Professional Documents
Culture Documents
A $35 Firewall For The Developing World
A $35 Firewall For The Developing World
A $35 Firewall For The Developing World
Zubair Nabi
IBM Research, Dublin
zubairn@ie.ibm.com
arXiv:1405.2517v1 [cs.CY] 11 May 2014
2
Component Raspberry Pi Cubieboard Chain Function
(Model B) PREROUTING Pre-routing decision packets
Processor (MHz) 700 1000 POSTROUTING Post-routing decision packets
GPU (GLFOPS) 24 7.2 INPUT Incoming packets for local delivery
Memory (MB) 512 1024 OUTPUT Outgoing packets
Ethernet 10/100 10/100 FORWARD Incoming packets for non-local delivery
Price ($) 35 59
Table 3: Default iptables chains
Table 2: Feature-based Comparison of Platforms
3
for Cubieboard. As we increase the number of rules, the
performance of Cubieboard degrades more gracefully in
comparison to Raspberry Pi. This is due to the higher
processing power of Cubieboard (1GHz) versus Rasp-
berry Pi (700MHz). While relative numbers are immate-
rial for our cause, the analysis shows that both platforms
are capable of sufficient throughput (20Mbps Raspberry
Pi and 30Mbps Cubieboard) for an average number of
firewall rules (800) in the wild [9].
4 Discussion
The use of low-cost platforms simplifies update rollout
and also enables additional functions such as content
caching and remote monitoring while ensuring a low en-
ergy footprint. We discuss these and other topics in this
Figure 1: Raspberry Pi vs. Cubieboard section.
4
rary offline access. Other potential applications include avoid equipment failure due to high power fluctuation in
WAN acceleration and pre-fetching [24]. these regions [8].
5
istics of network traffic and user behaviour in the devel- [21] M ATTHEE , K. W., ET AL . Bringing Internet connectivity to rural
oping world. Zambia using a collaborative approach. In Proceedings of ICTD
’07 (2007).
In addition to field-testing and real-world deployment,
we are also interested in writing custom security appli- [22] M ONTEIL , T. Spreading Huge Free Software without Internet
Connection via Self-Replicating USB Keys. In Proceedings of
cations such as firewalls and wrapping each in a Mirage ExtremeCom ’13 (2013).
unikernel [19] and running it directly on baremetal Rasp- [23] NABI , Z. Raabta: Low-cost Video Conferencing for the Devel-
berry Pi-like platforms. This has two main advantages: oping World. In Proceedings of LCDNet ’13 (2013).
1) It simplifies application shipment by turning the entire [24] PAI , V. S., ET AL . First-class access for developing-world envi-
stack into a single image and 2) It enhances the security ronments. In Proceedings of CFI ’10 (2010).
of the application itself by making its code type safe and [25] PAIK , M. Gotta catch ’em all!: innoculous: enabling epidemiol-
sealing it against runtime modification. ogy of computer viruses in the developing world. In Proceedings
of NSDR ’11 (2011).