ITR: Scalable Edge Router for Differentiated Services Networks

本研究针对各种应用的数据及多媒体流量需求，研究并设计协调的流量调节、网络监控、流量控制及网络调配。开发了一种边缘路由器组件，用于监控大型网络的服务水平协议（SLA）违规和带宽盗窃攻击。这种网络监控方案只涉及边缘路由器。调节器和流量控制组件缓解了资源分配中的拥塞和不公平。边缘路由器与上游路由器共享拥塞信息以节省下游域中的资源浪费。需要对网络活动进行持续监控，以在服务质量（QoS）支持下保持对网络安全性的信心。这些解决方案必须是可扩展的，以便在异构互联网中部署它们。可扩展的边缘路由器不能使用过多的每流信息，也不能涉及核心路由器。研究人员在设计边缘路由器时遵循这一原则，以实现可扩展性。以下是通过实验、模拟和与工业界合作获得的贡献列表。对于边缘路由器，我们确定最佳的流量分配率为每个流量类和权重分配在队列中，以最大限度地提高利润的服务提供商的networkdomain。适当的供应提供服务水平协议界限，如每个用户的吞吐量、延迟和丢失。为了确保所有流都得到它们的SLA份额，网络域的流被监视以防止可能的SLA违规和带宽窃取攻击。我们定义并采用吞吐量，延迟，丢包和安全性作为QoS参数的边缘到边缘SLA监控方案的设计。这有助于检测服务违规和攻击，特别是拒绝服务（DoS）攻击。3.边缘路由器上的流量调节器会根据类参数和网络状态智能地标记数据包，并对数据包进行不同的整形。 通过实验研究表明，流特性提供了更好的资源利用率，提高了应用层的服务质量.边缘路由器检测并调节导致自适应流（例如TCP）性能差的无响应流，其在拥塞期间撤退。入口（入口）边缘路由器将拥塞信息传播到先前上游网络域的出口（出口）路由器。这减少了下游网络由于未送达数据包而造成的资源浪费。

This research studies and designs coordinated trafficconditioning, network monitoring, flow control, and provisions the networkproperly to meet the demands for data and multimedia trafficin various applications. An edge router component to monitor a large network for service level agreement (SLA) violations and bandwidth theft attacks is developed. This network monitoring scheme involves only edge routers. The conditioner and flow control components alleviate the congestion and unfairness in resource allocation. The edge routers share the congestion information with upstream routers to save resource wastage in the downstream domains. Continuous monitoring of network activity is required to maintain confidence in the security of networks with quality of service (QoS) support. These solutions have to be scalable in order todeploy them in the heterogeneous Internet. A scalable edge router cannot use excessive per-flow information and cannot involve core routers. The researchers follow this principle in designing edge routers to achievescalability. The following is a list of contributions that are obtainedthrough experiments, simulation, and collaboration with industry.1. For the edge router, we determine the optimal traffic assignment rate for each traffic class and weight assignments at the queue to maximize the profit for the service provider of a networkdomain. Proper provisioning provides service level agreement bounds, such as throughput, delay, and loss for each user.2. To ensure all flows are getting their share of SLA, the flows of a network domain is monitored for possible SLA violation and bandwidth theft attack. We define and employ throughput,delay, packet loss, and security as QoS parameters for the design of an edge-to-edge SLA monitoring scheme. This contributes to detecting service violations and attacks, especially denial of service (DoS) attacks.3. The traffic conditioners at the edge routers intelligently mark and shape packets differentially based on the class parameters and according to network state. Through experimental studies,we show that the flow characteristics provide better resource utilization and improve the application level quality of service.4. The edge routers detect and regulate unresponsive flows that cause poor performance for adaptive flows, such as TCP, which retreats during congestion. The ingress (entry) edge routerspropagate the congestion information to the egress (exit) routers of a previous upstream network domain. This reduces the resource wastage at the downstream network due to undeliveredpackets.