Service Mesh and eBPF-Powered Microservices: A Survey and Future Directions

Sedghpour, Mohammad Reza Saleh; Townend, Paul

doi:10.1109/sose55356.2022.00027

Cited by 11 publications

(4 citation statements)

References 74 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The entire CMX-GW can be statelessly containerized and managed in the cloud, difficulting compromising attacks thanks to available cloud technologies applicable at the orchestrator level. This contributes to reducing the surface attack compared to the one usually present in edge gateways and also increases scalability, availability, and resiliency [37].…”

Section: Secure Communication Path Establishment (P3)mentioning

confidence: 99%

CMXsafe: A Proxy Layer for Securing Internet-of-Things Communications

de Hoz Diego,

Madi,

Konstantinou

2024

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

Security in Internet-of-Things (IoT) environments has become a major concern. This is partly due to a large number of remotely exploitable IoT vulnerabilities in service authentication and access control combined with the lack of timely technical support. To reduce the threat surface of remote vulnerability exploitation, we propose CMXsafe, a secure-bydesign application-agnostic proxy layer that can be updated and managed independently of the IoT device application. CMXsafe places IoT devices behind gateways operating as 4th OSI transport layer relayers to offload security concerns of IoT network communications into the proxy layer. More specifically, the proxy layer produces secure communication paths between IoT applications and platforms while enforcing mutual authentication and access control to proxied services. We evaluate the performance of our architecture on the MQTT protocol used in a standard publisher-broker-subscriber configuration provided by Eclipse Mosquitto. More specifically, we compare the performance penalty on the protocol when securing communications with TLS following a monolithic implementation and with CMXsafe. The experimental results suggest that CMXsafe outperforms integrated security by providing at least a 25% latency reduction and a 22% bandwidth improvement.

show abstract

Section: Secure Communication Path Establishment (P3)mentioning

confidence: 99%

CMXsafe: A Proxy Layer for Securing Internet-of-Things Communications

de Hoz Diego,

Madi,

Konstantinou

2024

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

show abstract

“… Networking: powerful packet processing programs can be developed at the kernel level, such as Cilium, to provide load balancing at the kernel level, to bring the service mesh to a deeper level, and to solve the performance problem of Sidecar [5];…”

Section: Features Of Ebpfmentioning

confidence: 99%

DeeTune: Design and Application of an eBPF-based Network Framework for Baidu

2023

jaip

View full text Add to dashboard Cite

With the development of cloud computing and the continuous development of infrastructure, architecture upgrades and other technologies, Baidu's internal services are gradually moving to the cloud environment. Although the efficiency of services has increased significantly, some shortcomings and deficiencies of the basic capabilities of the cloud environment have gradually become apparent, resulting in the inability to meet some reasonable requirements of the enterprise, such as building the topology relationship between different microservices and conducting the test session for The traditional way of implementation is to record the real traffic to reflect and verify the function and so on. The traditional way of implementation is often to implant the code into the business system to make changes. However, given the diversity of business forms and technologies, the conventional way has a lot of problems in terms of business intervention, communication and coordination, performance, stability, and other aspects. In this paper, we introduce Baidu's eBPF-based network framework: DeeTune, which provides the ability to create service topology, record traffic, monitor non-intrusive metrics, etc., further improve the efficiency of SRE and quality assurance.

show abstract

“…The term resilience can be defined as the ability of the system to regain its original condition after an unpredicted degradation [10]. Resilience characteristic is achieved in a microservice architecture by using the patterns such as circuit-breaker, retry, bulkhead, and rate limiter patterns [11]- [13]. Out of all the patterns, the circuit breaker is the most often used technique.…”

Section: Introductionmentioning

confidence: 99%

Auto retry circuit breaker for enhanced performance in microservice applications

Punithavathy,

Priya

2024

IJECE

View full text Add to dashboard Cite

Cloud-hosted distributed systems are much more resilient to failure. Resilience is the key factor in avoiding cascading failures in microservice architectures, where circuit-breaker, retry, bulkhead, and rate-limiter patterns are implemented. Through the implementation of these patterns, availability and reliability factors can be greatly improved. Circuit-breaker emphasizes a fail-fast mechanism, so it is highly recommended. Although they are beneficial, some factors, such as configuration, need to be improved to increase the system's throughput. In this paper, an approach called auto retry circuit breaker (ARCB) is implemented, which is a modified version of existing patterns of circuit breaker, and it has been found that the throughput of the system can be increased by 36% when compared to the existing manual circuit breaker pattern.

show abstract

Service Mesh and eBPF-Powered Microservices: A Survey and Future Directions

Cited by 11 publications

References 74 publications

CMXsafe: A Proxy Layer for Securing Internet-of-Things Communications

CMXsafe: A Proxy Layer for Securing Internet-of-Things Communications

DeeTune: Design and Application of an eBPF-based Network Framework for Baidu

Auto retry circuit breaker for enhanced performance in microservice applications

Contact Info

Product

Resources

About