[语文]1_SCE_Arch.pptVIP

“Best Practices” SessionSCE Architecture Under Strict NDA Elements of this presentation are under strict NDA and should be considered confidential and proprietary External distribution of this presentation should be consulted with scp-pm@ Questions regarding features or timelines should be directed to ask-service-control@ Agenda Agenda The Service Control Engine Carrier-grade solution offering: Deep-packet-inspection Stateful application recognition Dynamic policy control Based upon a flexible purpose-built platform: Modular and scalable HW accelerated application analysis and control 50 microseconds of latency on average Easy-to-use, scalable APIs and interfaces Built for Broadband Service Providers’ Networks Service Control Platforms Reliability / Carrier grade support Agenda Product Concept “Bump-on-a-Wire” Logical Flow – DPI in a Nutshell Fast Path for Delay Sensitive Traffic The SCE has an implemented Fast Path (since 2.5.5) which assures minimal delay (~50 uSec) with almost no variance. Fast Path is determined by the Application for specific protocols that are known to be delay sensitive (e.g. SIP) Fast Path can also be used with Ignore Rules which doesn’t require the SCEs DPI capabilities (e.g. Reporting) HW/SW Synergy Model Programmability as a Key Objective Programmability essential for solution’s longevity New protocols New business requirements Network device reliability with software release cycles SML – Stateful deep packet inspection scripting language Achieved through a multi-tier software architecture SCOS – Operating system abstracts packet processing and underlying hardware SML – Functional evolution non-signature protocol support Configurable Signatures – User defined protocols signatures Classification / Policy Engine Protocol Classification Stateful L7 identification decoding of protocols Used also for identifying “subsidiary” flows using ephemeral ports (FTP transfer, SIP/H323/MGCP media flows, etc.) Hunt masquerading / port