Monday, August 05, 2019

Everything You Need To Know About MPLS (Mult Protocol Label Switching)

Historically, tag switching ( now called LABEL) was first proposed as a way to move IP packets more quickly than was possible with conventional routing. But, soon after implementations, it became apparent that any increase in speed was very slight. What really allowed MPLS to grow as an infrastructure technology was that it could provide new IP based services such as VPN's, Traffic Engineering ( TE) etc.

The MPLS architecture separates the control information for packets required for packet transfer itself; that is, it separates the control and data planes. The data plane is used for the transport of packets (or label swapping algorithm), and the control plane is analogous to routing information (for example, the location to which to send the packet). This capability is programmed into hardware by the control plane. This separation permits applications to be developed and deployed in a scalable and flexible manner. Examples of applications that are facilitated by MPLS technology include the following......

MPLS QoS, BGP VPNs Border Gateway Protocol (BGP), Traffic engineering Traffic engineering ( enables one to control traffic routing via constraint-based routing), Multicast routing Protocol Independent Multicast (PIM), Pseudowires [These can be used to evolve legacy networks and services, such as Frame Relay, ATM, PPP, High-Level Data Link Control (HDLC), and Ethernet], Generalized MPLS (GMPLS) etc.

Services offered by Service Providers ( SP's) may include the following.....

* Layer 2 VPNs

* Layer 3 VPNs

* Remote Access and IPSec Integration with MPLS VPNs

* MPLS Security

* Traffic Engineering

* Quality of Service

* Multicast and NGNs ( Next Generation Networks)

* IPv6 over MPLS

MPLS models adopted by service providers (SP) of broadband services depend on the services offered and also on the models adopted according to customer demands. The services provided have changed significantly through the last few years as technology has progressed. For example, many wholesale providers who offered ATM as access links now have moved on to Gigabit Ethernet.

For example, two of the most common braodband SP's would be the following.....

* Retail Provider - Any provider thats sells services to an end-user which can be business or residential. Usually they would lease bandwidth from a wholesale provider.

* Wholesale Povider - Any operator that sells services to other network operators. In context of the current broadband world, the wholesaler is usually whoever owns the subscriber plant ( wires, cables etc.)

In between the subscriber and their "ISP" is the wholesale provider who owns actually owns and operates the access network, for e.g, DSL, Cable, Ethernet etc. Of course, for an IP network, these are just different types of access.

Several applications that are facilitated by the implementation of MPLS include....

* MPLS QoS - Quality of service mechanisms, for e.g, differentiated service, which enables the creation of LSPs with guaranteed bandwidth.

* Layer 3 VPN - Uses BGP in the service provider's network with IP routing protocols or static routing between the service provider and the customer. BGP is used to exchange the FEC-label binding.

* Traffic engineering - Uses extensions of IS-IS or OSPF to distribute attributes in the network. Traffic engineering enables you to control traffic routing and thus optimize network utilization.

* Multicast routing via PIM - The protocol used to create FEC tables; extensions of version 2 of the PIM protocol are used to exchange FEC label binding.

* Layer 2 VPN - Can be created via a Layer 2 circuit over MPLS. Layer 2 VPNs use Layer 2 transport as a building block.

Of course, features such as Security and Metro Ethernet are part of the MPLS architecture also.

Architectural Components and choices for SP's.......

* Scaling MPLS VPNs to Multi-AS, Multi-Provider, and Hierarchical Networks:

* Inter-AS VPNs: The 3 basic models discussed in RFC2547bis for Inter-AS connectivity are as follows:

- Back-to-back VPN connectivity between ASBRs

- VPNv4 exchange of routes and peering between ASBRs

- IPv4 exchange of routes and peering between ASBR's

All three above models focus on propagating VPN routes from one AS to the other AS. The first model is a simple one in which the ASBRs connect back to back via logical circuits or VLANs one per VRF. The back-to-back connections enable VPN connectivity and the exchange of routes between ASBRs on a per-VPN basis. For example, if ASBR1 and 2 need to exchange routes for 10 VPNs, 10 logical circuits exist between ASBR1 and ASBR2one for each VPN.

* Carrier Supporting Carrier.....

Another method of scaling MPLS VPNs is to create hierarchical VPNs. Consider a national or international carrier that is selling a VPN service to smaller stub carriers. The smaller stub carriers might in turn be selling another MPLS VPN service to end users (enterprises). By nesting stub carrier VPNs within the core or national carrier VPN, a hierarchical VPN can be built. With the CSC mode described in RFC 2547bis, the stub carrier VPNs and their routes do not show up in the core carrieronly the stub carrier IGP routes are part of the core carrier VPN. So, the core carrier does not need to learn or understand end user routes because the end user of the core carrier is the stub carrier. The core carrier needs only to provide VPN connectivity so that the core carrier's CEs (ironically, they are stub carrier PEs) are reachable. These CEs are called CSCCEs, whereas the PE that connects to the stub carrier and has MPLS enabled on the PE-CE link is called the CSCPE.

* Deployment Guideline considerations will involve the following summary guideline.....

Centralizing address translation makes keeping track of address assignment easier. Multiple NAT PEs might be required for load balancing. If this is the case, make sure public address pools do not overlap. One of the possible disadvantages to centralizing is the amount of redundancy that can be achieved by replication. For example, in a noncentralized environment, one gateway/server failure can result in an outage of only that VPN's service. However, in a centralized environment, a single gateway/shared PE failure can affect multiple VPNs. This drawback can be easily overcome by having multiple PEs that serve as shared gateways, which provide services to the same VPNs. So, you can provide redundancy with shared gateways.

If VPNs that use overlapping private address space need to access a shared services segment, make sure that private address space is translated somewhere in the path.

NAT impacts CPU utilization to a degree. Some protocols are more CPU-intensive than others. Therefore, the type of translation being performed could have significant performance impact. The impact is less for newer particle-based routers and more powerful routers.

As the number of translation entries increases, the throughput in terms of packets per second (PPS) decreases. The effect is negligible for less than 10,000 translation table entries.

The rate at which a router can add a new translation table entry decreases as the number of entries in the translation table increases.

As the number of translation entries in the translation table increases, the amount of memory used increases.

In addition to the above, there must be considerations regarding the following tools and policies.....

* Management, Provisioning, and Troubleshooting

* Equipment Scalability Versus Network Scalability

Finally, the basic arichitecture and mode of service will probably depend on customer demand and SP's commitment to deliver the same.

Here is a small list of some of the things that customers might want....

* More service selections
* Better quality
* Ease of migration
* Ease of deployment
* Ease of maintenance
* Lower cost
* Fewer hassles

Service providers want all of the above, plus......

* High-margin accounts
* Rapid recovery
* No loss of service
* 99.99999% reliability

Enterprises want.......

* A simpler, easier network to manage

Enterprise networks range in consistency from very stable to constantly changing. Companies on growth trends are building new facilities and acquiring other businesses. They want ease of intermigration and implementation. Changes must be ably employed within their limited maintenance windows. Their data centers must run flawlessly.

The above information ... if it hasn't made your eyes go crossed ... should give you everything you ver need to know about MPLS.

But if you need more ...... as in help to reduce your time, effort, cost, and frustration in finding the right MPLS solution for your network application(s) ..... I recommend using the no cost assistance available to you here:


Labels: , , ,

Friday, July 19, 2019

What You Need To Know About A MPLS Network

There's no one "MPLS Service". A lot of what you get will depend how the service provider has Engineered and built their core network. Bear in mind that many carriers don't own the whole network, but will piece together a service from other carriers networks, or will interconnect with other carriers to extend their reach.

Cell-mode MPLS was mentioned: basically this is ATM which has been retro-fitted with MPLS. Be careful with this for VoIP applications because it can use bandwidth very inefficiently.

MPLS can support QoS, but many services aren't engineered with this, or only with very basic prioritisation. Also the services are very often structured to reduce the potential complexity and to ensure the network can cope. Bear in mind a typical MPLS router can only carry a percentage of "high-priority, realtime" traffic. If everyone sends all their data as high priority then the benefit is lost, and the network may suffer. Usually QoS is provided as a small number of service classes, typically 3 or 4.

The biggest bottleneck in any such service is normally the tail circuit to each of your premises. If you move from a T1 mesh to a MPLS service then you will likely find that some sites need more bandwidth than others. Tracking the requirement for this bandwidth is usually your problem, although the service provides may give you some reporting tools to assist with this. I would avoid service providers who cannot offer this as it will make it very difficult for you to manage your bandwidths.

If you factor in multiple service classes then your management of these tail circuits gets more complex as you no only have to work out how much bandwidth is required for each tail circuit, but how much of it should be reserved for each service class.

Regarding resilience, within the service providers core, the service is normally highly resilient to failures. However, when failures do occur, very often (depending on how the service is engineered) the rerouting can take a second or two. During this network reconvergance you will lose packets. Depending on the protocol your traffic uses this can be unimportant or devastating. For instance, some VPN and VoIP services don't survive this well.

Normally resilience is not automatically provided all the way to the customer. Typically you will have one tail circuit and one router at each site. If either fails (or if the Service provider's PE router has problems) you will lose service to the site, totally.

If this is an issue, you need to factor in dual connections. There's multiple ways of doing this, and different service providers will offer different options. Make sure you get your Network Engineer involved as the devil is in the detail here, and some options which sound like they provide a fantastic level of resilience may not be as good as they sound, depending on how your internal network is configured.

And, of course, the key to all of this is SLAs: what do they offer? What happens if they break them? How do they report them to you?

Generally speaking, MPLS services are a great way to run a multi-site data network including VoIP services. I have seen many carriers and their customers doing this successfully for years.

Strictly speaking MPLS does not provide QoS. QoS is done by prioritising traffic, and most IP routers, even those on the backbone of the Internet, can do this. The difference is whether they are configured to do this or not. In an MPLS network MPLS is provided by standard router features. MPLS technology (specifically Traffic Engineering) gives the carrier better control over how this traffic is prioritised and routed (and restored in case of network fault). All this does is give them the confidence to support SLAs.

As I mentioned, "QoS" is provided as a set of "service classes". Typically these are things like "real-time", "high-priority" and "everything else". Mapping actual traffic into these classes can be done in a few different ways, but this is largely up to you to control. For instance, you could quite easily put web-browsing traffic into "real time" although this would normally be a dumb thing to do.

I would suggest the case for MPLS in terms of performance, cost and continuity against 'traditional' or 'legacy' data networks is now pretty robust, i.e. MPLS provides significant advantages in all 3 areas.

The key considerations when migrating include provider selection, access media (e.g. using Ethernet rather than SDH/SONET), the decision on procuring a managed or unmanaged service (often called wires-only) and the providers ability to map their CoS/QoS to the applications you need to support. This is especially important if you are operating any proprietary applications.

There is also an increasing trend to use WAN Optimisation/application management solutions either as a value added service from the provider or from an alternative integrator or indeed doing it in house. This is important say for voice or applications such as CITRIX.

MPLS providers also now offer a whole suite of value added services such as integrated internet, managed network based firewalls and remote user support. If these are important to you make sure the providers demonstrate how this is achieved.

In selecting your provider ensure they have good geographic coverage in your areas and experience within you market segment. I always recommend taking up 3 references. Equally I think it is wise to understand how important a client you will be to the provider; it's all well and good using the market leader (say according to Gartner) but you'll often get a better service from a provider who values and really wants your business.

For FREE assistance designing the right MPLS configuration for your network .... AND sourcing the most cost effective provider ..... take advantage of the help available via:

MPLS Networks

Labels: , , ,