An analytical model to achieve elasticity for cloud-based firewalls

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

3 Scopus citations

Abstract

Elasticity for cloud-based services and applications has been studied in the literature to some extent. However, the literature is lacking thorough study on elasticity for cloud-based firewalls. This paper proposes an architectural framework for an elastic virtual firewall service to be deployed at cloud datacenters. The paper presents an analytical model based on Markov chain and queueing theory that can be used to achieve elasticity for cloud-based firewalls. In particular, the model captures the behavior of a cloud-based firewall service comprising a load balancer and a variable number of virtual firewalls. From the analytical model, we then derive closed-form formulas to estimate the minimal number of virtual firewalls required to satisfy a given SLA response time. The model takes as input key system input parameters that include workload, processing capacity of load balancer and virtual machines, as well as firewall rulebase interrogation.

Original languageBritish English
Title of host publicationProceedings of the 40th Annual IEEE Conference on Local Computer Networks, LCN 2015
EditorsSalil Kanhere, Jens Tolle, Soumaya Cherkaoui
PublisherIEEE Computer Society
Pages173-176
Number of pages4
ISBN (Electronic)9781467367707
DOIs
StatePublished - 24 Dec 2015
Event2015 IEEE 40th Conference on Local Computer Networks, LCN 2015 - Clearwater Beach, United States
Duration: 26 Oct 201529 Oct 2015

Publication series

NameProceedings - Conference on Local Computer Networks, LCN
Volume26-29-October-2015

Conference

Conference2015 IEEE 40th Conference on Local Computer Networks, LCN 2015
Country/TerritoryUnited States
CityClearwater Beach
Period26/10/1529/10/15

Keywords

  • Cloud Computing
  • Cloud Firewalls
  • Elasticity
  • Firewalls
  • Performance Modeling
  • Scalability

Fingerprint

Dive into the research topics of 'An analytical model to achieve elasticity for cloud-based firewalls'. Together they form a unique fingerprint.

Cite this