{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,2]],"date-time":"2025-08-02T17:05:52Z","timestamp":1754154352277,"version":"3.41.2"},"reference-count":44,"publisher":"IEEE","license":[{"start":{"date-parts":[[2024,12,13]],"date-time":"2024-12-13T00:00:00Z","timestamp":1734048000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,12,13]],"date-time":"2024-12-13T00:00:00Z","timestamp":1734048000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,12,13]]},"DOI":"10.1109\/hpcc64274.2024.00166","type":"proceedings-article","created":{"date-parts":[[2025,7,23]],"date-time":"2025-07-23T18:33:48Z","timestamp":1753295628000},"page":"1234-1241","source":"Crossref","is-referenced-by-count":0,"title":["On Improved Efficiency of Zero-Trust Tunnel for Inter-Microservices Communication"],"prefix":"10.1109","author":[{"given":"Lei","family":"Zhang","sequence":"first","affiliation":[{"name":"Key Laboratory of Cyberspace Security Defense,IIE, CAS,Beijing,China,100093"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingguo","family":"Ge","sequence":"additional","affiliation":[{"name":"Key Laboratory of Cyberspace Security Defense,IIE, CAS,Beijing,China,100093"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yulei","family":"Wu","sequence":"additional","affiliation":[{"name":"University of Bristol,School of Electrical, Electronic and Mechanical Engineering,Bristol,UK,BS8 1UB"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jifei","family":"Wen","sequence":"additional","affiliation":[{"name":"Key Laboratory of Cyberspace Security Defense,IIE, CAS,Beijing,China,100093"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuepeng","family":"E","sequence":"additional","affiliation":[{"name":"Key Laboratory of Cyberspace Security Defense,IIE, CAS,Beijing,China,100093"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2021.3080335"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03596-9_4"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2021.100415"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3314148.3314349"},{"key":"ref5","first-page":"969","article-title":"ServiceRouter: Hyperscale and minimal cost service mesh at meta","volume-title":"17th USENIX Symposium on Operating Systems Design and Implementation (OSDI 23)","author":"Saokar"},{"article-title":"Introducing security configuration for grpc apps with traffic director","year":"2021","author":"Yahya","key":"ref6"},{"volume-title":"Grpc proxyless service mesh","author":"Landow","key":"ref7"},{"volume-title":"Kmesh: High-performance service mesh data plane","year":"2023","key":"ref8"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3651890.3672221"},{"volume-title":"Introducing ambient mesh: A new dataplane mode for istio without sidecars","year":"2022","author":"John","key":"ref10"},{"volume-title":"Cilium service mesh \u2013 everything you need to know","year":"2022","author":"Graf","key":"ref11"},{"key":"ref12","article-title":"ebpf-based networking, security, and observability"},{"article-title":"Maturing istio ambient: Compatibility across various kubernetes providers and cnis","year":"2024","author":"Ben Leggett","key":"ref13"},{"article-title":"Maturing istio ambient: Compatibility across various kubernetes providers and cnis","year":"2024","author":"Ben Leggett","key":"ref14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472888"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14778\/3611479.3611530"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3493352"},{"key":"ref18","first-page":"673","article-title":"Deploying user-space TCP at cloud scale with LUNA","volume-title":"2023 USENIX Annual Technical Conference (USENIX ATC 23)","author":"Zhu"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2023.103805"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD55607.2022.00033"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2022.3206781"},{"volume-title":"Data plane development kit","author":"Author","key":"ref22"},{"volume-title":"Af_xdp","author":"Author","key":"ref23"},{"volume-title":"Merbridge -accelerate your mesh with ebpf","key":"ref24"},{"volume-title":"Using ebpf for traffic redirection in istio ambient mode","author":"Iris Ding","key":"ref25"},{"author":"Sidoretti","key":"ref26","article-title":"Application layer processing offload in the kernel"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.23919\/APNOMS56106.2022.9919966"},{"volume-title":"A high performance layer 4 load balancer","author":"Authors","key":"ref28"},{"article-title":"tcp: Ulp infrastructure","year":"2017","author":"Watson","key":"ref29"},{"article-title":"tls: Documentation","year":"2017","author":"Watson","key":"ref30"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP52444.2021.9651953"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-021-09387-y"},{"key":"ref33","doi-asserted-by":"crossref","DOI":"10.17487\/RFC8446","article-title":"The Transport Layer Security (TLS) Protocol Version 1.3","volume-title":"RFC 8446","author":"Rescorla","year":"2018"},{"key":"ref34","article-title":"Openssl library"},{"key":"ref35","article-title":"Wolfssl - embedded ssl\/tls library"},{"year":"2024","key":"ref36","article-title":"Security identities"},{"year":"2024","key":"ref37","article-title":"Mutual authentication (beta)"},{"author":"Donenfeld","key":"ref38","article-title":"Siphash - a short input prf"},{"key":"ref39","first-page":"217","article-title":"SmartCookie: Blocking Large-Scale SYN floods with a Split-Proxy defense on programmable data planes","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Yoo"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23160"},{"key":"ref41","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-108r1-upd1","article-title":"Recommendation for Key Derivation Using Pseudorandom Functions","volume-title":"Internet Requests for Comments, Tech. Rep.","author":"Chen","year":"2024"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38980-1_8"},{"key":"ref43","article-title":"The \u2018ztunnel\u2018 component of ambient mesh"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1111322.1111336"}],"event":{"name":"2024 IEEE International Conference on High Performance Computing and Communications (HPCC)","start":{"date-parts":[[2024,12,13]]},"location":"Wuhan, China","end":{"date-parts":[[2024,12,15]]}},"container-title":["2024 IEEE International Conference on High Performance Computing and Communications (HPCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11083115\/11083125\/11083276.pdf?arnumber=11083276","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,24]],"date-time":"2025-07-24T04:49:43Z","timestamp":1753332583000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11083276\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,13]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/hpcc64274.2024.00166","relation":{},"subject":[],"published":{"date-parts":[[2024,12,13]]}}}