|
|
Experimental network for QoS support testing
Fogl, Miroslav ; Mácha, Tomáš (referee) ; Novotný, Vít (advisor)
The work specifies problems with support of qualitative requirements in IP network services on the network and link layer. There are also described options of qualitative support of individual networking components in the UTKO laboratory (routers, L3 switches). Created experimental network is loaded by various types of service (VoIP, FTP, HTTP, Video). Data services realization is ensured by available terminals (IP phones, IP cameras, IP video-phones, servers, client stations). Metering is targeted on the manipulation with packets in the router. Options which Cisco router offers are verified by packet analysis. Available methods of dropping are compared on the base of metering and evaluated. Optimal handling with output queue after metering in experimental network is LLQ mechanism. It is able to prefer packets according to their priority in the IP header. Further the difference of link overloading by huge dataflow after QoS policy using is simulated. To reach availability of data services in the whole network is necessary to deal with mechanisms for qualitative services support in all the network components in the network.
|
|
|
Testing of QoS support in experimental data network
Fogl, Miroslav ; Škorpil, Vladislav (referee) ; Novotný, Vít (advisor)
This work deals with the qualitative requirements on services in IP networks based on technology Ethernet. We describe basic methods for imposing quality control mechanisms on services within networks. We elaborate on the ways, in which packets can be handled, overload controlled and transfer speed in network elements limited. Attention is given also to the Network Layer and Link Layer. Based on concrete specifications of network devices in UTKO laboratory an experimental network was designed and constructed. Network consisting of routers and switches linked several servers with client stations. Various types of data transfers (VoIP, HTTP, FTP, video) were generated. Several techniques for handling packets with different priorities were verified and compared. We observed that, in situations when connections are under full load, implementation of QoS support in the network becomes very important. This observation was confirmed by measurements. We also measured the parameters of the system during simulations of various situations, such as overload of a connection due to unsolicited operations or failure of a connection between routers. In order to guarantee the quality of services it is necessary to create a domain, in which rules are consistently observed in all network elements.
|
|
|
Modeling and detection of SlowDrop attack
Mazánek, Pavel ; Smékal, David (referee) ; Sikora, Marek (advisor)
The work's main topic is a recently published slow DoS attack called SlowDrop. The work focuses on the subject of describing the current state of the DoS problem as a whole and the SlowDrop attack as well. It works with this theoretical basis during the implementation of it's own SlowDrop attack model. This model is tested in various scenarios and the outcome results are analyzed and constructively discussed. Furthermore defensive mechanisms against this threat and DoS attacks in general are proposed, specific methods shown and configurations recommended. These methods are followingly tested and evaluated. Last but not least the traffic of a SlowDrop attacker and a legitimate client with bad connection, which the SlowDrop attack is trying to immitate, are compared. From this comparison final conclusions of this work are drawn.
|
|
|
Modeling and detection of SlowDrop attack
Mazánek, Pavel ; Smékal, David (referee) ; Sikora, Marek (advisor)
The work's main topic is a recently published slow DoS attack called SlowDrop. The work focuses on the subject of describing the current state of the DoS problem as a whole and the SlowDrop attack as well. It works with this theoretical basis during the implementation of it's own SlowDrop attack model. This model is tested in various scenarios and the outcome results are analyzed and constructively discussed. Furthermore defensive mechanisms against this threat and DoS attacks in general are proposed, specific methods shown and configurations recommended. These methods are followingly tested and evaluated. Last but not least the traffic of a SlowDrop attacker and a legitimate client with bad connection, which the SlowDrop attack is trying to immitate, are compared. From this comparison final conclusions of this work are drawn.
|
|
|
Experimental network for QoS support testing
Fogl, Miroslav ; Mácha, Tomáš (referee) ; Novotný, Vít (advisor)
The work specifies problems with support of qualitative requirements in IP network services on the network and link layer. There are also described options of qualitative support of individual networking components in the UTKO laboratory (routers, L3 switches). Created experimental network is loaded by various types of service (VoIP, FTP, HTTP, Video). Data services realization is ensured by available terminals (IP phones, IP cameras, IP video-phones, servers, client stations). Metering is targeted on the manipulation with packets in the router. Options which Cisco router offers are verified by packet analysis. Available methods of dropping are compared on the base of metering and evaluated. Optimal handling with output queue after metering in experimental network is LLQ mechanism. It is able to prefer packets according to their priority in the IP header. Further the difference of link overloading by huge dataflow after QoS policy using is simulated. To reach availability of data services in the whole network is necessary to deal with mechanisms for qualitative services support in all the network components in the network.
|
|
|
Testing of QoS support in experimental data network
Fogl, Miroslav ; Škorpil, Vladislav (referee) ; Novotný, Vít (advisor)
This work deals with the qualitative requirements on services in IP networks based on technology Ethernet. We describe basic methods for imposing quality control mechanisms on services within networks. We elaborate on the ways, in which packets can be handled, overload controlled and transfer speed in network elements limited. Attention is given also to the Network Layer and Link Layer. Based on concrete specifications of network devices in UTKO laboratory an experimental network was designed and constructed. Network consisting of routers and switches linked several servers with client stations. Various types of data transfers (VoIP, HTTP, FTP, video) were generated. Several techniques for handling packets with different priorities were verified and compared. We observed that, in situations when connections are under full load, implementation of QoS support in the network becomes very important. This observation was confirmed by measurements. We also measured the parameters of the system during simulations of various situations, such as overload of a connection due to unsolicited operations or failure of a connection between routers. In order to guarantee the quality of services it is necessary to create a domain, in which rules are consistently observed in all network elements.
|
guest ::
