BeauCoup: Answering Many Network Traffic Queries, One Memory Update at a Time

Xiaoqi Chen, Shir Landau-Feibish, Mark Braverman, Jennifer Rexford

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Scopus citations

Abstract

Network administrators constantly monitor network traffic for congestion and attacks. They need to perform a large number of measurements on the traffic simultaneously, to detect different types of anomalies such as heavy hitters or super-spreaders. Existing techniques often focus on a single statistic (e.g., traffic volume) or traffic attribute (e.g., destination IP). However, performing numerous heterogeneous measurements within the constrained memory architecture of modern network devices poses significant challenges, due to the limited number of memory accesses allowed per packet. We propose BeauCoup, a system based on the coupon collector problem, that supports multiple distinct counting queries simultaneously while making only a small constant number of memory accesses per packet. We implement BeauCoup on PISA commodity programmable switches, satisfying the strict memory size and access constraints while using a moderate portion of other data-plane hardware resources. Evaluations show BeauCoup achieves the same accuracy as other sketch-based or sampling-based solutions using 4x fewer memory access.

Original languageEnglish (US)
Title of host publicationSIGCOMM 2020 - Proceedings of the 2020 Annual Conference of the ACM Special Interest Group on Data Communication on the Applications, Technologies, Architectures, and Protocols for Computer Communication
PublisherAssociation for Computing Machinery
Pages226-239
Number of pages14
ISBN (Electronic)9781450379557
DOIs
StatePublished - Jul 30 2020
Event2020 Annual Conference of the ACM Special Interest Group on Data Communication on the Applications, Technologies, Architectures, and Protocols for Computer Communication, SIGCOMM 2020 - Virtual, Online, United States
Duration: Aug 10 2020Aug 14 2020

Publication series

NameSIGCOMM 2020 - Proceedings of the 2020 Annual Conference of the ACM Special Interest Group on Data Communication on the Applications, Technologies, Architectures, and Protocols for Computer Communication

Conference

Conference2020 Annual Conference of the ACM Special Interest Group on Data Communication on the Applications, Technologies, Architectures, and Protocols for Computer Communication, SIGCOMM 2020
CountryUnited States
CityVirtual, Online
Period8/10/208/14/20

All Science Journal Classification (ASJC) codes

  • Hardware and Architecture
  • Computer Networks and Communications
  • Electrical and Electronic Engineering

Keywords

  • Data Plane
  • Distinct Counting
  • Network Measurement
  • Programmable Switch
  • Sketching
  • Streaming Algorithm

Fingerprint Dive into the research topics of 'BeauCoup: Answering Many Network Traffic Queries, One Memory Update at a Time'. Together they form a unique fingerprint.

Cite this