multipath connection We propose to study a new multipath connection approach: proxy servers based multipath connections approach: proxy servers based multipath connections (PSMC). (PSMC).The Key Idea of PSMCThe Key Idea of PSMCThe key ideas of PSMC is as followings. The key ideas of PSMC is as followings. By using a set of connection relay By using a set of connection relay proxy serversproxy servers, we could , we could set up set up indirect routesindirect routes via the proxy servers, and transport via the proxy servers, and transport packets over the network through the indirect routes. packets over the network through the indirect routes. By enhancing existing TCP/IP By enhancing existing TCP/IP protocolsprotocols, we could efficiently , we could efficiently distribute and reassemble packetsdistribute and reassemble packets among multiple paths at among multiple paths at two end nodes, and increase end-to-end TCP throughput. two end nodes, and increase end-to-end TCP throughput.