Upload
elfiq-networks
View
220
Download
0
Embed Size (px)
Citation preview
8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
1/9
Technology White Paper
SitePathMTPX:
Point to Point Resilience
for Applications over
Internet/WANConnections
Build Smarter Networks
8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
2/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com2
Table of Contents
1. Executive Summary .................................................................................................................................. 3
2. Overview of the Problem ......................................................................................................................... 3
3. SitePathMTPX Operating Principles ...................................................................................................... 4
4. SitePathMTPX Balancing Algorithms .................................................................................................... 6
5. SitePath as its Own Failover Mesh Networks ................................................................................... 7
6. Customer Scenario: Victrix ...................................................................................................................... 8
7. Return on Investment versus Downtime-related Losses .................................................................... 8
8. Conclusion ................................................................................................................................................. 9
8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
3/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com3
1. Executive SummaryPoint to point applications have been a part of the information technology space for a very long time,
and they have evolved into essential business services where key activities depend on them on a
daily basis. Commonly found point to point applications in business organizations include branch
office virtual private network tunnels, voice over IP deployments, file transfer systems and business
continuity/disaster recovery projects.
2. Overview of the ProblemInternet access is the commonly preferred communication vector employed by organizations for its
affordability and availability. As discussed in the Business Continuity: Proactive Telecom Strategies
for Decision Makers White Paper published byElfiq Networks, public ISP links are expected to suffer
failure on a regular basis, and contingency planning is key to continual and normal operations.
When point to point applications are operating on these links and they suffer either significant
congestion or downtime, key applications such as accessing an organizations ERP system, email,
internal Web services and many more are unavailable for the duration of the issue. Depending onthe duration, the impact can prove to be mild for a few minutes but in many cases severe, where
connection losses measured in days can result in significant financial losses. In such cases, orders
cannot be processed easily, employee productivity is taxed with unplanned events and customer
relationships may suffer as a result of downtime.
The reason for such issues is that a single ISP link is utilized to serve the bandwidth for point to pointapplications, and in this context the potential points of failure are summed because they have to be
accounted for at each end point. So when an ISP link fails at one end, both ends stop
communicating, and should one end point suffer from saturation, the other end suffers the same
result.
In the context of many to one environments, where multiple sites connect to a central site, the
central site becomes the strategic point of failure, where, should it fail or suffer bandwidth
degradation, all the satellite sites connected to it will suffer a loss of service at the same time for the
same period, causing significant productivity degradation and potential financial losses.
http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
4/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com4
To simplify the following discussion from this point on, the context of VPNsthrough firewalls will be used. Please note that any point to point application such
as file transfer or VoIP will benefit equally from SitePathMTPX. Also, the context
will involve two end points and two routers to simplify the discussion, but
SitePathMTPX can handle multiple sites depending on the model.
3. SitePathMTPX Operating Principles
SitePathMTPX from Elfiq Networks is an innovative approach to resolving both performance and
downtime issues experienced by organizations for point to point applications. At its core, Elfiqs
Layer-2 implementation provides a seamless , transparent installation of the Elfiq Link Balancers in
a customer environment without reconfiguring existing network devices residing on the carrier side
of the network (WAN), namely firewalls, VPN gateways and routers.
From the point of view of the firewall, there is no change
whatsoever so it transacts with the Elfiq Link Balancer as if it
was the original router, but the Elfiq handles the original
router as well as the additional ones. This original link
configuration concept is known as the primary link in the
Elfiq environment and is a key concept in the products
design.
Once both sites have the Elfiq unit in place, without any
modifications the VPN tunnel between the firewalls can
resume as it was before through each sites primary link.
Each connection between each ISP connected to each Elfiq Link Balancer is called a SitePath, and a
SitePath Group is the sum of SitePaths connected to another site.
8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
5/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com5
Elfiq Link Balancers can now be used to their full potential to strengthen the VPN tunnel by
exchanging SitePath information about real-time traffic information handled though each router in
place on both ends. Once this exchange is configured and set into action, multiple routers can be
used to transmit data from one end to another, providing two key benefits:
1. Performance enhancement: since both units exchange link metrics, based on the selectedalgorithm, the fastest available link can be selected to improve overall performance,
eliminating the saturation bottleneck often experienced in VPNs. This performance
improvement operates in both directions of the SitePathMTPX relationship.
2. Resilience: should an ISP link fail, the local Elfiq unit will re-adjust the traffic flow to theavailable link(s) to ensure continuity and communicate to the other unit the change in
available links, preventing a cancellation of the VPN session between the two sites and
guaranteeing normal continuous operations even with an unavailable link. When the
defective link returns to normal, it gets re-added to the list of links selected for
SitePathMTPX.
8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
6/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com6
Unlike other technologies, this is transparent for any type of point to point traffic, where
no VPN tunnel is created between each router, thus simplifying network design,
consuming fewer resources and being completely agnostic. Also, SitePathMTPX tunnels
can be encrypted in AES128 should the point to point application require a higher levelof security but none exists.
In the SitePathMTPX feature, the concept of a SitePath is one of the colored lines in the diagrams
above, while a SitePath Group is all the SitePaths connected to another site. A single unit can have
more than one SitePath Group connecting to multiple remote sites.
Another function of SitePathMTPX is the ability to provide quality of service (QoS) for its traffic, to
ensure enough bandwidth is available to provide the required service and also to prevent
overutilization of the bandwidth by SitePathMTPX in certain contexts to ensure optimal bandwidth
distribution.
4. SitePathMTPX Balancing AlgorithmsOne of the key advantages and a unique feature of SitePathMTPX is the ability to select one of four
algorithms designed for this particular functionality:
1- Weight First Algorithm (WFA): this algorithm will use a SitePath based on its weight andavailable bandwidth.
2- Best SitePath First (BSFA): this algorithm selects the most appropriate SitePath based onstatistics and cumulative metrics to select the path with the most available bandwidth.
3- Round Trip Time First Algorithm (RTFA): this algorithm dynamically selects the SitePath basedon round trip times (RTT) of packets.
8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
7/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com7
4- Multiplexing (MTPX): this algorithm enables bandwidth virtualization by aggregating multiplepaths into one virtual path for increased throughput. It requires links of similar specifications
and performance for optimal use.
5. SitePath as its Own Failover Mesh NetworksOn any Elfiq Link Balancer, SitePathMTPX enables at least two SitePath Groups to connect to
multiple sites. Should more sites, such as business continuity sites, be interconnected in a
centralized environment, SitePathMTPX can be used to mesh point to point applications in mission-
critical environments.
8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
8/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com8
6. Customer Scenario: VictrixVictrix is an IT solution provider that decided to invest in deploying multiple ISPs across their sites to
improve performance and reliability. Having deployed more expensive 10Mbps fiber circuits at their
primary sites, they required more throughput and redundancy through carrier technology
combinations. With SitePathMTPX, the office to office connectivity issues of saturation and
occasional ISP link downtime were eliminated, and DSL/cable modems were used to enhance the
redundancy of the solution, so if one carrier network is unavailable another should be ready to take
over the tasks until service is restored.
A full case study is available atwww.elfiq.com.
7. Return on Investment versus Downtime-related LossesSince every organization is different, this metric can be either simple or complex to measure. Key
items commonly used to determine the return on investment of a bandwidth improvement should
include:
number of outages in the last year with duration
number of significantly degraded periods in the last year
financial losses/lost sales due to downtime
average productivity losses per employee per outagemetric for existing links before and after implementation
cost of each available ISP link.
Elfiq provides a free ROI calculation tool atwww.elfiq.com, so organizations can start building
estimates based on these calculations.
http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/http://www.elfiq.com/8/8/2019 Elfiq White Paper - SitePathMTPX multiplexing for VPNs
9/9
SitePathMPTX White Paper
2009 Elfiq Networks. All rights reserved www.elfiq.com9
8. ConclusionPoint to point applications such as VPNs and VoIP have become not only commonplace but also
critical to ensure normal business operations. To alleviate the two core issues of downtime and
saturation in such deployments, Elfiqs SitePathMTPX feature provides a creative, robust, simple and
non-intrusive answer to bringing performance and resilience to any organization in a very cost-
effective manner.
Produced by Elfiq Networks
Elfiq Networks is a technology leader and innovator in the field of WAN link management andbalancing. With successful installations in over 50 countries, Elfiqs Link Balancer products help
organizations of any type and size perform more competitively every day with the ability to use
multiple Internet and private links easily and securely.
For more information on Elfiq Networks products and technologies, please contact:
Elfiq Networks
1155 University, #712
Montreal, Quebec, H3B 3A7
Canada
Telephone: 888-GO-ELFIQ/514-667-0611
Internet: www.elfiq.com
Email: [email protected]
May 2009
Copyright 2009, Elfiq Networks (Elfiq Inc.). The contents of this document are protected by copyright. Any modification of this document, in any shape or
form, is prohibited. Any redistribution, publication or derivation of the contents of this document without written authoriza tion from Elfiq is also prohibited.
All rights reserved.