Feedback

Faculté des Sciences appliquées
Faculté des Sciences appliquées
MASTER THESIS
VIEW 122 | DOWNLOAD 463

Lambda functions for network control and monitoring

Download
Leduc, François ULiège
Promotor(s) : Mathy, Laurent ULiège
Date of defense : 6-Sep-2021/7-Sep-2021 • Permalink : http://hdl.handle.net/2268.2/13159
Details
Title : Lambda functions for network control and monitoring
Author : Leduc, François ULiège
Date of defense  : 6-Sep-2021/7-Sep-2021
Advisor(s) : Mathy, Laurent ULiège
Committee's member(s) : Fontaine, Pascal ULiège
Louveaux, Quentin ULiège
Soldani, Cyril ULiège
Language : English
Keywords : [fr] Network
[fr] Monitoring
[fr] Lambda Function
[fr] Serverless
[fr] XDP
[fr] Control
[fr] Kubeless
Discipline(s) : Engineering, computing & technology > Computer science
Institution(s) : Université de Liège, Liège, Belgique
Degree: Master en sciences informatiques, à finalité spécialisée en "computer systems security"
Faculty: Master thesis of the Faculté des Sciences appliquées

Abstract

[en] Monitoring a network in a precise manner is becoming more interesting in light of the volume of traffic that new infrastructures can accommodate. With the advent of programmable switches and routers, monitoring systems are turning to solutions that benefit from this new capability. There is also the establishment of a new back-end approach known as serverless computing, which consists in uploading lambda functions to the cloud. These functions offer backend services on an as-needed basis.

The goal of this work is to develop a monitoring system capable of detecting network attacks and specific events of interest to a network operator. To accomplish this, the two previously introduced notions are used, namely a backend architecture based on serverless computing and the assumption that the network is made up of programmable devices.

In terms of packet processing technology, we used XDP, which allows us to create a hook at the switch's network interface and execute a program. The program's goal is to save the headers of IP packets locally. These data are then formatted as custom events and transferred to an intermediate server. In order to do this, we have designed a protocol on top of UDP. The server will then trigger the execution of the lambda functions associated to the events. For their execution, we decided to choose Kubeless, a Kubernetes-native serverless framework. A Proof of Concept was created to see if our solution was scalable and possible. We then evaluate the amount of network traffic generated by our approach and discuss protocol limitations.

We conclude by suggesting several sorts of prospective improvements ranging from security to better benchmarking and other architectural options.


File(s)

Document(s)

File
Access leduc_thesis.pdf
Description:
Size: 1.25 MB
Format: Adobe PDF
File
Access abstract.pdf
Description:
Size: 49.54 kB
Format: Adobe PDF

Author

  • Leduc, François ULiège Université de Liège > Master sc. informatiques, à fin.

Promotor(s)

Committee's member(s)

  • Fontaine, Pascal ULiège Université de Liège - ULiège > Dép. d'électric., électron. et informat. (Inst.Montefiore) > Systèmes informatiques distribués
    ORBi View his publications on ORBi
  • Louveaux, Quentin ULiège Université de Liège - ULiège > Dép. d'électric., électron. et informat. (Inst.Montefiore) > Systèmes et modélisation : Optimisation discrète
    ORBi View his publications on ORBi
  • Soldani, Cyril ULiège Université de Liège - ULiège > Dép. d'électric., électron. et informat. (Inst.Montefiore) > Systèmes informatiques répartis et sécurité
    ORBi View his publications on ORBi
  • Total number of views 122
  • Total number of downloads 463










All documents available on MatheO are protected by copyright and subject to the usual rules for fair use.
The University of Liège does not guarantee the scientific quality of these students' works or the accuracy of all the information they contain.