An architecture for managing QoS-enabled VPNs over the Internet

Günter, Manuel; Braun, Torsten; Khalil, Ibrahim

doi:10.1109/lcn.1999.802006

Cited by 17 publications

(6 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The Internet Engineering Task Force (IETF) proposed the VPN standard IPSec [KA98], which is supported by many vendors nowadays. However, VPNs and especially their cryptographic mechanisms are difficult to understand and manage [GBK99]. Therefore, service providers begin to offer VPN services where they setup and manage the tunnel end-points for their customers.…”

Section: Controlling a Virtual Private Network Servicementioning

confidence: 99%

“…How to provide services that demand for collaboration between providers? In earlier work [GBK99] we propose a generic architecture to cope with these problems. However, there are two problems to solve that go beyond the deployment of the service, namely: point-of-view this is equivalent to the question how can (s)he control if (s)he gets the quality the provider promised.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Internet Service Delivery Control with Mobile Code

Günter¹,

Braun²

2000

Telecommunication Network Intelligence

View full text Add to dashboard Cite

The trend towards value-added Internet services causes network providers to deploy new network based quality-of-service and security services. Today, however, the customer has only limited means of controlling the service delivery. For example the network security guaranteed by virtual private network providers cannot be checked with a traditional static approach. This paper presents a novel approach for controlling new IP services using mobile code, and motivates the approach with two examples of new IP services proposed by the Internet engineering task force (IETF).

show abstract

Section: Controlling a Virtual Private Network Servicementioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Internet Service Delivery Control with Mobile Code

Günter¹,

Braun²

2000

Telecommunication Network Intelligence

View full text Add to dashboard Cite

show abstract

“…These topics include the business model, the security architecture necessary, a design for the monetary transactions involved and SLA routing. We want to deploy the results of this paper in a more general service broker architecture that we proposed in [5]. An implementation of bandwidth brokers using the limited notification approach is planned.…”

Section: Discussionmentioning

confidence: 99%

“…There are some special cases however, such as virtual private networks (VPN) [3]. If a host network wants to establish a QoS enabled VPN [5] it could set up an SLA describing the VPN requested. Usually, the VPN peers are known in advance, such as a company's head-quarters and its branch offices.…”

Section: Lack Of Destination Information In Notificationsmentioning

confidence: 99%

Evaluation of bandwidth broker signaling

Günter

Braun

Proceedings. Seventh International Conference on Network Protocols

Self Cite

View full text Add to dashboard Cite

show abstract

“…To provide VLL type services by exploiting these emerging technologies, we [14], [5], [16], [12] and others [22], [26] have proposed the implementation of Bandwidth Brokers. This allows users to specify a guaranteed service (i.e.…”

Section: Introductionmentioning

confidence: 99%

A range-based SLA and edge driven virtual core provisioning in DiffServ-VPNs

Khalil

Braun

Proceedings LCN 2001. 26th Annual IEEE Conference on Local Computer Networks

Self Cite

View full text Add to dashboard Cite

We recently proposed a range-based Service Level Agreement (SLA) [15] approach and edge provisioning in DiffServ capable Virtual Private Networks (VPNs) to customers that are unable or unwilling to predict load between VPN endpoints exactly. With range-based SLAs customers specify their requirements as a range of quantitative values rather than a single one. Various suitable policies and algorithms dynamically provision and allocate resources at the edges for VPN connections. However, we also need to provision the interior nodes of a transit network to meet the assurances offered at the boundaries of the network. Although a deterministic guaranteed service (single quantitative value approach) provides the highest level of QoS guarantees, it leaves a significant portion of network resources on the average unused. In this paper, we show that with range-based SLAs providers have the flexibility to allocate bandwidth that falls between a lower and upper bound of the range only, and therefore, take advantage of this to make multiplexing gain in the core that is usually not possible with a deterministic approach. But dynamic and frequent configurations of an interior device is not desired as this will lead to scalability problems and also defeats the purpose of the DiffServ architecture which suggests to drive all the complexities towards edges. We, therefore, propose virtual core provisioning that only requires a capacity inventory of interior devices to be updated based on VPN connection acceptance, termination or modification at the edges.

show abstract

An architecture for managing QoS-enabled VPNs over the Internet

Abstract: Abstract

Cited by 17 publications

References 6 publications

Internet Service Delivery Control with Mobile Code

Internet Service Delivery Control with Mobile Code

Evaluation of bandwidth broker signaling

A range-based SLA and edge driven virtual core provisioning in DiffServ-VPNs

Contact Info

Product

Resources

About