School leaders and students are looking at two completely different things about the web export strategy. The school leader looks at the export bandwidth utilization report, wondering how much millions of dollars a year of bandwidth costs. Students see how much late they play at night, and how much video cards they don't pay. Information centres are caught in the middle, while talking to operators about broadband budgets, and when dealing with student complaints, it also ensures that teaching research exports are not subject to entertainment traffic.——Most people think that export dispatch is a network device, not a billing system. But the fact that the billing system governs user certification and package strategy, whether or not the export should be released, which link it should take, depends to a large extent on what labels the billing system will put to users.
Fee labelling systems in multi-export settings
Many universities now have multiple export structures: an educational network line, a telecommunications broadband, a broadband connection, a mobile broadband, and possibly a route to run an international academic database. The strategic path for which users certify an exit should not be determined by the core router because it is only possible to see IP addresses and no user identity at this level.
This is done by labelling each account in the billing system."Priority for the education network"tab, when authenticated, send a specific strategic attribute to BRAS, which allows the BRAS to export the flow route to the educational network."Telecommunications priority"The flow is via telecommunications."International line"label. This identity-based export movement, which is simply a router strategy for the network, cannot be done because the router matching condition is IP, not user identification.
Load balance cannot be just a rotation, but it must combine the meal and the time.
Many schools do the simplest weight-weighted round of questioning: divide student traffic on average to three broadbands. This is okay when flows are smooth, but campus network traffic has strong timetime features. Between 8 and 11 p.m., video and game traffic explodes, and if export strategies fail to adjust dynamically, there will be an awkward situation of telecommunication exports bursting, connected exports or half empty.
The system collects real-time bandwidth utilization rates for exports every five minutes, and when a user who is certified to be online automatically diverts to less loaded exports (e.g. 85%) above the threshold. For users of large traffic that are already online, export redistribution strategies can be sent through Radius COA messages, without kicking, on-line, or recertification, but with traffic paths changing. This insensitive ability is important for user experience.
The export strategy should also be linked to the type of package. Low bandwidth package users (e.g. 5Mbps) have a low flow pressure on exports, which can be distributed as a matter of priority to the best quality major exports. Highband package users (e.g. 100 Mbps) have a high impact on exports and should be assigned as a priority to the link with the largest bandwidth surplus.
Applying recognition to embarrassment: Is DPI doing or not?
Export dispatches inevitably involve discussing the application of recognition (DPI). Theoretically, it is a fine management that P2P downloads, video streams, online games are recognised, different exports are taken or different bandwidth priorities are allocated. But DPI has several real problems with school scenes. First, DPI equipment itself is a cost-effective and hundreds of thousands of mega-DPI gateways. Second, encryption traffic is increasing, and traditional DPI recognition rates have declined significantly since QUC and HTTPS were widely available. And third, and most importantly, doing DPI is equivalent to treating students ' Internet behavior in one box, which poses a risk of privacy compliance in the school environment.
The more pragmatic alternative is to replace DPI with a set-set strategy for the billing system for rough particle fraction. For example, allocate one to the school area account number"White list"Strategies: Access to teaching systems, library databases, scientific platforms and other traffic is only allowed. This is not dependent on DPI, but rather on a firewalled URL list. The student district accounts are given priority by the suite of meals: P2P traffic in basic packages is either directly limited to 128Kbps or closed off; P2P in advanced packages is restricted to 5Mbps. These strategies are sent to BRAS or export gateways without deep-bag testing, just identifying protocol types and ports with much less stress on performance.
Operator ' s export choice: as broad as possible
Schools get caught up in the purchase of export bandwidth."Whoever has the bandwidth, buy it."But in practice, export control is good, and the quality of connectivity between operators is much more important than a bandwidth peak. For example, you buy 500M for telecommunications, 500M for connections, which looks like a thousand megagrams of total bandwidth for exports, but if the interconnectivity between telecommunications and connectivity does not work, telecommunications users access server cards on connection nodes.
So there is an important decision in the export strategy: traffic should be closed as far as possible within the same operator. The system would have been more effective if it were to be able to move closer together with DNS resolution when assigning exports to users. For example, when a user account is assigned to telecommunications exports, DNS should return to its domain name at the IP node of telecommunications rather than mechanically returning to a generic IP to allow flow to rotate between operators. Some systems already support linkages with the DNS server: once the user has certified, RADIUS’s export policy will trigger a DNS strategy update while prioritizing the DNS queries to the CDN node of the operator.
Finally, one thing that can be easily ignored but has a significant impact: the IPv6 export schedule. The education network and IPv6 coverage of three major operators are now basically in place, but many schools’ export strategies remain the logic of the IPv4 era, with IPv6 traffic going by default.