Mobile agents routing-a survivable ad-hoc routing protocol

A distributed resource management model for Virtual Private Networks: Tit-for-Tat strategies

Chapter 7 - Virtual Private Networks and MPLS

We define a quality of service (QoS) model for QoS-NSIS signaling layer protocol (QoS-NSLP) application for supporting the virtual private network (VPN) QoS called 'hose-NSIS-QoSM'. The hose-NSIS-QoSM reserves and manages resources according to the hose based resource provisioning mechanisms. Specially, we specify the formats of NSLP signaling messages, the modification to the information in NSLP state and resource management (RM) state tables, and the procedure of signaling messages in NSIS node. Also, we compare the hose-NSIS-QoSM with the hose-RSVP-TE-QoSM that supports the hose based VPN QoS in the multi-protocol layer signaling (MPLS) networks using the extended point-to-multipoint (P2MP) resource reservation protocol-traffic engineering (RSVP-TE) mechanism.

The largely used of cyberspace has brought the attention of business interposes across the globe in modern era which resulted in numerous security issues. Business enterprises find it difficult to protect and manage resource sharing and data infrastructure effectively. The business enterprises consider Virtual private network (VPN) as a novel development to protect data and information, and to create a VPN connection, it is significant to consider the type of security protocols to use to make VPN more efficient and more powerful. The significant issue in this research is to study the performance of Secure Socket Layer (SSL) in VPN with intrusion detection systems (IDS) on Linux operating system in terms of Quality of Service (QoS) parameters (throughput, latency and packet loss). We also used two different encryption algorithms, Triple Data Encryption Standard (TDES/3DES) and Advance Encryption Standard (AES). Encryption algorithms are used to encrypt data, so it cannot be read or modify by a third-party while in transit between two end points of a network. This research found that when considering throughput, packet loss and latency in network infrastructures, SSL/3DES offers fair and reasonable performance than SSL/AES. VPN protocols with higher throughput have the best performance and VPN protocol the low packet loss has the best performance. The research indicated deploying SSL/3DES is more effective in business enterprises also indicated that IDS could be able to function effectively on both protected traffic packets (VPN packets) and server log files.

Interfacing VoIP into the current Public Switched Telephone Network is for the most part done through the use of a gateway. This gateway whether H.323, Session Initiation Protocol or Media Gateway Control Protocol is required for access into a traditional switched telephony network.

With explosive dissemination of broadband IP access services, like xDSL and FTTH, many service providers seek a chance for deploying new IP based broadband services networks for their customers. Among multiple candidates, content distribution (CD), interactive multi-media (IMM) and virtual private network (VPN) services are the most attractive broadband services for service provider and their customers. The quality of service (QoS) control and traffic engineering (TE) mechanism with strict reliability are essential functions to differentiate these services from conventional best effort IP access service and to make this broadband services network as a new communication infrastructure. Because MPLS already has all of these mechanisms in its protocol architecture, it is assumed that developing broadband IP service network by MPLS technology is the most promising way. But many of these services, such as video broadcasting, video conference and VPN multicast service require not only point-to-point (P2P) transmission capability but also point-to-multipoint (P2MP) transmission capability with much stricter QoS control, more sophisticated TE and more stable reliability control requirement. Therefore, P2MP capability extension is required to conventional MPLS. This paper proposes a scalable multicast MPLS protocol that can establish P2P and P2MP LSP simultaneously. The P2MP extension is realized on RSVP-TE (RFC3209). By introducing tree explicit route object (TERO) and enhancing conventional Path/Resv signaling procedures to enable tree based LSP setup, the proposed protocol can set any kind of P2MP LSPs; cost minimum (Steiner) P2MP LSP, delay-constrained P2MP LSP according to application demands. The proposed protocol also supports dynamic partial tree modification mechanism; Grafting and Pruning to handle dynamic multicast traffic. Therefore, P2MP LSP is modified easily. Several scalability and performance evaluations are conducted in this paper to prove its feasibility. This paper also proposes a multicast constrained shortest path fast (CSPF) mechanism to support dynamic QoS constrained P2MP LSPs setup. We confirmed that proposed schemes are scalable and has enough performance to be applied to future large scale IP service convergence network.

We present techniques for traffic engineering in quality of service (QoS)-supported data networks and also illustrate the application of these techniques in a case study. For scalability, we use multicommodity flow (MCF) solution techniques as primitives. The techniques address the design of topology and size of explicit routes in multiprotocol label switching (MPLS)-supported Internet protocol (IP) networks and virtual private networks (VPNs). The techniques are for network-wide optimization, subject to constraints on routing imposed by end-to-end QoS and other considerations. The notion of admissible route sets is used to differentiate real-time services, such as Internet telephony and video, from delay-insensitive services, such as premium data. Different optimization techniques are given for Best-Effort services. We also give an efficient and accurate design technique to handle priorities. Finally, we present a novel technique for obtaining traffic engineering designs for stochastic traffic models from MCF-based designs with only a small amount of incremental effort.

To support applications such as Internet security, virtual private networks, and Quality of Service (QoS), Internet routers need to quickly classify incoming packets into flows. Packet classification uses information contained in the packet header and a predefined rule table in the routers. In general, packet classification on multiple fields is a difficult problem. Hence, researchers have proposed a variety of classification algorithms. This paper presents a novel packet classification algorithm, the bit compression algorithm. As with the best-known classification algorithm, bitmap intersection, bit compression is based on the multiple dimensional range lookup approach. Since bit vectors of the bitmap intersection contain many ”0” bits, the bit vectors could be compressed. We compress the bit vectors by preserving only useful information and removing the redundant bits of the bit vectors. An additional index table would be created to keep track of the rule number associated with the remaining bits. Additionally, the wildcard rules enable an extensive improvement in the storage requirement. A novel Fast Boolean Expansion enables our scheme to obtain better classification speed even under a large number of wildcard rules. Compared to the bitmap intersection algorithm, the bit compression algorithm reduces the storage complexity in the average case from O(dN^2) (for bitmap intersection) to θ(dN•logN), where d denotes the number of dimensions and N represents the number of rules. The proposed scheme cuts the cost of packet classification engine and increases classification performance by accessing less memory, which is the performance bottleneck in the packet classification engine implementation using a network processor.

This paper discusses some modes of signal transmission for corporate systems using the technology of virtual private networks VPN. A very important property of tunnels is the ability to differentiate different types of traffic and assign them the necessary service priorities. In this work, research has been carried out and comparative characteristics of signal transmission modes using virtual networks have been obtained to identify the effectiveness of the network in various modes of organizing a virtual network, and to optimize a virtual network in order to identify an effective method for organizing a VPN. Also, the work analyzes the specifics of the work of corporate information systems and networks intended for their maintenance, showed that for building a corporate network it is advisable to use virtual private network (VPN) technology, which makes it possible to ensure the fulfillment of the basic requirements for the security and quality of customer service and applications and the current state and direction of development of VPN technology when creating new generation corporate networks, while highlighting the main tasks that need to be addressed when creating a network. Some features of setting up an IPSec VPN server for corporate networks are considered.

Abstract-QoS parameter mapping is a key technology with respect to guaranteeing QoS of business in heterogeneous networks dynamically. This paper studies a method for guarante necessary End-to-End QoS for user satisfaction, focusing on the problem of quality of service (QoS) mapping between layers in a cascade. Due to the dynamic mapping of parameters, the consistency between user and netweork is guaranteed. In this paper, we proposed a novel cross-layer QoS mapping mechanism on the basis of a multiple linear regression. The mechanism realizes the vertical mapping of QoS parameters between userlevel and transport-level. Hence the QoS connection is constructed between networks to ensure the end-to-end QoS of business. The simulation results show that our mechanism can greatly improve the satisfaction of users without reducing the mean throughput.

The main idea of the third generation (3G) networks is to merge two of the most important communication systems: cellular networks and Internet. The IP multimedia subsystem (IMS) defined by 3GPP is a technology designed to provide robust multimedia services across roaming boundaries and over diverse access technologies. In this communication converged world, the challenging issues are security and quality of service. This article presents a solution for securing multimedia traffic over 3G networks using an IPSec-based end-to-end virtual private network (VPN). It provides end-to-end security for real-time traffic while guaranteeing the performance and quality of services without reducing the effective bandwidth. Furthermore, this solution provides seamless and fast handover with minimum QoS degradation.

The rapid development of electronic businesses raises the need for exchanging information between enterprise networks via internet. If a secure connection is necessary then a virtual private network (VPN) is essential. IPSec use encrypting and encapsulating technology in client device and establishes a secure tunnel connection. The private network built by IPSec technology can ensure good transmission performance and service quality over public networks. This paper analyses the architecture of IPSec and describes the process of creating a site-to-site IPSec VPN between header and branch of enterprise over internet. In addition, this study analyses the encryption at the boundary of the network and concludes a propose some practical problems need to consider inside enterprise network.

인터넷 전화, 인터넷 방송 VPN(Virtual Private Networks), 멀티미디어 서비스 등의 실시간 혹은 대역폭 요구 서비스 등의 실시간 혹은 대역폭 요구 서비스들이 늘어남에 따라 인터넷에서도 서비스 품질(QoS : Quality of Service)에 대한 요구가 중요한 문제가 되었다. 인터넷 응용 서비스의 품질을 보장하기 위하여 통합 서비스, 차등 서비스, 그리고 MIPLS(Multi-Protocol Label Switching) 등의 여러 가지 방안이 강구되고 있다. 본 논문에서는 차등 서비스(DiffServ : Diferentiated Service)를 이용한 QoS 보장 기법의 성능 해석에 대하여 기술하였다. 차등 서비스의 성능이 다양한 입력 트래픽 모델과 WFQ(Weighted Fair Queueing) 가중치에 의하여 어떻게 영향을 받는지 분석하기 위하여, 랜덤, 버스티, 자기유사 입력 트래픽 모델과 다양한 입력 파리미터에 대하여 모의실험과 성능평가를 수행하였다. 성능분석 결과, 사용된 입력 트래픽 모델에 따라 패킷 지연 rqkt과 손실 사이에 상당한 차이가 발생함을 확인할 수 있었다. 그러나, 모든 입력 트래픽 상황에서, EF(Expedited Forwarding)의 성능은 보장이 가능하고, EF와 BE(Best Effort) 클래스의 서비스가 분리가 가능한 것으로 나타났다. 다음으로 성능 합성(Performance Synthesis) 문제에 대하여 기술하였다. 차등 서비스 망에 대한 보존법칙을 유도하고, WFQ 방식에서 자원의 분배(즉, 가중치)에 따른 성능 변화와 동적 행위에 대하여 분석하였다. The requirement for QoS (Quality of Service) has become an important Issue as real-time or high bandwidth services are increasing, such as Internet Telephony, Internet broadcasting, and multimedia service etc. In order to guarantee the QoS of Internet application services, several approaches are being sought including IntServ (Integrated Service) DiffServ(Differentiated Srvices), and MPLS(Multi-Protocol Label Switching). In this paper, we describe the performance analysis of QoS guarantee mechanism using the DiffServ. To analyze how the DiffServ performance was affected by diverse input traffic models and the weight value in WFQ(Weighted Fair Queueing), we simulated and performed performance evaluation under a random, bursty, and self-similar input traffic models and for diverse input parameters. leased on the results of performance analysis, it was confirmed that significant difference exist in packet delay and loss depending on the input traffic models used. However, it was revealed that QoS guarantee is possible to the EF (expedited Forwarding) class and the service separation between RF and BE (Best Effort) classes may also be achieved. Next, we discussed the performance synthesis problem. (i. e. derived the conservation laws for a DiffServ networks, and analysed the performance variation and dynamic behavior based on the resource allocation (i.e., weight value) in WFQ.

Virtual Private Networks (VPN) constitute a particular class of shared networks. In such networks, the resources are shared among several customers. The management of these resources requires a high level of automation to obtain the dynamics necessary for the well-functioning of a VPN. In this paper, we consider the problem of a network operator who owns the physical infrastructure and who wishes to deliver VPN service to his customers. These customers may be Internet Service providers, large corporations and enterprises. We propose a new routing approach referred to as Traffic Split Routing (TSR) which splits the traffic as fairly as possible between the network links. We show that TSR outperforms Shortest Path Routing (SPR) in terms of the number of admitted VPN and in terms of Quality of Service.

Wireless multimedia services have to rely on strict quality of service (QoS) requirements to reach the feasibility, including guaranteed available bandwidth, tight delay constraint, and hard jitter tolerance. WiMAX has emerged as one of the most promising broadband wireless access technologies to support these types of services. To guarantee the QoS of connections, CAC (Call Admission Control) can grant a new call only while the required bandwidth is available. With concern about connection capacity, the CAC seems rigid and turns into an obstacle instead while the bandwidth of some connections could be stolen temporarily. Thus, adaptive admission control, differing from the conventional CAC, can flexibly increase connection capacity by stealing bandwidth based on user streaming buffer (USB). A connection in sufficient USB state implies that the undergoing streaming application can perform smoothly even if its bandwidth is stolen temporarily. Therefore, how to determine the USB state of each connection is the most important topic in this study. In order to effectively decrease the risk of system overuse arising from stealing bandwidth, the adaptive admission control is extended by means of an intelligent mechanism to decide the USB states. The simulation results show the proposed intelligent mechanism utilizing fuzzy neural network (FNN) really outperforms than the adaptive admission control in terms of controlling the probability of poor application performance. With approximate connection capacity (or call blocking probability), the intelligent resource management indeed decreases the risk of system overuse.