<p>The studied application area is a private bank with different branches located in different provinces around the country. There was not integrated security solution to provide communication among different branches. Some of these branches could communicate through the satellite and the others could communicate through a different technology, such as asynchronous transfer mode (ATM).</p><p>Different bank security policies were applied and maintained for different branches separately. In addition, the number of branches is expected to grow during coming year in each province.</p><p>The old topology was partial mesh and it could not support enough redundancy in case of disruption. If a connection between two branches failed, other branches might lose their connectivity as well. In addition, it could not achieve optimum routing.</p><p>Providing integrated quality of service (QoS) for the wide area network (WAN) by using different technologies is not easy to achieve, and it causes so many problems for the system. The bank uses a variety of protocols for different applications, depending on its demand, so the new applied technology should not depend on protocols, or at least should support different protocols at a same time. In the old technology, the bank was responsible for granting availability and connectivity maintenance. Providing proper bandwidth is an important aspect in the bank scenario and for the old technology; supplying enough bandwidth was costly.</p><p>As mentioned above, the old applied technology was dependent upon different protocols. Therefore, packets in different open system interconnection layers (OSI layers) would have to check thoroughly to find the source/ destination address, data and so on, to reach the correct destination. This might cause security problems for entire system. In addition, processing packet in each layer of the OSI model is time consuming.</p><p>One important aspect for the retail-banking scenario is considering all features of the security domain, such as security policy, information security, physical security, access level control, integrated security for the system and so on. Some features of the security domain in this project were not covering completely, such as integrated information security, merged security policy, and integrated physical security for the system.</p><p>In this project, all mentioned problems are solved by implementing a specific communication technology which can overcome the problems above. This technology supports multiple protocols, and it provides fast and secure communication. It can also cover redundancy and it does not cost as much as previous technologies like ATM and satellite. Easy provisioning is one feature of this technology. In this technology, the service provider is responsible for granting availability and connectivity maintenance.</p><p>The mentioned features of the security domain, which were not covered by the old technology, will be covered by a proper, integrated security solution. The IP-based physical security systems provide centralized monitoring and they can define a merged security policy for all different branches around the country. Specific, pre-defined scenarios are created for different events in different situations.</p>

Cette thèse propose une nouvelle architecture d'interconnexion pour les réseaux de bordure spontanés. Un réseau de bordure spontané est composé de différents réseaux utilisant des technologies variées mais ne formant, pour l'utilisateur, qu'un unique réseau local et autonome. La démocratisation des technologies sans fil, et en particulier de 802.11, a favorisé l'émergence de ce type de réseaux. Tranchant avec la philosophie d'IP dans laquelle tout paquet est indépendant, nous affirmons l'importance de la notion de connexion et le besoin de garantir le bon fonctionnement des connexions établies. Nous proposons à cette fin un niveau 2.5 entre les couches MAC et IP, qui se traduit par l'utilisation de chemins MPLS pour le transport des données. Couplée avec un routage réactif, cette architecture orientée connexion au niveau 2.5 offre de nombreux avantages. Une implémentation de notre proposition a été réalisée sous la forme d'un prototype, Lilith.

Title from PDF of title page. / Document formatted into pages; contains 62 pages. / Thesis (M.S.E.E.)--University of South Florida, 2003. / Includes bibliographical references. / Text (Electronic thesis) in PDF format. / ABSTRACT: The rapid growth of the Internet, in the last few years, has generated a need to enhance the existing IP networks in the areas of availability, dependability and scalability in order to provide a mission critical networking environment. In contemporary IP networks, data packets are routed as a function of the destination address and a single metric such as hop-count or delay. This approach tends to cause message traffic to converge onto the same link, which significantly increases congestion and leads to unbalanced network resource utilization. One solution to this problem is provided by Traffic Engineering (TE), which uses, bandwidth guaranteed, Explicitly Routed Label Switched Paths (ER-LSPs). Due to the dramatic increase in the backbone speeds, current research focuses more on traffic engineering with LSPs for clear control over the traffic distribution in the network. / ABSTRACT: However, the growing popularity of the Internet is driving the Internet Service Providers to adapt new technologies in order to support multiple classes of applications with different characteristics and performance requirements. Multi-Protocol Label Switching (MPLS), which was proposed by the IETF provides essential facilities for traffic engineering and reliable QoS services for the Internet. MPLS networks provide the required flexibility for operators to manage their traffic with ER-LSPs. Even though conventional routing algorithms support the ER-LSP setup in MPLS networks, they are not efficient in link residual capacity information updates and limit resource utilization, which eventually leads to LSP failures and unbalanced network resource utilization. This thesis proposes a new architecture with a cluster based distributed routing algorithm to setup bandwidth guaranteed ER-LSPs in MPLS backbone networks. / ABSTRACT: The proposed routing algorithm confines the route discovery region in order to reduce the routing overhead and computes all possible routes from ingress node to egress node. Based on LSP requirements and network load conditions, the egress node selects the most suitable path from the available paths in order to setup the LSP. This routing scheme optimizes network resource utilization by evenly distributing traffic throughout the network. The Resource Reservation Protocol (RSVP) works in conjunction with the routing protocol for resource reservation and label distribution along the LSP. / System requirements: World Wide Web browser and PDF reader. / Mode of access: World Wide Web.

All-Optical Label Swapping (AOLS) es una tecnología clave para la implementación de nodos de conmutación completamente óptica de paquetes. Sin embargo, el costo de su desarrollo es proporcional al tamaño del espacio de etiquetas (label space). Debido a que los principios de funcionamiento de AOLS son casos particulares de los del MultiProtocol Label Switching (MPLS), esta tesis estudia métodos generales, aplicables a ambos, con el propósito de reducir el espacio de etiquetas tanto como sea posible. Modelos de programación lineal entera y heurísticas son propuestos para el caso en el que se permite apilar una etiqueta extra. Encontramos que cerca del 50% del espacio de etiquetas puede ser reducido, si se permite colocar una etiqueta extra en la pila. Además, particularmente para AOLS, encontramos que se puede reducir el espacio de etiquetas cerca al 25% si se duplica la capacidad de los enlaces y se permite re-encaminar el tráfico. / All-Optical Label Swapping (AOLS) forms a key technology towards the implementation of All-Optical Packet Switching nodes for the future optical Internet. However, the capital expenditures of the deployment of AOLS increases with the size of the label spaces. Since AOLS working principle is a particular case of the MultiProtocol Label Switching (MPLS) protocol, this thesis studies generic methods, applicable to both, in order to reduce as much as possible the label space. ILP models and heuristics are proposed for the case in which it is allowed to stack one extra label. In general, we found that 50% of the label space can be saved, if it is permitted to push one extra label in the stack. For the case of AOLS, we found that we can reduce the label space down to 25% if we are allowed to double the link capacity and reroute the traffic.

Made available in DSpace on 2016-06-02T19:05:27Z (GMT). No. of bitstreams: 1 1680.pdf: 2540055 bytes, checksum: 6068982fae71ad51efe5f0ebb3308784 (MD5) Previous issue date: 2006-12-15 / The advent of grid computing made possible to access distributed resources, even when they are geographically spread or belong to different organizations. The most used environment for accessing these distributed resources is the Internet, a worldwide computer network based in TCP/IP architecture. Grid computing provides the infrastructure necessary for managing and communicating with the resources offered by different organizations. These organizations are also known as virtual organizations (VO's). Some of the applications used in these collaborating environments may have minimum requirements by quality of service (QoS). However, the "best effort" service, which is offered by Internet, is not capable to satisfy these QoS requirements. In this case, a different solution is needed, in order to provide guarantees related to the traffic in communication channels. This master thesis aims to apply the concepts of quality of service for networks in grid computing, providing end-to-end quality of service between grid computing applications. In order to achieve this goal, we investigate the use of commutation infrastructure provided by MPLS networks. Using traffic engineering mechanisms for routes determination, we aim to provide better control of data flows, improving the performance of distributed applications in geographically highly spread environments. / O surgimento da computação em grade possibilitou o acesso a recursos distribuídos que podem estar dispersos geograficamente e pertencer a diferentes organizações. O meio mais utilizado para prover acesso a tais recursos é a Internet, uma rede de computadores de alcance mundial baseada na arquitetura TCP/IP. As grades computacionais fornecem a infra-estrutura necessária à comunicação e ao gerenciamento dos recursos fornecidos por estas organizações, também conhecidas por organizações virtuais (VOs) . Algumas das aplicações utilizadas nestes ambientes colaborativos podem possuir requisitos mínimos de qualidade de serviço (QoS). Entretanto, o serviço de melhor esforço oferecido pela Internet não é capaz de satisfazer tais exigências, sendo preciso utilizar outra forma para se obter garantias em relação à capacidade de tráfego dos canais de comunicação. Este trabalho de mestrado objetiva aplicar os conceitos de qualidade de serviço de redes para o provimento de qualidade de serviço fim-a-fim nas comunicações entre aplicações para grades computacionais. Para tanto, investiga o uso da infra-estrutura de comutação provida pelas redes MPLS. Usando mecanismos de determinação de rotas em Engenharia de Tráfego, busca-se prover melhor controle dos fluxos de dados, beneficiando aplicações distribuídas em ambientes de grande dispersão física.

Multiprotocol Label Switching (MPLS) is a new paradigm in routing architectures which has changed the way Internet Protocol (IP) packet is transferred in a Network. MPLS ensures the reliability of the communication minimizing the delays and enhancing the speed of packet transfer. One important feature of MPLS is its capability of providing Traffic Engineering (TE) which plays a vital role for minimizing the congestion by efficient load, balancing and management of the network resources. The performance evaluation is done considering the network parameters latency, jitter, packet end to end delay, and packet delay variation. Integration of QoS with the MPLS-TE network may enhance the performance of the network. Various scheduling algorithms can be used for implementing QoS on a network, which may vary the performance of the network. In our study, QoS is implemented on top of the MPLS-TE network using Differentiated Service (DiffServ) architecture. Different basic scheduling algorithms are used for the implementation of QoS and to check their impact on the network and to identify the suitable one among them. Performance evaluation is done considering the network parameters latency, jitter, packet end-to-end delay, and Packet Delay Variation. The simulation was done using OPNET modeler 16.0 and the results were analyzed. The simulation result shows that using TE along with QoS in MPLS network decreases the latency, jitter, packet delay variation and end to end packet delay compared to using TE alone for voice traffic. / +46738732963

Multiprotocol Label Switching (MPLS) is an emerging technology which ensures the reliable delivery of the Internet services with high transmission speed and lower delays. The key feature of MPLS is its Traffic Engineering (TE), which is used for effectively managing the networks for efficient utilization of network resources. Due to lower network delay, efficient forwarding mechanism, scalability and predictable performance of the services provided by MPLS technology makes it more suitable for implementing real-time applications such as voice and video. In this thesis performance of Voice over Internet Protocol (VoIP) application is compared between MPLS network and conventional Internet Protocol (IP) network. OPNET modeler 14.5 is used to simulate the both networks and the comparison is made based on some performance metrics such as voice jitter, voice packet end-to-end delay, voice delay variation, voice packet sent and received. The simulation results are analyzed and it shows that MPLS based solution provides better performance in implementing the VoIP application. In this thesis, by using voice packet end-to-end delay performance metric an approach is made to estimate the minimum number of VoIP calls that can be maintained, in MPLS and conventional IP networks with acceptable quality. This approach can help the network operators or designers to determine the number of VoIP calls that can be maintained for a given network by imitating the real network on the OPNET simulator. / 0046737675303

The studied application area is a private bank with different branches located in different provinces around the country. There was not integrated security solution to provide communication among different branches. Some of these branches could communicate through the satellite and the others could communicate through a different technology, such as asynchronous transfer mode (ATM). Different bank security policies were applied and maintained for different branches separately. In addition, the number of branches is expected to grow during coming year in each province. The old topology was partial mesh and it could not support enough redundancy in case of disruption. If a connection between two branches failed, other branches might lose their connectivity as well. In addition, it could not achieve optimum routing. Providing integrated quality of service (QoS) for the wide area network (WAN) by using different technologies is not easy to achieve, and it causes so many problems for the system. The bank uses a variety of protocols for different applications, depending on its demand, so the new applied technology should not depend on protocols, or at least should support different protocols at a same time. In the old technology, the bank was responsible for granting availability and connectivity maintenance. Providing proper bandwidth is an important aspect in the bank scenario and for the old technology; supplying enough bandwidth was costly. As mentioned above, the old applied technology was dependent upon different protocols. Therefore, packets in different open system interconnection layers (OSI layers) would have to check thoroughly to find the source/ destination address, data and so on, to reach the correct destination. This might cause security problems for entire system. In addition, processing packet in each layer of the OSI model is time consuming. One important aspect for the retail-banking scenario is considering all features of the security domain, such as security policy, information security, physical security, access level control, integrated security for the system and so on. Some features of the security domain in this project were not covering completely, such as integrated information security, merged security policy, and integrated physical security for the system. In this project, all mentioned problems are solved by implementing a specific communication technology which can overcome the problems above. This technology supports multiple protocols, and it provides fast and secure communication. It can also cover redundancy and it does not cost as much as previous technologies like ATM and satellite. Easy provisioning is one feature of this technology. In this technology, the service provider is responsible for granting availability and connectivity maintenance. The mentioned features of the security domain, which were not covered by the old technology, will be covered by a proper, integrated security solution. The IP-based physical security systems provide centralized monitoring and they can define a merged security policy for all different branches around the country. Specific, pre-defined scenarios are created for different events in different situations.

This Master Thesis deals with the design of part of ICT infrastructure migration of two sites of the international company to the external data center. It analyzes the current status of company ICT, describes the virtualization infrastructure and its operational costs. Main part of the Thesis describes a possible solution of migration of virtualization infrastructure to external data center by using project management tools and methods. Finally, the Thesis summarizes project benefits for the company.

La presente tesis estudia dos tecnologías para la optimización de la red core IP MPLS de un operador móvil. La primera de ellas es la tecnología almacenamiento en caché, la cual optimiza el consumo de ancho de banda, y la segunda es la tecnología Fast Reroute que optimiza disponibilidad o rendimiento en el tiempo de convergencia. En el primer capítulo se detalla la problemática a la que se enfrenta un operador en términos de ancho de banda y disponibilidad de la red. En la cual se evidencia el aumento de consumo de tráfico por parte de los usuarios; así como, las quejas de los mismos por pérdida de servicio ante las caídas o fallas en la red. Además, se muestran los objetivos de la tesis. En el segundo capítulo se ahonda en el marco teórico que soporta el estudio de ambas tecnologías, así como estudios precedentes que analizan la problemática descrita en el capítulo 1. En el tercer capítulo se realiza el estudio propiamente de la tecnología almacenamiento en caché y Fast Reroute, además, se hace mención a la tecnología Graceful Restart and Non Stop Forwarding. Así también se mencionan los parámetros de medición que permitirán evaluar de forma cuantitativa la optimización por ambas tecnologías. En el cuarto capítulo se describe todo el estudio y análisis de la implementación de las tecnologías en los escenarios reales en el laboratorio de la universidad así como en la red del operador para el año 2017, fecha de estudio, y luego se muestran los resultados. En el quinto capítulo se realiza el estudio económico de la implementación unificada de ambas tecnologías para determinar la rentabilidad que estas suponen. Finalmente, se muestran las conclusiones y trabajos futuros de la tesis.