No Arabic abstract
NAT gateway is an important network system in todays IPv4 network when translating a private IPv4 address to a public address. However, traditional NAT system based on Linux Netfilter cannot achieve high network throughput to meet modern requirements such as data centers. To address this challenge, we improve the network performance of NAT system by three ways. First, we leverage DPDK to enable polling and zero-copy delivery, so as to reduce the cost of interrupt and packet copies. Second, we enable multiple CPU cores to process in parallel and use lock-free hash table to minimize the contention between CPU cores. Third, we use hash search instead of sequential search when looking up the NAT rule table. Evaluation shows that our Quick NAT system significantly improves the performance of NAT on commodity platforms.
Quick network address translation (NAT) is proposed to improve the network performance of the NAT system on the commodity server by three ways. First, the quick NAT search algorithm is designed to use the Hash search instead of the sequential search to reduce latency when looking up the NAT rule table. Second, to leverage the power of the multi-core central processing unit (CPU) and the multi-queue network interface card, Quick NAT enables multiple CPU cores to process in parallel. The localized connection tracking table and the compare-and-swap based lock-free NAT Hash tables are designed to eliminate the lock overhead. Third, Quick NAT uses the polling and zero-copy delivery to reduce the cost of interrupt and packet copies. The evaluation results show that Quick NAT obtains high scalability and line-rate throughput on the commodity server.
Structured P2P overlays provide a framework for building distributed applications that are self-configuring, scalable, and resilient to node failures. Such systems have been successfully adopted in large-scale Internet services such as content delivery networks and file sharing; however, widespread adoption in small/medium scales has been limited due in part to security concerns and difficulty bootstrapping in NAT-constrained environments. Nonetheless, P2P systems can be designed to provide guaranteed lookup times, NAT traversal, point-to-point overlay security, and distributed data stores. In this paper we propose a novel way of creating overlays that are both secure and private and a method to bootstrap them using a public overlay. Private overlay nodes use the public overlays distributed data store to discover each other, and the public overlays connections to assist with NAT hole punching and as relays providing STUN and TURN NAT traversal techniques. The security framework utilizes groups, which are created and managed by users through a web based user interface. Each group acts as a Public Key Infrastructure (PKI) relying on the use of a centrally-managed web site providing an automated Certificate Authority (CA). We present a reference implementation which has been used in a P2P VPN (Virtual Private Network). To evaluate our contributions, we apply our techniques to an overlay network modeler, event-driven simulations using simulated time delays, and deployment in the PlanetLab wide-area testbed.
The cross-sections of prompt gamma-ray production from $^{nat}$Sn and $^{nat}$C elements induced by 14.1-MeV neutrons were measured. The time-of-flight technique was used for n-gamma discrimination. The experimental results were compared with theoretical calculations performed by Empire 3.2 and Talys 1.6 codes using different models for photon strength function and nuclear level density.
We identify the representations $mathbb{K}[X^k, X^{k-1}Y, dots, Y^k]$ among abstract $mathbb{Z}[mathrm{SL}_2(mathbb{K})]$-modules. One result is on $mathbb{Q}[mathrm{SL}_2(mathbb{Z})]$-modules of short nilpotence length and generalises a classical quadratic theorem by Smith and Timmesfeld. Another one is on extending the linear structure on the module from the prime field to $mathbb{K}$. All proofs are by computation in the group ring using the Steinberg relations.
Due to potential level of energy intensity 178m2Hf is an extremely interesting isomer. One possible way to produce this isomer is irradiation of nat-Ta or nat-W samples with high energy protons. Irradiation of nat-Ta and nat-W samples performed for other purposes provides an opportunity to study the corresponding reactions. This paper pre-sents the 178m2Hf independent production cross sections for both targets measured by the gamma-ray spectrometry method. The reaction excitation functions have been obtained for the proton energies from 40 up to 2600 MeV. The experimental results were compared with calculations by vario