2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and

d practice in network monitoring and analysis

The role of traffic monitoring and analysis in Telecom Operators networks

From the ISP itc to the user: monitored QoS parameters on the WIND Internet&Data Network

WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

Summary

1. Scope 2. Internet Performance Analysis KPI analysis on the ISP interconnection links (carriers, NAPs and peerings links) IP Network Performance Analysis KPI analysis on BB&SBB, National and International links IP monitoring using active probes Broadband Fixed Internet QoS Agcom Deliberation 244/08/CSP project

3.

4. 5.

WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

1.Scope
Goal of this panel is to explain the role of Traffic Monitoring&Analysis in WIND Network. On WIND Data&Internet Network a multitude of services is carried and its important to know the trend of the main defined quality indicators (KPI), not only to reach the placed objectives indicators (KPO) defined with Engineering Team, but also to identify and to suggest actions directed to optimize the performance and to allow Current Planning and Operation & Maintenance Team to plan necessary upgrades to avoid congestion and worsening in performance.

WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

2. Internet Performance Analysis

Interconnections to international carriers and peerings connections to national and international ISPs realized through: the SDH transport layer with the Packet Over Sonet interfaces Ten Gigabit Ethernet links, by international GWs WIND POIs: dedicated peering routers International gateways Dedicated gateways for the interconnection to the main Italian NAPs (IXPs)
WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

Role of traffic monitoring&analysis: to monitor the state of congestion and the performances on the IP links toward the ISPs. KPI worked out on three different levels of aggregation: a) traffic typology: national or international traffic b) traffic direction: between Wind POPs and ISPs c) international carrier Traffic Indicators :
Max Throughput (Gbps) Utilization Rate (%) Daily peak values of the aggregated throughput averaged separately over working and festive days, both for incoming and outgoing directions; for each typology/direction/carrier Average of the daily utilization rates (ratio between daily peak throughput and aggregated bandwidth), for working and festive days.

Two thresholds on the utilization rate are then set, to point out the congestion level on the network: Yellow Threshold (medium criticity): 70%<=Util Rate<90% Red Threshold (major criticity): Util Rate>=90% Histogram representation of the traffic, both for National and International types, utilization trend and percentage split in the traffic volumes, incoming and outgoing, among the different directions for international and national groups are then worked out.

WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

3. IP Network Performance Analysis

Architectural levels in WIND IP Network: Core: transit infrastructure built to interconnect PoPs one with each other and with Gateways. PoP: interconnections of all the elements positioned on the national territory that must be served by IP connectivity. PoP architectures come in many sizes and shapes as they can span big cities as well as the small ones, and in many cases they can comprise a number of physical sites within the same logical PoP. Edge: all network elements that have direct relations with clients and the final users of the IP network, i.e. WIND Customers belonging either to the Consumer or to the Corporate market. The Edges, being part of the PoP, can be viewed as the most external part of the IP network. Links classification: WAN/LAN SuperBackbone links: links through the main transit routers, the international gw, the dedicated national and international peering routers and legacy links between Level1 POP and SuperBackbone (named BB group). WAN/LAN national links: interconnection from the dedicated peering router to the national ISPs, or the dedicated GWs to the IXPs (named NAT group) . WAN/LAN international links: interconnection of the dedicated peering router to the international ISPs/carriers (named INT group).

WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

Role of traffic monitoring&analysis: to monitor the state of congestion and the performances on the IP links. Traffic and Performance Indicators :
IP Link Utilization Rate IP Utilization rate distribution Avg Packet Discard Ratio (PDR) Max Packet Discard Ratio (PDR) Peak Error Rate(PER) Round Trip Delay (RTD) throughput (maximum between input and output) (peak on the 24 hours) / link bandwidth % of IP Link with Utilization Rate within specified ranges. total discarded IP packets/ total transmitted IP packets average of the daily peak values on a specified time total errored IP packets/total transmitted IP packets two-way network latency measured by artificial traffic (ICMP ping with packet length 128 byte), from some edge router of Level 1 PoP toward other edge router (PopToPop RTD) or toward National and International Gateways (PopToGW RTD).

Two thresholds on the utilization rate are then set, to point out the congestion level on the network: Yellow Threshold (medium criticity): 70%<=Util Rate<90% Red Threshold (major criticity): Util Rate>=90% IP Link Utilization Rate is useful to plan necessary upgrades provisioned by Current Planning and carried out by O&M; RTD is useful to understand if a congestion is introducing a worsening in the performance in term of delay; PER gives an idea of transmission problems on the link. Histogram representation of the utilization rate distribution and of RTD and PDR, for the different link typologies are then worked out.

WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

4. IP monitoring using active probes

WIND is going to implement a network performance measurement tool that uses active probes to generate traffic in a continuos, reliable and predictable manner between multiple nodes (onion like model) and across multiple network paths, in order to calculate performance metrics, useful to understand the network quality status for the different point to point network services and to better define KPO at different levels.

Network cover: from the edge to the external gateways Paths definition: a matrix between the nodes on which different probes operation will be made. Probes configured in order to monitor per class traffic over the same path by the use of the DiffServ Code Point (DSCP) bits in the header of the IP packets. Queuing to prioritize the outgoing traffic on the probing interface implemented to minimize the influence, on the results, of the measurement device itself. Each active probe connected to the relevant routers and switches via different GigabitEthernet or ATM E3 interfaces.
WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

Type of measurements worked out: UDP Jitter Operation: response time, one-way delay, per direction jitter, per direction packet loss and connectivity (detection and reporting of out of sequence and corrupted packets). It allows to obtain precision information about network key transport parameters for mission critical and real time traffic applications such as VoIP, video over IP, real time conferencing. The operation is made by generating synthetic UDP traffic from the active probe to a target router and by sending N UDP packets, each of size S, every T ms ICMP Echo Operation: response time, jitter and connectivity. The ICMP Echo operation sends an ICMP echo request packet and waits for the ICMP echo reply from the remote host. DNS Operation: it measures the time needed to resolve a DNS query (either IP or host name) on a specified name server. Operation frequency, probing duration and packet size are defined for each measurement typology, for each type of traffic and per node.

WIND Network Development-Traffic&Performance

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

5. Broadband Fixed Internet QoS Agcom Deliberation 244/08/CSP project

The Agcom 244/08/CSP Deliberation, published on 21.01.09 as the update of the precedent deliberation 131/06 CSP, regarding the monitoring on the quality of the Internet Fixed Access, has the double objective to have certified measures to compare the performance of the different providers, on the two most sold ADSL broadband services, and to allow the final user to test, through a certified free sw downloadable from a specified internet web site, the quality of his line. 2H2010 statistical values have been published at the URL: www.misurainternet.it Monitoring architecture: measurement clients location, where the two PC/modem, one for each broadband service under monitoring, are installed. The access network of the provider (MAN GbE) that collects the ADSL2+ test lines on the IPDSLAM and gives the connectivity to the edge router on the IP Network. The IP Network, from the BRAS/IPRA to the dedicated gateways that allow the connectivity to the IXPs LANs. The IXPs where the measurements servers, both for the statistical measures of the providers and for the final users are installed.
WIND Network Development-Traffic&Performance

10

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

Client location: Regional Inspectorate for all the providers to obtain comparability of the performances of the different providers. Measurement location similar to the medium final user experience. Clients active in Mestre, Firenze, Cagliari, Bari, Palermo, Ancona and Torino. Monitored Wind services: LLU ADSL2+ flat 8MB download speed service (TuttoIncluso/Absolute) LLU ADSL2+ PPU 1.2MB download speed service (HappyNoLimit/ SuperHappyItaly) The measurements are made between the client and the server locations (IXPs): in this way tests run only on the newtork of the single provider and the Internet has no impact on the performances.

WIND Network Development-Traffic&Performance

11

Paola Gallazzi

2nd TMA Phd School 6th June 2011 Napoli, Italy Bridging the gap between theory and practice in network monitoring and analysis

Monitored QoS parameters (ETSI EG 202 057-4): Data transmission speed for FTP download and upload of test files (10xline profile). Metrics: 5percentile, 95-percentile, mean value, standard deviation Packet Delay (one way transmission time): half the time needed for an ICMP Echo Request/Reply Packet (Ping Command). Metrics: mean value, 95-percentile & standard deviation Packet loss ratio: ratio between the number of not replied ICMP Ping commands to the total number of sent commands. Metrics: mean value Unsuccessful data transmission ratio: ratio of unsuccessful data transmissions to the total number of FTP transmission attempts. Metrics: mean value FTP dw/up measure: 20 subsequent tests temporary decorrelated. The files on the server have a dimension (D) related to the line profile speed (S). The transmission time T(ms) is therefore worked out as the time from the start of the FTP/put command to the receiving of the transfer complete command. The time related to the connection to the server, login, binary mode set up is excluded from the measurement. Data transmission speed (kbps) =D/T excluding from this measure the tests whose transmission time is above Tmax, where Tmax=30xD/S

One way Packet Delay (ms): half of the time between the sending of an ICMP Echo Request message (packet 1024 byte) and the receiving of an ICMP Echo Reply message. Measures (10 subsequent tests) are placed at intervals of 10 seconds one from each other to avoid correlation.
WIND Network Development-Traffic&Performance

12

Paola Gallazzi