QoS Management & Traffic Engineering for IP Networks

1. QoS Management & Traffic Engineering for IP Networks Taesang Choi 2001. 5. 24. Internet Technology Department ETRI

2. Topics • QoS Management & TE Challenges • QoS Management & TE in Papers • QoS & TE Features in Devices • QoS Management & TE in Action • Summary • Q&A

3. QoS Management & TE Challenges

4. LAN WAN QoS Management Challenges • QoS Demand Courtesy: Forrester, 8.98., Fortune1000 Companies

5. Muti-Way (many-to-many bidirectional) Asynchronous Burst Interactive Stream Isochronous Stream Mission-Critical Stream News Distance A/V - - - learning Conferencing Distributed - Session - process announcement Multi-Player Distributed - - games simulation Mission-Critical Real-time Interactive Burst - Burst modeling Chat (IRC) - - Auction Resource - discovery Shared editing - Interactive Stream Two-Way (one-to-one bidirectional) Isochronous Stream Mission-Critical Thin client - Telephone Stream - X-windows - Telemedicine - Isochronous Burst Interactive Burst Remote control - - Database updates Web browsing - Mission-Critical Resource Sharing - Burst - Database access - Financial X- POS transactions - actions Remote login - Chat (text-based) - Synchronous Asynchronous Burst Isochronous Stream Mission-Critical Stream One-Way (one-to-one or one-to-many unidirectional) Stream E-mail Data collection - - Streaming media - Data collection - File Transfer Process - - Data collection - monitoring Process - Push Media - Push media - monitoring Push media - Push media - Best Effort Service Controlled Load Guaranteed Delay Tolerant Delay Intolerant IP Application Taxonomy • Real-time Multimedia • Transaction Processing • Elastic or Bulk Transfer Traffic

6. IP Nets: Enterprises IDC Extranet Remote Office E-commerce site • Low to High speed Intra Nets • Heterogeneous net environ: intra, extra, VPN, etc. • Heterogeneous app environ: simple ~ mission critical • Increased QoS Management requirement 10Mbps Ethernet Remote Office IP VPN Internet Remote Locations: Low-speed Leased Line sites 100Mbps Ethernet Intranet T3 Remote Locations: High-speed Leased Line sites 10Mbps Ethernet 100Mbps – 1Gbps Ethernet Campus Net & NOC Central Site Remote Location: Low-speed FR sites Remote Location: High-speed FR sites 10Mbps Ethernet

7. POP POP POP POP POP POP IP Nets: Service Providers • IP over Frame Relay • IP over ATM • IP over SONET • IP over (D)WDM • IP over DiffServ • IP over MPLS • T3 ~ OC768 • Billing & Service Mgmt • Strong QoS & TE requirements

8. QoS Management Challenges • To limit the amount of BW for web during the day but be flexible enough to impose fewer limits during off-hours • To ensure that file transfers don’t interfere with mission-critical traffic during the day but allow important ordering and financial file transfers that run during the night to get through during their time window

9. QoS Management Challenges • To allow A/V to be delivered with minimum delay • To ensure that the response time for SAP, PeopleSoft, and Tn3270 traffic is three seconds or less and consistent • To ensure that the remote offices serviced by the VPN receive good service • To limit new peer-to-peer traffic such as Napster

10. QoS Management Challenges • To map and guarantee customer’s QoS requirements in a service provider’s network • To monitor, measure, and analyze traffic to ensure SLA and to account for billing • Not a few international firms adopted QoS solutions already and some domestic firms such as a national-scale bank is considering QoS solutions for their mission-critical applications

11. TE Challenges • TE is particularly important concern to service providers • Traffic increases much faster than expected • Thus, over-provisioning doesn’t seem to justify the cost • Large NSPs & ISPs tend to depend on TE for their traffic (QoS) & resource (utilization) control • Current IGP control mechanism is limited

12. TE Challenges • Ideally TE requires • Modification of traffic management parameters, • Modification of parameters associated with routing, • Modification of attributes and constraints associated with resources • The level of manual intervention involved in the TE process should be minimized whenever possible • TE system includes • a set of interconnected network elements, • a network performance monitoring system, • a set of network configuration management tools

13. TE Challenges • On-line TE and Off-line TE is not competitive but complementary to each other • This is particularly important from the Network Management perspective • Although MPLS is designed to meet these requirements, there are still some efforts to achieve TE objectives by modifying the current routing protocol mechanisms • by changing link state flooding frequencies • The integrated approach that achieves TE objectives based on physical topology routing instead of full-mesh overlaying routing (e.g., ATM, MPLS)

14. QoS Management & TE Challenges • The Question is not, “Do you need a QoS or TE manager?” but “Which QoS or TE manager is right for you?”

15. QoS Management & TE in Papers

16. Related Standards • IETF Sub-IP Area’s WGs: MPLS, TE, CCAMP, etc. • CR-LDP/RSVP-TE, ISIS-TE/OSPF-TE, MPLS MIBs • TE for TE requirements, framework, DiffServ-aware MPLS TE, and TE MIB • IETF O&M Area’s WGs: Policy, RAP, SNMPConf, RMON • COPS(Common Open Policy Service) • SPPI (Structure of Policy Provisioning Info) • PIB (Policy Information Base) • SNMP Configuration MIB for DiffServ • IETF Transport Area’s WG: DiffServ • PHBs, PDBs, DiffServ PIB • DMTF(Distributed Management Task Force) • DEN (Directory Enabled Networking) • IEEE 802.1p, 802.1Q and 802.1D: classify Ethernet frames

17. QoS Management & TE Tools:Control Plane Tools • Routing • Intra-domain/Inter-domain • Constraint-based Routing (OSPF-TE/ISIS-TE) • Rerouting/Fast-rerouting (IGP-Shortcut LSPs) • Signaling and Reservation • CR-LDP/RSVP-TE • Path selection/Class mapping based on QoS requirements (DiffServ-aware MPLS TE) • Policy and admission control (DiffServ PDB) • Load sharing/balancing • Path protection/restoration • Accounting, authorization and authentication • Policy-based off-line control • DiffServ-based QoS configuration • MPLS, MPLS VPNs configuration

18. QoS Management & TE Tools:Data Plane Tools • Classification, metering, marking, policing, shaping • Buffer management • Queue scheduling • Congestion control • Merging, aggregation and de-aggregation

19. SLA Management Policy-based Off-line Configuration Automation Signalling Traffic Analysis/ Reporting Policing Admission Control/ Classification Queue Management Constrain-based Routing Congestion Control Traffic Monitoring/ Measurement Shaping QoS Management & TE Tools:Data Plane Tools

20. QoS & TE Features in Devices

21. Cisco’s QoS Features • Classification: • Committed Access Rate (CAR) • Policy Based Routing (PBR) • QoS Policy Propagation through BGP • Congestion Management: • First In First Out (FIFO) • Priority Queueing (PQ) • Custom Queueing (CQ) • Weighted Fair Queueing (WFQ) • Weighted Random Early Detection (WRED)

22. Cisco’s QoS Features • Policing and Shaping: • Committed Access Rate (CAR) • Generic Traffic Shaping (GTS) • Frame Relay Traffic Shaping (FRTS) • Link Efficiency Mechanisms: • Compressed Real Time Protocol • Link Fragmentation and Interleaving (LFI) • Signalling: • RSVP • IP-ATM CoS (Class of Service)

23. VoIP Mission Critical Services Multimedia Video Conference, Collaborative Computing VPNs IntServ DiffServ MPLS Hybrid Frame Relay PPP HDLC SDLC ATM, POS FE,Gig.E 10GE Wireless Fixed,Mobile BroadBand Cable,xDSL The Cisco QoS Framework POLICY-BASED NETWORKING PROVISIONING & MONITORING Signaling Techniques (RSVP, DSCP*, ATM (UNI/NNI)) Classification & Marking Techniques (DSCP, MPLS EXP, NBAR, etc.) Congestion Avoidance Techniques (WRED) Traffic Conditioners (Policing, Shaping, CAR) Congestion Management Techniques (WFQ, CBWFQ, LLQ) Link Efficiency Mechanisms (Compression, Fragmentation) Courtesy: 2001@ Cisco Systems Inc.

24. Cisco’s MPLS TE Features • MPLS TE is built on the following IOS mechanisms • LSP tunnels • Link-state IGPs • with extensions for the global flooding of resource info. and for the automatic routing of traffic onto tunnels as appropriate • Path Calculation Module • Link Management Module • link admission control, bookkeeping of the resource info to be flooded • Label Switching and Forwarding • Signaling Module • Load Sharing Module • Link Protection/Restoration Module

25. Juniper’s QoS & TE Features • No DiffServ Support yet • Mostly focused on MPLS TE & MPLS-based VPN • Not many QoS features like Cisco are provided • Policing, Classification, IP Precedence Rewrite, Queuing and WRR, and RED • But MPLS TE features are superior to that of Cisco’s in some aspects • BGP-based LSP (enable transit traffic ride on it) • per-interface reoptimize timer, etc.

26. Juniper’s MPLS TE Features • LSP tunnels • Link-state IGPs • Path Calculation Module • Link Management Module • Label Switching and Forwarding • Signaling Module • Load Sharing Module • Link Protection/Restoration Module • Fast-Reroute for IGP shortcuts

27. Cisco’s DiffServ Config Example Edge Router 2 Edge Router 1 Core Router Internet Internet DiffServ Domain

28. Cisco’s DiffServ Config Example • SETDSCP Policy Map • class-map match-all EF match access-group 101 • class-map match-all AF1 match access-group 102 • class-map match-all AF21 match access-group 108 • class-map match-all AF22 match access-group 109 • class-map match-all AF23 match access-group 110 • class-map match-all AF3 match access-group 104 • policy-map SETDSCP • class EF set ip dscp 46 • class AF1 set ip dscp 10 • class AF21 set ip dscp 18 • class AF22 set ip dscp 20 • class AF23 set ip dscp 22 • class AF3 set ip dscp 26

29. Cisco’s DiffServ Config Example • VOIP Policy Map • class-map match-all premium match ip dscp 46 • class-map match-all gold match ip dscp 10 12 14 • class-map match-all silver match ip dscp 18 20 22 • class-map match-all bronze match ip dscp 26 28 30 • class-map best-effort match access-group 105 • policy-map VOIP • class premium priority 500 • class gold bandwidth percent 35 • class silver shape average 320000 bandwidth percent 25 • class bronze bandwidth percent 15 • class best-effort police 56000 1750 1750 conform-action set-dscp-transmit 0

30. Cisco’s DiffServ Config Example • access-list 101 permit udp any any range 16384 32768 • access-list 102 permit tcp any any eq tacacs • access-list 104 permit tcp any any eq www • access-list 105 permit ip any any • access-list 108 permit tcp any any eq telnet • access-list 109 permit tcp any any eq smtp • access-list 110 permit tcp any any eq ftp

31. Cisco’s MPLS Config Example • Configuring MPLS TE comprises • Configuring a device to support tunnels • Configuring an interface to support RSVP based tunnel signaling and IGP flooding • Configuring IS-IS or OSPF for MPLS TE • Configuring an MPLS TE tunnel • Configuring a tunnel that an IGP can use

32. Cisco’s MPLS Config Example • Sample MPLS TE Configuration

33. Global Configuration • Sample for router 1 ip cef mpls traffic-eng tunnels interface loopback0 ip address 11.11.11.11 255.255.255.255 interface s1/0 ip address 131.0.0.1 255.255.0.0 mpls traffic-eng tunnels ip rsvp bandwidth 1000

34. Tunnel Configuration • Configuring tunnel 1 interface tunnel1 ip unnumbered loopback0 tunnel destination 17.17.17.17 tunnel mode mpls traffic-eng tunnel mpls traffic-eng bandwidth 100 tunnel mpls traffic-eng priority 1 1 tunnel mpls traffic-eng path-option 1 dynamic • Verifying tunnel 1 show mpls traffic-eng tunnels show ip interface tunnel1

35. Tunnel Configuration – cont’d • Configuring an explicit IP path • Configuring tunnel 2 ip explicit-path identifier 1 next-address 131.0.0.1 next-address 135.0.0.1 next-address 136.0.0.1 next-address 133.0.0.1 interface tunnel2 ip unnumbered loopback0 tunnel destination 17.17.17.17 tunnel mode mpls traffic-eng tunnel mpls traffic-eng bandwidth 100 tunnel mpls traffic-eng priority 1 1 tunnel mpls traffic-eng path-option 1 explicit identifier 1

36. JunOS MPLS Config Example:Minimum & Named Path Config [edit] interfaces { interface-name { logical-unit-number { family mpls; # required to enable MPLS on this intf. } }} protocols { mpls { interface (interface-name | all); # required to enable MPLS on this intf. path to-san-jose { # required to setup explicit LSP 14.1.1.1 strict; 11.1.1.1 loose; } } rsvp { interface interface-name; # required for RSVP signaled MPLS only } }

37. JunOS MPLS Config Example:LSP Creation Config & Attributes • adaptive • admin-group • bandwidth • class-of-service • fast-reroute • hop-limit • no-cspf • optimize-timer • preference • priority • retry-timer • record or no-record • standby [edit protocols mpls] label-switched-path lsp-path-name { toaddress; # egress address fromaddress; # ingress address # lots of statements for setting various LSP attributes; primary path-name { # lots of statements for setting various path attributes; } secondary path-name { # lots of statements for setting various path attributes; } }

38. QoS Management & TE in Action

39. PacketShaper: Application QoS • Packeteer’s QoS solution • Enterprise Edge Solution • PacketShaper/AppCelera ICX • Hardware and Software bundle • Classify Traffic • Based on 5-tuples, mime-types, users, etc. • Analyze Behavior • Apps bandwidth consumption rate, response time, etc. • Control Performance • Apply policy based on the analysis results • Report Trends • http://www.packeteer.com

40. QoSWorks • Sitara Networks’ QoS Solution • Enterprise Edge Solution • Hardware and Software bundle solution • Bandwidth Management • Layer2 through 7 classification, switching, shaping, queuing, statistics and bridging • Application-specific Traffic Management • Proxies, signaling, caching, redirection for specific application types • Policy Management • Analysis, decisions, and enforcement across the network • http://www.sitaranetworks.com

41. ServicePoint System • ADC’s QoS Solution • WAN QoS solution (e.g. FR-based Intranet) • Hardware and Software bundle solution • ServicePoint SDU & Manager • Policy-based bandwidth management • Service partitioning • WAN performance analysis • Puts SDUs at the boundary of LAN & WAN • TCP rate control • http://www.adc.com/access

42. FloodGate-1: Secure QoS • Checkpoint’s integrated solution for VPNs, Firewalls, and QoS • Bandwidth control • Upto 4Mbps bidirectional • Traffic classification • Over 150 IP services and applications based on src, dst, file designator, URL, time of day • Policy-based Management • Scalability and Ease of use • http://www.checkpoint.com

43. FloodGate-1: Secure QoS DMZ Internet Standalone QoS Device VPN Firewall • When the VPN encrypts packets, classification is impossible • NAT is performed in Firewall, Classification/prioritization is impossible LAN

44. FloodGate-1: Secure QoS DMZ Internet Standalone QoS Device VPN Firewall • When located behind VPN/Firewall, bandwidth management decisions corrupted by VPN encryption and Firewall traffic LAN

45. FloodGate-1: Secure QoS DMZ Internet Firewall Standalone QoS Device VPN LAN • Integration solves all

46. XML XML Qos network policy configuration Network service level verification Per-device traffic class configuration Per-device traffic class monitoring Cisco’s QoS & Service Mgmt CONFIGURE VERIFICATION TROUBLESHOOT Service level troubleshooting QPM CW2000 RWAN (IPM) Device Network Wide CW2000 SMS QDM, ... QDM, ... Courtesy: 2001@ Cisco Systems Inc.

47. Orchestream 2.1 • Market leading Policy-based QoS & MPLS VPN Manager • Multi Protocol Label Switching (MPLS) control module for implementing network-based IP-Virtual Private Networks (IP-VPNs) • QoS control module for managing the Quality of Service (QoS) levels of specific traffic • Security control module for managing access to specific parts of the network • Integration Module for integration with other IP network management software

48. Orchestream 2.1 Courtesy: 2001 @ Orchestream Inc.

49. NPAT & MPLSView • WANDL’s MPLS Modeling Tools • Leading provider of MPLS modeling tools • Design and simulate IP/MPLS networks • Multi-vendor config file parsing and integrity checking • Bottleneck discovery and solutions • Prediction of e2e delays, throughputs, packet drops, and link utilization • Failure scenario simulations • Reports and topology diagrams • http://www.wandl.com

50. MPLSView Screenshot