园区网QoS设计课程.pptxVIP

园区网QoS设计课程第1页/共140页 3? 2005 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialRST-2501通用QoS 设计准则从目标开始: 而不是工具? Clearly define the organizational objectives Protect voice? video? data? DoS/worm mitigation?? Assign as few applications as possible to be treated as “mission-critical”? Seek executive endorsement of the QoS objectives prior to design and deployment? Determine how many classes of traffic are required to meet the organizational objectives More classes = more granular service-guarantees第2页/共140页 4? 2005 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialRST-2501需要多少服务类?随着时间扩展服务类的数目 8 Class Model Voice Video Call SignalingNetwork Control Critical Data Bulk Data Best Effort Scavenger QoS Baseline Model Voice Interactive-Video Streaming Video Call Signaling IP RoutingNetwork Management Mission-Critical Data Transactional Data Bulk Data Best Effort Scavenger4/5 Class Model Realtime Call Signaling Critical Data Best Effort Scavenger Time第3页/共140页 5? 2005 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialRST-2501用于缓解DoS/Worm攻击的QoS控制平面流量管制介绍 CONTROL PLANEINCOMING PACKETSCONTROL PLANE POLICING (Alleviating DoSSILENT MODE(ReconnaissancePrevention) Attack)PACKETBUFFEROUTPUT PACKET BUFFER LocallySwitched Packets ProcessorSwitched PacketsCEF/FIB LOOKUPManagement SNMP, TelnetICMPIPv6RoutingUpdatesManagement SSH, SSL….. OUTPUTfrom the Control Plane INPUTto the Control Plane第4页/共140页 6? 2005 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialRST-2501用于缓解DoS/Worm攻击的QoS通过Scavenger类进行数据平面的流量管制? The Scavenger class is an internet 2 draft specification for a “less-than-best-effort” service? There is an implied “good faith” commitment for the “best-effort” traffic class It is generally assumed that at least some network resources will be available for the default class? Scavenger class markings can be used to distinguish out-of-profile/abnormal traffic flows fr