Introduction
Aviz Service Node (ASN) brings high-performance observability to modern IP networks—data centers, edge & distributed sites, enterprise & campus, and FTTH. By extracting per-session metadata, application insights, and time-bound KPIs, ASN helps teams improve application performance, capacity planning, and day-2 operations.
Challenges Faced in Network Infrastructures
- Exploding traffic: Congestion, head-of-line blocking, and scaling pressures degrade user experience.
- Application performance: Latency, jitter, and outages threaten SLAs across dynamic workloads.
- Limited visibility: Without granular, real-time telemetry, bottlenecks and anomalies go undetected.
ASN for IP Traffic Analysis
IP Session Management
ASN analyzes high-volume packet streams and tracks millions of IP sessions in memory using IP tuples to create rich, indexed metadata per session for high-throughput processing.
- Key fields include: duration, first/last seen, total bytes/packets, directions, retransmits, app/protocol, and region.
- Outputs fuel performance monitoring, traffic engineering, capacity planning, and security analytics.
Protocol Decapsulation & Header Stripping
To inspect inner payloads, ASN performs decapsulation and selective header stripping—revealing the original packet for DPI and RCA.
Supported Tunnels / Encapsulations
- GRE (Generic Routing Encapsulation)
- ERSPAN (Encapsulated Remote SPAN)
- VXLAN (Virtual Extensible LAN)
- PPPoE (Point-to-Point Protocol over Ethernet)
- L2TP (Layer 2 Tunneling Protocol)
- IPoE (IP over Ethernet)
Benefits: reduced overhead, deeper packet inspection, and faster troubleshooting with payload-level visibility.
Application Identification (DPI)
ASN’s DPI engine identifies 500+ applications today (roadmap: 1000+) using multiple techniques:
- Pattern matching (signatures, heuristics)
- SNI (Server Name Indication) matching
- Global IP/ASN mappings
- Port-based classification (with context to avoid false positives)
KPI Calculation & Streaming
Exporting Session Metadata
ASN exports enriched APP, KPI, and session records to external platforms via Kafka for analytics, storage, and tooling integrations.
High-Frequency KPI Export
KPIs are aggregated and streamed every 5 seconds for real-time observability—using efficient buffering, parallelism, and low-latency Kafka pipelines to sustain peak loads without back-pressure.
Real-Time Alerts
Priority events (e.g., session deletion/release/handover) trigger immediate Kafka notifications for rapid triage and action.
Timestamping for Time-Series Analysis
Packets and sessions are timestamped (created, last-seen, exported) to support accurate time-window analytics and trend detection.
KPIs Supported Matrix
| KPIs | Per Session | Per Application | Per Region |
|---|---|---|---|
| Throughput / Bandwidth | ✔ | ✔ | ✔ |
| Uplink Latency | ✔ | ✔ | ✔ |
| Downlink Latency | ✔ | ✔ | ✔ |
| Retransmit Count | ✔ | ✔ | ✔ |
| Total Packets & Bytes | ✔ | ✔ | ✔ |
Packet Deduplication
Duplicate packets inflate bandwidth and skew metrics, especially around large transfers and mirrored streams. ASN provides configurable deduplication with controls such as:
- Packet Source
- Select tap/SPAN/ERSPAN/VXLAN sources for dedup scope.
- Anchor & Offset
- Choose byte window and offsets to compare for duplicates.
- Window Size
- Bound state to time/byte windows for line-rate efficiency.
Result: cleaner telemetry, accurate KPIs, and reduced storage/egress overheads.
Packet Capture (Live)
For zero-disruption troubleshooting in high-throughput DC environments, ASN supports live packet capture alongside line-rate processing—ideal for debugging, validation, and ad-hoc analysis.
Benefits of ASN for IP Traffic Analysis
- Enhanced observability: Granular traffic flow, app behavior, and KPI visibility.
- Per-user application insights: Pinpoint issues quickly with end-to-end context.
- Continuous optimization: Measure and improve network health and resource allocation.
- Scalable by design: Sustain high session and throughput counts across large fabrics.
FAQs
1) What is ASN and how does it enhance IP traffic analysis in modern networks?
Aviz Service Node (ASN) is a high-performance observability platform for DC, edge, FTTH, and enterprise networks. It tracks millions of sessions, generates rich metadata, and surfaces KPIs like throughput and latency for actionable insight.
2) How does ASN identify and classify network applications in real time?
ASN uses a robust DPI engine (500+ apps today; 1000+ on roadmap) combining pattern matching, SNI, global IP mapping, and port context for precise app-level visibility.
3) Can ASN support advanced packet decapsulation for deep network analysis?
Yes. ASN decapsulates GRE, ERSPAN, VXLAN, PPPoE, L2TP, and IPoE to reveal inner payloads, improving DPI, troubleshooting, and efficiency.
4) How does ASN handle session metadata export and alerting for real-time monitoring?
ASN exports APP/KPI/session records via Kafka every 5 seconds for real-time visibility and triggers alerts for critical events (e.g., deletions, releases, handovers).
5) Why is packet deduplication important in data center environments, and how does ASN handle it?
Duplicates inflate bandwidth and distort KPIs. ASN’s configurable dedup (source, anchor/offset, window) removes redundancy, yielding cleaner metrics and lower overhead.
