Our products > Network defense > Distributed Enclave Defense Using Configurable Edges (DEDUCE) 

Distributed enclave defense using configurable edges (DEDUCE)

Rapid service restoration and situational awareness from the network edges

Network users expect reliable, predictable communications services. Impairments from equipment failures, network misconfiguration, severe congestion and route-convergence delays interfere with reliable service delivery. Additionally, cyberattacks may defy rapid diagnosis and repair—leading to damaging service outages.  

To mitigate these threats to network services, we developed DEDUCE—a suite of novel technologies for distributed enclave defense using configurable edges, which work together to deliver service resilience. DEDUCE also provides enhanced network analytics and situational awareness to expedite root-cause analysis and accelerate service repair. 
Anchor Element
Copy for linking on the same page:
https://www.peratonlabs.com/?data-scroll-to-anchor=HowItWorks
Copy for linking from an external page:
https://www.peratonlabs.com/?data-anchor-link=HowItWorks

How it works

DEDUCE provides network users and operators with real-time, “fight through” service restoration from the network edges to ensure resilient network services. Participating DEDUCE nodes form an overlay network capable of redirecting traffic on a per-flow basis according to application needs and network conditions. This overlay routing functionality enables efficient use of all available network resources and real-time, dynamic avoidance of emerging network problems such as congestion or delays.  

DEDUCE uses an adaptive transport mechanism to dynamically select the most appropriate transport protocol for variable network conditions and to deliver best available performance for individual applications. The intelligent network analytics supporting this dynamic capability not only illuminate the nature of service disruptions and expedite root-cause analysis, but they also support flow prioritization and deadline support. Deadline support is critical to ensuring that applications with tight time requirements are able to maintain performance in adverse conditions.  
Anchor Element
Copy for linking on the same page:
https://www.peratonlabs.com?data-scroll-to-anchor=features
Copy for linking from an external page:
https://www.peratonlabs.com?data-anchor-link=features

Features

  • Can be implemented within existing network elements or installed as standalone network appliances 
  • Operates transparently to network services, applications and users 
  • Nodes exchange status and load information—ensuring that local nodes make decisions in consideration of the conditions and demand on the entire network 
  • Dynamically incorporates application requirements into selected operations 
  • Employs specific optimization to meet the needs of real-time streaming and transactional applications    
  • Mitigates packet loss with application-aware strategies including loss-resistant transport protocols, packet-based error correction and routing-based avoidance 
Anchor Element
Copy for linking on the same page:
https://www.peratonlabs.com/?data-scroll-to-anchor=Advantages
Copy for linking from an external page:
https://www.peratonlabs.com/?data-anchor-link=Advantages

Advantages

  • Path / flow analytics: characterizes path and flow performance according to standard metrics including packet loss, end-to-end latency, throughput and estimated capacity  
  • Priorities / rate control: provides per-flow bandwidth allocation to specific flows, applications or endpoints based on operational priorities  
  • Loss characterization: distinguishes the type and characteristics of network loss—error, congestion or burst—to determine the most appropriate mitigation strategy  
  • Reorder: automatically corrects out-of-order packet delivery—seamlessly mitigating performance problems arising from re-ordering delay  
  • Situational awareness GUI: provides real-time network analytics, characterization and diagnostic data about flow, link and path performance to network operators   
  • Multi-homing: can optionally provide configurable, automatic load balancing and failover across links if multiple independent access links are available 
  • Network tomography: passively characterizes path and link properties to inform core network structure performance and aid fault diagnosis  
  • Route hijack detection: detects evidence of hijacked routes within the core network  
  • Mission planning: permits reservation of specific network resources for known future traffic  
Anchor Element
Copy for linking on the same page:
https://www.peratonlabs.com?data-scroll-to-anchor=resources
Copy for linking from an external page:
https://www.peratonlabs.com?data-anchor-link=resources

Resources

Research, services and products of interest

Research

  • Cybersecurity research: innovations to protect mission-critical networks, services, systems and infrastructure 

Services

Products

Anchor Element
Copy for linking on the same page:
https://www.peratonlabs.com?data-scroll-to-anchor=requestinfo
Copy for linking from an external page:
https://www.peratonlabs.com?data-anchor-link=requestinfo