Ethane: Taking control of the enterprise

被引:410
作者
Casado, Martin [1 ]
Freedman, Michael J.
Pettit, Justin
Luo, Jianying
McKeown, Nick
Shenker, Scott
机构
[1] Stanford Univ, Stanford, CA 94305 USA
[2] Univ Calif Berkeley, Berkeley, CA 94720 USA
关键词
design; experimentation; performance; network; architecture; security; management;
D O I
10.1145/1282427.1282382
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
This paper presents Ethane, a new network architecture for the enterprise. Ethane allows managers to define a single network-wide fine-grain policy, and then enforces it directly. Ethane couples extremely simple flow-based Ethernet switches with a centralized controller that manages the admittance and routing of flows. While radical, this design is backwards-compatible with existing hosts and switches. We have implemented Ethane in both hardware and software, supporting both wired and wireless hosts. Our operational Ethane network has supported over 300 hosts for the past four months in in Stanford University's network, and this deployment experience has significantly affected Ethane's design.
引用
收藏
页码:1 / 12
页数:12
相关论文
共 22 条
[1]  
[Anonymous], Microsoft network access protection
[2]  
[Anonymous], Identity engines
[3]  
BRODER AZ, 2001, P INFOCOM APR
[4]   The cutting EDGE of IP router configuration [J].
Caldwell, D ;
Gilbert, A ;
Gottlieb, J ;
Greenberg, A ;
Hjalmtysson, G ;
Rexford, J .
ACM SIGCOMM COMPUTER COMMUNICATION REVIEW, 2004, 34 (01) :21-26
[5]  
Caldwell D., 2004, SIGCOMM Computer Comm. Rev
[6]  
CASADO M, 2006, USENIX SEC S AUG
[7]  
DEMETRESCU C, 2003, P STOC 03
[8]  
GREENBERG A, 2005, SIGCOMM COMP COMM RE
[9]  
Ioannidis Sotiris, 2000, P 7 ACM C COMPUTER C, P190, DOI [10.1145/352600.353052, DOI 10.1145/352600.353052]
[10]  
Kerravala Zeus., 2002, CONFIGURATION MANAGE