Thursday, October 27, 2016

Apple says that AirPod supplies will be delayed without citing a reason

Apple says that AirPod supplies will be delayed without citing a reason

Image: Apple
By 
Apple Inc said on Wednesday that its wireless AirPod headphones, which were suppose to hit the market this month, will be delayed. The company did not specify the reason for the delay. “We don’t believe in shipping a product before it’s ready, and we need a little more time before AirPod are ready for our customers,” Apple spokeswoman Trudy Muller said in an email to Reuters.
Apple AirPods
Apple unveiled the AirPod at the launch of the latest iPhone last month. The new iPhones come without the analog headphone jack. The AirPod plugs into the same port as the recharging cord, making it incompatible with most wired headphones without an adaptor. Apple includes the adapter.
Image Credits: Samsung
Samsung Gear IconX. Image Credits: Samsung
The AirPods are a part of a wave of smart hearables, wireless earphones with embedded sensors that takes over some of the tasks of fitness trackers, smartwatches and smartphones. These include the Samsung Gear IconX that released earlier this year and the Bragi Dash with IBM Watson integration for use in workplaces.
Bragi Dash Wireless Headphones Charger
Bragi Dash. Image: Bragi.
Apple miscalculated the demand for its latest iPhone 7 and the conservative estimates means that the demand may be more than the supply. The miscalculation could hurt the profits made by Apple over the critical Christmas shopping rush.
With Inputs from Reuters

Banks need to switch to fully-encrypted security solutions to avoid security breaches

Banks need to switch to fully-encrypted security solutions to avoid security breaches

While some of the country’s premier banks are busy blocking debit cards that have been compromised (the numbers run into millions) in one of the financial sector’s biggest data breaches, it’s time for banks to adopt state-of-the-art, fully encrypted ATM security solutions to safeguard consumers, the country’s top cyber experts have suggested. The State Bank of India (SBI), HDFC Bank, ICICI Bank, Axis Bank and YES Bank are among banks which reported several of their customers’ debit cards being compromised following a malware-related security breach in an ATM network. The SBI has blocked nearly 600,000 debit cards so far.
“This incident is a wake-up call for the Indian banking ecosystem to pause and realise that adopting extra-layered, state-of-the-art encryption security to minimise consumer financial data breach has become essential. The breach is attributable to malware which was introduced in ATM systems. The said malware has resulted in unauthorised access to data,” Pavan Duggal, one of the nation’s top cyber law experts, told IANS.
Malware attacks and cyber threats have affected countries like Japan and Bangladesh in the recent past and banks in India will have to make efforts to ensure that data is protected with multiple levels of authentication and industry-standard encryption, ensuring data security at all points of a transaction.
“It is time that magnetic-stripe cards issued by banks for ATM transactions are replaced at the earliest. While the affected banks are blocking debit cards to minimise the impact, the already ongoing replacement of mag-stripe cards with EMV chip cards will help the banks and consumers,” explained Atul Singh, Regional Director-Banking and Transport (India Subcontinent) at the digital security giant Gemalto.
Gemalto works with some of the world’s leading enterprises, banks and telcos to help them deploy consumer-friendly technology solutions for payment, banking and other financial services on the mobile and securing confidential information. EMV — which stands for Europay, MasterCard and Visa — is a global standard for credit cards that uses computer chips to authenticate (and secure) chip-card transactions.
“This is in line with the RBI directive to issue EMV chip- and PIN-enabled cards. According to industry estimates, around 400 million mag-stripe cards have to be migrated to EMV standard in the next two years while nearly 120 million cards would have been migrated this year,” Singh told IANS. Further, banks need to work towards gradually enabling EMV chip and PIN-enabled card acceptance and processing at ATMs to enhance the safety and security of transactions.
While the point of sale (POS) terminal infrastructure in the country has been enabled to accept and process EMV Chip and PIN cards, the ATM infrastructure, on the whole, continues to process the card transactions based on data from the magnetic stripe.
“As a result, ATM card transactions remain vulnerable to skimming and cloning, etc., even though the cards are EMV Chip and PIN-based. Therefore, in line with RBI’s directive of May 26, 2016, to all banks to upgrade ATMs to accept chip and PIN by September 2017, banks must take immediate steps to implement this in a fast-track mode,” Singh added. Worryingly, Indian cyber laws do not talk specifically about banking frauds.
“The Information Technology Act, 2000, being the sector-specific legislation, was amended in 2008. By virtue of the 2008 amendments, certain cosmetic amendments concerning cyber security were made under the Information Technology Act, 2000. The said amendments are not sufficient and adequate in today’s scenario,” Duggal informed. “Further, the ground realities for cyber security breach are distinctly different in 2016 as compared to 2008. As such, there is a distinct need for India to beef up its legal frameworks on cyber security when it comes to banking frauds,” he told IANS.
According to Rakshit Tandon, a consultant at the Internet and Mobile Association of India (IAMAI) and a cyber security expert, ATM cards are vulnerable; ATMs are weak, and banks’ own servers are at hacking risk. “Banks must introduce biometrics like retina scan, voice scan or fingerprint as double verification at ATMs. PIN numbers must be changed periodically. But the option is only in four-digit and so making strong PINs is out of the question as of now,” Tandon told IANS.
Watch bank statements closely and contact the bank in the event of any signs of unexpected charges or transfers. Consumers also need to be aware of phishing scams where cybercriminals hijack banking systems and send bogus emails that lure people into sharing personal information or clicking malicious URLS with malware. “Make all new PIN and account passwords different and difficult to guess. Include upper and lower case letters, numbers and symbols to make passwords harder to crack online,” suggested Sunil Sharma, Vice President-Sales and Operations (India & SAARC), Sophos, a global leader in network and endpoint security.
Further, “the Information Technology Act, 2000, needs to be amended to come up with stringent provisions pertaining to a variety of cybercrimes, including banking frauds,” Duggal noted. In the meantime, banks must take a serious note of this incident to concentrate on cyber security and help protect the interest of users and consumers, the experts advised.
IANS

Samsung Galaxy S8 may launch on Feb 26, 2017 as specifications leak online

Samsung Galaxy S8 may launch on Feb 26, 2017 as specifications leak online

Image Credit: REUTERS
By 
Samsung is currently working hard on the next flagship device, Samsung S8 after the whole Galaxy Note 7 fiasco. The company has faced a lot of flak for the exploding batteries even after the global recall.
Airline companies all over the world in addition to the aviation authorities of different countries have banned people from taking Samsung Galaxy Note 7 on the flight. The company even sent fire-proof boxes for users to return the devices safely.
It looks like the company is planning to leave the Note 7 issue behind and try to release the Galaxy S8 on time. It is expected to launch on February 26, 2017. A teaser poster was posted on Twitter by user Ricciolo1 for the “Samsung Unpacked” event.
Image Credit: Twitter.com/
Image Credit: Twitter.com/Ricciolo1
In addition to the leak of the event launch poster, a video was posted on the Chinese micro-blogging website, Weibo detailing the specs of Samsung Galaxy S8. S8 will sport a 5.5-inch 4K Super AMOLED Display with 806-ppi pixel density while being powered by Exynos 8895 processor. The device will be equipped with 6GB RAM along with a 16MP and 8MP dual camera setup on the back.
According to reports by ETNews Korea, S8 will do away with the signature home button and the processor will be manufactured using the newly 10-nm manufacturing process. Samsung will be producing Qualcomm Snapdragon 830 using the same process so we can expect to see the second variant with Snapdragon 830.
However, we are not sure if the company has started its work because a recent report stated the Samsung engineers would start work on the next flagship after two weeks. During the two weeks, the engineers will work on eliminating the battery flaw that plagued Samsung Galaxy Note 7. This comes right after Samsung offered a new upgrade program to the customers who brought Samsung Note 7 in South Korea.

Google is going for Apple like profit margins with its Pixel phones

Google is going for Apple like profit margins with its Pixel phones

By 
The Pixel smartphone is rivalling the iPhone in terms of pricing, but Google is also going for Apple like profit margins according to reports by Bloomberg and CNET. The reports are based on findings of IHS Markit, a leading company dealing in analytics, expertise and information.
IHS Markit has found out the detailed bill of materials for the iPhone 7, and not yet the iPhone 7 Plus. The bill of materials for the Google Pixel XL is comparable to that of the iPhone 7 Plus or the Samsung Galaxy S7 Edge.
Exploded Apple iPhone 7 view. Source: IHS Markit.
Exploded Apple iPhone 7 view. Source: IHS Markit.
Andrew Rassweiler, senior director of cost benchmarking services for IHS Markit says “Total BOM costs for the Google Pixel XL are, not surprisingly, in line with those of other competitors, because the supply base and specs are very similar from

Porn websites at Patna railway station blocked for those using free RailTel Wi-fi to access it

Porn websites at Patna railway station blocked for those using free RailTel Wi-fi to access it

Authorities at Bihar’s Patna Railway Station have blocked access to porn sites in its free Wi-Fi service at the station, officials said on Wednesday.
“We have acted after it was found that free Wi-Fi service was used for opening porn sites at Patna railway station and also in view of reports of last week,” Arvind Razak, the Chief Public Relations Officer (CPRO) of East Central Railway (ECR), told IANS on Wednesday.
The development comes 10 days after IANS first reported that Patna Railway Station tops in terms of internet search, using the free Wi-Fi service, but mostly to view porn.
Razak said use of the free Wi-Fi service to watch porn at the railway station was taken seriously by the concerned top railway officials, and it was decided to block the sites.
“Initially, we have blocked selected porn sites, and gradually all such sites will be blocked at the railway station,” he said.
When IANS reported that more than any other railway station in the country, where free Wi-Fi service was launched, Patna goes for most internet search, particularly for porn, public sector undertaking RailTel had denied the report.
The Wi-Fi service in Patna station was launched last month and it is the first station in Bihar to have internet facility. More than 200 trains pass through it daily.
According to officials, people in Patna station use free Wi-Fi to search Youtube followed by Wikipedia. “More than anything, porn sites have been watched and downloaded at the station,” an official had said earlier.
Some people also use free Wi-Fi to download apps and Bollywood and Hollywood films.
At present, RailTel is providing 1 gigabyte Wi-Fi at the Patna station but plans are to increase it to 10 gigabytes due to the slow speed of internet in view of many people using the facility.
To date free Wi-Fi facility has been launched at 23 railway stations in the country.
The government has said the facility will be introduced at all major railway stations over the next three years.
The service has been provided under ‘Railwire’, the retail broadband distribution model of RailTel.
IANS

Cyber attacks hit Singapore telecom service provider StarHub

Cyber attacks hit Singapore telecom service provider StarHub

Image Credit: StarHub Facebook
Singaporean telecoms service provider StarHub Ltd said intentional cyber attacks had caused internet connection disruption for some of its home broadband customers on Oct. 22 and Oct. 24. The company said it analysed network logs of the disruptions and found that it had experienced intentional and likely malicious distributed denial-of-service (DDoS) attacks on its domain name servers (DNS).
DDoS attackers typically target sites by flooding servers with messages from multiple systems so they are unable to respond to legitimate traffic. StarHub said there was no evidence of any impact on the rest of its services, and the security of its customers’ information was not compromised. “On both occasions, we mitigated the attacks by filtering unwanted traffic and increasing our DNS capacity, and restored service within two hours,” it said in a statement late on Tuesday.
The incidents come close on the heels of attacks on Twitter Inc, PayPal Holdings Inc, Spotify AB and other customers of Dyn, a U.S. company which acts as a switchboard for internet traffic. StarHub said it was investigating the intent and source of the two attacks, which it called “unprecedented in scale, nature and complexity” for the company.
It told Reuters in an email on Wednesday that it does not use Dyn services. As of June 30, StarHub’s residential broadband subscribers totalled 473,000. Singapore authorities on Tuesday advised other telecom firms to strengthen defences to protect against similar disruptions.
Singapore Telecommunications Ltd, the city-state’s biggest telecom operator, said it did not observe any abnormal traffic trends over the weekend but will continue to monitor networks closely. Third-ranked M1 Ltd said it was aware of the cyber-attacks and was on alert.\
Reuters

Wednesday, October 26, 2016

Bolstering the last mile with Multipath TCP



Authors:

Robert Skog, Dinand Roeland, Jaume Rius i Riu, Uwe Horn, Michael Eriksson

The last mile is the part of the telecommunications network that physically reaches user premises, either by wireless technology (cellular networks) or wireline technology such as cable, fiber or digital subscriber line (DSL). The achievable data rates for each of these access technologies vary, but in many cases the bandwidth depends on the distance between the access termination point in the service provider network and the device in the user premises. This means that no matter how fast the service is up to the access termination point, the users who are farthest away from it will experience significantly slower service than the ones who are closer.

For example, although the most recently standardized DSL technologies allow bitrates of up to 1Gbps, most subscribers today are still getting less than 20Mbps. The reason for this is the dependency between the achievable bitrate and the length of the copper line connecting a household to the DSL access multiplexer (DSLAM). As Figure 1 shows, if the distance between the user premises and the DSLAM exceeds 2km, DSL speed falls quickly below 20Mbps. The obvious solution is to reduce the length of the last mile. If the copper line distance can be reduced to less than 250m, new technologies and standards such as vectoring and G.fast will allow bitrates of about 1Gbps. However, reducing the copper line distance is costly because it requires the deployment of more street cabinets connected by fiber lines to the backbone network. To get around this, some fixed broadband service providers have started to launch offerings that combine DSL with LTE as a cheaper way to boost the bitrate for DSL customers than deploying more fiber-connected DSLAM street cabinets.

Figure 1: Speed versus copper line length between user premises and the DSLAM for the most widely deployed DSL technologies

Similarly, LTE/Wi-Fi aggregation is useful as a booster for mobile phones. Some operators have started deploying solutions that combine Wi-Fi and LTE accesses in areas such as shopping malls and big event venues as a means to increase user capacity while at the same time offloading their cellular network traffic to the fixed networks when possible.
Technologies for access aggregation

Many standardized aggregation technologies only support use cases in which links using the same access type are aggregated. This is known as bonding, and examples include the bonding of several Ethernet links, or of two DSL access links. Notable exceptions are IP Flow Mobility and multiple-access PDN connectivity – both defined by 3GPP – which are able to support aggregation of multiple access types[1]. However, these two technologies have gained little traction because their introduction on mobile devices would require a significant implementation effort, and even the apps running on them would require modifications.

Multipath TCP as specified by the IETF[2] can be deployed in existing networks more easily than other alternatives because it is an evolution of TCP[3] – the most widely used protocol in the internet today. This guarantees interoperability between equipment from different vendors. Like TCP, Multipath TCP works on top of IP. Since IP is the foundation of all internet protocols, Multipath TCP can be used across all kinds of access networks, providing a rich toolkit that supports access aggregation for use cases such as bandwidth aggregation, reliability and seamless connectivity. In addition, there is an open source reference implementation for Multipath TCP that is continuously developed and improved by a large community of developers[4].

Figure 2 shows two access aggregation scenarios enabled by Multipath TCP. The first scenario shows DSL/LTE aggregation, where an existing DSL connection is combined with LTE. If the DSL link provides 12Mbps and the LTE link provides 8Mbps, the aggregated bandwidth that can be obtained via Multipath TCP is roughly 20Mbps.

Figure 2: Examples of access aggregation enabled by Multipath TCP

The second scenario shows LTE/Wi-Fi aggregation, which functions according to the same principle. Together with a mobile device manufacturer, Ericsson has performed successful field trials in public LTE and Wi-Fi networks using commercially available mobile devices. Only the firmware was modified to support Multipath TCP.

Although the benefits of Multipath TCP are often presented in the context of two different access networks, there is no limit in Multipath TCP that would prevent the use of three, four or more access networks. The access networks could even be operated by different service providers, which is an additional benefit for use cases aiming for improved resiliency.
Aggregating bandwidth

Bandwidth aggregation refers to the ability of Multipath TCP to combine the bandwidth of several links into one logical connection. Figure 3 shows an example of how Multipath TCP adds together the bandwidth of DSL and LTE. This is equally valid for the LTE + Wi-Fi scenario depicted in the bottom part of Figure 2.

Figure 3: DSL and LTE bandwidth aggregation with Multipath TCP

The bandwidth aggregation features of Multipath TCP apply to both downlink and uplink directions. As a result, Multipath TCP also helps to improve uplink speeds, which are only a fraction of the downlink speed in existing (asymmetric) DSL consumer services. For instance, the uplink speed over a 6Mbps asymmetric DSL connection is usually below 1Mbps. Aggregating DSL and LTE makes it possible to boost the uplink speed to 10Mbps and more.

Examples of services that would benefit from the Multipath TCP bandwidth aggregation are:
A user watching HDTV (high definition TV) over a DSL access connection that is not capable of providing enough bandwidth – Multipath TCP can be used to schedule surplus traffic over LTE (particularly useful for the downlink).
A user uploading documents or photos to a server – when the DSL uplink capacity is exceeded, Multipath TCP can add LTE capacity for quicker upload.
Improving reliability

In the context of access aggregation, reliability refers to the ability to maintain data exchange within a session, even if one or several access links become unavailable. Figure 4 compares the behavior of a traditional wan backup solution with that of a solution based on Multipath TCP. Traditional solutions cannot react quickly to the disappearance and reappearance of access links. Whenever a link disappears, sessions break and need to be reestablished, which can lead to data loss and the need for human intervention.

Figure 4: Improved connection resiliency with Multipath TCP

Multipath TCP is able to react more quickly to access links disappearing and reappearing. And as long as at least one access link is up and running, a Multipath TCP enabled session will continue without interruption – albeit at a lower bitrate. Likewise, if an access link reappears, the bitrate goes up. The connection always runs at an optimal speed in relation to the availability of the links involved.
Achieving seamless connectivity

The concept of seamless connectivity is related to reliability, referring more specifically to the ability of Multipath TCP to switch from one access to another without having any impact on the application. A typical use case would be a session started over Wi-Fi. If the mobile device leaves Wi-Fi coverage and enters mobile broadband coverage, the session will break and need to be reestablished. This can be quite annoying and time consuming for the user, especially if two-factor authentication is involved. With Multipath TCP, the session does not get interrupted due to the change of access.

Changing from one access to another can also be triggered by service provider policies. For example, a service provider could have a policy to use LTE by default, but move some traffic to Wi-Fi when there is good coverage and available capacity. Or, alternatively, the service provider could set a policy where Wi-Fi is used by default and LTE is used to provide wide-area coverage. In all cases, the use of Multipath TCP prevents sessions from being interrupted if and when access systems change.
How Multipath TCP works

TCP[3] is one of the main protocols in the IP suite, providing a reliable means of communication between two endpoints. Once a TCP connection has been set up, both endpoints can send a data stream to each other. TCP is designed to cope with data that is damaged, lost, duplicated or delivered out of order. Furthermore, it provides a means to perform flow control. Upon receiving data, the receiver sends an acknowledgment (ACK) back to the sender. Such an ACK contains a “window,” which indicates the maximum number of bytes the sender is allowed to transmit before receiving further permission. This way, the receiver controls the amount of data transferred by the sender. Finally, the receipt or non-receipt of ACKs guides the TCP Congestion Control Algorithm (CCA) to determine the pace at which data may be sent.

Today, many endpoints have multiple data communication interfaces and therefore multiple IP addresses. For example, a laptop is often equipped with both a wired and a wireless interface, and a smartphone often has the capability to use multiple wireless communication technologies. Using regular TCP, these devices are capable of establishing multiple simultaneous TCP connections, with each connection tied to one specific IP interface. In other words, each TCP connection is bound to a single path defined by the IP addresses of the connection’s endpoints. Note, however, that a path is defined here in terms of endpoint identifiers; it is not the same as the route that individual packets take on their way from one endpoint to the other.

Multipath TCP [2] is a set of extensions to standard TCP that allows connections to use multiple paths simultaneously. Multiple regular TCP connections, also known as subflows, are aggregated into a single Multipath TCP connection. Figure 5 compares the protocols stack of regular TCP with that of Multipath TCP.

Figure 5: Protocol stack for TCP and Multipath TCP

In regular TCP, an application initiates communication by opening a connection via an application programming interface (API) provided by the operating system. The TCP layer communicates in its turn with the IP layer. In Multipath TCP, the TCP layer has been extended. Upwards, the Multipath TCP layer exposes an interface that is perceived as regular TCP by the application. Downwards, the Multipath TCP layer may set up multiple regular TCP connections. These may be bound to different IP layers. In Figure 5, the host is equipped with multiple data communication interfaces. Each one is associated with its own IP address. The Multipath TCP layer aggregates the multiple TCP connections into a single Multipath TCP connection. The application does not need to be aware of which protocol stack is used.

Figure 6 shows an example of how a Multipath TCP connection can be established. It starts with the setup of a first subflow (steps 2-4). These steps consist of a three-way handshake, similar to the process in regular TCP. The only difference for Multipath TCP is that an MP_CAPABLE option is used in the TCP header. With this option, the device indicates to its peer that it is Multipath TCP capable and wants to use it (step 2). If the peer is also able to use Multipath TCP, it replies with a similar capability indication (step 3). As part of the three-way handshake, the endpoints also exchange security keys. After setting up the first subflow, both endpoints can exchange data over the connection (steps 6–7).

Figure 6: Establishment of a Multipath TCP connection

Once a Multipath TCP connection has been established, each endpoint may initiate the setup of an additional subflow. In the example shown in Figure 6, the device has two network interfaces. Each interface is associated with its own IP address. Here, the device takes the initiative to establish a second subflow via its second interface. Again, a three-way handshake is used to achieve this. But this time the option MP_JOIN is used to indicate that this is a new subflow that is to be joined to an existing Multipath TCP connection. A token (step 9), derived from the earlier received key (step 3), is used to correctly bind the two subflows. Additional authentication information is also exchanged to ensure the authenticity of both endpoints.

Once the new subflow has been established, both endpoints can use it to send and receive data. In our example, the device sends data to its peer (step 14). Note that the device needs to take an active decision regarding which subflow to use (step 13). How this decision is made is not defined in the standard, which gives the designer the freedom to implement the scheduling policy that is most appropriate for each case.

Subflows may come and go for various reasons, such as connectivity problems. To ensure reliable, in-order delivery to the application, Multipath TCP uses a data sequence number that is carried in a Data Sequence Signal option (steps 6-7 and 14-15). Aside from ensuring in-order delivery, this number can be used in combination with the sequence numbers used by regular TCP at subflow level to execute retransmissions on different subflows, if needed. Multipath TCP can also synchronize congestion control over subflows in order to avoid unfairness to single-path users[5].

An additional benefit of Multipath TCP is that it can be introduced incrementally. In particular, if the receiver of the first subflow’s TCP syn does not support Multipath TCP, it will simply discard the capability option. It will reply with a TCP SYN ACK, but without adding the MP_CAPABLE option, and the connection will be made with standard TCP.

User space

In computer design, a distinction is made between kernel space and user space. Kernel space is where the operating system code runs – hardware device drivers, memory management and protocol stacks, for example. User space is where ordinary programs run. In designing our Multipath TCP solution, we chose to place a protocol stack (MPTCP) in user space rather than in kernel space. This results in faster packet processing, because packets don’t need to travel from kernel space to user space. Instead, they go directly from the hardware interface to user space.
The proxy-based approach to Multipath TCP access aggregation

Proxies make it possible to achieve the benefits of Multipath TCP for access aggregation without requiring Multipath TCP support in all end devices and internet servers. An additional benefit of proxies is that they give the service provider control over the scheduling of the traffic. In this way, service providers can ensure that the available access alternatives are used in the most efficient and cost-effective way. The use of proxies has already been recognized by the industry, and work has been done and published by the Broadband Forum defining the architecture[6]. Ericsson is contributing actively to this work.

Figure 7 provides a high-level overview of the proxy-based approach to Multipath TCP access aggregation. There are two proxies involved: a network proxy and a customer premises equipment (CPE) proxy. The network proxy is located in the service provider’s network and converts TCP sessions from internet servers into Multipath TCP sessions that operate across multiple access networks. Similarly, the CPE proxy converts a Multipath TCP session with the network proxy back into a TCP session.

Figure 7: Proxy-based approach for Multipath TCP access aggregation

End devices with built-in Multipath TCP support could also connect directly to the network proxy. There are already some smartphones on the market with built-in Multipath TCP support that can be used to aggregate LTE and Wi-Fi. Ericsson has run tests that prove the feasibility of this setup in public LTE and Wi-Fi networks.

The proxies can be used to enhance standard Multipath TCP via additional traffic-steering capabilities that are optimized for the specific application scenario. For instance, a service provider might want to ensure that the DSL pipe is filled first before using the scarcer LTE bandwidth. This traffic-steering approach is often referred to as a cheapest-link-first policy. Service providers might also want to define policies to prevent or allow the use of heterogeneous access for specific services, or to force selected services to use only one of the available access links. All of this is possible with Multipath TCP, as the IETF standard does not prescribe a specific traffic-steering method.

In an implementation, the optional CPE proxy will be integrated in a CPE such as a home or office router. This setup can be used in a residential or enterprise setting, and when it is in place, all devices connecting to the router will receive a faster and more reliable internet connection. Traffic steering can also be applied at the CPE proxy level to control the traffic in the uplink direction.

Ericsson is partnering with CPE vendors and chipset manufacturers such as Intel to ensure efficient implementation of the Multipath TCP CPE proxy. We also offer a reference design and a test lab environment for CPE vendors.
Carrier-grade Multipath TCP proxy implementation

One important requirement for a Multipath TCP proxy in the service provider network is the ability to support a high-performance, carrier-grade IP solution for traffic aggregation. Figure 8 illustrates how Ericsson’s solution can be used as a Multipath TCP network proxy, which can be deployed in either a virtualized or non-virtualized environment.

Figure 8: Multipath TCP network proxys

All components – including Multipath TCP functionality – are implemented in user space[7] to meet the capacity requirements. The TCP traffic can be accessed directly from hardware using a Data Plane Development Kit (DPDK)[8]. The packet distribution function is responsible for sending traffic to the Multipath TCP protocol stack, located in the user space on one or several central processing unit (CPU) cores.

The Ericsson solution implements Multipath TCP functionality as specified by the IETF [2], combined with a specifically designed TCP CCA called TCP RNA (Radio Network Aware). TCP RNA is designed to utilize the mobile ran in an optimal way, and solves the equations for the correct congestion window by using measurements of the speed of the arriving TCP ACKs in conjunction with reactions of lost TCP segments. The benefits of TCP RNA are:
maximum utilization of available bandwidth for both uplink and downlink
reduced retransmissions using traffic shaping
controllable latency
avoiding bufferbloat.

This solution is highly configurable and can be tailored to support multiple Multipath TCP use cases per access network. The traffic-steering settings are policy driven. One configuration example is to send Multipath TCP traffic on one preferred subflow, such as the DSL link. When the DSL link has reached its limit, any surplus Multipath TCP traffic will be sent on another subflow – most commonly the LTE link.

Another configuration example aims to optimize radio usage on a system-wide level. If Multipath TCP traffic is sharing radio spectrum with other non-Multipath TCP traffic – from LTE-only mobile phones, for example – it might be preferable to avoid excessive use of the LTE link from Multipath TCP traffic. This can be achieved by configuring the TCP RNA for the LTE link to behave like background delivery. The result is that Multipath TCP traffic will back off when TCP RNA detects that the cell is congested, in favor of LTE-only traffic.

At times, it might be desirable to configure Multipath TCP for maximum throughput – when combining LTE with Wi-Fi access for fast file download, for example. In such a scenario, the solution can be configured to use round-trip-time-based (RTT-based) traffic steering. Such traffic steering is achieved by sending data over the subflow with the lowest RTT. If that link reaches its capacity limit and there is more data to send, the rest of the data is sent over the other subflow. If one subflow can handle all the data, only the link with the lowest RTT will be used.
Conclusions

Access aggregation is a viable option for service providers to boost bandwidth across the last mile in areas where it is too costly to increase the capacity of legacy access. Typical access aggregation scenarios are the combination of DSL with LTE or the combination of LTE with Wi-Fi. Multipath TCP, as specified by the IETF, is ideal for access aggregation in the last mile, as it is able to boost bandwidth significantly, while simultaneously increasing reliability and ensuring seamless connectivity.

Multipath TCP comes as a set of extensions to standard TCP. It leverages all of the benefits of TCP such as fairness, flow control and reliability, as well as allowing the use of multiple paths through a network simultaneously. Multipath TCP proxies allow service providers to use Multipath TCP for access aggregation without the need for end devices and internet servers to be aware of it.

Ericsson has created a Multipath TCP proxy that is tailored to the specific needs of service providers. It is carrier-grade, optimized for high traffic throughput and allows service providers to implement traffic-steering policies for the use of available access networks in the most cost-effective and efficient way.

Terms and abbreviations
ACK – ACKnowledgment
CCA – Congestion Control Algorithm
CPE – Customer Premises Equipment
CPU – Central Processing Unit
DPDK - Data Plane Development Kit
DSL - Digital Subscriber Line
DSLAM - DSL Access Multiplexer
IETF - Internet Engineering Task Force
MFDN - Media First Delivery Node
RNA - Radio Network Aware
RTT - Round-Trip Time
TCP RNA - TCP Radio Network Aware
VDSL - Very high-speed DSL
Related Posts Plugin for WordPress, Blogger...