Knowledge base
How we improved Oktawave network infrastructure performance
Posted by on 16.03.2014 20:46

Network infrastructure is one of the most important elements of true cloud computing solution. Its efficiency and reliability has a great impact on the proper client services operations. Oktawave cloud computing platform from the very beginning of its activities has been giving priority to the maximum performance of all parameters related to processing and access to data. Over the past several months, we have made a very solid reconstruction and upgrade of all elements of the network infrastructure. Check out what we have improved.


Increasing the efficiency of the devices providing Oktawave opportunity to exchange traffic between local and foreign operators

From November 2013 Oktawave has significantly upgraded routers that support national and transit links that enable our customers to seamlessly receive very heavy traffic. Currently, each of the routers that support the connection has the ability to service approximately 120 Gbit/s. Routers operate in pairs, thereby securing continuity in case of failure of a single device.


The use of routers specialized analytical software

Routers software is equipped with additional special heuristic filter analysing continuous load of packets, searching for potential signature indicating the DoS/DDoS attacks. In the event of attack signature detection filters perform automatic blocking of connections from specific operators networks to IP address that is the target of the attack.

In cases in which an attack signature is not automatically recognized and a sudden increase in the number of packets will be recorded, we automatically notify the maintenance team and do the manual correction of filters in such a way as to protect the operation of networks and customers services.

Due to the fact that the majority of DoS/DDoS has a foreign source, usually filter out unwanted traffic on foreign transits effectively block potential attacks.


Throughput enhancement of national joints and transit joints

Currently Oktawave adopts local traffic with two exchange nodes, i.e. PLIX and AC-X (Thinx). Foreign traffic is being adopted using transits provided by ATM (mainly Level3) and peering from Hurricane Electric. We are also working on connecting another foreign operator. It is also worth noting that customers using the local Orange infrastructure (formerly TP S.A.) are served with direct contact with the operator.

Each node and the operator are supported by independent physical links and the current total possible throughput is about 80 Gbit/s.


Rebuilding the internal network infrastructure

Internal network infrastructure has been rebuilt to form a hybrid link of two elements:

  1. ring architecture,

  2. network switches clustering mechanism.

Currently, each cabinet includes a pair of switches that are part of a larger network cluster, while acting as a ring connection link between the cabinets. On the day, to each cabinet containing computational elements (OCI) can be delivered and received traffic at 40 Gbit/s


Network access is the key to our success

Oktawave cloud provides a very high data security through the use of storage nodes that make data independent from the physical machine and therefore also safe from potential hardware failure. For our customers, data accessibility is equally important. During the update across the network layer, we wanted to provide users with a complete immunity to situations in which a single component fails, or traffic to Oktawave turns out to be extremely large (for example in case of DDoS attack). For several months that have passed since the reconstruction, we see that these actions have produced the desired effect.

Dariusz Nawojczyk, CMO, Oktawave

 how we improved oktawave network infrastructure performance.pdf (586.54 KB)
(0 vote(s))
This article was helpful
This article was not helpful

Comments (0)
Post a new comment
Full Name:
CAPTCHA Verification 
Please enter the text you see in the image into the textbox below. This is required to prevent automated registrations and form submissions.