Middlebox

A middlebox is a device in the Internet that provides transport policy enforcement. Examples of these devices include firewalls, network address translators (both within and between address families), signature management for intrusion detection systems, and multimedia buffer management.

Firewalls and NATs present problems for many Internet protocols, especially when UDP packets need to travel across the firewalls and NATs. The Internet Engineering Task Force is working on standardizing a protocol to allow these problems to be addressed.

Three approaches are discussed in [1]:

• a "Call Agent" using a MIDCOM MIB and/or Simple Middlebox Control (SIMCO) protocol
• Smart Middlebox: Self-configuring firewall modules
• Path-Coupled Signaling, to be developed and standardized at the IETF. This would involve the NSIS Transport Layer Protocol (NTLP) from the Next Steps in Signalling (NSIS) working group.

See also

• Firewall (networking)
• Network address translation
• End-to-end connectivity
• Interactive Connectivity Establishment (ICE): A Methodology for Network Address Translator (NAT) Traversal for Offer/Answer Protocols, a protocol in the IETF mmusic working group
• Session Traversal Utilities for NAT (STUN)
• NSIS Signaling Layer Protocol (NSLP)
• Traversal Using Relay NAT (TURN)

External links

• RFC 3304 - Middlebox Communications (MIDCOM) Protocol Requirements
• RFC 3234 - Middleboxes: Taxonomy and Issues
• RFC 3989 - Middlebox Communications (MIDCOM) Protocol Semantics
• RFC 4540 - NEC's Simple Middlebox Configuration (SIMCO) Protocol Version 3.0
• Solving the Middlebox Problem
• Next Steps in Signaling (nsis) - IETF working group
• Middlebox Communication (midcom) Working Group of the Internet Engineering Task Force
• Multiparty Multimedia Session Control (mmusic) Working Group of the Internet Engineering Task Force
• Nat Traversal techniques for IP Communications - White Paper

This computer networking article is a stub. You can help Wikipedia by expanding it.v · Categories: Computer network security Computer network stubs Wikimedia Foundation. 2010. Игры ⚽ Нужно решить контрольную? Markaz Austen Tayshus Look at other dictionaries: middlebox — noun A device in the Internet that provides transport policy enforcement, such as a firewall …   Wiktionary Firewall — A firewall is an integrated collection of security measures designed to prevent unauthorized electronic access to a networked computer system. It is also a device or set of devices configured to permit, deny, encrypt, decrypt, or proxy all… …   Wikipedia NAT traversal — is a general term for techniques that establish and maintain Internet protocol connections traversing network address translation (NAT) gateways. Network address translation breaks end to end connectivity. Intercepting and modifying traffic can… …   Wikipedia Interactive Connectivity Establishment — The Interactive Connectivity Establishment (ICE) draft, developed by the IETF s MMUSIC working group, provides a mechanism for NAT traversal, using various techniques. In particular, it is used to allow SIP based VoIP clients to successfully… …   Wikipedia Realm-Specific IP — RSIP also stands for Radar System Improvement Program , see E 3 Sentry. Realm Specific IP is an Experimental IETF framework and protocol intended as an alternative to NAT in which the end to end integrity of packets is maintained.RSIP lets an… …   Wikipedia Network address translation — NAT redirects here. For other uses, see Nat (disambiguation). In computer networking, network address translation (NAT) is the process of modifying IP address information in IP packet headers while in transit across a traffic routing device. The… …   Wikipedia Datagram Congestion Control Protocol — Internet protocol suite Application layer BGP DHCP DNS FTP HTTP …   Wikipedia TCP acceleration — is the name of a series of techniques for achieving better throughput on an Internet connection than standard TCP achieves, without modifying the end applications. It is an alternative or a supplement to TCP tuning.Commonly used approaches… …   Wikipedia Network Address Translation — (NAT) ist in Rechnernetzen der Sammelbegriff für Verfahren, die automatisiert Adressinformationen in Datenpaketen durch andere ersetzen, um verschiedene Netze zu verbinden. Daher kommen sie typischerweise auf Routern zum Einsatz.… …   Deutsch Wikipedia Cortafuegos (informática) — «Firewall» redirige aquí. Para la película homónima, véase Firewall (película). Esquema de una soy red de computadoras que utiliza un Cortafuegos. Un cortafuegos (firewall en inglés) es una parte de un sistema o una red que está diseñada para… …   Wikipedia Español 18+ © Academic, 2000-2024 Contact us: Technical Support, Advertising Dictionaries export, created on PHP, Joomla, Drupal, WordPress, MODx. Mark and share Search through all dictionaries Translate… Search Internet Share the article and excerpts Direct link … Do a right-click on the link above and select “Copy Link”