~/talk

Invisinets: Removing Networking from Cloud Networks

Talkat NSDI 2023 · 2023-04-17..04-19· [cloud-infrastructure, security]
links:none on file
links:none on file
links:none on file
links:none on file
links:none on file
links:none on file
links:none on file
links:none on file
slides:none on file

Invisinets replaces VPCs and gateways with per-endpoint parameters: every endpoint gets a public endpoint IP and optional service IPs, connectivity uses publicly routable but default off semantics implemented with per-endpoint permit lists, host-enforced filters, and optional SLB bindings only when allowed. Prototype is a shim over cloud Python SDKs plus a small infrastructure prototype; evaluation uses Terraform scans and case studies and reports an 80–90% reduction in tenant-visible config and lines of code.

AI-written summary · about

  1. 0:00The complexity of cloud networking
  2. 3:44Rethinking networking APIs
  3. 5:17Designing the Invisanets architecture
  4. 8:35Defining the networking API
  5. 10:51Evaluation and conclusion
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.