1. slide Winitu Consulting Tolnasingel 1 2411 PV Bodegraven The Netherlands Fiber to the Home Erik Radius, Jan Martijn Metselaar Colloquium SNE Master March 3, 2010

2. slide2 Agenda 2 1 2 3 Introduction Fiber to the Home – technology Broadband networks – Network Architecture 4 Discussion!

3. slide Introduction Winitu Consulting Who are we? Winitu Consulting is an experienced consultancy company providing knowledge of data- and telecommunication, IT and business process management. Winitu’s customer potfolio ranges from large service providers to small enterprises in both profit and non-profit sectors. Winitu consultants are experienced in design, implementation, optimisation and management of complex networks, IT and processes. 3

4. slide What do we do? – Winitu Portfolio Strategic / Tactical Technical business consultancy Operational Excellence Process consultancy Problem solving Innovation New technology Development Hands-on experience Auditing Business Modelling Project Management Proces design and implementation IT and network management Network design and implementation IT design and implementation Network optimisation Network and IT testing Service and business development 4 Introduction Winitu Consulting

5. slide Introduction Winitu Consulting Organisation 5 WinITu Gold BV Winitu Consulting BV Winitu Communications BV igilde BVInfodation About the Winitu Group: WinITu Gold was founded January 2000 Winitu Communications is a, OPTA registered, (wholesale) unified communications provider igilde is a full service IT service provider focused on network technology Infodation is a software development company using remote sourcing in Vietnam 100% 40%

6. slide6 Introduction of the speakers of today Erik Radius Jan Martijn Metselaar Introduction

7. slide7 Agenda 7 1 2 3 Introduction Fiber to the Home – technology Broadband networks – Network Architecture 4 Discussion!

8. slide8 FTTH technology: a closer look at optics FTTH technology Optical fiber is a compact, low-loss carrier for broadband signals Optical fiber consists of 3 main parts 1: glass core 2: glass cladding 3: plastic buffer coating

9. slide9 Optical fiber inner workings Optical signal is contained within the fiber Higher index of refraction in core than in cladding Total internal reflection at the core/cladding boundary FTTH technology

10. slide10 Multimode versus Singlemode (1) Multimode ‘Bigger’ core: 50 / 62,5m Multiple optical modes supported/transmitted Bandwidth*distance product is limited Only suitable for shorter distances (<1km) FTTH technology

11. slide11 Multimode versus Singlemode (2) Singlemode Small core: 9m 1 optical mode is supported/transmitted Signal may be carried over very large distance More information online, e.g. http://www.rp-photonics.com/fibers.html FTTH technology

12. slide12 Transmitter & receiver Optical fiber is only a passive waveguide Active components at the end points: Signal source: laser diode Receiver: photo diode (Amplitude)modulation of the data stream Light signal is the ‘carrier’ wave Both digital and analog transmission possible FTTH technology

13. 13slide13 Signal loss in optical fiber is wavelength dependent

14. 14slide14 Power budget 14 source: http://www.thefoa.org/

15. slide power budget Optical power budget Fiber link design: what is involved Fiber type (single mode? multi mode?) Fiber length (km) Licht source: output power (dBm) Detector: receiver sensitivity (dBm) Elements in the link that cause additional signal loss Fiber link budget or optical power budget the amount of light available to make a fiber optic connection Provides the maximum distance with the available optics Take a minimum of 3dB margin into account 15

16. slide power budget 16 Optical power budget: case #1 Laser power: -7 dBm Fiber attenuation: 0,4 dB per kilometer Fiber length: 20 km Receiver sensitivity:-29 dBm Splice loss:0,1 dB (max.) Connector loss: 0,5 dB (max.) # of connectors: 2 # of splices:4 Calculate Link budget: laser power – receiver sensitivity Calculate Margin: laser power – receiver sensitivity – [link losses]

17. slide power budget 17 Optical power budget: case #2 Laser power: +1dBm Fiber attenuation: 0,25dB per kilometer Fiber length: 40km Receiver sensitivity:-12dBm Splice loss:0,1dB (max.) Connector loss: 0,5dB (max.) # of connectors: 4 # of splices:8 Calculate Link Budget: laser power – receiver sensitivity Calculate Margin: laser power – receiver sensitivity – [link losses]

18. slide18 Pros and cons of optical fiber Question for you all... Give me 3 advantages of optical fiber over metallic wiring... and... 3 disadvantages FTTH technology

19. slide FTTH technology 19 Fiber networks Transport networks layers Core (+ international) network Metro(politan) network Access network Access network for telecom/cableTV partial fiber Telecom Optical fiber up to central office Copper connection into the home Cable TV Optical fiber up to street cabinet coax connection into the home

20. 20slide20 International networks (submarine cable systems)

21. 21slide21 National networks source: GIGAport website

22. 22slide22 City networks (metro rings) source GIGAport website

23. slide23 Fiber penetration in the access network Fiber…. to the Node Central office, >300m to the Curb/Cabinet Straatkast, <300m to the Building/Basement Multi-storey buildings to the Home into the ‘meterkast’ http://upload.wikimedia.org/wikipedia/commons/3/32/FTTX.png FTTH technology

24. slide24 FTTH cabling concept Access network branches off multiple times between central office and the home Installed: underground or above ground (!) FTTH technology

25. slide FTTH in Romenia (Bucharest) FTTH technology Fiber installation above ground: example 25

26. slide FTTH technology Underground installation Several underground deployment methods available 1: modular tubes; insert fiber as needed (blown fiber) 2: fiber inside rugged cable (buried fiber) Blown fiber explained in more depth 26

27. slide27 Miniduct system for access network 1, 7, 12, 24 thin tubes in a rugged outdoor cable Branching off one or multiple tubes is relatively simple FTTH technologie

28. slide28 Fiber in mini duct Install thin cable into duct using airflow FTTH technologie

29. slide Fiber connection in the home Example optical fiber network terminal Services for end user: Internet (Analogue) television Phone Most often installed in the utility cabinet (‘meterkast’) 29

30. slide30 Fiber, the movie FTTH installation in a Dutch neighborhood Blown fiber concept using branching off of individual tubes for house connections In the home: miniduct in the utility cabinet Installation of network terminal Testing & activation FTTH technologie

31. slide … movie link is on your desktop somewhere Watch the movie 31

32. slide32 Fiber architectures (1): Point-to-point point-to-point 1 on 1 fiber connection between Central office and Home POP FTTH technology

33. slide33 Fiber architectures (2): PON point-to-multipoint (PON: passive optical network) optical splitter in the link, to send same signal to multiple end points POP FTTH technology

34. 34slide34 PON: shared medium

35. slide35 Point-to-point versus PON PON popular with telcos USA Japan Australia ‘closed business/network model’ Point-to-point mostly popular in Europe Scandinavia Netherlands, France, etc ‘open network model’ FTTH technology

36. slide36 Bidirectional data transmission popular in FTTH Single fiber bidirectional for data Different signal wavelengths for up vs down 1500nm downlink 1310nm uplink Reason? Less fiber needed in the field fiber management is expensive Space in the Central Office is scarce FTTH technology

37. slide37 POP fiber management FTTH technologie

38. slide38 Transport of services 3 services in the access network Internet Voice/telephony Television Various ways to realise this... e.g. Internet: via data fiber (IP) Voice: via data fiber (VoIP) Television: via CATV fiber (overlay network) or via IP FTTH technology

39. slide39 Agenda 39 Agenda 1 2 3 Introduction Fiber to the Home – technology Broadband networks – Network Architecture 4 Discussion!

40. slide40 Quizzz Dual play, Triple play, Multi play IP all the way! But what does the end-user care? Broadband services

41. slide41 Current broadband services over FTTH networks Internet access Unicast IP (Duh…) Television IP unicast for video-on-demand IP multicast for broadcast television (the ‘default’ package of 50 channels) Telephony SIP signaling, RTP for transport Broadband services

42. slide42 Current broadband services over FTTH networks Nice those triple play services, but how do you get the content to the subscribers? Smart network architecture… Broadband services

43. slide43 Network Architecture – Layered model Access Lots of individual connections Focus on physical aggregation of lines Security Distribution Connection towards access layer Focus on logical aggregation of connections Route summarization Core Connection towards the distribution layer Focus on traffic volume No identification of individual connections Broadband services

44. 44slide44 Network Architecture – Layered model Core network Service provider 1 Service provider 2 core metro access

45. slide45 Discussie / Quizzz The how and why of current broadband networks Protocols? Speeds? Possibilities? Restrictions? Broadband services

46. slide46 Network Architecture – Ethernet as uniform transport protocol ATM Packet over Sonet (POS) SONET SDH PPP Leased line X.25 Frame Relay STM-1, 4, 16 Ethernet Broadband services Ethernet

47. 47slide47 NT Access Distribution / Core backbone WWW PSTN/ISDN subscriber domain Operator domain service provider domain Core Network structure – Domain separation ISP 1 ISP 2 ISP 3 “Wholesale” model: operator delivers network facilities to different content and service providers.

48. slide48 Network Architecture – Access: connection model Point-to-Point Protocol (PPP) IP over PPP over Ethernet PPP session from the modem into the distribution layer IP address assignment in PPP session setup via RADIUS ‘connection oriented’ Multiple PPP sessions for QoS guarantees Ethernet Bridging “DHCP model” IP over Ethernet IP address assigment through DHCP ‘connection less’ QoS via Ethernet Class of service How is the connection between subscriber and network realized? Broadband services

49. 49slide49 Network Architecture – Core: MPLS VPN NT Distributie / Core apparatuur backbone City PoP VPN SP 1 VPN SP 2 VPN SP 3 VPN ISP 1 VPN ISP 2 VPN ISP 3 ISP 1 ISP 2 ISP 3 Ethernet Bridging MPLS VPN subscriber domain Operator domain service provider domain

50. slide50 Network Architecture – Core Network MPLS (Multi Protocol Label Switching) Support for VPNs Traffic Engineering (used for fast reroute and ip multicast traffic) Ethernet transport over MPLS IP Routing IGP For distributing ‘next-hop’ routing information OSPF or IS-IS M-BGP For distributing IPv4 prefixes Broadband services

51. 51slide51 Network Architecture – MPLS primer: labels IP packet L1IP packetL2IP packetL3 IP packet Label Switched Router (LSR) MPLS enabled router Forwarding based on Labels, forwarding control separated from forwarding plane Labels are distributed via Label Distributie Protocol (LDP) LDP hello packets are UDP and transported via broadcast of multicast Multiple labels (stack) per packet possible (note that MTU must be large enough!)

52. 52slide52 Network Architecture – MPLS primer: forwarding Control plane inside a node IP routing protocols IP routing table MPLS IP routing control Label information Base (LIB) Label information Base (LIB) Data plane inside a node Forwarding Information Base (FIB) Label Forwarding information Base (LFIB) Routing information exchange with other routers Label binding exchange with different routers

53. slide53 Network Architecture – Increasing complexity Multiplay Complexity Single play Dual play Triple play Broadband services

54. slide54 Quizzz What about Quality of Service? What about Security? Broadband services

55. slide55 Network Architecture – Quality of Service Core network QoS only relevant if congestion can occur Used to be irrelevant in broadband networks as bandwidth was plenty. FTTH and Docsis3 has changed this. QoS policy of most providers was: “upgrade capacity”. Currently large providers are running into technological limits: 10GE is not fast enough and 100GE is not yet there! Cost for service providers is increasing rapidly Traffic is becoming more symmetrical Broadband services

56. slide56 Network Architecture – Quality of Service Access networks Multi-play services all use the same connection Voice traffic needs to be protected Video needs to get enough bandwidth (otherwise you’ll see blocks) Video and voice need protection from general internet traffic(especially P2P and news traffic) Broadband services

57. 57slide57 NT backbone Network Architecture – Quality of Service ISP 2 QoS parameters upstream traffic QoS enforcement downstream traffic QoS parameters On incoming traffic QoS transparent IP QoS: precedence bits, diffserv Ethernet QoS: Class of Service (priority bit in vlan header) MPLS QoS: Exp. bits

58. slide Security Network Architecture – Security 58

59. slide59 Network Architecture – Security Network Access to network elements Access to network management systems Protocols “Security by obscurity” Control plane protection Services platform Policy: every service is responsible for it’s own platform Where possible network security can provide additional protection Separate users Spoofing filters User isolation Protocol filters (note that new OS like Windows Vista and 7 bring new challenges, like IPv6 default enabled). Security

60. slide Network Architecture – Security Attack Vectors 60 ARP flood attack, plus spoofing DHCP flood attack MAC flood attack, plus spoofing IGMP flood attack IPv4 broadcast flood attacks IPv4 unicast flood attack TTL=1 attack IP options attack IPv6 MLD … some others. Focused on the control plane of the routers and switches in the network. Most are denial of service attacks, but some can be used for a ‘man-in-the-middle’ attack. Security

61. 61slide61 NT backbone Network Architecture – Security ISP 2 NT configuration Security  force configuration from a central server (DHCP) Spoofing filters Arp filtering Reverse path check Private vlan’s vlan filtering Security by obscurity (that which is not reachable is secure)

62. 62slide62 Network Architecture – FTTH networks Security toolbox VACL Layer-2 filtering: -Allow ethertypes 0x800 and 0x806 -Broadcast ARP filtering -Multicast filtering -Broadcast redirection uRPF Ip local proxy-arp PIM neighbor filtering PFC based special case Hardware limiters Control plane policing Multicast route limit Ethertype filtering: - 0x800 0x806 (IP & ARP) DHCP snooping Dynamic Arp Inspection Private VLAN STP filtering ARP rate-limiting DHCP rate-limiting IGMP group filtering IGMP group limiting UUFB UMFB Port-security IPSG Storm-control NT

63. slide63 Quizzz Network management? Why does that seem to be so difficult for most Service Providers? Broadband services

64. slide64 Network IT - Network Management tools MRTG NAGIOS HP Openview Broadband services

65. slide65 Network IT - Provisioning We like “zero touch”, “flow through” provisioning. Service providers would like to focus on “exception management” only… Bullshit or …? Broadband services

66. slide66 Network IT – Provisioning The success of network provisioning and order management is correct and complete information: Orders Connections Automation is the key, every manual action increases the chance of mistakes Broadband services

67. 67slide67 Network and IT – Systems

68. slide68 Agenda 68 Agenda 1 2 3 Introduction Fiber to the Home – technology Broadband networks – Network Architecture 4 Discussion!

69. slide69 That’s all for now! Questions? Don’t hesitate to send us an email: erik @ winitu.com janmartijn @ winitu.com questions