How To Monitor, Measure And Shape Network Traffic Dr. Sak Segkhonthod Director

How To Monitor, Measure And
Shape Network Traffic
Dr. Sak Segkhonthod
Director
Government Information Technology Services
(GITS)
Agenda
Directions in Network Architectures
Traffic Management
QoS
Practice in Traffic Management
Example: MOST’ Network
2
Changes in Network Architectures
Distintions between LAN and WAN
Metro LAN
Broadband Access
ADSL
WIMAX
Application Diversity
Multimedia
Peer to Peer
3
The New Network Architecture
Transport
Business
Subscriber
IP
IP
IP
Metro
IP
Carrier Ethernet
Nationwide/Global
Carrier Ethernet
Metro
Carrier Ethernet
IP
IP
IP
IP
Residential
Subscriber
Service Provider
IP
• Hard QoS and Traffic Engineering
• Better bandwidth utilization/Scalability
• Protection Switching (50ms)
• OAM functions and TDM Support
• Any-to-Any VPN services
• Multicast support with Hard QoS
4
Metro
Carrier Ethernet
IP
IP
IP
• Carries all applications
• Internet Access
• IP VPN service
Supporting Transport for IP Network
E-LAN connections among routers
Any logical IP topology, multiple EVC’s of a single physical interface
IP
IP
It supports all business IP services, from IP VPN to Internet access
R
IP
R
Metro IP
R
Carrier Ethernet
R
Nationwide/Global
Carrier Ethernet
Metro
Carrier Ethernet
IP
R Carrier
RIP
R
IP
IP
R
R
IP
IP Network
Using Carrier Ethernet
as the Transport Layer
Metro
Carrier Ethernet
R
IP
5
R
IP
R
IP
Supporting TV Distribution Service
1. Multicast tree(s) is(are) established with QoS guaranteed
2. Subscribers (the Set-Top-Box) sends request for a channel
3. Carrier Ethernet filters, only replicates and forwards the requested channel to the subscribers
4. Video source protection and network protection are set up automatically upon requirement
Subscribers
IP
IP DSLAM
Video
Source
IP
Video
Source
L2 DSLAM
IP
Metro
Carrier Ethernet
Nationwide/Global
Carrier Ethernet
Metro
Carrier Ethernet
IP DSLAM
IP
L2 DSLAM
Metro
Carrier Ethernet
IP
6
IP DSLAM
IP
L2 DSLAM
IP DSLAM
Supporting VoD Service
1. An E-LAN connection is established between DSLAMs and VoD servers
2. Subscribers (the Set-Top-Box) sends request to RSM for a movie
3. RSM finds/informs the best VoD server, acknowledge subscribers of such
4. The subscriber establishes RTP and RSTP session with VoD and Command server respectively
Subscribers
IP
IP DSLAM
IP
IP
E-LAN
IP
Resource &
Subscriber
Manager
(RSM)
Metro
IP
Carrier Ethernet
IP DSLAM
VoD server
L2 DSLAM
Nationwide/Global
Carrier Ethernet
Metro
IP
Ethernet
Carrier
Command Server
IP
L2 DSLAM
IP
Metro
Carrier Ethernet
IP
7
IP DSLAM
IP
L2 DSLAM
IP DSLAM
Supporting VoIP Service
1. An E-LAN connection is established between WAN routers to build an IP WAN
2. An E-LAN connection is established between the DSLAMs and the IP PoP in each metro
3. Caller contacts the SIP Proxy server in order to find the IP address of the called party
4. Caller establishes RTP session with the called party through E-LAN connection
Location Server
IP WAN
IP
SIP Proxy
Server
Subscribers
IP
L2 DSLAM
L2 DSLAM
IP
Metro
IP
Carrier Ethernet
bal
Nationwide/Glo
E-LAN
Carrier Ethernet
Metro
IP
Ethernet
Carrier
IP DSLAM
L2 DSLAM
L2 DSLAM
IP
Metro
Carrier Ethernet
IP
8
IP DSLAM
IP
L2 DSLAM
Carrier Ethernet for 3G/UMTS Backhaul
Guaranteed QoS
3G SGSN
IP
Flexible SLA portfolios for different
users and services
IP
Flexible bandwidth growth without
network upgrade
Efficient network for multimedia
applications (P2P, P2MP, MP2MP)
IP
3G SGSN
Carrier Ethernet
IP
3G SGSN
Secure connectivity for corporate
and consumer users
Seamless integration with the
wireline transport network – both
Ethernet and TDM
9
IP
3G SGSN
Carrier Ethernet – New Universal Transport
Infrastructure to Deliver Ultimate Broadband
HD TV
TVoD, VoD
Video
Source
Gaming
Business
Backup, ERP
Voice/Video
Telephony Voice
gateway
Video
Source
E-Line and
E-LAN service
Business
Broadband
Carrier
Ethernet
Internet
Mobile
3G
Broadband
mobile data/video
10
Residential
Triple-Play
FTTx and
DSLAM Backhaul
Traffic Management Illustration
Incoming Traffic
Measure
by Classification
(Coloring by
Apps)
Policing and
Remarking
(Tired ingress
Control)
Data
Video
Voice
Discard or re-marked as Best Effort
Best Effort
Priority mapped into a tag in packet header
Low Priority
11
Mid Priority
To Network
High Priority
Network Traffic & QoS
Why do we need QoS?
Traffic issues
What is QoS?
12
Why do we need QoS?
File Transfer
Voice
Email
Video
13
Traffic Issues
Importance vs. Delay
Video Conference
Online Games
ERP / CRM
Internet Radio
Corporate
Web Surfing
14
File Transfer
Email
Traffic Issues
The Bandwidth Bottleneck
LAN
100Mb/s -> 1Gb/s
WAN
64Kb/s -> 2Mb/s
1. Real Time Trading Application (Banking, Finance & Securities)
2. SAP, Oracle (Corporate & Enterprise Business, Manufacturing)
3. Lotus Notes (Government, Media, Education)
15
Traffic Issues
Business vs. Pleasure
16
What is QoS?
17
Concept - Pipes and Virtual
Channels
What is a Pipe?
What is a VC?
Pipe vs VC – when to use a pipe and when to use a VC
Branches (PIPE)
No branches – user/department monitoring (VCs)
18
Connection Limitations
Conditional Admission
T1 Connection
Total guaranteed throughput = 1.5Mbps
PIPE
VC
VC
PIPE
VC 1
VC 2
VC 3
19
VC Maximum = 150Kbps, Minimum per Connection = 45Kbps
Quality of Service Options
Minimum
Maximum
Maximum no. of connections
Priority
Per Pipe
Min/Max, Priority, max no. connections
Per VC
Min/max, priority, max no. connections
Per connection
CBR + delay
Gurantee + burst
Direction Specific
Inbound
Outbound
20
QoS Per Connection
Conditional Admission
10 Voice
connections
D[
ACCEPT
21
11th Voice
Connection
REJECT or DROP
Minimum, Maximum and Priority
V o ic e o v e r IP
UDP Protocol
Min, Max and Priority for each connection
Each connection within the VC will get at least the minimum,
no more than the maximum and the priority requested
22
QOS per connection (Burst)
Burst
B
a
n
d
w
i
d
t
h
Traffic over
the Max
Maximum
Unused
Bandwidth
1.0
Traffic Output with Max Only
23
2.0
3.0
Time (S)
Traffic Output with Max and Burst
Access Control
24
The Complete Policy
25
Traffic Filtering
26
Detailed Charts
A series of charts for the
selected Pipe or VC
Daily
Weekly
Monthly
Yearly
27
Long-Term Monitoring
28
Advanced Monitoring & Diagnostic
Transaction Flow
Client / Server
Address Pair
Idle Time
VC
Pipe
Port status
Port Number
29
Protocol/ Applications Services
Advanced Monitoring & Diagnostic
Performance Throughput
Throughput
Volume
Total Bandwidth
(Internal)
Total Bandwidth
(External)
30
31
Ministry and Department Intranet
R&D VPN
VDO Conference VPN
GFMIS VPN
32
Ministry Intranet
MOC/DOC VPN
33
Traffic Management For
MOST’s Network
High-speed Connection for Domestic Traffic
International Bandwidt Management
Traffic Shaping
Minimum Guarunteed and Burst Allowed
Usage Policy
Monitoring
QoS
Usage
Security Control
Virus
Spams
34
35
Thank You
Questions
Sak@Gits.Net.Th