Links as a Service (LaaS): Guaranteed tenant isolation in the shared cloud

Eitan Zahavi, Alexander Shpiner, Ori Rottenstreich, AVINOAM KOLODNY, Isaac Keslassy

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

The most demanding tenants of shared clouds require complete isolation from their neighbors, in order to guarantee that their application performance is not affected by other tenants. Unfortunately, while shared clouds can offer an option whereby tenants obtain dedicated servers, they do not offer any network provisioning service, which would shield these tenants from network interference. In this paper, we introduce Links as a Service (LaaS), a new abstraction for cloud service that provides isolation of network links. Each tenant gets an exclusive set of links forming a virtual fat-tree, and is guaranteed to receive the exact same bandwidth and delay as if it were alone in the shared cloud. Consequently, each tenant can use the forwarding method that best fits its application. Under simple assumptions, we derive theoretical conditions for enabling LaaS without capacity over-provisioning in fat-trees. New tenants are only admitted in the network when they can be allocated hosts and links that maintain these conditions. LaaS is implementable with common network gear, tested to scale to large networks and provides full tenant isolation at the worst cost of a 10% reduction in the cloud utilization.

Original languageEnglish
Title of host publicationANCS 2016 - Proceedings of the 2016 Symposium on Architectures for Networking and Communications Systems
Pages87-98
Number of pages12
ISBN (Electronic)9781450341837
DOIs
StatePublished - 17 Mar 2016
Event12th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2016 - Santa Clara, United States
Duration: 17 Mar 201618 Mar 2016

Publication series

NameANCS 2016 - Proceedings of the 2016 Symposium on Architectures for Networking and Communications Systems

Conference

Conference12th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, ANCS 2016
Country/TerritoryUnited States
CitySanta Clara
Period17/03/1618/03/16

Keywords

  • Data centers
  • High performance computing
  • Tenant isolation

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications
  • Hardware and Architecture
  • Electrical and Electronic Engineering

Fingerprint

Dive into the research topics of 'Links as a Service (LaaS): Guaranteed tenant isolation in the shared cloud'. Together they form a unique fingerprint.

Cite this