Mark Allman / ICSI @mallman_icsi

Mark Allman. On the Performance of Middleboxes. ACM SIGCOMM/Usenix Internet Measurement Conference, Miami, FL, USA, October 2003.
PS | PDF | Slides


This paper presents a preliminary performance analysis of a complex middlebox infrastructure in a real-world production environment that serves several thousand people. While prevalent, middleboxes (firewalls, NATs, etc.) have yet to be systematically measured. This paper makes two contributions: (i) we outline several methodologies and metrics by which to measure middleboxes and (ii) we offer preliminary application-layer measurements of one particular production middlebox system. We show that the middlebox infrastructure in question offers a mixed bag of performance implications (both positive and negative). In addition, we quantify several failure modes introduced by the middlebox infrastructure.


    author    =        "Mark Allman",
    title     =        "{On the Performance of Middleboxes}",
    booktitle =        "ACM SIGCOMM/USENIX Internet Measurement Conference",
    year      =        2003,
    pages     =        "307--312",
    month     =        oct,
"We are what we repeatedly do. Excellence, then, is not an act, but a habit." --Aristotle