論文 - 寺岡　文男

Management and network orchestration for edge/fog-based distributed data processing

Watanabe H., Hayashi K., Sato T., Kondo T., Teraoka F.

Journal of Information Processing （情報処理学会）  29   640 - 648 2021年

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り,  ISSN  03875806

　概要を見る

In the age of edge/fog computing, it is important to consider not only computing resources but also network resources when hosting services. Since service is composed of multiple small functions in the microservice architecture, we treat a service as a set of BFs (basic functions) that fulfill a single task. It is required to place BFs at edge/fog nodes considering the computing resources and network requirements within a practical time. This paper proposes a MANO (Management and Network Orchestration) for deploying services composed of multiple BFs with requirements to computing and network resources of distributed nodes. The proposed MANO considers the computing resources of edge/fog/cloud as well as the network delay and the bandwidth between them. This paper proposes an optimal method and a heuristic method for calculating the placement of BFs. The evaluation results show that the placement calculation time for a service composed of four BFs is about 10 seconds with the optimal method and about 20 seconds with the heuristic method. The calculation time is within the practical range.

• Access to Document (DOI)

GAMPAL: an anomaly detection mechanism for Internet backbone traffic by flow size prediction with LSTM-RNN

Wakui T., Kondo T., Teraoka F.

Annales des Telecommunications/Annals of Telecommunications （Springer）  77 （ 5-6 ） 437 - 454 2021年

研究論文（学術雑誌）, 共著, 査読有り,  ISSN  00034347

　概要を見る

This paper proposes a general-purpose anomaly detection mechanism for Internet backbone traffic named GAMPAL (General-purpose Anomaly detection Mechanism using Prefix Aggregate without Labeled data). GAMPAL does not require labeled data to achieve general-purpose anomaly detection. For scalability to the number of entries in the BGP RIB (Border Gateway Protocol Routing Information Base), GAMPAL introduces prefix aggregate. The BGP RIB entries are classified into prefix aggregates, each of which is identified with the first three AS (Autonomous System) numbers in the AS_PATH attribute. GAMPAL establishes a prediction model for traffic sizes based on past traffic sizes. It adopts a LSTM-RNN (Long Short-Term Memory Recurrent Neural Network) model that focuses on the periodicity of the Internet traffic patterns at a weekly scale. The validity of GAMPAL is evaluated using real traffic information, BGP RIBs exported from the WIDE backbone network (AS2500), a nationwide backbone network for research and educational organizations in Japan, and the dataset of an ISP (Internet Service Provider) in Spain. As a result, GAMPAL successfully detects anomalies such as increased traffic due to an event, DDoS (Distributed Denial of Service) attacks targeted at a stub organization, a connection failure, an SSH (Secure Shell) scan attack, and anomaly spam.

• Access to Document (DOI)

Efficient RPL Tree Construction Using Passive Link Quality Estimation

Fujita H., Tanaka Y., Mori K., Teraoka F.

Proceedings - 2021 9th International Symposium on Computing and Networking Workshops, CANDARW 2021 （IEEE）     8 - 14 2021年

研究論文（国際会議プロシーディングス）, 共著, 査読有り

　概要を見る

For LLNs (Low power and Lossy Networks), RPL (IPv6 Routing Protocol for LLNs) has been standardized by the IETF (Internet Engineering Task Force) as a routing protocol for LLNs. In RPL, each node estimates the link quality to neighboring nodes and selects the parent node by the OF (Objective Function). As a result, a tree structure rooted at the sink is constructed. Existing OFs such as MRHOF (Minimum Rank with Hysteresis OF) adopt active monitoring for link quality estimation, i.e., each node periodically broadcasts control packets, which results in large control overhead. This paper proposes BROF (Broadcast Reception based OF) which employs passive monitoring for link quality estimation, i.e., each node estimates the link quality by the actual number of control packet receptions and the expected number of control packet receptions. This paper also evaluates the basic performance of BROF by comparing with MRHOF implemented in Contiki-NG, which is an OS (Operating System) for IoT devices. As a result, the number of parent node switching in BROF is 20% lower than that in MRHOF and the control overhead in BROF is 65% lower than that in MRHOF although the network construction time in BROF is 15% larger than that in MRHOF. Furthermore, the delay time of UDP packet transmission from each node to the sink in BROF is 1% smaller than that in MRHOF.

• Access to Document (DOI)

AFC: A Mechanism for Distributed Data Processing in Edge/Fog Computing

Watanabe H., Sato T., Kondo T., Teraoka F.

2021 IEEE Global Communications Conference, GLOBECOM 2021 - Proceedings （IEEE）  2021年

研究論文（国際会議プロシーディングス）, 共著, 査読有り,  ISSN  23340983

　概要を見る

A service in cloud computing is executed in a data center, which may result in large communication delay. To host applications requiring low latency, edge/fog computing has attracted great attention. This paper proposes a mechanism called AFC (Application Function Chaining) for realizing distributed edge/fog computing. In AFC, an application is defined as a Chained-AF, which is composed of one or more AFs (Application Functions) with control structures such as conditional branches. An AF basically fulfills a single task similar to a UNIX command. Thus, a Chained-AF looks like a distributed shell script and the networks look like a single computer from users' viewpoint. A MANO (Management and Network Orchestration) mechanism in AFC places AFs on optimal edge/fog servers which satisfy Chained-AF's requirements when it is launched. Evaluation results of a prototype implementation show that it takes 0.5 seconds and 3 seconds to launch a Chained-AF composed of two and six AFs, respectively, and that the throughput of a Chained-AF is more than 90 % of the line speed, which is independent of the number of AFs. The throughput of an AFC depends on processing performance of AFs, not on the AFC mechanism.

• Access to Document (DOI)

GAMPAL: Anomaly Detection for Internet Backbone Traffic by Flow Prediction with LSTM-RNN

Wakui T., Kondo T., Teraoka F.

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) （Sprinter）  12081 LNCS   196 - 211 2020年

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

This paper proposes a general-purpose anomaly detection mechanism for Internet backbone traffic named GAMPAL (General-purpose Anomaly detection Mechanism using Path Aggregate without Labeled data). GAMPAL does not require labeled data to achieve a general-purpose anomaly detection. For scalability to the number of entries in the BGP RIB (Routing Information Base), GAMPAL introduces path aggregates. The BGP RIB entries are classified into the path aggregates, each of which is identified with the first three AS numbers in the AS_PATH attribute. GAMPAL establishes a prediction model of traffic throughput based on past traffic throughput. It adopts the LSTM-RNN (Long Short-Term Memory Recurrent Neural Network) model focusing on periodicity in weekly scale of the Internet traffic pattern. The validity of GAMPAL is evaluated using the real traffic information and the BGP RIB exported from the WIDE backbone network (AS2500), a nation-wide backbone network for research and educational organizations in Japan. As a result, GAMPAL successfully detects traffic increases due to events and DDoS attacks targeted to a stub organization.

• Access to Document (DOI)

Moclis: A moving cell support protocol based on locator/ID split for 5G system

Ochiai T., Matsueda K., Kondo T., Takano H., Kimura R., Sawai R., Teraoka F.

IEICE Transactions on Communications （電子情報通信学会）  E102B （ 8 ） 1649 - 1659 2019年08月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り,  ISSN  09168516

　概要を見る

In LTE (Long Term Evolution) / LTE-Advanced (LTE-A) system, the user-plane for a user equipment (UE) is provided by tunneling, which increases header overhead, processing overhead, and management overhead. In addition, the LTE-A system does not support moving cells which are composed of a mobile Relay Node (RN) and UEs attached to the mobile RN. Although there are several proposals for moving cells in the LTE-A system and the 5G system, all of them rely on tunneling for the user-plane, which means that none of them avoid the tunneling overheads. This paper proposes MocLis, a moving cell support protocol based on a Locator/ID split approach. MocLis does not use tunneling. Nested moving cells are supported. Signaling cost for handover of a moving cell is independent of the number of UEs and nested RNs in the moving cell. A MocLis prototype, implemented in Linux, includes user space daemons and modified kernel. Measurements show that the attachment time and handover time are short enough for practical use. MocLis has higher TCP throughput than the tunneling based approaches.

• Access to Document (DOI)

LiON: A L3 protocol agnostic experimental network construction tool based on infrastructure as code

Hayashi K., Watanabe H., Kondo T., Teraoka F.

2019 6th International Conference on Software Defined Systems, SDS 2019 （IEEE）     64 - 71 2019年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

An experimental network environment plays an important role to examine new protocols and systems. This paper proposes an IaC (Infrastructure as Code) based tool called LiON (Lightweight On-demand Networking) for constructing virtual networks on the Internet for various experiments. For virtual nodes, various types of virtualization technologies such as network namespace, container, and virtual machine are supported. VXLAN is employed for virtual links between virtual nodes. JSON (JavaScript Object Notation) is adopted as the configuration file format, which enables the experimenter to intuitively design virtual network topologies. Layer-3 protocol agnostic experimental networks can be constructed, which enable to examine non-IP protocol stacks. LiON is implemented in Python and shell script. The time for constructing a virtual network slightly increases as the number of virtual nodes increases. TCP throughput of a virtual link is approximately 97 % of that of a physical link.

• Access to Document (DOI)

Inserting layer-5 to provide applications with richer functions through common API

Watanabe H., Kondo T., Kaneko K., Teraoka F.

IEICE Transactions on Communications （電子情報通信学会）  E101B （ 9 ） 1967 - 1981 2018年09月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り,  ISSN  09168516

　概要を見る

Recently, application demands placed on the network have become more multifaceted. Highly functional application-to-application communication services such as bandwidth aggregation, fault tolerant communication, and delay/disruption tolerant networking (DTN) were developed independently in the network layer, the transport layer, and the application layer. As a result, protocol layering has become complicated. This paper proposes to insert Layer-5 (L5) between the application layer and the transport layer to separate communication policies and communication mechanisms to make protocol layering clearer. The transport layer (L4) provides end-to-end communication mechanisms such as reliable byte stream while L5 realizes communication policies such as bandwidth aggregation by combining the communication mechanisms in L4. This paper proposes five types of L5-paths as communication policies: (1) the L5 bundled path for bandwidth aggregation or fault tolerant communication, (2) the L5 spatially-spliced path for communication with middleboxes, (3) the L5 temporally-spliced path for DTN, (4) the L5 spliced-bundled path, and (5) the L5 bundled over spatially-spliced path. An application can select and use an appropriate L5-path depending on the network circumstances through a common API. A prototype of L5 is implemented in the Linux user space as a library to make deployment and maintenance easier. An evaluation shows that establishment time of L5-paths is short enough and performance of L5-paths is comparable or superior to existing technologies.

• Access to Document (DOI)

ZINK: An efficient information centric networking utilizing layered network architecture

Kondo T., Yoshihara S., Kaneko K., Teraoka F.

IEICE Transactions on Communications （電子情報通信学会）  E101B （ 8 ） 1853 - 1865 2018年08月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り,  ISSN  09168516

　概要を見る

This paper argues that a layered approach is more suitable for Information CentricNetworking (ICN) than a narrow-waist approach and proposes an ICN mechanism called ZINK. In ZINK, a location-independent content name is resolved to a list of node IDs of content servers in the application layer and a node ID is mapped to a node locator in the network layer, which results in scalable locator-based routing. An ID/Locator split approach in the network layer can efficiently support client/serever mobility. Efficient content transfer is achieved by using sophisticated functions in the transport layer such as multipath transfer for bandwidth aggregation or fault tolerance. Existing well-tuned congestion control in the transport layer achieves fairness not only among ICN flows but also among ICN flows and other flows. A proof-of concept prototype of ZINK is implemented on an IPv6 stack. Evaluation results show that the time for content finding is practical, efficient content transfer is possible by using multipath transfer, and the mobility support mechanism is scalable as shown in a nationwide experiment environment in Japan.

• Access to Document (DOI)

MocLis: A Non-Tunneling Moving Cell Support Protocol Based on Locator/ID Split for 5G System

Ochiai T., Matsueda K., Kondo T., Takano H., Kimura R., Sawai R., Teraoka F.

IEEE International Conference on Communications （IEEE）  2018-May 2018年07月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

In the LTE/LTE-Advanced (LTE-A) system, user-plane for a user equipment (UE) is provided by tunneling which causes header overhead, processing overhead, and management overhead. In addition, the LTE-A system does not support moving cells which are composed of a mobile Relay Node (RN) and UEs attached to the mobile RN. There are several proposals for moving cells in the LTE-A system and the 5G system, however, all of them rely on tunneling for the user-plane, which means that none of them avoid the tunneling overheads. This paper proposes MocLis, a moving cell support protocol based on a Locator/ID split approach. MocLis does not use tunneling. Nested moving cells are supported. Signaling cost for handover of a moving cell is independent of the number of UEs and nested RNs in the moving cell. MocLis is implemented in Linux; user space daemons and modified kernel. The measurement results show that the attachment time and handover time are short enough for practical use. TCP throughput in MocLis is faster than that in the tunneling based approaches.

• Access to Document (DOI)

Constructing network slices with Locator/ID split and locator division for 5G core network

Matsueda K., Ochiai T., Takano H., Kimura R., Sawai R., Teraoka F.

2018 IEEE International Conference on Communications Workshops, ICC Workshops 2018 - Proceedings （IEEE）     1 - 6 2018年07月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

　概要を見る

The 5G core network will employ network slices, logical networks over physical infrastructure, each of which provides a specific service. There are two typical methods for network slicing: the hop- by-hop method using SDN and the edge-overlay method using Layer 2 over Layer 3 (L2 over L3) tunneling. In the hop-by-hop method, migration from the existing infrastructure is difficult and the SDN controller will become a single point of failure. In the edge-overlay method, tunneling causes header overhead and throughput degradation. This paper proposes a network slicing method without using SDN nor tunneling for the 5G core network using IPv6. In the proposed method, the lower 64-bit part of an IPv6 address (the node identifier) identifies a node and the upper 64-bit part (the locator) specifies the subnet to which the node is attached. This approach is suitable to support mobility management without tunneling such as MocLis. The slice identifier and the subnet number in the slice are embedded within the locator. Thus, the proposed method avoids the problems of system migration, a single point of failure, header overhead, and throughput degradation. In the proof of concept prototype, a Docker container is used as a virtual node in a network slice and a MPLS label-switched path is used as a virtual link between virtual nodes. TCP Throughput evaluation shows that the proposed method is superior to the edge-overlay method.

• Access to Document (DOI)

Content Espresso: A Distributed Large File Sharing System for Digital Content Productions

Daisuke AndoFumio TeraokaKunitake Kaneko

IEICE Transactions on Information and Systems （電子情報通信学会）  E100-D （ 9 ） 2100 - 2117 2017年09月

研究論文（学術雑誌）, 共著, 査読有り

PTP accuracy measurement comparison between boundary clock and VLAN priority

Koki Horita, Shota Shiobara, Takao Okamawari, Fumio Teraoka, Kunitake Kaneko

2017 IEEE International Symposium on Precision Clock Synchronization for Measurement, Control, and Communication (ISPCS) （IEEE）  2017年08月

研究論文（国際会議プロシーディングス）, 共著, 査読有り

• Access to Document (DOI)

Separating Communication Policies and Mechanisms to Make Protocol Layering Clearer

Hiroki Watanabe, Takao Kondo, Kunitake Kaneko, Fumio Teraoka

2017 26th International Conference on Computer Communication and Networks (ICCCN) （IEEE）  2017年07月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

• Access to Document (DOI)

Layer-5 temporally-spliced path for efficient Disruption Tolerant Networking

Daiki Mitake, Kunitake Kaneko, Fumio Teraoka

2017 IEEE International Symposium on Local and Metropolitan Area Networks (LANMAN) （IEEE）  2017年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

• Access to Document (DOI)

Improving file sharing performance for web-based collaboration systems by using content espresso

Daisuke Ando, Jason Leigh, Fumio Teraoka, Kunitake Kaneko

Proceedings of the 12th Asian Internet Engineering Conference （ACM）  2016年11月

研究論文（国際会議プロシーディングス）, 共著, 査読有り

• Access to Document (DOI)

Verification of a Multi-Domain Authentication and Authorization Infrastructure Yamata-no-Orochi

Kei Mikami, Daisuke Ando, Kunitake Kaneko, Fumio Teraoka

Proceedings of the 11th International Conference on Future Internet Technologies （ACM）  2016年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

• Access to Document (DOI)

Fast Handover Mechanism for High Data Rate Ground-to-Train Free-Space Optical Communication Transceiver for Internet Streaming Applications

KOSUKE MORIMASANORI TERADADAISUKE YAMAGUCHIKAZUKI NAKAMURAKUNITAKE KANEKOTERAOKA FUMIOSHINICHIRO HARUYAMA

IEICE Transactions on Communications （電子情報通信学会）  E99-B （ 5 ） 1206 - 1215 2016年05月

研究論文（学術雑誌）, 共著, 査読有り

Intra-AS Performance Analysis of Distributed Mobility Management Schemes

ERUNIKA OSHANIKANEkO KUNITAKETERAOKA FUMIO

IEICE Transactions on Information and Systems （電子情報通信学会）  E98-D （ 8 ） 1477 - 1492 2015年08月

研究論文（学術雑誌）, 共著, 最終著者, 責任著者, 査読有り

Construction of Routing Information Knowledge Base towards Wide Area Network Management

Ryota Ohshima, Shinji Kawaguchi, Osamu Kamatani, Osamu Akashi, Kunitake Kaneko, Fumio Teraoka

The 10th International Conference on Future Internet （ACM）  2015年06月

研究論文（国際会議プロシーディングス）, 共著, 最終著者, 責任著者, 査読有り

• Access to Document (DOI)