IP Tunneling Research Articles

Multilayer restoration in IP-Optical networks by adjustable robust optimization and deep reinforcement learning

Today, IP-Optical networks apply IP restoration as the default strategy to recover IP traffic from optical failures. This strategy has been preferred over optical restoration as it circumvents the lengthy delays involved in the reconfiguration of the optical layer. Although fast, IP restoration requires the overprovisioning of costly capacity to cope with optical failures. The advent of software-defined optical networking enables a changeover towards more efficient methods that integrate IP-Optical restoration. These methods should not only restore traffic from failures considered in the planning phase, but they should also efficiently restore traffic from unforeseen failures. This paper studies this problem by investigating optimization algorithms for capacity planning and multilayer restoration based on the theory of adjustable robust optimization (ARO). The approach performs offline optimization of the capacities of IP links as well as the routing and capacities of IP tunnels in both failure-free mode of operation and in a foreseen set of optical failures. Besides, the approach optimizes an affine policy that is applied online to recover IP traffic from unforeseen failures, thereby providing robustness to optical failures not regarded in the planning phase. To overcome the limitations of the affine policy, an alternative robust algorithm is formulated based on deep reinforcement learning (DRL) and graph neural networks (GNNs). By training a DRL-GNN agent, the performance of the restoration process is improved by further minimizing the traffic losses when unforeseen optical failures occur. Results in selected scenarios show that the algorithms outperform IP restoration in terms of capacity requirements, while minimizing the traffic losses in the case of failures. Moreover, the DRL-GNN method significantly improves the ARO-based affine algorithm, which shows the capability of learning the complex relationship between the capacity impairments caused by optical failures and the routing strategy required to restore IP traffic.

Evaluating the impact of microservice-centric computations in internet of vehicles

This paper presents the design and implementation of a hierarchical and multilayered computing framework, specifically tailored to analyze the benefits of Named Data Networking (NDN) enabled microservice-centric in-network computations in autonomous vehicular networks. The proposed framework comprises three layers: an autonomous vehicular network layer, an Edge computing layer, and a centralized Cloud.Modifications were made to the vanilla NDN codebase to facilitate communication between the vehicular network layer, Edge computing and Cloud layer, utilizing the C++ Boost Asio library and IP tunneling mechanism. A microservices-based driver assistance application, consisting of various heterogeneous microservices, was emulated in .NET Core and deployed on different Edge computing terminals and the Cloud. Additionally, RESTful APIs have been developed to enable the vehicular network layer and the physical Edge layer to offload microservice-centric computation requests and retrieve the corresponding computational outcomes. The Entity framework is employed to ensure proper tracking and management of these requests. An HTML-based user interface has also been developed for a visual representation of the request pattern. Extensive testbed experiments reveal that the proposed system significantly optimizes bandwidth consumption, reduces latency, and increases the computed results delivery ratio when compared to conventional monolithic systems.

Cloud Based VPN Using IP Tunneling for Remote Site Interface

Abstract: A strong IP technology that builds a secure and encrypted connection tunnel over the less secure internet is required by the majority of enterprise organizations. Joint location and link connectivity issues must be resolved for distant users and branch offices to have secure access to corporate applications and other resources. This ensures security while data passes over encrypted tunnels. Despite the development of IP-based VPN, JLP and LCP for VPN customer edge devices and provider edge nodes have not yet been completely investigated. The purpose of this work is to apply cutting-edge viewpoints to VPN-IP design that may be used in IP multi-protocol label switching (MPLSVPN) infrastructure for cloud computing. The system architecture includes mathematical formulas. End-to-end delay, throughput, and resource consumption behavior for IP tunneling are seen to behave moderately for low scale workloads. While showcasing the benefits of an MPLS-based IP-based VPN architecture, the difficulties of VPN-IP tunneling are explored. This study suggests cloud-based MPLS-VPN as a workable substitute for traditional VPN-IP tunneling in order to get the best performance and service delivery

SEnD: A Social Network Friendship Enhanced Decentralized System to Circumvent Censorships

While the Internet is open by design, it is still the case that users can be subject to censorship by governments or enterprises in accessing services and data. In this paper we propose SEnD, a fully-distributed censorship circumvention system built upon an overlay, where users have peer-to-peer virtual private IP tunnels to proxies within their social network. With SEnD, users in an uncensored area can act as proxy servers for their social friends in a censored area, allowing them to bypass the censorship. SEnD is able to outperform the current censorship techniques, such as IP address blocking and active probing attacks. We assessed the effectiveness of SEnD through extensive simulations based on a synthetic dataset, as well as experiments based on a prototype implementation. We built our synthetic dataset based on parameters obtained from questionnaires administered both inside and outside China (we consider China as a case study of censorship area). The results show that SEnD is feasible, efficient and scalable. For example, when the proportion of concurrent active users is less than 60%, 99.9% of these users are able to find proxy servers.

A Secure Link-Layer Connectivity Platform for Multi-Site NFV Services

Network Functions Virtualization (NFV) is a key technology for network automation and has been instrumental to materialize the disruptive view of 5G and beyond mobile networks. In particular, 5G embraces NFV to support the automated and agile provision of telecommunication and vertical services as a composition of versatile virtualized components, referred to as Virtual Network Functions (VNFs). It provides a high degree of flexibility in placing these components on distributed NFV infrastructures (e.g., at the network edge, close to end users). Still, this flexibility creates new challenges in terms of VNF connectivity. To address these challenges, we introduce a novel secure link-layer connectivity platform, L2S. Our solution can automatically be deployed and configured as a regular multi-site NFV service, providing the abstraction of a layer-2 switch that offers link-layer connectivity to VNFs deployed on remote NFV sites. Inter-site communications are effectively protected using existing security solutions and protocols, such as IP security (IPsec). We have developed a functional prototype of L2S using open-source software technologies. Our evaluation results indicate that this prototype can perform IP tunneling and cryptographic operations at Gb/s data rates. Finally, we have validated L2S using a multi-site NFV ecosystem at the Telefonica Open Network Innovation Centre (5TONIC), using our solution to support a multicast-based IP television service.

Dynamic MTU: A smaller path MTU size technique to reduce packet drops in IPv6

With an increase in the number of internet users and the need to secure internet traffic, the IPv4 protocol has been replaced by a more secure protocol, namely IPv6. The IPv6 protocol does not allow intermediate routers to fragment the on-going packets. Moreover, due to IP tunneling, some extra headers are added to the IPv6 packet, exceeding the packet size, resulting in increased packet drops due to lower path mtu. One probable solution is to use Path MTU Discovery (PMTUD) to know the path mtu using ICMP packets. Due to dependency on ICMP error messages, this method faces security and failure issues. In this paper, we propose a Dynamic MTU (DMTU) scheme, which tries to handle the packet drops in IPv6 network, by dynamically adjusting the MTU of each link depending upon the incoming packet size, thereby reducing the number of packet drops by a significant amount. Unlike PMTUD, the algorithm works on intermediate node level which is further optimised by assigning specific phases for validation and then, for processing. The method has ability to work in standalone and in parallel with PMTUD. Using mathematical and graphical analysis, our scheme proves to be much more efficient than the state-of-the-art PMTUD scheme.

Research on high security of IP tunnel in virtual private network

IPSec encrypts and authenticates the packets of IP protocol. Both sides of IP network layer communication use encryption authentication, data source authentication and integrity verification to ensure the integrity, confidentiality and anti replay of IP protocol packet transmission. In enterprise network management, we can usually use IPSec VPN technology to establish a secure channel to realize the secure communication between headquarters and branches.[1]

The Technologies of 5G: Opportunities, Applications and Challenges

5G which stands for 5^th Generation Mobile technology, is a groundbreaking technology that the world now witnesses in mobile telecommunications and which has proven to be twenty or more times faster than the existing 4G technology. New standard releases beyond 4G are already in progress by standardization bodies, but at this time implementation and rollout of systems compliant with 5G is still under way in some parts of the world. The goals of a 5G-based telecommunications network would ideally answer the challenges that a 4G model would present once it has entered widespread use. The innovative features of 5G in many ways can be employed to support governments, established companies, new ideas, business models and services that require continuous connections between multiple parties that may include enterprises, telecom providers, mobile operators, government regulators, infrastructure providers and much more. This research highlighted the idea behind 5G technologies, its interconnections with smart objects of Internet of things (IoT) as well as offerings it has gained from others like Blockchain technology. The design for system model of network architecture for 5G mobile systems is described including creating IP tunnels over IP interfaces obtained by connection to the terminal via the access technologies available to the terminal (i.e., mobile user). The economic impact and the contributions of 5G technology is vigorously highlighted while some of the challenges that is faced in designing, deploying and managing the technology is also probed.

Implementation and Analysis of IP Tunnel in Virtual Private Networks

In Virtual Private Network tunneling is designed to examine the performance of Private network for transferring the data. It implements and analysis the IP tunnel in Virtual Private Network (VPN). Tunneling is a method that is used to transfer the data or packet of one protocol using different network communication mediums of another protocol. This research is emphasized to examine the performance of Private network using tunneling for the transfer of data. Basically tunneling is used to send a packet, data or traffic of one protocol using an intermediate structure of another protocol. It is called as the process of encapsulation, transmission, over different types of secured networks as encapsulation and security is one of the procedure within this network provides security .This paper gives overview of a Virtual Private Network with IP Tunnel. Virtual private Network generates a secure encryption and decryption of data with the help of IP tunneling at end points. Basically VPN routes through the internet from a private network to transferring the data from one end (source) to other end (destination). With the help of tunneling and VPN user can check the working of different parameters under various applications.

A Satellite LTE Delay Tolerant Capabilities Tunnelling: Design and Performance Evaluation

This paper presents basic considerations regarding IP-based tunneling support for transmissions for 4G-LTE communication networks that will pass satellite transmissions. In this paper, a delayed tolerance approach to traffic management in LTE via satellite links will be presented. Contribution to this paper will generate quality of service values on satellite communications by bringing 4G-LTE data traffic. We design, implement and evaluate the performance of transport protocol solutions based on the GRE RFC 1701 architecture in the LTE-satellite system. Our paper proposal, is (i) analyzing the current performance and design and implementing it for 4G via satellite using IP tunneling (ii) utilizing the GRE RFC 1701 standards, which creates an ethernet tunnel between two sending data communications on VLAN User Plane, MME and OAM in 4G. The resulting value parameters are throughput index, delay, and performance bandwidth and packet loss. The parameter values generated are Index ∑ Throughput (bit/s) number of data reaching the allocated bandwidth of 6836 Kbps, bandwidth utilization Index = ∑ bandwidth utilization inbound and outbound reaches 100% and packet loss value the resulting one is 0% on transmission connectivity.

An Intrusion Tracking Watermarking Scheme

With the rapid development of edge computing technology, the scale of the network continues to expand. Various types of applications are becoming more widespread. In the edge computing, existing network agents, NAT, IP tunneling technologies, and rapidly evolving anonymous communication systems provide convenience for attackers to hide real IP. In addition, the attacker forms a “stepping” chain by breaking through several intermediate systems of the edge computing network. Thereby implementing an invisible intrusion attack across multiple autonomous domains can increase the difficulty of intrusion tracking. Aiming at the problem of insufficient applicability of existing interval centroid based watermarking technique, this paper proposes a histogram specified interval centroid-based watermarking technique. It improves cross-domain collaborative intrusion tracking. This technique improves the resistance of the prior art to multi-flow attacks in edge computing. It decreases the time and space overhead of the detector. Compared with other interval centroid based watermarking techniques, this method has stronger concealment. The proposed method can effectively defend against multi-flow attacks of edge computing. The time and space overhead of the detector can be reduced when multiple attack flows are tracked in parallel. Thus, it is suitable for edge computing. The robustness and adaptability are improved by this method.

Software-Defined Networking Switches for Fast Single-Link Failure Recovery

In this paper, we consider IP fast recovery from single-link failures in a given network topology. The basic idea is to replace some existing routers with a designated switch. When a link fails, the affected router will send all the affected traffic to the designated switch (through pre-configured IP tunnels), which will deliver the affected traffic to its destination without using the failed link. The goal of the approach is to achieve faster failure recovery than traditional routing protocols that employ reactive computing upon link failures. Software-Defined Networking (SDN) switches can serve as the designated switches because they can flexibly redirect affected traffic to other routes, instead of only to the shortest paths in the network. However, SDN switches are very expensive. Our objective is to minimize the number of SDN switches needed and to guarantee that the network can still recover from any single-link failure. For networks with uniform link costs, we show that using normal non-SDN switches with IP tunneling capability as designated switches can guarantee recovery from any single-link failure. For networks with general link costs, we find that not all single-link failures can be recovered by using non-SDN switches as designated switches; by using SDN switches only when necessary, we can reduce the total number of SDN switches needed compared to an existing work. We conduct extensive simulations to verify our proposed approaches.

Analisis Quality of Service pemanfaatan Ethernet Over IP(EoIP) Tunnel di MikrotikRouterOS dengan Routing Protocol OSPF

At present the need for integrated data communication has become a major need for an office, especially at this time it tends to have many branch offices to support its business processes. Problems will arise if the head office has a branch office in a different city. Such as more costs in building network infrastructure to connect between headquarters and branches. One solution is to use Ethernet Over IP (EoIP) Tunnel. That is one of the tunneling features of the Mikrotik that provides an efficient solution to this problem. Network tunnel that is built between Mikrotik devices over TCP / IP. In running EoIP tunnel simulation using IPv4 to communicate with each other. Ethernet Over IP (EoIP) is a proprietary protocol, which is only owned by MikrotikOS. The routing protocol used in the EoIP tunnel is OSPF. Open Shortest Path First (OSPF) is one dynamic routing protocol (Dynamic Routing) that is able to maintain, manage and distribute routing information between networks following any dynamic network changes. Then the quality of service is observed with throughput and packet loss parameters. The results of throughput parameters, the performance of video streaming services reaches 280.45 kbits / Sec. In the video streaming communication service, the average OSPF EoIP Tunnel packet loss reaches 0.92%.

5G - A Revolutionary Future of Networking

5G will change the way most high-bandwidth users access their Phones as well as computer systems. As 5G pushed over a VOIP (Voice Over Internet Protocol)-enabled device, people will experience a level of call volume and data transmission never experienced before.5G technology is offering the services in Documentation, Product Engineering, supporting electronic transactions (e-transactions-Payments). Today the customer becomes more and more aware of the mobile phone technology, he or she will look for a decent package allot once, including all the advanced features a cellular phone must have. Hence the search for new technology is always the main reason of the leading cell phone giants to out innovate their competitors also. Lately apple has produced shivers all around the electronic world by launching its new handset. Characteristics that are getting embedded in such a small piece of electronics are vast. 5G design is based on user-centric mobile environment with many wireless as well as mobile handset technologies on the ground. In dissimilar wireless environment changes in all, either new or older wireless technologies, are not possible, so each solution towards the next generation mobile and wireless networks must be applied in the service layer although the RAT(radio access technology) belong to the transport layer regarding the NGN(Next Generation Networks) approach. As the proposed design the user terminal has possibility to change the Radio Access Technology (RAT) based on certain criteria. The purpose of transparent change by the mobile terminal in the RAT (Radio Access technology) s, is a technology introduced known as so-called Policy-Router as node in the core network, that establishes IP tunnels to the mobile terminal via different available Rats to that terminal. Selection of RAT (Radio Access technology) is thus achieved by the mobile terminal technology by using the projected user agent for multi-criteria decision making based on the understanding from the performance measurements performed by the mobile terminal itself. The present paper studies the benefits of 5G network in different fields. It studies the architecture of 5G network. The paper also talks about the introduction of 5G in India. In the end of paper an attempt is made to study the challenges in implementing 5G in India.

Robust Mobility Management Scheme in Tactical Communication Networks

In a tactical communication network (TCN), it is important during military operations to provide timely and accurate information transmission. Accordingly, mobility management plays a key role in supporting the mobility and connectivity of mobile nodes (MNs). In battlefield environments, the intermediate nodes(INs), such as a backbone node or an access node, can due to enemy attack be partially or completely damaged. In order to solve these issues, different distributed mobility management (DMM) schemes have been introduced. However, the existing DMM schemes do not offer any efficient solution to maintain the ongoing communication sessions of MNs associated with a destroyed IN. Therefore, in this paper, we propose a robust mobility management scheme for TCNs. The proposed scheme not only enables the disconnected MNs to attach to a new IN, but by creating IP tunnels, also maintains their ongoing communication sessions. In order to evaluate the performance of our proposed scheme, we develop a physical test-bed environment. With the help of mathematical and experimental results, we show that the proposed scheme outperforms the legacy schemes in terms of service availability, network throughput, and first packet arrival time.

Sentralisasi Manajemen Hotspot Menggunakan Transparent Bridge Tunnel EoIP over SSTP

STMIK Bumigora is the first computer college in the province of West Nusa Tenggara (NTB). There are 11 hotspots spread across the campus to provide Internet services through a wireless connection for the academic community. The increasing number of hotspots that must be managed with locations scattered in various Mikrotik routers hence make the process of management and monitoring hotspots become complex, ineffective and efficient. Centralized campus hotspot management using a transparent bridge EoIP over SSTP can help solve the problems at hand. Ethernet over IP (EoIP) Tunneling is a Mikrotik RouterOS protocol that creates an Ethernet tunnel between routers over IP connections. EoIP tunnel built on SSTP tunnel (EoIP over SSTP) with Site-to-Site type. SSTP is a new form of Virtual Private Network (VPN) tunnel that provides a mechanism for encapsulating Point-to-Point Protocol (PPP) traffic through the SSL path of the HTTPS protocol. The IP address of the SSTP interface is used as the local reference and remote address of the EoIP over SSTP tunnel. The application of bridging on EoIP interfaces and interfaces connected to Access Point devices forms a logical network so that the management and monitoring of hotspot services can be performed centrally on one router.

Leveraging proxy mobile IPv6 with SDN

The existing Proxy Mobile IPv6 suffers from a long handover latency which in turn causes significant packet loss that is unacceptable for seamless realtime services such as multimedia streaming. This paper proposes an OpenFlow-enabled proxy mobile IPv6 (OF-PMIPv6) in which the control of access gateways is centralized at an OpenFlow controller of a foreign network. The proposed OF-PMIPv6 separates the control path from the data path by performing the mobility control at the controller, whereas the data path remains direct between a mobile access gateway and a local mobility anchor in an IP tunnel form. A group of simple OpenFlow-enabled access gateways performs link-layer control and monitoring activities to support a comprehensive mobility of mobile nodes, and communicates with the controller through the standard OpenFlow protocol. The controller performs networklayer mobility control on behalf of mobile access gateways and communicates with the local mobility anchor in the Proxy Mobile IPv6 domain. Benefiting from the centralized view and information, the controller caches the authentication and configuration information and reuses it to significantly reduce the handover latency. An analytical analysis of the proposed OF-PMIPv6 reactive and proactive handover schemes shows 43% and 121% reduction in the handover latency, respectively, for highly utilized network. The results gathered from the OF-PMIPv6 testbed suggest similar performance improvements.

Multipathing in Commodity-based Data Center Networks with IP Tunneling

Multipathing in Commodity-based Data Center Networks with IP Tunneling

Closing the Gap Among IP and Per-Flow Green Routing Solutions: The Tunneling Approach

This paper proposes a novel energy-aware adaptive routing solution to face the energy consumption problem in IP networks, exploiting the IP over IP tunneling technique. The problem of minimizing the number of used links by configuring a set of tunnels, referred to as energy minimized tunneling (EMT), is modeled as an integer linear programming problem. The general EMT problem is then slightly modified by adding a set of constraints to make it more applicable to real networks scenario. With respect to previously proposed solutions, the EMT formulation exploits IP tunneling to change traffic routing assuring three main features: 1) no modifications to both data and control planes of current IP routers, so representing a feasible short-term solution for actual IP networks; 2) no need of IP routing protocols convergence to modify the routing paths, so avoiding routing instabilities; and 3) performance comparable with flow-based solutions requiring the deployment of a connection-oriented protocol. We propose a practical solution, called Virtual Interface oN Off (VINO), that exploits the tunnel aggregation mechanism in order to reduce EMT operational complexity. VINO works in two steps and it is based on the preconfiguration of a limited set of (virtual) tunnel interfaces along with a set of static routes on IP routers; thus, these virtual interfaces are dynamically activated and deactivated according to traffic variations. The performance analysis carried out demonstrates that VINO is able to outperform IP green routing solutions proposed in the literature, in terms of energy efficiency.

Study and Analysis of a Dynamic Routing Protocols’ Scalability over a Dynamic Multi-point Virtual Private Network

Multipoint Virtual Private Network is a solution for the dynamic creation of virtual Private IP tunnels between multiple sites automatically, quickly and with the least configuration. Routing protocols are component technologies' main parts of the DMVPN solution, they ensure the smooth establishment of tunnels and have a major impact on network's behavior and transported applications, many works have been conducted assessing the performances of DMVPN network with various routing protocols, this paper enhances and complements other studies, firstly by offering suitable configurations of routing protocols recommended for a scalable DMVPN network, secondly by studying scalability of DMVPN by varying number of sites and dynamic routing protocols. Used evaluation criteria are: Initial convergence delay, Sent traffic, Throughput, Queuing delay. KeywordsPerformances; Routing protocol; Convergence delay; scalability; EIGRP; BGP; OSPF.