Live briefing
Everything about Middlebox
Intermediary box on the data path between a source host and destination host
A middlebox is a computer networking device that transforms, inspects, filters, and manipulates traffic for purposes other than packet forwarding. Examples of middleboxes include firewalls, network address translators (NATs), load balancers, and deep packet inspection (DPI) devices. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: MiddleboxA 5-minute orientation
- Skim a recent paper: MiddleNet: A Unified, High-Performance NFV and Middlebox Framework With eBPF and DPDKInfluential work since 2022
- Pick up a classic book: Redes de computadores e a internetThe most-reprinted book on the subject
- Read the landmark paper: SIMPLE-fying middlebox policy enforcement using SDNCited 202 times
- Go sideways: NAT traversalA closely related topic
- Go sideways: Network address translationA closely related topic
📖 Definitions
Noun A device in the Internet that provides transport policy enforcement, such as a firewall.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
SIMPLE-fying middlebox policy enforcement using SDN
Improve Service Chaining Performance with Optimized Middlebox Placement
SPABox: Safeguarding Privacy During Deep Packet Inspection at a MiddleBox
Privacy-Preserving Efficient Verifiable Deep Packet Inspection for Cloud-Assisted Middlebox
Designing Optimal Middlebox Recovery Schemes With Performance Guarantees
Toward Secure Outsourced Middlebox Services: Practices, Challenges, and Beyond
Quokka: Latency-Aware Middlebox Scheduling with dynamic resource allocation
ME-TLS: Middlebox-Enhanced TLS for Internet-of-Things Devices
🆕 Influential since 2022
MiddleNet: A Unified, High-Performance NFV and Middlebox Framework With eBPF and DPDK
Detection of Middlebox-Based Attacks in Healthcare Internet of Things Using Multiple Machine Learning Models
Enabling Secure and Versatile Packet Inspection With Probable Cause Privacy for Outsourced Middlebox
GuardBox: A High-Performance Middlebox Providing Confidentiality and Integrity for Packets
Shared Backup Allocation Model of Middlebox Based on Workload-Dependent Failure Rate
📚 Books worth reading
Redes de computadores e a internetJames F. Kurose, Keith W. Ross · 2003- 📕Proceedings of the 2013 Workshop on Hot Topics in Middleboxes and Network Function VirtualizationFelipe Huici · 2013
- 📕Proceedings of the 2016 Workshop on Hot Topics in Middleboxes and Network Function VirtualizationDongsu Han · 2016
- 📕Proceedings of the 2015 ACM SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function VirtualizationTheophilus Benson · 2015
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- NAT traversal Network address translator traversal is a computer networking technique of establishing and maintaining Internet Protocol connections across gateways that…
- Network address translation Network address translation (NAT) is a method of mapping an IP address space into another by modifying network address information in the IP header of…
- Port Control Protocol Port Control Protocol (PCP) is a computer networking protocol that allows hosts on IPv4 or IPv6 networks to control how the incoming IPv4 or IPv6 packets…
- Interactive Connectivity Establishment Interactive Connectivity Establishment (ICE) is a technique used in computer networking to find ways for two computers to talk to each other as directly…
- UDP hole punching UDP hole punching is a commonly used technique employed in network address translation (NAT) applications for maintaining User Datagram Protocol (UDP)…
- List of IPv6 transition mechanisms To increase the deployment of IPv6 on the Internet, various transition mechanisms have been proposed to ease this process. Since IPv6 is not directly interopera…
- Black hole (networking) In networking, a black hole or sinkhole is a place in the network where incoming or outgoing traffic is discarded or "dropped" without informing the source…
- Application-level gateway An application-level gateway (ALG, also known as application-layer gateway, application gateway, application proxy, or application-level proxy) is a security…