Lukas Ruf

Swiss Federal Institute of Technology (ETH), Information Technology and Electrical Engineering, Alumnus

Followers

Following

Co-authors

Public Views

Interests

Uploads

Papers by Lukas Ruf

An extensible router platform

An Interaction Control Architecture for Large

ABSTRACT

A Scalable High-performance Router Platform

Emerging network services such as transcoding and encryption need application-specific handling o... more Emerging network services such as transcoding and encryption need application-specific handling of data streams within the network, thus requiring enormous computational capabilities on routers to process packets at link speed. Recently appeared Network Processors (NPs) are able to significantly increase the available processing capacities on a router by a chip-multi-processor architecture. Embedded within the network interface card, NPs provide several code-extensible processors with different capabilities located at various layers. However, the increase in processing capacity comes at the cost of a higher complexity to program and control various processor hierarchies provided on the router.

Institut Fr

Commercially available routers typically have a monolithic operating system that cannot be easily... more Commercially available routers typically have a monolithic operating system that cannot be easily tailored and upgraded to support new network protocols. This paper describes PromethOS, a modular router architecture based on Linux 2.4, which can be dynamically extended by plugin modules that are installed in the networking kernel. To install and configure plugins remotely we present a novel signaling protocol that establishes explicitly routed paths transiting selected nodes in a predefined order. Such paths can be non-simple, where a given node is being visited more than once.

SADA TIK IT-Infrastructure Hands-On

This document is not official ETH information -- to have the disclaimer notice written down. 2 Ne... more This document is not official ETH information -- to have the disclaimer notice written down. 2 Network Accounts Every user at TIK gets its own account on the TIK-Network. This account consists of a home directory, an eMail account and a special-purpose account where the eMail-management is handled stored in, i.e. your .forward file should be saved there. Your account is named with the user name of your Tardis Account -- in case you are a student in the Department of Electrical Engineering at ETH [5]. In the future, I will refer to this account name as user. Every user has its own user id that is unique per system. It can be checked with id -a. In your home directory, you can install your web-appearence under /WWW. Do not forget to set the correct access rights. In case you want to install cgi-script or ssi-scripts, please name them correctly -- and set the approriate access rights as well. You cannot set any .htaccess-based modifi

PromethOS

Commercially available routers typically have a monolithic operating system that cannot be easily... more Commercially available routers typically have a monolithic operating system that cannot be easily tailored and upgraded and support new network protocols. PromethOS is a modular router architecture based on Linux 2.4 which can be dynamically extended by plugin modules that are installed in the networking kernel. To install and configure plugins we present a novel signaling protocol that establishes explicitly routed paths transiting selected nodes in a predefined order. Such paths can be non-simple, where a given node is being visited more than once.

Easy Teach & Learn(R): A Web-Based Adaptive Middleware for Creating Virtual Classrooms

Lecture Notes in Computer Science, 2000

. We presentanarchitecture of a teleteaching system whichsupports direct interactions between all... more . We presentanarchitecture of a teleteaching system whichsupports direct interactions between all participants, i.e., lecturer andstudents and among students. To establish a kind of &amp;amp;amp;quot;virtual classroom&amp;amp;amp;quot;atmosphere, high-quality audio and video streams as well as teachingmaterial are distributed between participants. For the implementation ofhigh-quality audio and video channels, the system is based on emerginghigh-speed networks such as cable TV networks and

A Dynamically Extensible Router Architecture Supporting Explicit Routing

Active Networks, 2000

Abstract. Commercially,available routers typically have a monolithic operating system that cannot... more Abstract. Commercially,available routers typically have a monolithic operating system that cannot be easily tailored and upgraded,and support new network,protocols. PromethOS is a modular ,router architecture based on Linux 2.4 which can be dynamically extended by plugin modules,that are installed in the networking kernel. To install and configure plugins we present a novel signaling protocol that establishes explicitly routed paths transiting

An Extensible Router Platform Enabling On Demand Service Creation

Commercially available routers typically have a monolithic operating system that can- not be easi... more Commercially available routers typically have a monolithic operating system that can- not be easily tailored and upgraded to support new network protocols. This paper describes PromethOS, a modular router architecture based on Linux 2.4, which can be dynamically extended by plugin modules that are installed in the networking kernel. To install and con- figure plugins remotely we present a novel signaling protocol that establishes explicitly routed paths transiting selected nodes in a predefined order. Such paths can be non-simple, where a given node is being visited more than once.

Configuring NIS+ under Linux Debian (2.2 frozen) and SuSE 6.4

A Scalable High-performance Router Platform Supporting Dynamic Service Extensibility On Network and Host Processors

Industrial and Commercial Power Systems Technical Conference, Annual Meeting, 2004

Abstract: Emerging network services such as transcodingand encryption need application-specific h... more Abstract: Emerging network services such as transcodingand encryption need application-specific handling of data streamswithin the network, thus requiring enormous computationalcapabilities on routers to process packets at link speed. Recentlyappeared Network Processors (NPs) are able to significantlyincrease the available processing capacities on a router by achip-multi-processor architecture. Embedded within the networkinterface card, NPs provide several code-extensible processorswith different ...

Download

Generic Service Provisioning Framework for Mobile Networks

ABSTRACT Mobile ad hoc networking, as a typical example of self-organized networks, is an emergin... more ABSTRACT Mobile ad hoc networking, as a typical example of self-organized networks, is an emerging and promising communication paradigm. Not only the variety of devices but also the diversity of services is continuously increasing. Such services must be provisioned in a flexible and distributed way without central infrastructure. Thus, service deployment and management for such mobile devices are extremely difficult since a provisioning framework must cope with the high level of device heterogeneity, degree of mobility, and take limited device resources into account. In this paper, we propose SIRAMON, a generic, decentralized service provisioning framework for self-organized networks. SIRAMON integrates the functions required to deal with the full life-cycle of services. SIRAMON offers sufficient capabilities to specify, lookup, deploy, instantiate and manage not only trivial but also complex services like mobile ad hoc group applications.

A Linux-based Node OS for Network Processors

Network processors are ideally suited as implementation platforms for ac- tive and programmable n... more Network processors are ideally suited as implementation platforms for ac- tive and programmable networks. Thus, an active network node OS needs to support network processors as well as traditional processor architectures. Resource control in a node OS is required for the accounting and charging of resource consumption to a customer. Resources consumed by services composed of kernel and user space components need to be controlled. In this paper, we describe the architecture and design of PromethOS, a flexible node OS based on the Linux kernel. PromethOS provides mechanisms for the installation, configuration, operation and removal of untrusted code modules at run-time in ker- nel and in user space and on specialized engines of network processors. Resource control facilities provide for node stability and allow for several customized services running in parallel in a safe and reliable way. We introduce the concept of a module chain to realize a dynamically configurable communication infrastructure, allowing for communication between code modules and different protection domains. Since PromethOS is based on Linux, it may easily be deployed on traditional processors and network processor architectures.

Supporting service creation and isolation in high-performance active networks

Active Networks provide mechanisms to dynamically inject program code into the network nodes. Our... more Active Networks provide mechanisms to dynamically inject program code into the network nodes. Our goal is to develop an architecture for service creation of active networks which exploits this capability. Secondl y, we want to realize an architecture that is suitable for a high-performance netwo rking environment. We fa- vor an approach that reduces management complexity for active network providers,

Service deployment on high performance active network nodes

In order to realize service deployment on high-performance active nodes, the problem of installin... more In order to realize service deployment on high-performance active nodes, the problem of installing and configuring software components in complex, heterogeneous node environments must be addressed. The paper presents our approach to this problem, called Chameleon, which includes two main aspects. First, the service model we propose is based on service components with two interfaces-a data flow interface for programming packet flows and a control interface for programming the control plane. Second, the service specification is kept independent of any particular node architecture. During the service deployment phase, the service specification is resolved on each node offering the service and is driven by node-specific parameters. The result of this resolution is a tree of service components, which can differ among different types of nodes. Our solution allows a service to take full advantage of specific node features, such as those related to performance or security. The design is illustrated using an active adaptable reliable multicast service.

Download

An Interaction Control Architecture for Large Chairperson-Controlled Conferences over the Internet

Lecture Notes in Computer Science, 2000

This paper presents a novel approach for interaction control in large, synchronous and loosely co... more This paper presents a novel approach for interaction control in large, synchronous and loosely coupled but chairperson-controlled conferences. Based on the IP-Multicast protocol which is extended by mechanisms allowing resource reservation for prioritized flows, the proposed architecture supports interaction control among conference members as well as focus control of each conference participant. Interaction control is performed by using a scalable signaling protocol: a conference may be recursively split into sub-sessions each of which provides an identical functionality independently of the others and establishes a singular session. A session is controlled by a chairperson who manually grants, revokes or rejects an interaction request of a registered session member. The granted interaction is announced to the session participants such that all participants may have their focus automatically set to the audio and video streams providing session participant. The such provided focus control enables conference participants to individually manage their own audio and video stream perception, i.e. a participant either decides individually to whom the personal attention should be granted or follows strictly the session's focus granted by the chairperson. The proposed conference control architecture provides the network-management platform to large virtual classrooms for university-like lectures over high-speed Internetconnections. While focusing the application of the conference control architecture to universitylike lectures, it remains generally applicable for any audio-and video-supported chairperson-controlled conference over the Internet.

Download

Network Services on Service Extensible Routers

by Károly Farkas and Lukas Ruf

Lecture Notes in Computer Science, 2009

Service creation on extensible routers requires a concise specification of component-based networ... more Service creation on extensible routers requires a concise specification of component-based network services to be deployed and extended at node runtime. The specification method needs to cover the data-flow oriented nature of network services with service-internal control relations. Hence, it needs to provide the concept of functional service composition that hides the complexity of a distributed, dynamically code-extensible system. We propose the PromethOS NP service model and its Service Programming Language to answer this challenge. They provide the concepts and methods to specify a network service as a graph of service chains with service components, and service-internal control relations. In this paper, we present the concepts of our service model, the syntax and semantics of its Service Programming Language, and demonstrate their applicability by an exemplary service specification.

Download

PromethOS: A Dynamically Extensible Router Architecture Supporting Explicit Routing

Lecture Notes in Computer Science, 2002

Commercially available routers typically have a monolithic operating system that cannot be easily... more Commercially available routers typically have a monolithic operating system that cannot be easily tailored and upgraded and support new network protocols. PromethOS is a modular router architecture based on Linux 2.4 which can be dynamically extended by plugin modules that are installed in the networking kernel. To install and configure plugins we present a novel signaling protocol that establishes explicitly routed paths transiting selected nodes in a predefined order. Such paths can be non-simple, where a given node is being visited more than once.

Download

A Detection and Filter System for Use Against Large-Scale DDoS Attacks in the Internet Backbone

by Károly Farkas and Lukas Ruf

Lecture Notes in Computer Science, 2007

Distributed denial of service (DDoS) attacks in the Internet pose huge problems on nowadays commu... more Distributed denial of service (DDoS) attacks in the Internet pose huge problems on nowadays communication infrastructure. Attacks either destroy information or impede access to a service. Since the significance of the Internet to business and economy is growing rapidly, efficient protection mechanisms are urgently required to protect hosts from being infected and, more important, sites from being attacked. Detection of DDoS attacks requires deep packet inspection at link speed, and context-dependent packet handling for countermeasures. This functionality is not achievable with nowadays commercial high-performance routers. In this paper, we therefore present our problem space exploration of DDoS attacks and propose a flexible service architecture for detection and filter mechanisms to counteract DDoS attacks. To achieve the performance required for backbone routers together with the flexibility needed for services counteracting DDoS attacks, we base the proposal on our PromethOS NP router platform that manages and controls hierarchical network nodes built of network and host processors.

Download

Towards High-Performance Active Networking

by Bernhard Plattner and Lukas Ruf

Lecture Notes in Computer Science, 2004

Network processors have been developed to ease the implementation of new network protocols in hig... more Network processors have been developed to ease the implementation of new network protocols in high-speed routers. Being embedded in network interface cards, they enable extended packet processing at link speed as is required, for instance, for active network nodes. Active network nodes start using network processors for extended packet processing close to the link. The control and configuration of high-performance active network nodes with network processors such that new services can benefit from the additional processing capacity offered is nontrivial since the complexity to configure a node while providing sufficient level of abstraction is hard to master. In this paper, we present PromethOS NP which is a modular and flexible router architecture that provides a framework for dynamic service extension by plugins with integrated support of network processors, namely the IBM PowerNP 4GS3 network processor. We briefly introduce the PowerNP architecture in order to show how our active networking framework maps onto this network processor and provide results from performance measurements. Owing to architectural similarities of network processors, we believe that our considerations are also valid for other network processors.

Download

Lukas Ruf

Uploads

Papers by Lukas Ruf

Log In