IO visor-based packet tracing and collection over distributed SmartX server-switch boxes

摘要

In this paper, we describe the concept of utilizing packet tracing and collection for 3rd-party packet-precise inspection to assist the secure operation of SDN-enabled multisite cloud environment. The proposed packet tracing and collection is designed and prototyped by utilizing open-source IO Visor project's tools. To verify its feasibility for remotely distributed multiple boxes, we apply it to the multi-box playground with distributed SmartX server-switch boxes. By combining the packet tracing data collected from distributed sites at a centralized location, it is verified to be useful in supporting the malicious packet detection in our multi-site playground.