DOCSLIB.ORG

Opnsense A10 Dual Core Rack Series DATASHEET

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Opnsense A10 Dual Core Rack Series DATASHEET OPNsense A10 Dual Core Rack Series DEC2600, DEC2610 (c) 2018 Deciso B.V., All Rights Reserved. [rev.190618] (c) 2018 Deciso B.V., The OPNsense A10 Dual Core Rack secures your network with high-end features such as inline intrusion prevention, virtual private networking, two factor authentication, captive portal and filtering web proxy. The optional high availability setup ensures stable network performance with automatic failover and synchronised states, minimising disruption. Keep your network secure and the good packets flowing. Guard Web Access 900Mbps Throughput Filtering (SSL) Proxy 75.000 Packets per Second Captive Portal with Voucher support 100Mbps Inline High Speed 16GB / 128GB SSD Intrusion Prevention & Offering Sufficient Space for SSL Finger Printing Logging & Reporting (SSD version) Fast Filtering System wide two-factor 10.000 connections P/Second authentication. Compatible with Google Authenticator. Hardware Assisted Encryption 300Mbps IPsec (AES256GCM16) Se#$%&n( Ne+w.k0 DATASHEET Deciso Sales B.V. • +31 187 744 020 • [email protected] • www.deciso.com HARDWARE DUTCH QUALITY - MADE IN THE NETHERLANDS DEC2600 & DEC2610 DEC2600 & DEC2610 Se#$%&n( Ne+w.k0 Deciso Sales B.V. • +31 187 744 020 • [email protected] • www.deciso.com SOFTWARE VERSATILE - OPEN SOURCE - FULLY FEATURED OPNsense is Deciso’s fast growing open source firewall and security platform released under an Open Source Initiative approved license. It’s rich feature set is combined with the benefits of open and verifiable sources. All features can be used from within the easy to use graphical interface, equipped with a build-in search feature for quick navigation. Protecting your network has never been this easy, utilise the integrated intrusion prevention capable of blacklisting based on SSL fingerprints and the two-factor authentication for safely connecting mobile users. Keep full insight on the traffic flowing trough your firewall at all times, with its advanced Netflow capture, aggregate & reporting tool ‘Insight’. High-end Security Made Easy™ Businesses School networks Protect your business network and secure Limit and share available bandwidth your connections. evenly amongst students and utilise the From the stateful inspection firewall to the category based web filtering to filter inline intrusion detection & prevention unwanted traffic such as adult content and system everything is included for free.Use malicious websites. Its easy to setup as no the traffic shaper to enhance network additional plugins nor packages are performance and prioritise you voice over required. ip above other traffic. Backup your configuration to the cloud automatically, no need for manual backups. Hotels & Campings On the road Hotels and campings usually utilise a Even on the road OPNsense is a great captive portal to allow guests (paid) asset to your business as it offers access to internet for a limited duration. OpenVPN and IPSec VPN solution with Guests need to login using a voucher they road warrior support and two-factor can either buy or obtain for free at the authentication. The easy client exporter reception. OPNsense has a build-in make configuring your OpenVPN SSL captive portal with voucher support and client setup a breeze. can easily create them on the fly. Remote Offices & SOHO Utilise the integrated site to site VPN (IPsec or SSL VPN) to create a secure network connection to and from your remote offices. Enjoy the easy configuration and online searchable documentation with simple how-to type of articles to get you started, quickly. Se#$%&n( Ne+w.k0 Deciso Sales B.V. • +31 187 744 020 • [email protected] • www.deciso.com SOFTWARE FEATURE OVERVIEW • GUI ๏ Inline Prevention ๏ History & Diff support • SSH / Console ๏ Integrated rulesets ๏ File Backup Certificates • SSL Blacklists ๏ Cloud Backup Stateful firewall ๏ Certificate Authority • Feodo Tracker SNMP ๏ Filter by • Create or Import CA’s • Geolite2 Country IP ๏ Monitor & Traps • Source • Create or Import Certificates • Emerging Threats ETOpen Diagnostics • Destination ๏ Let’s Encrypt (Plugin) ๏ SSL Fingerprinting ๏ Filter reload status • Protocol • Automated (Trusted) CA ๏ Auto rule update using ๏ Firewall Info (pfInfo) • Port 802.1Q VLAN support configurable cron ๏ Top Users (pfTop) • OS (OSFP) ๏ max 4096 VLAN’s Captive Portal ๏ Firewall Tables ๏ Limit simultaneous connections on Link Aggregation & Failover ๏ Typical Applications • Aliases a per rule base ๏ Failover • Guest Network • Bogons ๏ Log matching traffic on a per rule ๏ Load Balance • Bring Your Own Device (BYOD) ๏ Current Open Sockets bases ๏ Round Robin • Hotel & Camping Wifi Access ๏ Show All States ๏ Policy Based Routing ๏ Cisco Ether Channel (FEC) • Template Management ๏ State Reset ๏ Packet Normalisation ๏ 802.3ad LACP • Multiple Zones ๏ State Summary ๏ Option to disable filter for pure Other Interface types ๏ Authenticators ๏ Wake on LAN router mode ๏ Bridged interfaces • All available authenticators ๏ ARP Table Policy organisation ๏ Generic Tunnel Interface (GIF) • None (Splash Screen Only) ๏ DNS Lookup ๏ Alias Support ๏ Generic Routing Encapsulation ๏ Voucher Manager ๏ NDP Table • IP addresses ๏ 802.1ad QinQ • Multiple Voucher Databases ๏ Ping • Port ranges Network Address Translation • Export vouchers to CSV ๏ Packet Capture • Domain names (FQDN) ๏ Port forwarding ๏ Timeouts & Welcome Back ๏ Test Port ๏ Interface Groups ๏ 1:1 of ip’s & subnets ๏ Bandwidth Management ๏ Trace route • Create security zones with equal ๏ Outbound NAT • Use Traffic Shaper Monitoring rules ๏ NAT Reflection ๏ Portal bypass ๏ Zabbix Agent (Plugin) ๏ Rule Category Traffic Shaping • MAC and IP whitelisting ๏ Monit (Plugin) • Easy access rule sets ๏ Limit bandwidth ๏ Real Time Reporting • Proactive System Monitoring Granular control state table ๏ Share bandwidth • Live top IP bandwidth usage Enhanced Reporting ๏ Adjustable state table size ๏ Prioritise traffic • Active Sessions ๏ Network Flow Analyser ‘Insight’ ๏ On a per rule bases ๏ Rule based matching • Time left • Fully Integrated • Limit simultaneous client • Protocol • Rest API • Detailed Aggregation connection • Source Virtual Private Networks • Graphical Representation • Limit states per host • Destination ๏ IPsec • Clickable and Searchable • Limit new connections per • Port • Site to Site • CVS Exporter second • Direction • Road Warrior ๏ System Health • Define state timeout IGMP Proxy ๏ OpenVPN • Round Robin Data • Define state type ๏ For multicast routing • Site to Site • Selection & Zoom ๏ State types Universal Plug & Play • Road Warrior • Exportable • Keep ๏ Fully supported • Easy client configuration ๏ Traffic Graph • Sloppy Dynamic DNS exporter • Live Traffic Monitoring • Modulate ๏ Selectable form a list ๏ Tinc (Plugin) Network Monitoring • Synproxy ๏ Custom • Full mesh routing ๏ Netflow Exporter • None ๏ RFC 2136 support ๏ ZeroTier (Plugin) • Version 5 & version 9 ๏ Optimisation options DNS Forwarder • VPN, SDN & SD-WAN • Local for ‘Insight’ • Normal ๏ Host Overrides ๏ PPTP (Legacy) Firmware • High latency ๏ Domain Overrides ๏ LT2P (Legacy) ๏ Support Virtual Installs • Agressive DNS Server High Availability • VMware tools (Plugin) • Conservative ๏ Host Overrides ๏ Automatic hardware failover • Xen Guest Utilities (Plugin) Authentication • A records ๏ Synchronised state table ๏ Easy Upgrade ๏ External Servers • MX records ๏ Configuration synchronisation • Reboot warning for base • LDAP ๏ Access Lists Caching Proxy upgrades • Radius DNS Filter ๏ Multi interface ๏ SSL Flavour selectable ๏ Integrated Servers ๏ Supports OpenDNS ๏ Transparent Mode • OpenSSL • Local User Manager DHCP Server ๏ Support SSL Bump • LibreSSL • Vouchers / Tickets ๏ IPv4 & IPv6 ๏ SSL Domain only (easy filtering) ๏ Selectable Package Mirror • FreeRadius (Plugin) ๏ Relay Support ๏ Access Control Lists ๏ Reinstall Single Package Authorisation ๏ BOOTP options ๏ Blacklists ๏ Lock Package (prevents upgrade) ๏ User Interface Multi WAN ๏ Category Based Web-filter ๏ Audit Feature • Local User Manager ๏ Load balancing ๏ Traffic Management • Check installed packages for Accounting ๏ Failover ๏ Auto sync for remote blacklists known security vulnerabilities ๏ FreeRadius (Plugin & External) ๏ Aliases ๏ ICAP (supports virus scan engine) ๏ Plugin Support ๏ Vouchers / Tickets Load Balancer Virus scanning REST API 2-Factor Authentication ๏ Balance incoming traffic over ๏ External engine support (ICAP) ๏ ACL support ๏ Supports TOTP multiple servers ๏ ClamAV (Plugin / C-ICAP) Online Documentation ๏ Google Authenticator Network Time Server Reverse Proxy ๏ Free & Searchable ๏ Support services: ๏ Hardware devices ๏ HAProxy - Load balancer (Plugin) • Captive Portal • GPS Online Identity Protection • Proxy • Pulse Per Second ๏ Tor - Anonymity online (Plugin) • VPN Intrusion Detection & Prevention Backup & Restore Se#$%&n( Ne+w.k0 Deciso Sales B.V. • +31 187 744 020 • [email protected] • www.deciso.com SPECIFICATIONS PERFORMANCE & FEATURES DEC2600 DEC2610 Hardware Specifications GbE RJ45 Ports [ 10/100/1000Mbps ] 3 3 USB Ports 1 1 Console Port 1 1 Internal Storage 16GB 128GB Memory 4GB DDR3 4GB DDR3 CPU Cores 2 (1.0Ghz) 2 (1.0Ghz) Virtual Interfaces (802.1q VLANS)1 4093 4093 System Performance Firewall Throughput 900 Mbps 900 Mbps Firewall Packets Per Second 75000 75000 Firewall Port to Port Throughput 850Mbps 850Mbps Firewall Port to Port Packets Per Second 70000 70000 Concurrent Sessions 3000000 3000000 New Connections Per Second 10000 10000 Firewall Policies (Recommended Maximum)1 5000 5000 IPsecimum) VPN Throughput 300 300 SSL VPN Throughput (single tunnel) 85Mbps
Load more

Recommended publications
  • A Letter to the FCC [PDF]
    Before the FEDERAL COMMUNICATIONS COMMISSION Washington, DC 20554 In the Matter of ) ) Amendment of Part 0, 1, 2, 15 and 18 of the ) ET Docket No. 15­170 Commission’s Rules regarding Authorization ) Of Radio frequency Equipment ) ) Request for the Allowance of Optional ) RM­11673 Electronic Labeling for Wireless Devices ) Summary The rules laid out in ET Docket No. 15­170 should not go into effect as written. They would cause more harm than good and risk a significant overreach of the Commission’s authority. Specifically, the rules would limit the ability to upgrade or replace firmware in commercial, off­the­shelf home or small­business routers. This would damage the compliance, security, reliability and functionality of home and business networks. It would also restrict innovation and research into new networking technologies. We present an alternate proposal that better meets the goals of the FCC, not only ensuring the desired operation of the RF portion of a Wi­Fi router within the mandated parameters, but also assisting in the FCC’s broader goals of increasing consumer choice, fostering competition, protecting infrastructure, and increasing resiliency to communication disruptions. If the Commission does not intend to prohibit the upgrade or replacement of firmware in Wi­Fi ​ ​ devices, the undersigned would welcome a clear statement of that intent. Introduction We recommend the FCC pursue an alternative path to ensuring Radio Frequency (RF) compliance from Wi­Fi equipment. We understand there are significant concerns regarding existing users of the Wi­Fi ​ spectrum, and a desire to avoid uncontrolled change. However, we most strenuously advise against prohibiting changes to firmware of devices containing radio components, and furthermore advise against allowing non­updatable devices into the field.
    [Show full text]
  • Evaluation of Priority Scheduling and Flow Starvation for Thin Streams with FQ-Codel
    2015 European Conference on Networks and Communications (EuCNC) Evaluation of Priority Scheduling and Flow Starvation for Thin Streams with FQ-CoDel Eduard Grigorescu, Chamil Kulatunga, Gorry Nicolas Kuhn Fairhurst Télécom Bretagne, IRISA School of Engineering, University of Aberdeen, UK [email protected] {eduard, chamil, gorry}@erg.abdn.ac.uk Abstract— Bufferbloat is the result of oversized buffers and algorithms, managing packet scheduling and isolation/capacity induced high end-to-end latency experienced by applications allocation among flows, can be introduced. As one example of across the Internet. This additional delay can adversely impact a scheme that mixes both classes, FlowQueue-CoDel (FQ- thin streams that frequently exchange small amounts of data, but CoDel) [7] is a scheduling scheme that features prioritization have stringent latency requirements. Active Queue Management and flow isolation. FQ-CoDel creates one sub-queue per flow (AQM) techniques, such as Controlled Delay (CoDel), can control and applies CoDel on each of them. The awareness of the the queuing delay in a network device to ensure low latency by dropping packets to indicate incipient congestion. FlowQueue- latency resulting from over-provisioned buffers has been CoDel (FQ-CoDel) is a scheduling scheme that creates one sub- accompanied by an increase in real-time applications such as queue per flow and applies CoDel on each of them. FQ-CoDel Voice over Internet Protocol, gaming or financial trading features: (1) priority scheduling for low-rate traffic; (2) flow applications. As one example, the latency experienced by isolation; (3) queue management with CoDel. First, this paper gamers can directly impact the perceived value of the network fills a gap in the understanding of FQ-CoDel by analyzing what service [10].
    [Show full text]
  • AQM Algorithms and Their Interaction with TCP Congestion Control Mechanisms
    View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by Universidad Carlos III de Madrid e-Archivo Grado Universitario en Ingenier´ıaTelem´atica 2016/2017 Trabajo Fin de Grado Control de Congesti´onTCP y mecanismos AQM Sergio Maeso Jim´enez Tutor/es Celeste Campo V´azquez Carlos Garc´ıaRubio Legan´es,2 de Octubre de 2017 Esta obra se encuentra sujeta a la licencia Creative Commons Reconocimiento - No Comercial - Sin Obra Derivada Control de Congesti´onTCP y mecanismos AQM By Sergio Maeso Jim´enez Directed By Celeste Campo V´azquez Carlos Garc´ıaRubio A Dissertation Submitted to the Department of Telematic Engineering in Partial Fulfilment of the Requirements for the BACHELOR'S DEGREE IN TELEMATICS ENGINEERING Approved by the Supervising Committee: Chairman Marta Portela Garc´ıa Chair Carlos Alario Hoyos Secretary I~naki Ucar´ Marqu´es Deputy Javier Manuel Mu~noz Garc´ıa Grade: Legan´es,2 de Octubre de 2017 iii iv Acknowledgements I would like to thanks my tutors Celeste Campo and Carlos Garcia for all the support they gave me while I was doing this thesis with them. To my parents, who believe in me against all odds. v vi Abstract In recent years, the relevance of delay over throughput has been particularly emphasized. Nowadays our networks are getting more and more sensible to latency due to the proliferation of applications and services like VoIP, IPTV or online gaming where a low delay is essential for a proper performance and a good user experience. Most of this unnecessary delay is created by the misbehaviour of many buffers that populate Internet.
    [Show full text]
  • Auto-Tuning Active Queue Management
    2017 9th International Conference on Communication Systems and Networks (COMSNETS) Auto-Tuning Active Queue Management Joe H. Novak Sneha Kumar Kasera University of Utah University of Utah Abstract not require pre-specification of even those parameters including 3 Active queue management (AQM) algorithms preemptively EWMA weights or protocol timer intervals that are routinely drop packets to prevent unnecessary delays through a network specified in protocol design and implementation. while keeping utilization high. Many AQM ideas have been When we view the network link in terms of utilization proposed, but none have been widely adopted because these rely and the queue corresponding to the link in terms of delay on pre-specification or pre-tuning of parameters and thresholds (Fig. 1 shows a typical delay-utilization curve), we see that that do not necessarily adapt to dynamic network conditions. as utilization increases, delay also increases. At a certain point, We develop an AQM algorithm that relies only on network however, there is a very large increase in delay for only a small runtime measurements and a natural threshold, the knee on improvement in utilization. This disproportionate increase in the delay-utilization curve. We call our AQM algorithm Delay delay is of little to no value to the applications at the endpoints. Utilization Knee (DUK) based on its key characteristic of We want to avoid this unstable region of high increase in delay keeping the system operating at the knee of the delay-utilization with little increase in utilization. As a result, a natural threshold curve. We implement and evaluate DUK in the Linux kernel in becomes apparent.
    [Show full text]
  • Controlling Queuing Delays for Real-Time Communication: the Interplay of E2E and AQM Algorithms
    Controlling Queuing Delays for Real-Time Communication: The Interplay of E2E and AQM Algorithms Gaetano Carlucci Luca De Cicco Saverio Mascolo Politecnico di Bari, Italy Politecnico di Bari, Italy Politecnico di Bari, Italy [email protected] [email protected] [email protected] ABSTRACT control algorithm; the other placed in the network routers, Real-time media communication requires not only i.e. the Active Queue Management (AQM) algorithm. congestion control, but also minimization of queuing delays When designing end-to-end congestion control algorithms to provide interactivity. In this work we consider the case of for video conference, UDP is a natural choice, since real-time communication between web browsers (WebRTC) such applications cannot tolerate large latencies due to and we focus on the interplay of an end-to-end delay-based TCP packet retransmissions. Additionally, delay-based congestion control algorithm, i.e. the Google congestion congestion control algorithms are usually preferred to control (GCC), with two delay-based AQM algorithms, loss-based ones since they can detect congestion before namely CoDel and PIE, and two flow queuing schedulers, packets are lost due to buffer overflow. i.e. SFQ and Fq Codel. Experimental investigations show On the other hand, AQM schemes control the router that, when only GCC flows are considered, the end-to-end buffers by dropping the packets or marking them if ECN algorithm is able to contain queuing delays without AQMs. is used [21]. Despite the fact that many AQM algorithms Moreover the interplay of GCC flows with PIE or CoDel have been proposed over the past two decades [7], the leads to higher packet losses with respect to the case of a adoption of these algorithms has been hampered by two DropTail queue.
    [Show full text]
  • Controlling Queuing Delays for Real-Time Communication: the Interplay of E2E and AQM Algorithms
    Controlling Queuing Delays for Real-Time Communication: The Interplay of E2E and AQM Algorithms Gaetano Carlucci Luca De Cicco Saverio Mascolo Politecnico di Bari, Italy Politecnico di Bari, Italy Politecnico di Bari, Italy [email protected] [email protected] [email protected] ABSTRACT requirements can be met by employing two complementary control Real-time media communication requires not only congestion algorithms: one placed at the end points, namely the end-to-end control, but also minimization of queuing delays to provide congestion control algorithm; the other placed in the network interactivity. In this work we consider the case of real-time routers, i.e. the Active Queue Management (AQM) algorithm. communication between web browsers (WebRTC) and we focus When designing end-to-end congestion control algorithms on the interplay of an end-to-end delay-based congestion control for video conference, UDP is the natural choice, since such algorithm, i.e. the Google congestion control (GCC), with two applications cannot tolerate large latencies due to TCP packet delay-based AQM algorithms, namely CoDel and PIE, and two retransmissions. Additionally, delay-based congestion control flow queuing schedulers, i.e. SFQ and Fq_Codel. Experimental algorithms are usually preferred to loss-based ones since they can investigations show that, when only GCC flows are considered, detect congestion before packets are lost due to buffer overflow. the end-to-end algorithm is able to contain queuing delays without On the other hand, AQM schemes control the router buffers AQMs. Moreover the interplay of GCC flows with PIE or CoDel by dropping the packets or marking them if ECN is used [21].
    [Show full text]
  • Packet Mark Methodology for Reduce the Congestion
    Forn International Journal of Scientific Research in Computer Science and Engineering Review Paper VolVolVol-Vol ---1,1, IssueIssue----3333 ISSN: 2322320000––––76397639 Packet Mark Methodology for Reduce the Congestion V.Ganesh Babu and K.Saraswathi Department of CS, Government College for Women, Maddur, Mandya Dt Karnataka, INDIA Department of CS, Nehru Memorial College, Puthanampatti, Trichy Dt. Tamil Nadu, INDIA Available online at www.isroset.org Received: 17 March 2013 Revised: 22 March 2013 Accepted: 16 May 2013 Published: 30 June 2013 Abstract-Congestion is one of the major problems of a communication network in routing. The function of a routing is to guide packets through the communication network to their correct destinations. Optimal Routing has been widely studied for interconnection networks. This paper provides two methodologies ECN and QBER for reduce the congestion. Keywords- Routing, congestion, ECN, QBER 1. INTRODUCTION packet. This act is referred to as “marking” and its purpose is to inform the receiving endpoint of impending The first methodology Explicit Congestion Notification congestion. At the receiving endpoint, this congestion (ECN) is an extension to the Internet protocol and to the indication is handled by the upper layer protocol (transport Transmission Control Protocol and is defined in layer protocol) and needs to be echoed back to the RFC3168(2001). ECN allows end-to-end notification of transmitting node in order to signal it to reduce its network congestion without dropping packets. ECN is an transmission rate. optional feature that is only used when both endpoints support it and are willing to use it. It is only effective when 2.2 Operation of ECN with TCP supported by the underlying network.
    [Show full text]
  • Piece of CAKE: a Comprehensive Queue Management Solution for Home Gateways
    Piece of CAKE: A Comprehensive Queue Management Solution for Home Gateways Toke Høiland-Jørgensen Dave Täht Jonathan Morton Dept. of Computer Science Teklibre Karlstad University, Sweden Los Gatos, California Somero, Finland [email protected] [email protected] [email protected] Abstract—The last several years has seen a renewed interest compelling benefit of CAKE is that it takes state of the art in smart queue management to curb excessive network queueing solutions and integrates them to provide: delay, as people have realised the prevalence of bufferbloat in • a high-precision rate-based bandwidth shaper that in- real networks. However, for an effective deployment at today’s last mile cludes overhead and link layer compensation features for connections, an improved queueing algorithm is not enough in various link types. itself, as often the bottleneck queue is situated in legacy systems • a state of the art fairness queueing scheme that simulta- that cannot be upgraded. In addition, features such as per-user neously provides both host and flow isolation. fairness and the ability to de-prioritise background traffic are • a Differentiated Services (DiffServ) prioritisation scheme often desirable in a home gateway. with rate limiting of high-priority flows and work- In this paper we present Common Applications Kept Enhanced (CAKE), a comprehensive network queue management system conserving bandwidth borrowing behaviour. designed specifically for home Internet gateways. CAKE packs • TCP ACK filtering that increases achievable throughput several compelling features into an integrated solution, thus on highly asymmetrical links. easing deployment. These features include: bandwidth shaping CAKE is implemented as a queueing discipline (qdisc) for with overhead compensation for various link layers; reasonable DiffServ handling; improved flow hashing with both per-flow and the Linux kernel.
    [Show full text]
  • Evaluation of the Impact of Packet Drops Due to AQM Over Capacity Limited Paths
    Evaluation of the Impact of Packet Drops due to AQM over Capacity Limited Paths Eduard Grigorescu, Chamil Kulatunga, Gorry Fairhurst Electronics Research Group, School of Engineering, University of Aberdeen, Aberdeen, AB24 3UE, United Kingdom {eduard, chamil, gorry}@erg.abdn.ac.uk Abstract - For many years Internet routers have been designed and interactive applications, and impairing the quality of real-time benchmarked in ways that encourage the use of large buffers. When (e.g. voice) and near-real-time traffic (e.g. live streaming). these buffers accumulate a large standing queue, this can lead to high network path latency. Two AQM algorithms: PIE and CoDel, The solution to high latency requires two elements: 1) a have been recently proposed to reduce buffer latency by avoiding strategy to signal the transport protocol to "slow down", the drawbacks of previous AQM algorithms like RED. This paper necessary to keep queues small; and 2) packet scheduling explores the performance of these new algorithms in simulated rural broadband networks where capacity is limited. We compared between flows (sharing capacity between different types of the new algorithms using Adaptive RED as a reference. We observe network flows). These solutions become more necessary at the that to achieve a small queuing delay PIE and CoDel both increase edge of the network, where speed of links is less and therefore packet loss. We therefore explored this impact on the quality of head of line blocking becomes more significant. experience for loss-sensitive unreliable multimedia applications, such as real-time and near-real-time video. The results from One way to prevent or minimise latency is to intelligently simulations show that PIE performs better than CoDel in terms of manage the queue of packets so that a router does not build a packet loss rates affecting video quality.
    [Show full text]
  • TCP Congestion Control Macroscopic Behavior for Combinations of Source and Router Algorithms
    TCP Congestion Control Macroscopic Behavior for Combinations of Source and Router Algorithms Mulalo Dzivhani1, 2, Dumisa Ngwenya3, 4, Moshe Masonta1, Khmaies Ouahada2 Council for Scientific and Industrial Research (CSIR), Meraka Institute1, Pretoria Faculty of Engineering and Built Environment, University of Johannesburg2, Johannesburg SENTECH3, Johannesburg University of Pretoria4, Pretoria South Africa Emails: [email protected] 1, 2, [email protected] 3, 4, [email protected], [email protected] Abstract—The network side of Transmission Control Protocol Most widely used TCP variant over the decades has been TCP (TCP) congestion control is normally considered a black-box in New Reno, evolving from TCP Tahoe and TCP Reno. TCP performance analysis. However, the overall performance of New Reno has proved to be efficient in fixed low speed TCP/IP networks is affected by selection of congestion control networks and networks with low BDP. However, as shown by mechanisms implemented at the source nodes as well as those [1], TCP as implemented is showing performance in high-speed implemented at the routers. The paper presents an evaluation of macroscopic behaviour of TCP for various combinations of source wide-area networks, in wireless links and for real-time flows. algorithms and router algorithms using a Dumbbell topology. In For this reason a number of source based algorithms have been particular we are interested in the throughput and fairness index. proposed in the past two decades. TCP Cubic is one of those TCP New Reno and TCP Cubic were selected for source nodes. that has gained popularity for high speed networks. Packet First-in-First-out (PFIFO) and Controlled Delay (CoDel) mechanisms were selected for routers.
    [Show full text]
  • An Extension of the Codel Algorithm
    Proceedings of the International MultiConference of Engineers and Computer Scientists 2015 Vol II, IMECS 2015, March 18 - 20, 2015, Hong Kong Hard Limit CoDel: An Extension of the CoDel Algorithm Fengyu Gao, Hongyan Qian, and Xiaoling Yang Abstract—The CoDel algorithm has been a significant ad- II. BACKGROUND INFORMATION vance in the field of AQM. However, it does not provide bounded delay. Rather than allowing bursts of traffic, we argue that a Nowadays the Internet is suffering from high latency and hard limit is necessary especially at the edge of the Internet jitter caused by unprotected large buffers. The “persistently where a single flow can congest a link. Thus in this paper we full buffer problem”, recently exposed as “bufferbloat” [1], proposed an extension of the CoDel algorithm called “hard [2], has been observed for decades, but is still with us. limit CoDel”, which is fairly simple but effective. Instead of number of packets, this extension uses the packet sojourn time When recognized the problem, Van Jacobson and Sally as the metric of limit. Simulation experiments showed that the Floyd developed a simple and effective algorithm called RED maximum delay and jitter have been well controlled with an (Random Early Detection) in 1993 [3]. In 1998, the Internet acceptable loss on throughput. Its performance is especially Research Task Force urged the deployment of active queue excellent with changing link rates. management in the Internet [4], specially recommending Index Terms—bufferbloat, CoDel, AQM. RED. However, this algorithm has never been widely deployed I. INTRODUCTION because of implementation difficulties. The performance of RED depends heavily on the appropriate setting of at least The CoDel algorithm proposed by Kathleen Nichols and four parameters: Van Jacobson in 2012 has been a great innovation in AQM.
    [Show full text]
  • A Hybrid Loss-Delay Gradient Congestion Control Algorithm for the Internet
    A Hybrid Loss-Delay Gradient Congestion Control Algorithm for the Internet Rasool Al-Saadi School of Software and Electrical Engineering Swinburne University of Technology This thesis is submitted for the degree of Doctor of Philosophy Faculty of Science, Engineering and October 2019 Technology I dedicate this thesis to my loving parents, my beloved wife Dalia and my sons Ridha and Yousif. Declaration I declare that this thesis submitted for the degree of Doctor of Philosophy contains no ma- terial that has been accepted for the award to the candidate of any other degree or diploma, except where due reference made a in the text of the examinable outcome. To the best of the candidate’s knowledge contains no material previously published or written by another person except where due reference is made in the text of the examinable outcome. Where the work is based on joint research or publications, discloses the relative contributions of the respective creators or authors. Rasool Al-Saadi October 2019 Acknowledgements I would like to express my thanks and appreciation to all the people and institutions who helped, guided, advised and supported me during my PhD journey. I would like to thank my supervisors Prof. Grenville Armitage, Dr. Jason But and Assoc. Prof. Philip Branch for their insight, patience, friendship, encouragement, continuous support and valuable advice during my PhD candidature. I had the honour of being a student under their wise supervision. Without their support, this work would never have seen the light of day. I am greatly indebted to my family, especially my wife Dalia Al-Zubaidy, my parents, my brother and my sister for their patience, persevering support and advice.
    [Show full text]