This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Improving Authentication Performance of Distributed SIP Proxies
November 2011 (vol. 22 no. 11)
pp. 1804-1812
ASCII Text
x 
 
Italo Dacosta, Vijay Balasubramaniyan, Mustaque Ahamad, Patrick Traynor, "Improving Authentication Performance of Distributed SIP Proxies," IEEE Transactions on Parallel and Distributed Systems, vol. 22, no. 11, pp. 1804-1812, November, 2011.
 
 
BibTex
x
 
@article{ 10.1109/TPDS.2011.62,
author = {Italo Dacosta and Vijay Balasubramaniyan and Mustaque Ahamad and Patrick Traynor},
title = {Improving Authentication Performance of Distributed SIP Proxies},
journal ={IEEE Transactions on Parallel and Distributed Systems},
volume = {22},
number = {11},
issn = {1045-9219},
year = {2011},
pages = {1804-1812},
doi = {http://doi.ieeecomputersociety.org/10.1109/TPDS.2011.62},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
}
 
 
RefWorks Procite/RefMan/Endnote
x 
 
TY - JOUR
JO - IEEE Transactions on Parallel and Distributed Systems
TI - Improving Authentication Performance of Distributed SIP Proxies
IS - 11
SN - 1045-9219
SP1804
EP1812
EPD - 1804-1812
A1 - Italo Dacosta,
A1 - Vijay Balasubramaniyan,
A1 - Mustaque Ahamad,
A1 - Patrick Traynor,
PY - 2011
KW - SIP
KW - VoIP
KW - digest authentication
KW - SIP proxy performance.
VL - 22
JA - IEEE Transactions on Parallel and Distributed Systems
ER -
 
Italo Dacosta, Georgia Institute of Technology, Atlanta
Vijay Balasubramaniyan, Georgia Institute of Technology, Atlanta
Mustaque Ahamad, Georgia Institute of Technology, Atlanta
Patrick Traynor, Georgia Institute of Technology, Atlanta
The performance of SIP proxies is critical for the robust operation of many applications. However, the use of even light-weight authentication schemes can significantly degrade throughput in these systems. In particular, systems in which multiple proxies share a remote authentication database can experience reduced performance due to latency. In this paper, we investigate how the application of parallel execution and batching can be used to maximize throughput while carefully balancing demands for bandwidth and call failure rates. Through the use of a modified version of OpenSER, a high-performance SIP proxy, we demonstrate that the traditional recommendation of simply launching a large number of parallel processes not only incurs substantial overhead and increases dropped calls, but can actually decrease call throughput. An alternative technique that we implement, request batching, similarly fails to achieve high proxy throughput. Through a carefully selected mix of batching and parallelization, we reduce the bandwidth required to maximize authenticated signaling throughput by the proxy by more than 75 percent. This mix also keeps the call loss rates below 1 percent at peak performance. In addition, we demonstrate that the delay introduced by batching is acceptable for VoIP applications. As a result, our technique significantly reduce the cost and increase the throughput of authentication for large-scale networks supporting SIP applications.

[1] Introduction to Linux Traffic Control, http://linux-ip.net/ articles/traffic-control-howto intro.html, 2011.
[2] Mysql ab - The World's Most Popular Open Source Database, http:/www.mysql.com/, 2011.
[3] Oracle Voicemail & Fax Administrator's Guide 10g, Release 1 (10.1.1), http://download.oracle.com/docs/cd/b15595_01/ mail.101b14496.pdf, 2011.
[4] SIPp: Traffic Generator for the SIP Protocol, http:/sipp. sourceforge.net/, 2011.
[5] A. Adya, W. Bolosky, M. Castro, R. Chaiken, G. Cermak, J. Douceur, J. Howell, J. Lorch, M. Theimer, and R. Wattenhofer, "FARSITE: Federated, Available, and Reliable Storage for an Incompletely Trusted Environment," Proc. Symp. Operating Systems Design and Implementation (OSDI), 2002.
[6] V. Balasubramaniyan, A. Acharya, M. Ahamad, M. Srivatsa, I. Dacosta, and C. Wright, "SERvartuka: Dynamic Distribution of State to Improve SIP Server Scalability," Proc. Int'l Conf. Distributed Computing Systems (ICDCS), 2008.
[7] D. Boneh and H. Shacham, "Improving SSL Handshake Performance via Batching," Proc. RSA Conf., 2001.
[8] M. Cortes, J.R. Ensor, and J.O. Esteban, "On SIP Performance," Bell Labs Technical J., vol. 9, no. 3, pp. 155-172, 2004.
[9] M. Cortes, J.O. Esteban, and H. Jun, "Towards Stateless Core: Improving SIP Proxy Scalability," Proc. IEEE Global Telecomm. Conf. (GLOBECOM), 2006.
[10] L. Guernsey, "Keeping the Lifelines Open," The New York Times, http://www.nytimes.com/2001/09/20/technology/ circuits20INFR.html, Sept. 2001.
[11] J. Janak, "Sip Proxy Server Effectiveness," Master's Thesis, Department of Computer Science, Czech Technical Univ., 2003.
[12] R. Lemos, "Cyber Attacks Disrupt Kyrgyzstan's Networks," SecurityFocus, http://www.securityfocus.com/brief896, Jan. 2009.
[13] H. Liu, "Applying Queuing Theory to Optimizing the Performance of Enterprise Software Applications," Proc. Computer Measurement Group Conf., 2006.
[14] E.M. Nahum, J. Tracey, and C.P. Wright, "Evaluating SIP server performance," Proc. ACM SIGMETRICS Int'l Conf. Measurement and Modeling of Computer Systems 2007.
[15] K. Ono and H. Schulzrinne, "One Server Per City: Using TCP for Very Large SIP Servers," Proc. Second LNCS Conf. Principles, Systems and Applications of IP Telecomm. (IPTComm '08), July 2008.
[16] OpenSER, OpenSER—The Open Source SIP Server, http:/www.openser.org/, 2007.
[17] M. Richtel, "Inauguration Crowd Will Test Cellphone Networks," The New York Times, http://www.nytimes.com/2009/01/19/technology 19cell.html, 2009.
[18] J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Sparks, M. Handley, and E. Schooler, "RFC 3261: SIP: Session Initiation Protocol," 2002.
[19] S. Salsano, L. Veltri, and D. Papalilo, "SIP Security Issues: The SIP Authentication Procedure and Its Processing Load," Network, IEEE, vol. 16, no. 6, pp. 38-44, Nov./Dec. 2002.
[20] H. Schulzrinne, S. Narayanan, J. Lennox, and M. Doyle, SIPstone-Benchmarking SIP Server Performance, 2002.
[21] C. Shen, H. Schulzrinne, and E. Nahum, "Session Initiation Protocol (SIP) Server Overload Control: Design and Evaluation," Proc. IPTComm. '08, pp. 149-173, 2008.
[22] K. Singh and H. Schulzrinne, "Failover and Load Sharing in SIP Telephony," Int'l Symp. Performance Evaluation of Computer and Telecomm. Systems (SPECTS), July 2005.
[23] K. Singh, H. Schulzrinne, and J. Lennox, SIP Server Scalability, 2005.
[24] K.N. Singh,, Reliable, Scalable and Interoperable Internet Telephony, PhD thesis, Columbia Univ., 2006.
[25] A. Sweeney, D. Doucette, W. Hu, C. Anderson, M. Nishimoto, and G. Peck, "Scalability in the xfs File System," ATEC '96: Proc. USENIX Ann. Technical Conf., pp. 1-1, 1996.
[26] B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Joglekar, "An Integrated Experimental Environment for Distributed Systems and Networks," Proc. Symp. Operating Systems Design and Implementation pp. 255-270, Dec. 2002.

Index Terms:
SIP, VoIP, digest authentication, SIP proxy performance.
Citation:
Italo Dacosta, Vijay Balasubramaniyan, Mustaque Ahamad, Patrick Traynor, "Improving Authentication Performance of Distributed SIP Proxies," IEEE Transactions on Parallel and Distributed Systems, vol. 22, no. 11, pp. 1804-1812, Nov. 2011, doi:10.1109/TPDS.2011.62
Usage of this product signifies your acceptance of the Terms of Use.