Characteristics of IPS Control Plane Data And Security Consideration

Internet protocol (IP) networks have become powerful business tools. We have entered an age in which enterprises consider their networks to be as important as conventional utilities such as electricity and the telephone. The unparalleled and rapid ascent of the IP network to the status of a crucial business resource has resulted in an ad hoc approach to the development of networking systems. Network management is piecemeal at best, and interoperability often remains a significant challenge. As networks become more complex, we are beginning to see that simplifying network management is the gating factor to the growth of networks. This paper explores the historical approach to managing a network infrastructure, outlines current industry direction, and contrasts conventional approaches with a new, more cohesive approach that turns networks into unified, cooperative systems delivering services in a controlled and predictable manner.

In an attempt to integrate telephony and data networks into a single analogous framework, techniques have been developed to enable telephony signals to be packetized and transmitted over Internet protocol (IP) networks. Although the largest potential contributor to telephony traffic over IP is voice data, facsimile is a widely used service and must therefore be considered as an important feature of the IP telephony framework. It is argued that facsimile and voice traffic not only have different properties, but also different requirements for service implementation. Consequently, it is proposed that in order to provide an IP telephony system (including both voice and facsimile) with a given quality of service, the mechanisms behind transfer of facsimile information shall differ from those for voice. Many of the requirements of an IP telephony system can be found in ITU-T Recommendation H.323. Covering a broad spectrum of possible media applications, the recommendation's generality is complemented by its recognition that different media streams require different transport mechanisms. For instance, H.323 defines separate transport protocols for data and voice media streams: voice streams are to be transported using real-time protocol (RTP) while data streams are to be transported using transmission control protocol (TCP). This paper presents a descriptive analysis of the differing requirements for reliable voice and facsimile media transfer over IP networks. These requirements lead to a set of protocol and gateway characteristics that enable high-quality facsimile transfer over packet-oriented networks such as the Internet.

With the help of an independent control plane, ASON introduces lots of new intelligent functions into the traditional transport network. We use some special protocols such as signaling and routing protocols in control plane instead of network management protocol that only has few primitives to control the network elements in transport plane. During the service provision of ASON, the coordination of management plane (MP) and control plane (CP) is very important. This paper analyses the coordination of MP and CP of ASON. At first, it introduces the meaning of coordination between MP and CP and its classification. Secondly, it puts emphasis upon analyzing traffic engineering (TE) realized through the coordination of MP and CP. In this part, we modify the basic ASON routing architecture and introduce the coordination functions of MP. Thirdly, this paper analyses TE control processes of the coordination between those two planes during the services provision which has not been considered in ASON recommendations but is very important.

The ever-increasing demand for fast and reliable data storage has caused dramatic changes in the storage model. Direct attached storage (DAS) architecture, also known as server-centric architecture, is being replaced by the storage area network (SAN), leading to storage-centric architecture. In SAN storage devices exist completely independent of any computer (servers in particular). Multiple servers can access the same storage device without involvement of other servers. Recently, companies have been able to implement storage integration/sharing, remote backup/restoral, near-real-time disk mirroring/replication, and the like, using a new SAN architecture known as distributed storage area network (DSAN). The DSAN is multiple SANs interconnected using existing Internet Protocol (IP) networks to distribute storage over wide geographical areas. Even though DSANs provide additional capabilities to a SAN, the end-to-end latency (ETEL) due to large physical cable lengths (IP networks) imposes limitations on enterprise class application performance. DSANs can also be implemented using IP storage solutions that provide direct links between servers and storages, eliminating translation of fibre channel protocol frames to IP packets. This paper examines the effect of ETEL in DSAN on the performance of an enterprise class application with real-time application replication like Microsoft Exchange Server 2003. This investigation in done in two parts: disk subsystem (DS) characterization using Jetstress benchmarking software and the performance of Microsoft Exchange using LoadSim 2003 benchmarking software. Preliminary results were presented in [1].

As internet protocol (IP) networks in the enterprise space continue to mature, with regards to stability and availability, the desire for these networks to deliver multimedia content will grow. Although IP networks have long had enough bandwidth to support multimedia streams, the deployment of this content seems to have been somewhat limited in the enterprise. The control mechanisms for multicast traffic, both at the IP layer and the data link layer, are still the areas that have not been adopted as widely as their more common unicast counterparts. The authors examine the internet group messaging protocol (IGMP) snooping process that currently runs on enterprise switches and propose an offload hardware engine to accelerate it. Currently, many enterprise switches handle this task with a general-purpose processor within the switch. Although this process adds very little to the overall load of systems currently, as multicast transmissions become more commonplace, the need for this process to be offloaded onto specialised hardware will be a necessity, in order to maintain the stability of the switch and the surrounding network. The proposed hardware model simulations reveal significant increase in the number of packets per second that can be handled compared to software implementations.

Future Communication Infrastructure (FCI) air ground data link services can use various technologies (radio links) to achieve the end to end data exchange objectives. Such functionality has been developed and standardized by ICAO under the Aeronautical Telecommunication Network (ATN) activities and is also available in the Internet Protocol Suite (IPS) world, but is currently not yet operationally deployed for ATM purposes. Work comprised in SESAR P15.2.4 project provides an initial perspective of the “Multi Link Operational Concept”, i.e. the notion of using multiple data links to support the communication exchanges in the context of the future SESAR concept of operations. In the context of this task the perimeter of the FCI is limited to just the three future technologies (LDACS, AeroMACS, and SATCOM) and the ATN/IPS-based network layer. This contribution introduces LISP (Locator/Identifier Separation Protocol) as novel approach in order to enhance the ATN/IPS-based network layer. LISP is an open IETF RFC [5] describing a solution for the scalability problem of the Internet routing caused mainly by provider independent addresses and multi-homing of customer networks to different Internet service providers. The concept is based on the separation of the device identity from the physical device location in an IP network. The current approach in the IP world is overloading of IP semantics. Who and where are both represented by the same IP address. Change of location leads to a different IP address and hence changes identity causing existing sessions to be interrupted. LISP is a network-based solution supporting seamless communication while allowing roaming between different locations. LISP is an incrementally deployable architectural upgrade to anexisting infrastructure. An interesting application is the seamless migration from IPv4 to IPv6 due to its address family agnostic behavior. Early adopters will be able to use their existing infrastructure and applications and immediately benefit from LISP. This paper focuses on usage of LISP technology in aeronautical networks in order to achieve mobility, high availability and security for safety critical communication between aircraft and ground infrastructures. Fast convergence, make-before break in multilink environments, easy deployment and operation, manageable security, avoidance of scalability limits and independence of service provider infrastructure are the main topics of interest. Typical use cases demonstrate the network power of LISP support both, future aeronautical data, and voice applications. This makes LISP an interesting candidate technology to handle the mobility of the aircraft while maintaining communications when moving between different ground stations. We show how the LISP mobility system can be enhanced to include application type or QoS specific information into the data link selection. This allows path preference selection for individual data transactions transparent to the application and implementation of outgoing traffic engineering whilst utilizing the basic LISP mechanisms. Finally we discuss make-before break handover in order to improve required communication performance (RCP) figures such as availability of use or continuity.

While Wireless Local Area Network (WLAN) gains growing popularity during the last two decades, it faces several new challenges in meeting the requirements of emerging applications due to spectrum shortage, complicated network management and inefficient radio resource allocation (RRA) in densely deployed scenarios. The operating band has evolved from microwave band (a.k.a. sub-6 GHz) to millimeter-wave band (mmWave for short) or even multi-band to provide higher data rates. However, the existing distributed WLAN architecture works in different bands separately and doesn't support the coordination among access points (APs), making it difficult for efficient network management and improved quality of service (QoS) provisioning. In overcoming these challenges, a centralized control architecture for WLAN with decoupled control and data planes can be used to orchestrate the RRA within the whole network while achieving improved communication performance. Therefore, a new control/data plane decoupled WLAN architecture is designed in this paper to realize efficient network management and optimized RRA by separating the control plane and data plane into sub-6 GHz and mmWave respectively. Then, we propose the sub-6 GHz assisted mmWave beamforming protocol, which can significantly reduce the overhead of beamforming training (BFT). Last, we investigate joint RRA for the control/data plane decoupled WLAN since the control plane affects the RRA in the data plane. Performance analysis and simulation show that the joint RRA mechanism in the control/data plane decoupled network can significantly improve the number of successfully scheduled users and the sum-rate compared with the traditional RRA.

The paper gives an overview of the automatically switched optical network (ASON), concentrating on its control plane. Drivers for automatically switched optical networks are briefly presented. The ASON architecture, based on transport, control, and management planes, is discussed. Types of connections supported by ASON are described, including permanent, switched, and soft permanent connections. Different kinds of internal and external interfaces are presented. Various issues related to the ASON control plane are enumerated.

In recent years, the Internet of Things (IoT) has attracted attention according to the development of sensing technology and wireless communication technology. IoT devices are interconnected to realize a specific service with sensors and actuation functions over several communication methods. Internet Protocol (IP) exists as a basic communication technology for realizing an IoT system. Since IPv4 is a mainstream protocol on the Internet, the lack of compatibility between IPv4 and IPv6 should be great issues to realize IoT services. Additionally, recent networks employ the Network Address Port Translation (NAPT) technology to protect a network and to reduce the number of required IPv4 global addresses. The introduction of NAPT causes an accessibility issue due to the blocking of incoming packets. As a new issue, the mobility of IoT devices also becomes a concern about seamless communication because a change of IP address causes a disconnection of transport layer sessions. As a technique for solving these problems, the authors have developed CYber PHysical Overlay Network over Internet Communication (CYPHONIC) that supports accessibility and seamless mobility over the Internet. Since high-performance IoT devices typically implement the full IP stack, both IPv4 and IPv6 can be supported. Therefore, CYPHONIC can provide inter-connectivity among IoT devices. On the contrary, resource-constrained IoT devices with a low power operation support only the limited IP stack such as IPv6 over Low power Wireless Personal Area (6LowPAN). This paper proposes a new interconnectivity mechanism between IP networks and 6LowPAN by extending CYPHONIC. Therefore, the proposed mechanism can provide interconnectivity among 6LowPAN devices and IP devices to collaborate on a service. The proposed system introduces a gateway device for connecting between IP networks and 6LowPAN. Additionally, it also extends the signaling process of CYPHONIC to support 6LowPAN based IoT devices. Since the object of this paper is confirming the feasibility of the proposed mechanism, we have designed the implementation with Thread protocol that support 6LowPAN.

Optical Access Networks based on Optical Ethernet (OE) architectures represent a simple and low cost solution for eliminating the bandwidth bottleneck between high speed Local Area Networks and optical Metropolitan Area Network core. Transparent optical Network Elements (NE), e.g. optical switches, can be successfully introduced in current OE networks to provide an adequate level of resilience and reduce the overall network cost. However network control and management plane must be extended to administrate the optical network elements. This paper shows a hardware and software implementation of a 1:1 optical span protection scheme for OE network based on optical switches triggered by failure detection. Detection is obtained by three different methods based either on hardware or software mechanisms. Link state is updated both at the switch controller and control manager through, respectively, Link Management Protocol (LMP) and Simple Network Management Protocol (SNMP) messaging implemented by a novel Extensible Markup Language (XML) Multi Protocol Framework (XMPF). Experimental results show that a recovery time in the millisecond range can be achieved and network state is correctly synchronized in all the network elements.

The DFG project “SDN-enabled Application-aware Network Control Architectures and their Performance Assessment” (DFG SDN-App) focused in phase 1 (Jan 2017 – Dec 2019) on software defined networking (SDN). Being a fundamental paradigm shift, SDN enables a remote control of networking devices made by different vendors from a logically centralized controller. In principle, this enables a more dynamic and flexible management of network resources compared to the traditional legacy networks. Phase 1 focused on multimedia applications and their users’ Quality of Experience (QoE). This documents reports the achievements of the first phase (Jan 2017 – Dec 2019), which is jointly carried out by the Technical University of Munich, Technical University of Berlin, and University of Wurzburg. The project started at the institutions in Munich and Wurzburg in January 2017 and lasted until December 2019. In Phase 1, the project targeted the development of fundamental control mechanisms for network-aware application control and application-aware network control in Software Defined Networks (SDN) so to enhance the user perceived quality (QoE). The idea is to leverage the QoE from multiple applications as control input parameter for application-and network control mechanisms. These mechanisms are implemented by an Application Control Plane (ACP) and a Network Control Plane (NCP). In order to obtain a global view of the current system state, applications and network parameters are monitored and communicated to the respective control plane interface. Network and application information and their demands are exchanged between the control planes so to derive appropriate control actions. To this end, a methodology is developed to assess the application performance and in particular the QoE. This requires an appropriate QoE modeling of the applications considered in the project as well as metrics like QoE fairness to be utilized within QoE management. In summary, the application-network interaction can improve the QoE for multi-application scenarios. This is ensured by utilizing information from the application layer, which are mapped by appropriate QoS-QoE models to QoE within a network control plane. On the other hand, network information is monitored and communicated to the application control plane. Network and application information and their demands are exchanged between the control planes so to derive appropriate control actions.

Increasing portability of computers will require users in the future to access the network regardless of location. Host migration transparency will be an essential feature of wide area network environments. We proposed the concept of virtual network and the propagating cache method to achieve host migration transparency [12]. We also established the feasibility of Virtual Internet Protocol (VIP), derived from Internet Protocol (IP), as an example of a virtual network protocol. In this paper, we define VIP in detail and describe how VIP achieves host migration transparency in IP networks. We also show two VIP implementation approaches: 1) VIP as a sublayer; and 2) VIP as an IP option. By modifying an operating systems kernel in each case, we implement VIP using both approaches. We then compare both implementations in terms of overhead, backward compatibility, and other metrics. The measured performance indicates that VIP can provide host migration transparency in IP networks with negligible overhead.

Policy definition is an important component of the consistent authorisation service infrastructure that could be effectively integrated with the general resource provisioning workflow and network control and management plane. The paper describes the proposed XACML-NRP policy and attributes profile for network resource provisioning. In addition to specifying a set of subject, resource, action attributes that are required for consistent XACML policy definition, the proposed profile allows also handling network path information what is especially important for QoS enforcement. To overcome stateless character of XACML policies, the proposed authorisation infrastructure provides a number of security mechanisms to support such important for NRP functionality as authorisation session and interdomain security context management, simple delegation, conditional authorisation decisions, and policy obligations handling.

IP over WDM has emerged as a winning network architecture to facilitate today's IP centric Internet. Although the total amount of bandwidth demands keeps increasing, there still exists a huge gap between the increasing full-wavelength capacity and the existing low-rate IP traffic. Efficiently grooming low-rate traffic stream to high-capacity lightpaths helps to alleviate the bandwidth mismatch, effectively improve the network resource utilization, and reduce the overall network cost. In this paper, we study traffic grooming problem in IP over WDM framework. The problem of minimizing the total number of transmitters and receivers in the networks is formulated as an integer linear programming (ILP) optimization problem. The ILP formulation produces optimal solutions for static traffic demands. However, applying the ILP solution to large and realistic networks is not practical due to its prohibitively large computation time. We therefore develop a heuristic algorithm, namely traffic aggregation algorithm. A significant improvement on wavelength utilization is observed in our experiments when we use our traffic aggregation algorithm. I. INTRODUCTION The popularity of the Internet and Internet protocol (IP)- based Intranet is promising enormous growth in data traffic originating from hosts that are IP endpoints. This growth is being fueled by various applications such as those driven by World-Wide-Web (WWW) and by the indirect impact of increased computing power and storage capacity at the end systems. The advent of new services with increasing intelligence and the corresponding bandwidth demands are further adding to the traffic growth. New access technologies such as Asymmetric Digital Subscriber Line (ADSL), High- bit-rate Digital Subscriber Line (HDSL), and fiber to the home (FTTH) would remove the access bottlenecks and enforce an even faster growth of demand on the backbone network. These changing trends have led to a fundamental shift in traffic patterns and the traffic is mostly due to data communications. In the past, the amount of data traffic on carrier networks was smaller than the voice-centric traffic. Therefore, the carrier networks were designed to primarily support voice traffic, and the data traffic was transmitted using the voice channels. Now, the core networks are being designed primarily for data traffic with voice support at the edges. The voice can be carried in the core networks using voice-over-IP or similar paradigms. To meet these growing demands, WDM will continue to emerge as a dominating trend for use in backbone networks. The research reported in this paper is funded in part by the National Science Foundation under grant ANI-0087746, grant ANI-0434872 and grant ANI- 0323374. Architectures will include to satisfy the need for better quality of service (QoS), protection, and availability guarantees in IP networks. WDM significantly increases the fiber capacity utilization by dividing the available bandwidth into non-overlapping wavelength channels, supporting connections between the two end nodes by establishing an all-optical channel, namely lightpath, which allows use of different formats, bit-rates, and protocol transparency. At the same time, most network designers believe that IP is going to be the common traffic convergence layer in communication networks. Consequently, IP over WDM has been envisioned as the winning combination of the network architecture.

Massive increases in IP (Internet Protocol) traffic have led to rapid deployment of IP-based networks in metropolitan (metro) areas. In order to facilitate this deployment, computer-based design tools are needed. One of the most difficult decisions that engineers face in designing an IP network is choosing the IP link topology (i.e., the set of router-to-router connections). This is especially complicated when it is also necessary to route these IP links over an underlying physical network of optical fibers. In this paper, the authors describe a new heuristic for simultaneously designing a backbone IP link topology for a metro area network, and routing these IP links over a given physical network. The IP network must be designed for survivability in the event of a network failure (i.e., the loss of a physical link, router or IP link). Initially, they employ a Construction Heuristic that explicitly considers the number of router-to-router connections that would be carried over each physical link. In this way it seeks to minimize the impact of any single physical link failure. An optional Local Search routine then attempts to improve on the solution by a sequence of topology changes. IP link routings are adjusted at each topology change. This heuristic is readily able to be incorporated into an interactive design tool. Some computational experience is described.