Application Layer Packet Processing Using PISA Switches

This paper investigates and proposes a solution for Protocol Independent Switch Architecture (PISA) to process application layer data, enabling the inspection of application content. PISA is a novel approach in networking where the switch does not run any embedded binary code but rather an interpret...

Full description

Bibliographic Details
Main Authors: Ismail Butun, Yusuf Kursat Tuncel, Kasim Oztoprak
Format: Article
Language:English
Published: MDPI AG 2021-11-01
Series:Sensors
Subjects:
Online Access:https://www.mdpi.com/1424-8220/21/23/8010
_version_ 1827674675184926720
author Ismail Butun
Yusuf Kursat Tuncel
Kasim Oztoprak
author_facet Ismail Butun
Yusuf Kursat Tuncel
Kasim Oztoprak
author_sort Ismail Butun
collection DOAJ
description This paper investigates and proposes a solution for Protocol Independent Switch Architecture (PISA) to process application layer data, enabling the inspection of application content. PISA is a novel approach in networking where the switch does not run any embedded binary code but rather an interpreted code written in a domain-specific language. The main motivation behind this approach is that telecommunication operators do not want to be locked in by a vendor for any type of networking equipment, develop their own networking code in a hardware environment that is not governed by a single equipment manufacturer. This approach also eases the modeling of equipment in a simulation environment as all of the components of a hardware switch run the same compatible code in a software modeled switch. The novel techniques in this paper exploit the main functions of a programmable switch and combine the streaming data processor to create the desired effect from a telecommunication operator perspective to lower the costs and govern the network in a comprehensive manner. The results indicate that the proposed solution using PISA switches enables application visibility in an outstanding performance. This ability helps the operators to remove a fundamental gap between flexibility and scalability by making the best use of limited compute resources in application identification and the response to them. The experimental study indicates that, without any optimization, the proposed solution increases the performance of application identification systems 5.5 to 47.0 times. This study promises that DPI, NGFW (Next-Generation Firewall), and such application layer systems which have quite high costs per unit traffic volume and could not scale to a Tbps level, can be combined with PISA to overcome the cost and scalability issues.
first_indexed 2024-03-10T04:45:39Z
format Article
id doaj.art-a9b472cdece349c6b5c483e5fa2809b5
institution Directory Open Access Journal
issn 1424-8220
language English
last_indexed 2024-03-10T04:45:39Z
publishDate 2021-11-01
publisher MDPI AG
record_format Article
series Sensors
spelling doaj.art-a9b472cdece349c6b5c483e5fa2809b52023-11-23T03:02:33ZengMDPI AGSensors1424-82202021-11-012123801010.3390/s21238010Application Layer Packet Processing Using PISA SwitchesIsmail Butun0Yusuf Kursat Tuncel1Kasim Oztoprak2Department of Computer Engineering, KTH Royal University of Technology, SE-114 28 Stockholm, SwedenDepartment of Computer Engineering, Konya Food and Agriculture University, Konya 42080, TurkeyDepartment of Computer Engineering, Konya Food and Agriculture University, Konya 42080, TurkeyThis paper investigates and proposes a solution for Protocol Independent Switch Architecture (PISA) to process application layer data, enabling the inspection of application content. PISA is a novel approach in networking where the switch does not run any embedded binary code but rather an interpreted code written in a domain-specific language. The main motivation behind this approach is that telecommunication operators do not want to be locked in by a vendor for any type of networking equipment, develop their own networking code in a hardware environment that is not governed by a single equipment manufacturer. This approach also eases the modeling of equipment in a simulation environment as all of the components of a hardware switch run the same compatible code in a software modeled switch. The novel techniques in this paper exploit the main functions of a programmable switch and combine the streaming data processor to create the desired effect from a telecommunication operator perspective to lower the costs and govern the network in a comprehensive manner. The results indicate that the proposed solution using PISA switches enables application visibility in an outstanding performance. This ability helps the operators to remove a fundamental gap between flexibility and scalability by making the best use of limited compute resources in application identification and the response to them. The experimental study indicates that, without any optimization, the proposed solution increases the performance of application identification systems 5.5 to 47.0 times. This study promises that DPI, NGFW (Next-Generation Firewall), and such application layer systems which have quite high costs per unit traffic volume and could not scale to a Tbps level, can be combined with PISA to overcome the cost and scalability issues.https://www.mdpi.com/1424-8220/21/23/8010software-defined networksprotocol independent switch architectureprogrammable switchesP4virtualizationstream processor
spellingShingle Ismail Butun
Yusuf Kursat Tuncel
Kasim Oztoprak
Application Layer Packet Processing Using PISA Switches
Sensors
software-defined networks
protocol independent switch architecture
programmable switches
P4
virtualization
stream processor
title Application Layer Packet Processing Using PISA Switches
title_full Application Layer Packet Processing Using PISA Switches
title_fullStr Application Layer Packet Processing Using PISA Switches
title_full_unstemmed Application Layer Packet Processing Using PISA Switches
title_short Application Layer Packet Processing Using PISA Switches
title_sort application layer packet processing using pisa switches
topic software-defined networks
protocol independent switch architecture
programmable switches
P4
virtualization
stream processor
url https://www.mdpi.com/1424-8220/21/23/8010
work_keys_str_mv AT ismailbutun applicationlayerpacketprocessingusingpisaswitches
AT yusufkursattuncel applicationlayerpacketprocessingusingpisaswitches
AT kasimoztoprak applicationlayerpacketprocessingusingpisaswitches