Download PDF - Department of Navy Chief Information Officer - U.S. ...

(Synchronous Optical Network) ring running at OC-192 (OpticalCarrier Level 192), they do not spend a lot of time worrying aboutpacket loss in their phone calls. All in all, things looked pretty gooduntil the phone started ringing. Well, perhaps "ringing" is thewrong word; "singing" might describe it better, though only veryloosely.Zippy has many idiosyncrasies, one of which is that he owns atleast one of every singing fish ever produced. There isn't a roomin his cabin that does not have some form of piscatorial oratorio.Zippy had wired every one of them into the phone system. Whena call came in, instead of a phone ringing, the fish would start singing.It was actually pretty amusing, at least for the first two or threecalls. The fish would sing until you said, "Hello." Then the lip-syncmodifications would kick in and the fish would animate in timewith the caller's voice. Like the lights, phone conversations wouldalso follow you from room to room (i.e., from carp to catfish). Zippywas quite proud of his little telefishies and his toddler twins lovedthem, too.As usual with Zippy's system modifications, though, things eventuallywent horribly wrong. Much to his children’s delight, right inthe middle of a call every fish in the house started “speaking” gibberish.The cacophonous babble filled the house until we foundthe problem — somehow the computer controlling the fish hadbecome completely corrupted with “Teletubbies” sounds sampledfrom the broadband cable television feed. We suspect the children,though nothing’s been proven yet.VoIP IssuesAs illustrated by Zippy's setup, the two biggest issues I see withVoIP at the moment are service and security. On the service side,VoIP really needs gigabit Ethernet running over single-mode fiber.There are network prioritization systems, in particular asynchronoustransfer mode (ATM), which can give voice traffic the priorityit needs as it flows over the same network as other packets. However,most networks will require significant expansion of their existinginfrastructure capacity to make room for anything resemblingenterprise-level VoIP on copper wiring where giving voice packetspriority can really squeeze your data traffic. I prefer my VoIP overglass for two reasons:First, I believe our future lies in optical networking. Today's advancedwide-area networks use a combination of Internet Protocol,ATM, SONET and Dense Wavelength Division Multiplexing. DWDM,in particular, has driven a tremendous improvement in long-haulbandwidth that will soon affect metropolitan and local area networking,as well. DWDM allows a single fiber cable to carry up to80 separate channels of data using different wavelengths of lightfor each channel. That is a lot of room for whatever you want totransmit. As bandwidth increases to a point where there is enoughspace for everything, you can spend less time and effort managingtraffic.44CHIPS Dedicated to Sharing Information*Technology*ExperienceWide-area telecommunications operations will probably continueusing SONET for the time being, as it is an established technologythat performs well for voice transmission. However, as IPand DWDM evolve, the ATM and SONET layers, which impose asignificant amount of overhead, will eventually disappear. For example,increasing the capacity of a SONET connection requires anupgrade to every SONET device on the fiber. This is both expensiveand disruptive. With DWDM, you can increase point-to-point bandwidthjust by lighting up another color wavelength on the existingfiber connection. I believe that just-in-time provisioning of opticalcircuits using DWDM over IP will soon become the gold standardof optical networking. It will take time to evolve beyond ATM andSONET, both in terms of technology and culture, but it will happen.Second, building optical networks to support voice traffic may helpus avoid slow, painful evolutions of existing legacy data networkinfrastructures. We will not be ready to move voice services ontoour networks until our "net tone" is as reliable as our dial tone. Mycunning plan is to do it the other way around. Instead of trying toadd voice traffic to legacy data networks already struggling to keepup with bandwidth requirements, why not build a discrete voicenetwork and then gradually migrate data traffic to it? You can keepyour existing voice and data services intact during the transitionwhile you custom-build the new network from scratch without anylegacy artifacts from the old data network. Once the voice servicesare stable, you will be able to start adding in data and video. Itwill not be a cheap, instantaneous process, but I believe it may bemore rewarding in the long run than trying to do it the other wayaround.VoIP SecurityThe second big issue for VoIP is security. Mention putting voiceservices on a data network and most network security professionalswill be outraged. There are a variety of security concerns withattaching a phone switch to a network. First, there is a long list ofsecurity vulnerabilities associated with phone switches, thoughmost of them are only threats on older key-based systems, not thenewer digital PBXs (private branch exchanges). A report on PBXvulnerabilities released by the National Institute of Science andTechnology in 2001 outlined a variety of maintenance, tapping andfeature-related vulnerabilities.Second, most phone switches come with modems, which mightas well be made of wood and shaped like a horse as far as thenetwork security staff is concerned. PBXs have modems to enableremote maintenance, which means the computer security officer isnot likely to let you attach the PBX as long as the modem is activeregardless of whether or not the switch is capable of being used asan attack platform. The best way to avoid using a modem is to doall the maintenance via IP inside the firewall, which is yet anotherargument for building a discrete voice network.Third, many of the most publicized VoIP successes involve using802.11 wireless networks. Given the perceived vulnerabilities ofboth wireless networks and phone switches, I cannot blame thenetwork security community for thinking that combining the twois the network equivalent of throwing gasoline on an electrical fire.Not only has the 802.11b Wired Equivalent Privacy protocol beencompromised, but so have the proprietary security protocols developedby VoIP vendors. Despite this, however, there are apparentlyquite a few places using VoIP over wireless network, though thepeople I have talked to have set up discrete wireless networks justfor voice traffic. Hopefully the 802.11i secure wireless standard dueout this year will address most of this. Fourth, I also have concernsabout putting my voice switches on the data network primarilybecause anyone on the network can now try to hack the phoneswitch. Security is a two-way street.Finally, as with any new thing there will be few wrinkles in howpeople implement it. A recent report by the United Kingdom's