• International Journal of Control, Automation, and Systems
• /
• 제5권3호
• /
• pp.317-323
• /
• 2007

Quality of Service (QoS) in the Internet depends on queuing and sophisticated scheduling in routers. In this paper, we address the issue of managing traffic flows with different priorities. In our reference model, incoming packets are first classified based on their priority, placed into different queues with different capacities, and then multiplexed onto one router link. The fuzzy nature of the information on Internet traffic makes this problem particularly suited to fuzzy methodologies. We propose a new solution that employs a fuzzy inference system to dynamically and efficiently schedule these priority queues. The fuzzy rules are derived to minimize the selected Lyapunov function. Simulation experiments show that the proposed fuzzy scheduling algorithm outperforms the popular Weighted Round Robin (WRR) queue scheduling mechanism.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제5권5호
• /
• pp.959-975
• /
• 2011

Wireless mesh networks enlarge the wireless coverage area by interconnecting relatively stationary wireless routers (mesh routers). As wireless mesh networks are envisioned to provide high-bandwidth broadband Internet service to a large community of users, the Internet gateway, which acts as a central point of Internet attachment for the mesh networks, is likely to suffer heavily from the scramble for shared wireless resources because of aggregated traffic toward the Internet. It causes performance decrement on end-to-end transmissions. We propose a scheme to balance the load in a mesh network based on link quality variation to different Internet gateways. Moreover, under the mesh coverage, mobile nodes can move around and connect to nearby mesh routers while still keeping the connections to the Internet through the best gateway in terms of link quality. In this structure, gateways perform the balancing procedure through wired links. Information about gateways and mobile node's location is distributed appropriately so that every mesh router can quickly recognize the best gateway as well as the positions of mobile nodes. This distributed information assists mobile nodes to perform fast handoff. Significant benefits are shown by the performance analysis.

• 정보과학회 논문지
• /
• 제43권1호
• /
• pp.1-12
• /
• 2016

최근, 다양한 인터넷 환경을 제공하는 유연성을 가진 소프트웨어 기반의 라우터 연구가 활발하게 진행되고 있다. 특히, 소프트웨어 라우터에 확장성을 더하기 위해 라우터를 가상화하려는 연구가 증가하고 있다. 하지만, 소프트웨어 라우터를 가상화하면, 가상화로 인한 오버헤드로 인해 성능 저하가 더욱 심화된다. 게다가, 기존의 소프트웨어 라우터에서 제안된 GPU 기반 packet routing 기법들은 native 환경에서의 연구거나 실제 네트워크 상에 적용되지 않은 단점이 있다. 따라서, 기존의 연구로는 GPU routing이 가상 라우터에서 어떤 효과를 보일지를 예측하기 어렵다. 본 논문은 실제로 가상 라우터를 구축하고, 실제 네트워크 패킷을 전송함으로써 가상 라우터에서의 GPU routing의 영향을 보인다. 이를 위해, GPU를 가상화하는 Savanna와 가상 라우터 역할의 Pathfinder를 구현하고, 가상 라우터와 연결된 외부 머신으로부터 패킷을 전송한다.

• Journal of Communications and Networks
• /
• 제18권6호
• /
• pp.948-961
• /
• 2016

Internet protocol (IP) spoofing is a serious problem on the Internet. It is an attractive technique for adversaries who wish to amplify their network attacks and retain anonymity. Many approaches have been proposed to prevent IP spoofing attacks; however, they do not address a significant deployment issue, i.e., filtering inefficiency caused by a lack of deployment incentives for adopters. To defeat attacks effectively, one mechanism must be widely deployed on the network; however, the majority of the anti-spoofing mechanisms are unsuitable to solve the deployment issue by themselves. Each mechanism can work separately; however, their defensive power is considerably weak when insufficiently deployed. If we coordinate partially deployed mechanisms such that they work together, they demonstrate considerably superior performance by creating a synergy effect that overcomes their limited deployment. Therefore, we propose a universal anti-spoofing (UAS) mechanism that incorporates existing mechanisms to thwart IP spoofing attacks. In the proposed mechanism, intermediate routers utilize any existing anti-spoofing mechanism that can ascertain if a packet is spoofed and records this decision in the packet header. The edge routers of a victim network can estimate the forgery of a packet based on this information sent by the upstream routers. The results of experiments conducted with real Internet topologies indicate that UAS reduces false alarms up to 84.5% compared to the case where each mechanism operates individually.

• Journal of Computing Science and Engineering
• /
• 제1권1호
• /
• pp.31-55
• /
• 2007

Contemporary end-servers and network-routers rely on traffic shaping to deal with server overload and network congestion. Although such traffic shaping provides a means to mitigate the effects of server overload and network congestion, the lack of cooperation between end-servers and network-routers results in waste of network resources. To remedy this problem, we design, implement, and evaluate NetDraino, a novel mechanism that extends the existing queue-management schemes at routers to exploit the link congestion information at downstream end-servers. Specifically, NetDraino distributes the servers' traffic-shaping rules to the congested routers. The routers can then selectively discard those packets-as early as possible-that overloaded downstream servers will eventually drop, thus saving network resources for forwarding in-transit packets destined for non-overloaded servers. The functionality necessary for servers to distribute these filtering rules to routers is implemented within the Linux iptables and iproute2 architectures. Both of our simulation and experimentation results show that NetDraino significantly improves the overall network throughput with minimal overhead.

• 한국정보과학회논문지:정보통신
• /
• 제29권5호
• /
• pp.510-523
• /
• 2002

The routers in an active network perform customized computations on the messages flowing through them, while the role of routers in the traditional packet network, such as the Internet, is to passively forward packets as fast as possible. In contrast to the Internet, the processing in active networks can be customized on a per user or per application basis. Active networks allow users to inject information into the network, where the information describes or controls a program to be executed for the users by the routers as well as the end hosts. So the network users can realize the active networks by "programming" the network behavior via the programming interface exposed to them. In this paper, we devise a network protocol model and present a verification technique for reasoning about the correctness of an active application defined using the model. The technique is developed in a platform- and language-independent way, and it is algorithmic and can be automated by computer program. We give an example dealing with network auction to illustrate the use of the model and the verification technique.

• International Journal of Internet, Broadcasting and Communication
• /
• 제11권1호
• /
• pp.27-38
• /
• 2019

Sensors collect information for Internet of Things (IoT)-based services. However, indoor construction sites have a poor communication environment and many interfering elements that make it difficult to collect sensor information. In this study, a network was constructed between a Bluetooth Low Energy (BLE)-based IoT device based on a serverless IoT framework and a router. This experimental environment was applied to large- and small-scale indoor construction sites. Experiments were performed to test the communication performance of BLE-based IoT devices and routers at indoor construction sites. An analysis of the received signal strength indication (RSSI) graph patterns collected from the communication between the BLE-based IoT devices and routers for different testbed site situation revealed areas with good communication performance and poor communication performance due to interfering factors. The results confirmed that structural components of the building as well as the materials, equipment, and temporary facilities used in indoor construction interfere with the communication performance. Construction project managers will require improved technical knowledge of IoT, such as optimizing the router placement and matching communication between the router and workers, to improve the communication performance for large-scale indoor construction.

• 한국정보과학회논문지:정보통신
• /
• 제32권6호
• /
• pp.745-752
• /
• 2005

BGP[1]는 광대역 인터넷에 사용되는 유일한 라우팅 방식으로서 인터넷의 계층구조와 자신의 정책에 의해서 경로를 선정한다. BGP 라우터는 일부의 인근 BGP 라우터에 대해서만 선택적으로 라우팅 정보를 공표하기 때문에 링크가 연결되었다고 해서 출발지 노드에서 목적지 노드까지의 라우팅 정보가 도달되지는 않는다. 특히 바이러스나 재난으로 인하여 광범위에 걸쳐서 많은 BGP 라우터가 다운되는 유사시에 인터넷의 연결성을 유지하기 위하여 BGP는 평소에 도달할 수 없는 경로도 제한적으로 도달할 수 있어야 한다. 이 논문은 BGP 백업 라우팅의 요구사항을 나열한 후 이러한 사항을 최대로 만족하는 백업 라우팅 규칙을 찾아본 결과 기존 방식이 안고 있던 대부분의 단점이 해결된 백업방식을 도출하였다. 제안되는 백업방식은 우선 BGP 백업 라우팅은 네트웍의 피해정도에 따라 3단계로 동작한다. 이 규칙 하에서 BGP 라우터는 평소에는 0단계에서 정의되는 경로만을 사용하다가 BGP 라우터의 손상범위에 따라서 1단계로, 손상범위가 더 커지면 2단계로 사용범위를 확장한다. 또한 이 논문은 제안된 백업 방식이 네크웍의 안정성(stability)과 안전성(safeness)을 보장함을 증명하였다. 그 결과 제안된 백업방식은 사소한 지역적인 네트웍 사고에서부터 전체적인 심한 네트웍 사고에 이르는 모든 사고에 대해서 적응력 있게 대처하여서 강력한 경로의 도달성을 항시 제공한다.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제11권9호
• /
• pp.4641-4657
• /
• 2017

Named Data Networking (NDN) has emerged and become one of the most promising architectures for future Internet. However, like traditional IP-based networking paradigm, NDN may not evade some typical network threats such as malicious data aggregates (MDA), which may lead to bandwidth exhaustion, traffic congestion and router overload. This paper firstly analyzes the damage effect of MDA using realistic simulations in large-scale network topology, showing that it is not just theoretical, and then designs a fine-grained MDA mitigation mechanism (MDAM) based on the cooperation between routers via alert messages. Simulations results show that MDAM can significantly reduce the Pending Interest Table overload in involved routers, and bring in normal data-returning rate and data-retrieval delay.

• 한국통신학회논문지
• /
• 제27권11C호
• /
• pp.1171-1177
• /
• 2002

본 논문에서는 ATM(Asynchronous Transfer Mode) 기반 레이블 에지 라우터에서 POS(Packet over SONET) 정합 기능을 가지는 고속의 IP(Internet Protocol) 패킷 포워딩 엔진을 제안하였다. 포워딩 엔진은 POS 물리층으로부터 수신되는 패킷에 대하여 TCAM(Ternary Content Addressable Memory)을 사용하여 고속의 룩업 처리가 가능하도록 하였다. 또한, 고속의 IP 헤더 처리 및 룩업 제어 기능을 FPGA(Field Programmable Gate Array)로 구현하여 하드웨어적으로 고속의 IP 패킷 포워딩이 가능하도록 하였다. 제안한 포워딩 엔진은 룩업 제어기에 MPLS(Multiprotocol Label Switching) 패킷 처리 기능을 구현함으로써 레이블 에지 라우터 기능도 수행하도록 하였다.