towards a platform for intelligent activity at the edge hilarie orman advanced development group...
TRANSCRIPT
Towards a Platform for Intelligent Activity at the Edge
Hilarie Orman
Advanced Development Group
Novell, Inc.
Network Service Bread and Butter: the Stateless Call
RequestProcessing
Client ServerRequest
Reply
Messages through the Internet
Proxies: Semantic Parasites
Client ServerRequest
ReplyCachedReply
ProxyRequest
Reply
FirstTime
Reduced Latency: Network Transit Server Load
New Infrastructure: Caching at the Edge
Big, OverburdenedNetworks
Client Cache
Server Cache
ISP cache
What’s in a Proxy Cache?
Disk Spacecached objects
RAMcached objectsDNS objects
Network Stack
Protocol ClientProtocol Server
Cache MgmtStrategy
CPU Cycles(mostly unused)
Even More Parasitic Semantics
Client ServerRequest
Reply
ServletExecution
Env
Proxy
Request
Reply
ProxyComputed
Reply
Servlet
FirstTime
Servlet
Data
Data
Application and ProtocolSemantic Hooks Redirect (instructs client to issue a new
request Add auxiliary data to context (the infamous
cookie) Embed requests in content (embedded
URL’s) Executable content
Implicit Service Invocation
Client Server
Request
ReplyF(req)=
G(rep)=
ProxyRequest
ReplyProxy
ComputedReply
ReplyData
RequestData
Client ServerRequest
ReplyF(req)=
G(rep)=
ProxyRequest
Reply
ProxyComputed
Reply
RequestData
F(req)=
G(rep)=
Proxy Request
Reply
ContentAdaptation
ContentTransducer
ReplyData
Turning Wings 2
What Should Be in anEdge Services Box?
Disk Spacecached objects
RAMcached objects DNS objects
Network Stack
Protocol ClientProtocol Server
Cache MgmtStrategy
CPU Cycles
Extensible Execution Environment
AffinityService
PersonaMgmt
NameResolution
AdBarter
Service LoaderLibrarySession Control
Example: Content Fast Path No DNS, no redirection
Request Data rtp://www.blockbuster.com/toystory3.mpg$5
Request Data rtp://www.blockbuster.com/toystory3.mpg$5
FAST PROXY
Begin fillfrom cache
Continue fillby real-time redirectionto lowest latency content serverwith $5 QoS
Service typeStateless dataCost function
Example: Security Services
Content Authority
AccessControl
Listr.htm - joe
Authentication Authority
AuthnEnforce
joe
Encrypted Content//f/r.htm
Https://f/r.htm
SSL mutualauthentication “joe”
Http://f/r.htm
ContentCache
Proxy
Service Injection at the Edge
Scalable: log(n) edge devices• Fewer nodes to upgrade• Fewer organizations to agree to standards• Minimizes compatibility problems
Closer to provisioned services• Bandwidth SLA’s• Switches (levels 3 through 6)
Location independent security