The DOI matches its Crossref record; 18 of the 18 references it cites were found in a registry or an index.
Making middleboxes someone else's problem: network processing as a cloud service
Abstract
Modern enterprises almost ubiquitously deploy middlebox processing services to improve security and performance in their networks. Despite this, we find that today's middlebox infrastructure is expensive, complex to manage, and creates new failure modes for the networks that use them. Given the promise of cloud computing to decrease costs, ease management, and provide elasticity and fault-tolerance, we argue that middlebox processing can benefit from outsourcing the cloud. Arriving at a feasible implementation, however, is challenging due to the need to achieve functional equivalence with traditional middlebox deployments without sacrificing performance or increasing network complexity. In this paper, we motivate, design, and implement APLOMB, a practical service for outsourcing enterprise middlebox processing to the cloud. Our discussion of APLOMB is data-driven, guided by a survey of 57 enterprise networks, the first large-scale academic study of middlebox deployment. We show that APLOMB solves real problems faced by network administrators, can outsource over 90% of middlebox hardware in a typical large enterprise network, and, in a case study of a real enterprise, imposes an average latency penalty of 1.1ms and median bandwidth inflation of 3.8%.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Armbrust, M., Fox, A., Griffith, R., Joseph, A. D., Katz, R., Konwinski, A., Lee, G., Patterson, D., Rabkin, A., Stoica, I., et al. (2010) · Communications of the ACM · doi:10.1145/1721654.1721672 · Cited by 9,464
McKeown (2008) · doi:10.1145/1355734.1355746 · Cited by 8,513
Snort - Lightweight Intrusion Detection for Networks
Roesch, M. (1999) · Cited by 3,163
Kohler, E., Morris, R., Chen, B., Jannotti, J., & Kaashoek, M. F. (2000) · ACM Transactions on Computer Systems · doi:10.1145/354871.354874 · Cited by 2,413
Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds
Ristenpart, T., Tromer, E., Shacham, H., & Savage, S. (2009) · Proceedings of the 16th ACM conference on Computer and communications security · doi:10.1145/1653662.1653687 · Cited by 2,053
Andersen, D., Balakrishnan, H., Kaashoek, F., & Morris, R. (2001) · Proceedings of the eighteenth ACM symposium on Operating systems principles · doi:10.1145/502034.502048 · Cited by 1,868
HighSpeed TCP for Large Congestion Windows
Floyd, S. (2003) · doi:10.17487/rfc3649 · Cited by 1,165
Choffnes, D., & Bustamante, F. E. (2008) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1402946.1403000 · Cited by 404
Greening the internet with nano data centers
Valancius, V., Laoutaris, N., Massoulié, L., Diot, C., & Rodriguez, P. (2009) · Proceedings of the 5th international conference on Emerging networking experiments and technologies · doi:10.1145/1658939.1658944 · Cited by 353
Why flow-completion time is the right metric for congestion control
Dukkipati, N., & McKeown, N. (2006) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1111322.1111336 · Cited by 317
Cited by
Software-Defined Network Function Virtualization: A Survey
Li, Y., & Chen, M. (2015) · IEEE Access · doi:10.1109/access.2015.2499271 · Cited by 508
A Survey on Emerging SDN and NFV Security Mechanisms for IoT Systems
Farris, I., Taleb, T., Khettab, Y., & Song, J. (2019) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2862350 · Cited by 402
Shaukat, U., Ahmed, E., Anwar, Z., & Xia, F. (2016) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2015.11.009 · Cited by 140
Metadata
- Authors
- Sherry, J., Hasan, S., Scott, C., Krishnamurthy, A., Ratnasamy, S., & Sekar, V.
- Venue
- ACM SIGCOMM Computer Communication Review
- Published
- 2012-08-13
- Volume
- 42
- Issue
- 4
- Pages
- 13-24
- ISSN
- 0146-4833 (ISSN-L)
- OpenAlex
- W2997947960
- Cited by
- 325
- References
- 18
- FWCI
- 12.66
- Type
- journal article
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Making middleboxes someone else's problem: network processing as a cloud service. https://app.cochat.ai/papers/10.1145/2377677.2377680
- The paper
- Sherry, J., Hasan, S., Scott, C., Krishnamurthy, A., Ratnasamy, S., & Sekar, V. (2012). Making middleboxes someone else's problem: network processing as a cloud service. ACM SIGCOMM Computer Communication Review. https://doi.org/10.1145/2377677.2377680
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
