AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible a... more AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible and efficient library of functions that can be used to anonymize live traffic, or packet traces in libpcap file format. Currently, IP, TCP/UDP, HTTP, FTP and Netflow v5 and v9 are supported. Three ready-to-use applications have been implemented on top of this library; one provides basic anonymization functionality for the IP/TCP/UDP protocols, and two more which can perform anonymization on every field of a Netflow datagram, one for v5 and one for v9 respectively.
The deliverable presents the tests undertaken and the results produced for validating and assessi... more The deliverable presents the tests undertaken and the results produced for validating and assessing MESCAL's solution for inter-domain QoS delivery. Experimentation was carried out through simulations and in testbeds comprised of experimental Linux-based routers. It covered functional and performance testing, cost/benefit, scalability, stability, usability tests, of the following components: q-BGP, the enhanced inter-domain QoS routing protocol, regarding its employment in providing QoS in the Internet; inter- and intra-domain traffic engineering for uni- and multicast traffic, pSLS negotiations and handling functions for producing the required TE info and c/pSLS admission control. For each of these component tests, results and the conclusions drawn are presented. The deliverable also includes a scalability analysis of the MESCAL approach.
AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible a... more AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible and efficient library of functions that can be used to anonymize live traffic, or packet traces in libpcap file format. Currently, IP, TCP/UDP, HTTP, FTP and Netflow v5 and v9 are supported. Three ready-to-use applications have been implemented on top of this library; one provides basic anonymization functionality for the IP/TCP/UDP protocols, and two more which can perform anonymization on every field of a Netflow datagram, one for v5 and one for v9 respectively.
The tremendous growth of IP networks in the past few years has led to the need for tra c engineer... more The tremendous growth of IP networks in the past few years has led to the need for tra c engineering in order to enable the e ective provision of Quality of Service QoS. Several mechanisms and service models have been developed to assist tra c engineering solutions. In this paper we propose an approach t o p r o vide tra c engineering capabilities in IP Networks by using logical paths and making use of constraint-based optimisation algorithms. Our approach is both proactive and reactive, and considers the existence of the Di erentiated Services model. We present an architecture of a management system, which orchestrates the tra c engineering activities. Finally, we identify some important implementation issues for realising, evaluating and validating our approach, and we point out the directions of our future research e orts.
This Deliverable includes the results and conclusions obtained by the integration, component perf... more This Deliverable includes the results and conclusions obtained by the integration, component performance, and system performance tests carried out in testbeds and simulators.
This document is the result of activity AC1.1 and is a key deliverable of the MESCAL project. It ... more This document is the result of activity AC1.1 and is a key deliverable of the MESCAL project. It comprises three principal components. The first component is the business model, which defines the principal actors in QoS-based service delivery across multiple domains. The second component is the functional architecture, which identifies the key functional blocks required to support inter-domain QoS delivery. The third component is a set of three solution options that provide QoS-based services, each of which is in accordance with the functional architecture.
Deployment of quality-of-service (QoS) based value-added services in IP networks necessitates the... more Deployment of quality-of-service (QoS) based value-added services in IP networks necessitates the use of traffic engineering. Traffic engineering allows service providers to use the network resources efficiently, according to the different quality levels associated with the range of services they offer. Traffic engineering relies typically on monitoring data for both "offline proactive" and "dynamic reactive" approaches. Monitoring data may be used for network provisioning, dynamic resource allocation, route management, and in-service performance verification for value-added IP services. A monitoring system should scale with the network size, the network speed, and the number of customers subscribed to use value-added IP services. This paper investigates the requirements of scalable monitoring system architectures, proposes principles for designing such systems and validates these principles through the design and implementation of a scalable monitoring system for traffic engineering and QoS delivery in IP Differentiated Services networks. Methods for assessing the relative merits of such monitoring systems are proposed. Experimental assessment results prove the scalability, accuracy, and also demonstrate the benefits of the proposed monitoring system.
The broadcast studios of today rely on expensive and proprietary communication means in order to ... more The broadcast studios of today rely on expensive and proprietary communication means in order to network the large number of studio devices. Introducing an IP-based network in the studio environment is becoming an increasingly attractive solution, especially by using IP QoS solutions that are immediately available. In this paper, based on the requirements of a real broadcast studio we propose
The next generation Internet is designed to accommodate flows that span across multiple domains w... more The next generation Internet is designed to accommodate flows that span across multiple domains with quality of service guarantees, in particular bandwidth. In this context, destinations for inter-domain traffic may be reachable through multiple egress routers within a domain. In this paper, we formulate a bandwidth guaranteed egress router selection problem. The objective is to, for each aggregated inter-domain traffic flow, select an egress router that satisfies the end-to-end bandwidth requirement while optimizing the network resource utilization by which we consider three objective functions: minimizing the total bandwidth consumption, improving intra-domain and inter-domain load balancing in the network. We propose a heuristic algorithm with five egress router selection policies to solve this problem. The evaluation of these egress router selection policies through simulation benefits ISPs by choosing the one that fits their target objectives.
End-to-end QoS has been seldom studied in its inter-domain aspects, particularly within the scope... more End-to-end QoS has been seldom studied in its inter-domain aspects, particularly within the scope of the global Internet and from an engineering perspective. This paper is intended to be a contribution in this direction. Starting from a utopian model that achieves any kind of engineering operations without any specific constraint, we deduce the open issues and problems to be solved by a viable inter-domain QoS model that could be deployed in operational networks. We provide some guidelines that will help the design of a QoS-based inter-domain Traffic Engineering solution. This paper is part of the work conducted within the IST MESCAL project.
Given the emergence of IP networks and the Internet as the multiservice network of the future, it... more Given the emergence of IP networks and the Internet as the multiservice network of the future, it is plausible to consider its use for transporting demanding traffic with high bandwidth and low delay and packet loss requirements. Emerging technologies for scalable quality of service such as Differentiated Services and MPLS can be used for premium quality traffic. We are looking at the problem of intra-domain provisioning in an automated manner from an Internet Service Provider's (ISPs) point of view, i.e. we want to satisfy the contracts with our customers while optimising the use of the network resources. We need to be able to dynamically guide the behaviour of such an automated provisioning system in order to be able to meet the high-level business objectives. The emerging policy-based management paradigm is the means to achieve this requirement. In this paper we devise first a non-linear programming formulation of the traffic engineering problem and show that we can achieve the objectives and meet the requirements of demanding customer traffic through the means of an automated provisioning system. We extend the functionality of the automated system through policies. We define resource provisioning policies, and we present example scenarios of their enforcement.
Policy-based Management has been the subject of extensive research over the last decade. More rec... more Policy-based Management has been the subject of extensive research over the last decade. More recently, the IETF has been investigating Policy-based Networking as a means for managing IP-based multi-service networks with quality of service guarantees. Policies are seen as a way to guide the behaviour of a network or distributed system through high-level, declarative directives. We mainly view policies as a means of extending the logic of a management system at runtime, so that it can be adaptive to changing or newly emerging requirements. We are interested in particular in the coexistence of "hard-wired" hierarchical management systems with policy logic in a fashion that the overall system becomes programmable and extensible. In this paper we consider generic issues behind hierarchical policy-based management systems and we present initial work on such a system for dimensioning and dynamic resource management in IP Differentiated Services networks.
IEEE Workshop on IP Operations and Management, 2002
Quality of service based value-added services in IP networks necessitate the use of traffic engin... more Quality of service based value-added services in IP networks necessitate the use of traffic engineering. The latter relies typically on monitoring data for both offline, proactive and dynamic, reactive solutions. A monitoring system should be scalable in terms of network size, speed and number of customers subscribed to value-added services. This article investigates the requirements of scalable monitoring system architectures, proposes principles for designing such systems and validates them through the design and implementation of a scalable monitoring system for QoS delivery in IP Differentiated Services networks. Experimental assessment results are also presented.
2004 IEEE International Conference on Communications (IEEE Cat. No.04CH37577), 2004
The primary role of admission control is to decide on the amount of traffic accepted into the net... more The primary role of admission control is to decide on the amount of traffic accepted into the network so that users conforming to their established traffic contracts achieve predefined performance objectives, e.g. bounded packet loss probability, end-to-end delay. We consider Diffserv networks able to support real-time traffic and we propose a novel framework for admission control that involves both traffic descriptor and measurement-based techniques and we compare its performance with existing approaches. Our simulation results show that the performance of our approach is rather insensitive to variations of the traffic sources. Even when the provided traffic descriptors are as simple as a single value denoting the required peak rate, the proposed scheme achieves satisfactory performance. I.
IEEE Workshop on IP Operations and Management, 2002
Given the emergence of IP networks and the Internet as the multi-service network of the future, i... more Given the emergence of IP networks and the Internet as the multi-service network of the future, it is plausible to consider its use for transporting demanding traffic with high bandwidth and low delay and packet loss requirements. Emerging technologies for scalable quality of service such as Differentiated Services and MPLS can be used for premium quality traffic. We are looking at the problem of intra-domain provisioning in an automated manner from an Internet Service Provider's (ISPs) point of view, i.e. we want to satisfy the contracts with our customers while optimizing the use of the network resources. We also need to be able to dynamically guide the behavior of such an automated provisioning system in order to be able to meet the high-level business objectives. The emerging policy-based management paradigm is the means to achieve this requirement. In this paper we devise first a non-linear programming formulation of the traffic engineering problem and show that we can achieve the objectives and meet the requirements of demanding customer traffic through the means of an automated provisioning system. We extend the functionality of the automated system through policies. Finally, we present example scenarios of the enforcement of network dimensioning policies.
Policy-based Management can guide the behavior of a network or distributed system through high-le... more Policy-based Management can guide the behavior of a network or distributed system through high-level declarative directives that are dynamically introduced, checked for consistency, refined and evaluated, resulting typically in a series of low-level actions. We actually view policies as a means of extending the functionality of management systems dynamically, in conjunction with pre-existing "hard-wired" management logic. In this paper, we first discuss the policy management aspects of a resource management architecture for IP Differentiated Services networks and we focus on the functionality of the network dimensioning component. We then present a detailed description of the design and implementation of the components of the policy management subsystem needed to be deployed in order to make our system policy-driven. Finally, we present examples of network dimensioning policies describing their transformation from their definition by the operator until their enforcement.
Journal of Computer Systems, Networks, and Communications, 2010
Wireless Broadband offers incredibly fast, “always on” Internet similar to ADSL and sets the user... more Wireless Broadband offers incredibly fast, “always on” Internet similar to ADSL and sets the user free from the fixed access areas. In order to achieve these features standardisation was achieved for Wireless LAN (WLANs) and Wireless Metropolitan Area Networks (WMANs) with the advent of IEEE802.11 and IEEE802.16 family of standards, respectively. One serious concern in the rapidly developing wireless networking market has been the security of the deployments since the information is delivered freely in the air and therefore privacy and integrity of the transmitted information, along with the user-authentication procedures, become a very important issue. In this article, we present the security characteristics for the WiFi and the WiMAX networks. We thoroughly present the security mechanisms along with a threat analysis for both IEEE 802.11 and the 802.16 as well as their amendments. We summarise in a comparative manner the security characteristics and the possible residual threats f...
AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible a... more AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible and efficient library of functions that can be used to anonymize live traffic, or packet traces in libpcap file format. Currently, IP, TCP/UDP, HTTP, FTP and Netflow v5 and v9 are supported. Three ready-to-use applications have been implemented on top of this library; one provides basic anonymization functionality for the IP/TCP/UDP protocols, and two more which can perform anonymization on every field of a Netflow datagram, one for v5 and one for v9 respectively.
The deliverable presents the tests undertaken and the results produced for validating and assessi... more The deliverable presents the tests undertaken and the results produced for validating and assessing MESCAL's solution for inter-domain QoS delivery. Experimentation was carried out through simulations and in testbeds comprised of experimental Linux-based routers. It covered functional and performance testing, cost/benefit, scalability, stability, usability tests, of the following components: q-BGP, the enhanced inter-domain QoS routing protocol, regarding its employment in providing QoS in the Internet; inter- and intra-domain traffic engineering for uni- and multicast traffic, pSLS negotiations and handling functions for producing the required TE info and c/pSLS admission control. For each of these component tests, results and the conclusions drawn are presented. The deliverable also includes a scalability analysis of the MESCAL approach.
AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible a... more AnonTool, an open-source implementation of Anonymization API, provides an easy to use, flexible and efficient library of functions that can be used to anonymize live traffic, or packet traces in libpcap file format. Currently, IP, TCP/UDP, HTTP, FTP and Netflow v5 and v9 are supported. Three ready-to-use applications have been implemented on top of this library; one provides basic anonymization functionality for the IP/TCP/UDP protocols, and two more which can perform anonymization on every field of a Netflow datagram, one for v5 and one for v9 respectively.
The tremendous growth of IP networks in the past few years has led to the need for tra c engineer... more The tremendous growth of IP networks in the past few years has led to the need for tra c engineering in order to enable the e ective provision of Quality of Service QoS. Several mechanisms and service models have been developed to assist tra c engineering solutions. In this paper we propose an approach t o p r o vide tra c engineering capabilities in IP Networks by using logical paths and making use of constraint-based optimisation algorithms. Our approach is both proactive and reactive, and considers the existence of the Di erentiated Services model. We present an architecture of a management system, which orchestrates the tra c engineering activities. Finally, we identify some important implementation issues for realising, evaluating and validating our approach, and we point out the directions of our future research e orts.
This Deliverable includes the results and conclusions obtained by the integration, component perf... more This Deliverable includes the results and conclusions obtained by the integration, component performance, and system performance tests carried out in testbeds and simulators.
This document is the result of activity AC1.1 and is a key deliverable of the MESCAL project. It ... more This document is the result of activity AC1.1 and is a key deliverable of the MESCAL project. It comprises three principal components. The first component is the business model, which defines the principal actors in QoS-based service delivery across multiple domains. The second component is the functional architecture, which identifies the key functional blocks required to support inter-domain QoS delivery. The third component is a set of three solution options that provide QoS-based services, each of which is in accordance with the functional architecture.
Deployment of quality-of-service (QoS) based value-added services in IP networks necessitates the... more Deployment of quality-of-service (QoS) based value-added services in IP networks necessitates the use of traffic engineering. Traffic engineering allows service providers to use the network resources efficiently, according to the different quality levels associated with the range of services they offer. Traffic engineering relies typically on monitoring data for both "offline proactive" and "dynamic reactive" approaches. Monitoring data may be used for network provisioning, dynamic resource allocation, route management, and in-service performance verification for value-added IP services. A monitoring system should scale with the network size, the network speed, and the number of customers subscribed to use value-added IP services. This paper investigates the requirements of scalable monitoring system architectures, proposes principles for designing such systems and validates these principles through the design and implementation of a scalable monitoring system for traffic engineering and QoS delivery in IP Differentiated Services networks. Methods for assessing the relative merits of such monitoring systems are proposed. Experimental assessment results prove the scalability, accuracy, and also demonstrate the benefits of the proposed monitoring system.
The broadcast studios of today rely on expensive and proprietary communication means in order to ... more The broadcast studios of today rely on expensive and proprietary communication means in order to network the large number of studio devices. Introducing an IP-based network in the studio environment is becoming an increasingly attractive solution, especially by using IP QoS solutions that are immediately available. In this paper, based on the requirements of a real broadcast studio we propose
The next generation Internet is designed to accommodate flows that span across multiple domains w... more The next generation Internet is designed to accommodate flows that span across multiple domains with quality of service guarantees, in particular bandwidth. In this context, destinations for inter-domain traffic may be reachable through multiple egress routers within a domain. In this paper, we formulate a bandwidth guaranteed egress router selection problem. The objective is to, for each aggregated inter-domain traffic flow, select an egress router that satisfies the end-to-end bandwidth requirement while optimizing the network resource utilization by which we consider three objective functions: minimizing the total bandwidth consumption, improving intra-domain and inter-domain load balancing in the network. We propose a heuristic algorithm with five egress router selection policies to solve this problem. The evaluation of these egress router selection policies through simulation benefits ISPs by choosing the one that fits their target objectives.
End-to-end QoS has been seldom studied in its inter-domain aspects, particularly within the scope... more End-to-end QoS has been seldom studied in its inter-domain aspects, particularly within the scope of the global Internet and from an engineering perspective. This paper is intended to be a contribution in this direction. Starting from a utopian model that achieves any kind of engineering operations without any specific constraint, we deduce the open issues and problems to be solved by a viable inter-domain QoS model that could be deployed in operational networks. We provide some guidelines that will help the design of a QoS-based inter-domain Traffic Engineering solution. This paper is part of the work conducted within the IST MESCAL project.
Given the emergence of IP networks and the Internet as the multiservice network of the future, it... more Given the emergence of IP networks and the Internet as the multiservice network of the future, it is plausible to consider its use for transporting demanding traffic with high bandwidth and low delay and packet loss requirements. Emerging technologies for scalable quality of service such as Differentiated Services and MPLS can be used for premium quality traffic. We are looking at the problem of intra-domain provisioning in an automated manner from an Internet Service Provider's (ISPs) point of view, i.e. we want to satisfy the contracts with our customers while optimising the use of the network resources. We need to be able to dynamically guide the behaviour of such an automated provisioning system in order to be able to meet the high-level business objectives. The emerging policy-based management paradigm is the means to achieve this requirement. In this paper we devise first a non-linear programming formulation of the traffic engineering problem and show that we can achieve the objectives and meet the requirements of demanding customer traffic through the means of an automated provisioning system. We extend the functionality of the automated system through policies. We define resource provisioning policies, and we present example scenarios of their enforcement.
Policy-based Management has been the subject of extensive research over the last decade. More rec... more Policy-based Management has been the subject of extensive research over the last decade. More recently, the IETF has been investigating Policy-based Networking as a means for managing IP-based multi-service networks with quality of service guarantees. Policies are seen as a way to guide the behaviour of a network or distributed system through high-level, declarative directives. We mainly view policies as a means of extending the logic of a management system at runtime, so that it can be adaptive to changing or newly emerging requirements. We are interested in particular in the coexistence of "hard-wired" hierarchical management systems with policy logic in a fashion that the overall system becomes programmable and extensible. In this paper we consider generic issues behind hierarchical policy-based management systems and we present initial work on such a system for dimensioning and dynamic resource management in IP Differentiated Services networks.
IEEE Workshop on IP Operations and Management, 2002
Quality of service based value-added services in IP networks necessitate the use of traffic engin... more Quality of service based value-added services in IP networks necessitate the use of traffic engineering. The latter relies typically on monitoring data for both offline, proactive and dynamic, reactive solutions. A monitoring system should be scalable in terms of network size, speed and number of customers subscribed to value-added services. This article investigates the requirements of scalable monitoring system architectures, proposes principles for designing such systems and validates them through the design and implementation of a scalable monitoring system for QoS delivery in IP Differentiated Services networks. Experimental assessment results are also presented.
2004 IEEE International Conference on Communications (IEEE Cat. No.04CH37577), 2004
The primary role of admission control is to decide on the amount of traffic accepted into the net... more The primary role of admission control is to decide on the amount of traffic accepted into the network so that users conforming to their established traffic contracts achieve predefined performance objectives, e.g. bounded packet loss probability, end-to-end delay. We consider Diffserv networks able to support real-time traffic and we propose a novel framework for admission control that involves both traffic descriptor and measurement-based techniques and we compare its performance with existing approaches. Our simulation results show that the performance of our approach is rather insensitive to variations of the traffic sources. Even when the provided traffic descriptors are as simple as a single value denoting the required peak rate, the proposed scheme achieves satisfactory performance. I.
IEEE Workshop on IP Operations and Management, 2002
Given the emergence of IP networks and the Internet as the multi-service network of the future, i... more Given the emergence of IP networks and the Internet as the multi-service network of the future, it is plausible to consider its use for transporting demanding traffic with high bandwidth and low delay and packet loss requirements. Emerging technologies for scalable quality of service such as Differentiated Services and MPLS can be used for premium quality traffic. We are looking at the problem of intra-domain provisioning in an automated manner from an Internet Service Provider's (ISPs) point of view, i.e. we want to satisfy the contracts with our customers while optimizing the use of the network resources. We also need to be able to dynamically guide the behavior of such an automated provisioning system in order to be able to meet the high-level business objectives. The emerging policy-based management paradigm is the means to achieve this requirement. In this paper we devise first a non-linear programming formulation of the traffic engineering problem and show that we can achieve the objectives and meet the requirements of demanding customer traffic through the means of an automated provisioning system. We extend the functionality of the automated system through policies. Finally, we present example scenarios of the enforcement of network dimensioning policies.
Policy-based Management can guide the behavior of a network or distributed system through high-le... more Policy-based Management can guide the behavior of a network or distributed system through high-level declarative directives that are dynamically introduced, checked for consistency, refined and evaluated, resulting typically in a series of low-level actions. We actually view policies as a means of extending the functionality of management systems dynamically, in conjunction with pre-existing "hard-wired" management logic. In this paper, we first discuss the policy management aspects of a resource management architecture for IP Differentiated Services networks and we focus on the functionality of the network dimensioning component. We then present a detailed description of the design and implementation of the components of the policy management subsystem needed to be deployed in order to make our system policy-driven. Finally, we present examples of network dimensioning policies describing their transformation from their definition by the operator until their enforcement.
Journal of Computer Systems, Networks, and Communications, 2010
Wireless Broadband offers incredibly fast, “always on” Internet similar to ADSL and sets the user... more Wireless Broadband offers incredibly fast, “always on” Internet similar to ADSL and sets the user free from the fixed access areas. In order to achieve these features standardisation was achieved for Wireless LAN (WLANs) and Wireless Metropolitan Area Networks (WMANs) with the advent of IEEE802.11 and IEEE802.16 family of standards, respectively. One serious concern in the rapidly developing wireless networking market has been the security of the deployments since the information is delivered freely in the air and therefore privacy and integrity of the transmitted information, along with the user-authentication procedures, become a very important issue. In this article, we present the security characteristics for the WiFi and the WiMAX networks. We thoroughly present the security mechanisms along with a threat analysis for both IEEE 802.11 and the 802.16 as well as their amendments. We summarise in a comparative manner the security characteristics and the possible residual threats f...
Uploads
Papers by P. Trimintzios