MULTIPLE INPUT MULTIPLE OUTPUT (MIMO) – Understanding Network and Security for Far-Edge Computing
MIMO is a method of increasing the effective capacity of a radio link by deliberately exploiting multipath propagation. This is typically accomplished via the use of multiple transmitters and receivers on both sides 6: 6 Some implementations have a single antenna on one side and multiple antennas on the other. Figure 3.16 – MIMO exploiting
TIME-DIVISION DUPLEXING (TDD) – Understanding Network and Security for Far-Edge Computing
TDD is a half-duplex technique that simulates full-duplex by switching between uplink and downlink phases on the same frequency at regular intervals: Figure 3.12 – TDD The main advantage TDD has is that it halves the frequency range required versus FDD. However, it brings a couple of disadvantages with it. It requires precise time synchronization
Introduction to radio frequency (RF) communications – Understanding Network and Security for Far-Edge Computing
Edge computing in situations where reliable, high-speed internet access is not a given due to location or the nature of the devices involved are known as far-edge use cases. Examples include a mobile data center for disaster response, remote sensors for smart agriculture, a pilot station for a military UAV, or content delivery onboard a
Network segmentation – Understanding Network and Security for Near-Edge Computing
Implement network segmentation to isolate and protect critical edge computing resources. Use Virtual LANs (VLANs) or Software-Defined Networking (SDN) techniques to create separate network segments for different types of devices and services. This helps contain potential security breaches and limit the lateral movement of threats within the network. Monitoring and logging Implement comprehensive monitoring and
Security considerations – Understanding Network and Security for Near-Edge Computing
The inbuilt encryption makes it more difficult to inspect network traffic for security purposes, such as intrusion detection or deep packet inspection. Network administrators and security professionals may need to adapt their monitoring and security practices to accommodate the encrypted nature of HTTP/3 and QUIC. Increased complexity for troubleshooting The layered nature of these protocols
Multiplexing and stream management – Understanding Network and Security for Near-Edge Computing
HTTP/2 introduced multiplexing, allowing multiple streams to be sent concurrently over a single connection. However, managing streams and their dependencies can become complex, leading to suboptimal performance. QUIC improves upon this by providing more efficient multiplexing and stream management. It allows for independent flow control and enables better prioritization of streams, ensuring optimal utilization of
Addressing TCP issues with HTTP/3 and QUIC – Understanding Network and Security for Near-Edge Computing
HTTP/3 – Hypertext Transfer Protocol version 3 This is the latest revision of the HTTP protocol and is widely used for communication between web browsers and servers. It is based on Quick UDP Internet Connections (QUIC), a transport protocol developed by Google. QUIC is designed to provide a secure and efficient transport layer protocol over
Steering traffic at the network layer with IP Anycast – Understanding Network and Security for Near-Edge Computing
IP Anycast is another common approach for global traffic distribution. Figure 2.13 depicts an example of how it works: Figure 2.10 – IP Anycast Both servers have a public IP address of 144.12.11.5. Customers are automatically routed to the closest one. This makes DNS simple; you just need a single A record for myapp.io pointing
IP geolocation database – Understanding Network and Security for Near-Edge Computing
Several companies maintain databases that map IP ranges to physical locations and update this data at regular intervals. GSLB appliances typically pay for a subscription to these feeds. But where do those companies get their data? When an ISP obtains public IP space or an ASN, it ultimately does so via the Internet Assigned Numbers
Enhanced security – Understanding Network and Security for Near-Edge Computing
SD-WAN provides built-in security features, such as end-to-end encryption and segmentation, to protect sensitive data as it traverses the network. Optimizing ingress with global server load balancing (GSLB) Consider the situation shown in Figure 2.8: Figure 2.8 – A geographically distributed application This application has a server on the west coast of the US, and