| 1. IntroductionThe rapid development of Internet, IP technology for the development of communication networks as the foundation of the mainstream. IP technology in easy-to-use, inexpensive and rapid business development, the promotion of the key advantages of easy, in all types of terminals and desktop firmly occupy the dominant position. From a business perspective, "Everything Over IP" technology has become a new generation of network business development trend.Faced with the integration of IP technology, the changes in the market environment, "transition" has become the strategic choice of carriers, all operators have put forward by traditional telecom operators to the "comprehensive information service provider" in transition, the forthcoming IPTV, NGN, 3G and other business in the unified load on the IP network operators to provide carrier-class QoS and security services.Because traditional Internet and traditional telecommunications services and networks in the business features of the enormous differences between the requirements, resulting in Internet networks and traditional telecommunications networks in the network design, traffic planning, operation and maintenance, and other key concepts fundamentally different. On the business-class telecommunications network design and maintenance mechanism by means of completely different from the traditional Internet business requirements and IP network in the past, none of these carrier-grade operational support necessary to carry out the characteristics. IP operators in the telecommunications business on the network load tests have fully proved, the current IP telecommunications network far from being able to meet the development needs of business-class, in particular the telecommunications business-class QoS requirements. IP networks in the current-carrying telecommunications business, the key issue facing the following:(1) QoS problem: There is no ability to ensure that the telecommunications business and the quality of service.(2) security: network equipment, operational and management servers vulnerable to hacker attacks, in business theft.(3) maintenance of network planning problem: There is no convenient network planning mechanism to adapt to the flow of telecom business statistics, planning, routing planning requirements; bearer network failures and the lack of timely and effective means of positioning and testing.With the IP telecommunications network, and carrier-class business in a growing number of IP network load, and the traditional telecommunications business and Internet services business in different idea. Traditional telecommunications business services can not be used if it refused to guarantee the quality of service, it was necessary to provide end-to-end network services for the protection of capacity, and traditional Internet is built on the best-effort service ideologically, and do not provide a reliable service for the services quality assurance, IPTV, NGN, 3G and other businesses in the IP network on the network load on the network QoS and security to a higher demand.2.the multi-service bearer network QoS and safety requirements(1) 3G, NGN, IPTV business and signaling requirements of the Comprehensive QoS can be drawn from the telecommunications business-class IP bearer network requirements and definitions are as follows: When a one-way≤40 ms delay, packet loss rate of≤0.1% jitter of less than 10 ms, the network hierarchy for good when≤100 ms of one-way delay, packet loss rate≤1%, jitter less than 20 ms, the network hierarchy for the poor when the one-way delay≤400 ms, packet loss rate≤5 percent, jitter of less than 60 ms, the network hierarchy for the worst.(2) security issues in the IP bearer network is the network planning problem that must be solved. Simple terms, network security system is to ensure that network resources are not trespassing, information and data is not lost and destroyed, and no disruption of network capacity.For the provision of telecommunications network services operators, the need to provide network services to meet the following aspects of the safety requirements: Confidentiality: Only those letters to the receiving side can identify the content of the communication; Consistency of data integrity: send and receive information between the two sides in the transfer process, they are not third-party amendment; Availability: on the network to prevent the types of malicious attacks to protect availability.3. "QoS + security" multi-service QoS and IP bearer network security solutions(1) QoS SolutionTo carry on in the IP-telecommunications business, the first and foremost thing is to solve the problem of QoS. IP technology development under the status quo, the "network planning mechanism CAC + QoS reliability of technology and management techniques," QoS solutions, organic combination of the bearer network business guarantee the quality of service.Avoid congestion is the most fundamental way to solve the QoS, carrier-class business NGN, 3G, IPTV, and others have mature flow forecasting model, network design flow model, in accordance with the model of reasonable relay bandwidth pre-planning, and ensure normal circumstances light load, avoid network congestion at the same time through the bi-planar structure is reasonable under the circumstances abnormal flow circuitous mechanism to guarantee exceptional circumstances the operational quality of service.Network Congestion at the same time is very special circumstances of network congestion is inevitable importance of the business in accordance with the requirements of QoS and divided into different priority in the network congestion circumstances guarantee high-priority business, it is necessary to take measures. Now more mature and can be a large-scale deployment of Diffserv QoS technology is the technology.Diffserv system, the definition of the three types of business, EF (Expedite Forwarding), AF (Assured Forwarding), and BE (Best Effort). EF business is a kind of low latency and low jitter, low packet loss rate of the business, in order to meet these demands, in fact sought assurances that bandwidth. AF operations to ensure a certain degree of service, bandwidth allocation and buffer zones, the agreement defines the four service levels, from 1 to 4. Agreement does not set them in the order, but most realize, AF4 priority, the priority of AF1 low. BE no QoS guarantees. According to different business characteristics and the importance of the common business of the distribution of different service levels.Any network resources are limited, in order to ensure the quality of business, we must learn from the experience of the traditional PSTN, the introduction of call admission control (CAC), the CAC control to ensure that the network carrying business in accordance with the design capacity, network capacity to avoid overload caused all operational service quality fall, when the network resources are close to the critical point, stopped accepting new user access. The different business CAC implement different strategies, such as 3 G / NGN business, through the exchange of soft, soft switch users on the basis of pre-operational planning, and the speaker identified largest trade unions, the bearer network is reserved corresponding resources, According to a number of customers CAC control; IPTV service in accordance with the planning of the implementation of programmes CAC control, and large green, VPN customers in strict accordance with the SLA and the implementation of traffic restrictions.(2) security solutionsNetwork security is the key to IP bearer network is to ensure that the basis of operational security. IP bearer network of comprehensive network security is a process, the first network security framework, using a bi-planar network structure, link redundancy and redundant equipment upgrade network security; fault circumstances of network services; Secondly, According to the different network security features and needs are divided into different security zones, different security measures; again, the safety equipment is the cornerstone of network security, equipment used to control, manage, and transmit phase separation architecture, transmitted to the control plane , management plane to the total flow control authority restrictions on the equipment itself guarantee the security of the final, network security is a dynamic process, and through traffic analysis, safety monitoring technology and equipment for the network to achieve real-time security detection, timely detection security risks and problems, ensure network security, network security closed-loop control.Finally, will be the "QoS and security" solution to the use of the local network planning Changchun, proven solutions that are highly practical, and effective. |
PDF Full Text Request