<p>In today's world, more and more phone calls are made over IP. This results in an increasing demand for scalable IP telephony equipment.</p><p>Ingate Systems AB produces firewalls specialized in handling IP telephony. They have an inherent limit in the number of concurrent phone calls that they can handle. This can be a bottleneck at high loads. There is a load balancing solution available in the platform, but it has a number of drawbacks, such as media latency and client capability requirements, limiting its usage.</p><p>Many companies provide load balancing solutions for SIP. However, it appears few handle all the problematic scenarios that the Ingate firewall does. This master's thesis aims to add load balancing functionality to the Ingate firewall, so that it can handle all types of clients.</p><p>By splitting the firewall into two completely separate layers - a SIP layer and a firewall layer - the concept of a virtual machine emerges. A machine is no longer restricted to its physical SIP and firewall layers. Instead, virtual machines are used to process calls. They still have SIP and firewall layers, but the layers can reside on different physical machines.</p><p>This thesis demonstrates the operation of an innovative load balancing implementation. The implementation was evaluated, and using four machines the test setup performed 50% better than the original Ingate platform, while still retaining all functionality -- something that was not possible with the original platform. This surpassed both the company's and my own expectations.</p>

Denna uppsats har haft examensarbetet “MPLS kontra traditionell IP-routing - enjämförelse av resursåtgång” av Sebastian Viking och Anton Öhlin som stöd. Derasarbete jämförde processoranvändning vid routing med, respektive utan, MPLS.Resultatet påvisade att MPLS gav högre processorbelastning gentemot traditionell IProuting,tvärtemot vad teorin för MPLS säger. På grund av uppenbara motsägelsermellan teori och praktik ämnade detta arbete skapa en hypotes som undersöks deduktivtmed målet att bekräfta dess utsaga: På grund av MPLS, respektive IP:s implementation iunderliggande hårdvaruarkitektur, kommer ingen märkbar skillnad iprocessorbelastning att uppvisas vid tester där en routers uppgift är att förmedla paket.Vi har därför återskapat deras tester för att verifiera äktheten i deras resultat. Resultetfrån våra egna tester visade ingen uppenbar olikhet mellan routingteknikerna IP medCEF, respektive MPLS. Presenterat resultat visar därmed på att hypotesen, som stöds avteknikernas teori, bevisats i praktiken från denna undersökning. / This paper was based on the thesis "MPLS kontra traditionell IP routing - enjämnförelse av resursåtgång" by Sebastian Viking and Anton Öhlin. Their workcompared the CPU usage when performing routing with, and without, MPLS. Theresults demonstrates that MPLS provides higher processor load over traditional IProuting, contrary to the theory of MPLS. Due to the apparent contradictions betweentheory and practice has this work intended to create a hypothesis examined deductivelywith the aim to confirm its statement: Because of MPLS, and IP's, implementation ofthe underlying hardware architecture should no noticeable difference in processor usagebe presentated at tests where a router's job is to convey the package. Therefore, we recreatedtheir tests to confirm the authenticity of their results. The results from the testsin this paper showed no significant difference between IP routing technologies withCEF, and MPLS. Presented results thus confirm the hypothesis supported by thetheories behind the techniques used.

本論文著眼於All-IP網路中的預算分配。我們定義網路的服務品質只與各使用者使用網路頻寬的要求有關，提出一種使管理者能以統計上百分比來估計網路服務品質的方法。這個方法包含路徑選擇以及頻寬分配二個階段。為了展現這種方法的可行性，我們列舉一些數據來分別比較以最大滿意度和最小成本為目標的不同分配結果，作為使用這個方法的參考。 / In this thesis, we focus on budget allocation for All-IP networks. We propose a method which assists managers to estimate the quality of service on networks. The quality of service on networks is defined by satisfaction functions that are simply written in terms of bandwidth required by the users on the network. We present a two-phase approach which includes a path se-lection and a scheme for bandwidth allocation. In order to illustrate an easy implementation of this approach, we also develop the Maximum Satisfaction Method and the Minimum Cost Method. Numerical examples are given to show the effectiveness of our approach.

Orientador: Nobuo Oki / Banca: Artur Pantoja Marques / Banca: Dilvan de Abreu Moreira / Resumo: Com a globalização e a evolução tecnológica, a capilaridade das instituições, sejam elas públicas ou privadas, é realidade irreversível. O uso de computadores cada vez mais velozes e com elevada capacidade de armazenamento possibilitou a centralização das informações. Nesse contexto, surge a necessidade de interligar os sistemas computacionais com o objetivo de trocar informações, independentemente da região geográfica. A Internet, utilizando tecnologias de redes de dados, com arquitetura projetada para suportar em nível mundial a comunicação entre computadores, passa a ser a principal ferramenta utilizada na interligação de locais geograficamente distribuídos. Com a tecnologia e infraestrutura disponível para efetivar a comunicação, surge também a necessidade de garantir que os sistemas estejam ativos o maior tempo possível, atendendo a desempenho compatível às atividades desenvolvidas, pois as instituições passam a depender da interação entre os sistemas computacionais, independente do ponto do planeta em que estejam. Este trabalho propõe modelar, desenvolver e realizar ensaios de uma ferramenta que auxilie no monitoramento de pontos interligados por redes de comunicação dados sobre protocolo TCP/IP distribuídos geograficamente. O modelo consiste em monitorar um ou mais pontos, visualizados sobre um mapa com o traçado do perímetro político geográfico da área atendida. Em suma, propõe-se utilizar as ferramentas básicas de teste de conectividade nas redes de comunicação de dados, associadas aos conceitos de georreferenciamento e geoprocessamento / Abstract: The globalization and technological evolution, allowed the grow of institutions public or private over the entire world with highest capillarity. The development of computers becoming faster and with large storage capacity allowed the centralization of information. In this context the necessity of linking computer systems with the aim to exchange information regardless of geography became a reality. The technics and technologies used in Internet, envolving data communications, with architecture designed to support global communication between computers, becomes the main tool used in the interconnection of thousand geographically distributed sites. With the technology and infrastructure available for an effective communication, also arises the need to ensure that systems are active as long as possible, with a minimum of performance to the services, because the activities in the institutions are dependent upon interaction between computer systems, regardless of the point on the planet they are. This study proposes to model, develop and test a tool to assist in the monitoring of points connected by data communication networks over TCP / IP distributed geographically. The proposed format is to monitor one or more points, displayed on one or more maps with the route of political geographic boundaries of the area served. In short, it is proposed to use the basic tools to test network connectivity in data communications, combined with the concepts of GIS and georeferencing / Mestre

L'utilisation de TCP sur des liens asymétriques entraîne fréquemment des débits plus faibles qu'attendus au point de nuire sensiblement à la qualité de service ressentie par l'utilisateur. Ces baisses de performances peuvent prendre diverses formes parmi lesquelles une forte latence en début de connexion, une sous utilisation de la capacité du lien ou encore des latences excessivement hautes pour l'ensemble de la connexion. Afin de contrer ces effets, plusieurs approches sont possibles, que ce soit de bout-en-bout par des modifications de la pile TCP/IP ou en cœur de réseau avec divers mécanismes d'ordonnancement. L'objectif de cette thèse est d'explorer comment un résultat similaire à celui obtenu par des méthodes d'ordonnancement au goulot d'étranglement peut être obtenu en travaillant de bout-en-bout, c'est à dire là où les ressources de calcul et de mémoire sont les plus abondantes. Ce questionnement est accompagné par une analyse en profondeur des phénomènes causant une dégradation des performances, ainsi que l'évaluation des solutions existantes. Finalement, des solutions nouvelles, en cœur de réseau ainsi que de bout en bout, ont été apportées et testées sur banc d'essai. / Using TCP on asymmetric links may lead to unexpected and significant performance drops, severely degrading user experience. Those performance drops can come in various forms, among which a huge latency at the beginning of a connection, under-utilization of link capacities, or even excessive delays for the whole connection.In order to prevent those effects to happen, various approaches exist, either end-to-end through changes in the TCP/IP stack, or in the network core with a collection of scheduling algorithms.The first goal of this thesis is to explore if and how an end-to-end policy (i.e where CPU and memory resources are the most abundant) can achieve similar results as buffering policies in the core of the network. Secondly, we provide an in-depth analysis of the root cause of the performance drops, and evaluate existing algorithms. Finally, new solutions, both end-to-end and in the core of the network, are brought and tested in real life networks.

Made available in DSpace on 2014-06-11T19:22:31Z (GMT). No. of bitstreams: 0 Previous issue date: 2011-05-27Bitstream added on 2014-06-13T20:29:02Z : No. of bitstreams: 1 spozito_ds_me_ilha.pdf: 2230007 bytes, checksum: 9240ceb37ed45878d0a4e158290fedf5 (MD5) / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES) / Com a globalização e a evolução tecnológica, a capilaridade das instituições, sejam elas públicas ou privadas, é realidade irreversível. O uso de computadores cada vez mais velozes e com elevada capacidade de armazenamento possibilitou a centralização das informações. Nesse contexto, surge a necessidade de interligar os sistemas computacionais com o objetivo de trocar informações, independentemente da região geográfica. A Internet, utilizando tecnologias de redes de dados, com arquitetura projetada para suportar em nível mundial a comunicação entre computadores, passa a ser a principal ferramenta utilizada na interligação de locais geograficamente distribuídos. Com a tecnologia e infraestrutura disponível para efetivar a comunicação, surge também a necessidade de garantir que os sistemas estejam ativos o maior tempo possível, atendendo a desempenho compatível às atividades desenvolvidas, pois as instituições passam a depender da interação entre os sistemas computacionais, independente do ponto do planeta em que estejam. Este trabalho propõe modelar, desenvolver e realizar ensaios de uma ferramenta que auxilie no monitoramento de pontos interligados por redes de comunicação dados sobre protocolo TCP/IP distribuídos geograficamente. O modelo consiste em monitorar um ou mais pontos, visualizados sobre um mapa com o traçado do perímetro político geográfico da área atendida. Em suma, propõe-se utilizar as ferramentas básicas de teste de conectividade nas redes de comunicação de dados, associadas aos conceitos de georreferenciamento e geoprocessamento / The globalization and technological evolution, allowed the grow of institutions public or private over the entire world with highest capillarity. The development of computers becoming faster and with large storage capacity allowed the centralization of information. In this context the necessity of linking computer systems with the aim to exchange information regardless of geography became a reality. The technics and technologies used in Internet, envolving data communications, with architecture designed to support global communication between computers, becomes the main tool used in the interconnection of thousand geographically distributed sites. With the technology and infrastructure available for an effective communication, also arises the need to ensure that systems are active as long as possible, with a minimum of performance to the services, because the activities in the institutions are dependent upon interaction between computer systems, regardless of the point on the planet they are. This study proposes to model, develop and test a tool to assist in the monitoring of points connected by data communication networks over TCP / IP distributed geographically. The proposed format is to monitor one or more points, displayed on one or more maps with the route of political geographic boundaries of the area served. In short, it is proposed to use the basic tools to test network connectivity in data communications, combined with the concepts of GIS and georeferencing

Esta dissertação descreve os métodos, medidas e análises feitas para otimizar a rede de comunicação de dados do Instituto de Física de São Carlos. As tecnologias e protocolos utilizados na rede são apresentados. Especial atenção é dada a análise do desempenho de VLANs utilizando inicialmente o protocolo LANE no núcleo ATM da rede. Neste caso a rede é composta de switches ATM e ATM-Ethernet. Medidas comparativas foram realizadas com a utilização da tecnologia Fast Ethernet no backbone, que possui uma capacidade de transmissão relativamente próxima da ATM de 155Mbps. Melhores resultados obtidos com a implementação de sub-redes maiores, reduzindo em um numero menor de sub-redes, são discutidos e apresentados. Análises estatísticas baseadas apenas no tempo de resposta da rede são apresentados para avaliar o desempenho das alterações efetuadas nas configurações da rede. Mesmo que o tráfego tenha aumentado muito durante esses anos e que vários serviços tenha sido agregados a esta rede, foi possível adequar o desempenho as novas necessidades beneficiando-se da evolução tecnológica que os equipamentos de rede de dados trouxeram ao IFSC. / This work describes the methods, measures and analyses performed aiming to optimize the data communication network from the Physics Institute of Sao Carlos as well as the technologies and protocols used in the network recently. Special care is given to the analysis of the VLANs performance using, initially, the LANE protocol over ATM which has its core based on pure ATM and ATM-Ethernet switches. Comparative measures had been carried out using a backbone working on a Fast Ethernet technology, which seems to have a very close transmission rate from the ATM 155Mbps. This work also discusses best results acquired with the implementation of larger networks reducing the number of subnetworks, statistical analyses based on time delay of the network in order to evaluate the performance of the changes made on its configuration. Even though the traffic from the Institute has been increased over these years and several services have been added to the network, it was completely possible to adapt the performance to the needs, using the benefits of the technological evolution which the network equipments had brought to the Institute.

Made available in DSpace on 2014-06-12T16:01:00Z (GMT). No. of bitstreams: 2 arquivo7128_1.pdf: 2072446 bytes, checksum: b6bc5386371d917bd7613b206ac8e92f (MD5) license.txt: 1748 bytes, checksum: 8a4605be74aa9ea9d79846c1fba20a33 (MD5) Previous issue date: 2005 / A demanda cada vez maior por produtos eletronicos e a crescente capacidade de integração dos chips direcionaram a metodologia de projeto de sistemas embarcados para sua completa integração em um único chip ( System-on-Chip, ou SoC). Essa metodologia baseia-se cada vez mais em componentes previamente projetados e verificados (IP-core ) como uma alternativa de disponibilizar os sistemas dentro dos prazos esperados, sem perder o time-to-market do mercado consumidor de eletrônicos. Neste trabalho, é proposto um processo de desenvolvimento de IP-cores baseado em técnicas de engenharia de software chamado ipPROCESS, como um mecanismo de facilitar e promover o desenvolvimento de IP-cores de alta qualidade. Tendo o foco na criação de componentes de qualidade, o ipPROCESS foi definido com base em técnicas de verificação funcional, de modelagem visual da arquitetura, de interface de comunicação e de documentação seguindo os padrões da indústria. O processo foi descrito utilizando o meta-modelo UML denominado SPEM com o objetivo de facilitar e acelerar o seu entendimento, assim como permitir alterações futuras e facilitar o gerenciamento de projetos baseados no processo proposto

[pt] Em redes IP com mobilidade, uma conexão de transporte estabelecida com um dispositivo móvel pode ser interrompida devido a uma possível troca do endereço IP ocasionada por uma mudança de rede. O período compreendido entre o instante em que dispositivo percebe que está mudando de rede - momento em que se inicia o processo de alteração de seu endereçamento IP - até o momento do restabelecimento de suas conexões com outros dispositivos chama-se período de handoff, e sua duração é denominada latência do handoff. Existem especificações de protocolos que permitem que os nós móveis continuem acessíveis enquanto se movimentam na rede IPv6, como o MIPv6 (Mobility for IPv6). Porém, mesmo com a utilização do MIPv6, durante o período de handoff, pacotes trocados com o dispositivo móvel que se deslocou podem sofrer atrasos maiores do que o desejado ou até mesmo serem perdidos. Esse efeito acaba por diminuir a qualidade da comunicação, especialmente quando se está lidando com dados multimídia. O foco do presente trabalho é a implementação do protocolo Host Identity Protocol (HIP) numa ferramenta de simulação e a avaliação desse protocolo com o objetivo de estabelecer, de maneira quantitativa, o impacto do rompimento e restabelecimento da comunicação em ambientes móveis. A proposta do protocolo HIP é garantir a mobilidade usando uma nova identidade para os hosts de forma independente do endereço IP. São estudados, por meio de simulação, a latência e a perda de pacotes durante o handoff do protocolo HIP com o intuito de fundamentar novas investigações. / [en] In mobile IP networks, a connection of transport established with a mobile device may be interrupted due to a possible exchange of IP addresses caused by a change of network. The period between the moment when device realizes that the network is changing - time in which begins the process of changing its IP address - until the moment that it restores all connections with other devices is called period of handoff, and this period is called the latency of handoff . Some protocols specifications allow us to remain accessible while mobile move in IPv6 network, as the MIPv6 (Mobility for IPv6). But even with the use of MIPv6, during the handoff, exchanged packages with the mobile device could be delayed more than desired or even be lost. This effect diminish the quality of communication, especially when it is dealing with multimedia data. The focus of this work is the implementation of the Protocol Host Identity Protocol (HIP) in a tool for simulation to evaluate the protocol with the goal of establishing, quantitative way, the impact of disruption and restoration of communication in mobile environments. The proposed protocol ensures the mobility using a new identity for the hosts that is independent IP address. The latency and loss of packages are studied, by simulation, during the handoff of HIP protocol in order to justify further investigation.

In today's world, more and more phone calls are made over IP. This results in an increasing demand for scalable IP telephony equipment. Ingate Systems AB produces firewalls specialized in handling IP telephony. They have an inherent limit in the number of concurrent phone calls that they can handle. This can be a bottleneck at high loads. There is a load balancing solution available in the platform, but it has a number of drawbacks, such as media latency and client capability requirements, limiting its usage. Many companies provide load balancing solutions for SIP. However, it appears few handle all the problematic scenarios that the Ingate firewall does. This master's thesis aims to add load balancing functionality to the Ingate firewall, so that it can handle all types of clients. By splitting the firewall into two completely separate layers - a SIP layer and a firewall layer - the concept of a virtual machine emerges. A machine is no longer restricted to its physical SIP and firewall layers. Instead, virtual machines are used to process calls. They still have SIP and firewall layers, but the layers can reside on different physical machines. This thesis demonstrates the operation of an innovative load balancing implementation. The implementation was evaluated, and using four machines the test setup performed 50% better than the original Ingate platform, while still retaining all functionality -- something that was not possible with the original platform. This surpassed both the company's and my own expectations.