& cplSiteName &

Stateful NAT64 Performance

Light Reading
Series Column
Light Reading
2/5/2012
50%
50%

EXECUTIVE SUMMARY: Cisco’s CRS-1 loaded with four CGSE cards successfully translated IPv6 traffic to IPv4 at 4 million translations per second. The same system scaled up to 78.4Gbit/s at a total of 67,107,840 translations with almost no loss.


While the industry embraces IPv6 now more than ever, it also recognizes that IPv4 services are not going away soon. The Internet is an obvious example where IPv4 addresses are going to be used for years to come. Cloud applications will use those addresses as well.

While data centers will have different IP migration strategies, they will likely look to serve both IPv4- and IPv6-based customers. Long-term strategies will include native IPv6 throughout the data center, but in the short term a complete IPv6 strategy might not be practical.

For this reason service providers and cloud operators are likely to find themselves needing to deploy Network Address Translation (NAT) from IPv6 users to IPv4 services (NAT64). Let's say an enterprise is building a brand-new large-scale office and wants to use unique IP addressing. The carrier could provide this adventurous customer with IPv6 addresses to use for internal hosts and servers. In order to communicate with the Internet, which at this point is still IPv4 heavy, the carrier could install a NAT64 device somewhere between the customer and their services to translate the IPv6 addressing to IPv4 before sending the datagrams to the Internet. Another example is the rollout of mobile services en masse using IPv6, to customers who still plan to access IPv4 services, including cloud services.

Cisco claimed to be ready for these scenarios -- delivering IPv4 services to IPv6 customers -- at scale. Since we have already reported results on Cisco's stateless NAT 64 capabilities we wanted to use this opportunity to verify Cisco's stateful NAT64 performance claims -- that by placing four Carrier-Grade Services Engine (CSGE) modules into a single CRS-1, we could scale up to 60 million NAT64 translations, at 4 million translations per second, all while transmitting up to 80Gbit/s of data.

Would any carrier need this performance? Probably not anytime soon, but we have learned that those who purchase large-scale core routers want to know that they can use their significant financial investment for a while.

Given the scale, we looked to verify each metric separately. Even with this divide-and-conquer approach, NAT can become complex to test. Cisco explained, and showed, that when their NAT64 implementation chooses an IPv4 address to map to an incoming IPv6 request, it is done at random. Now imagine manually configuring the tester for 60 million mappings, when all 60 million incoming requests are given random IPv4 addresses -- clearly this was not the way to go.

One alternative that we considered was to use stateful traffic using Ixia's IxLoad application, but emulating up to 60 million sessions would have required a significant amount of very high-performance test equipment -- again, not really a workable option. The solution we used involved Ixia's IxNetwork generating stateless traffic, with the appropriate TCP fields set to emulate a stateful session (TCP SYN/TCP ACKs). Since Cisco’s implementation randomly assigned TCP port numbers and IPv4 addresses to incoming IPv6 requests, we schemed to simply exhaust the entire pool of resources on the CRS-1. This way we were able to predict which addresses and ports would be used -- it would be all of them. If your head is spinning, we hope the following diagram will help.

To summarize, we sent client traffic from 1,024 IPv6 addresses -- each of whom opened 65,535 TCP sessions. In fact, this brought us to a total of 67,107,840 translations on the CRS-1. We sent traffic in return toward all 960 IPv4 addresses, each with all 65,535 TCP port numbers, as was configured in the CRS-1 pool. All traffic used IMIX frame sizes -- 122:7, 512:4, 1500:1 (106 in place of 122 on the IPv4 side) at a rate of 38.4Gbit/s toward the clients and 40Gbit/s toward the servers, all across four 10-Gigabit Ethernet links. Once the configuration was pre-staged and verified to be working, we could breathe a sigh of relief.

As we started the official test run we recorded only a small amount of loss -- 0.002 percent on eight of the 16 flows configured from the IPv6 emulated clients toward the IPv4 emulated servers. The other four of such flows ran with no loss, and no flows in the return direction observed any loss either. Considering that we had planned to only test 60 million translations rather than 67,107,840, the loss was considered very minimal. We also verified, using the CRS-1 Command Line Interface (CLI) that all expected translations appeared in the enormous translation table. We also measured latency. The maximum latency values were not very surprising given the translation work to be done by the CRS-1, but in general, given that the latency also included the seven other devices in the test bed, the average latency was quite low.

Next was performance. How quickly could these translations be built in hardware? Now that our test methodology was proven, we felt safe clearing the NAT table on the CRS-1. After doing so, we lowered all frame sizes to 150 bytes so we could increase the frame rate to 4 million frames per second -- 1 million frames per second on each of the four 10-Gigabit Ethernet ports. In order to add realism to the test we configured IxNetwork to randomly assign TCP ports to the IPv6 flows, so that they were not sequential. This however required that we also lower the total number of ports to 13,824, bringing the number of translations to 56,622,848 in total. We ran the test for two minutes without loss.

After some pretty long nights of some complex configuration, we had finally established a test that was able to verify the rate, translation capacity, and throughput of Cisco’s NAT64 solution. Impressive.


Next Page: IPv6 Rapid Deployment (RD) Performance
Previous Page: Intro: Cloud Intelligent Networks


Back to the Cisco Test Main Page

(1)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View        ADD A COMMENT
TJ Evans
50%
50%
TJ Evans,
User Rank: Light Beer
6/17/2013 | 7:28:06 PM
re: Stateful NAT64 Performance
Are any numbers available for NAT64 performance on slightly more moderate platforms, ASR1k, ASR9k, etc.?
Educational Resources
sponsor supplied content
Educational Resources Archive
From The Founder
Cisco's Conrad Clemson, recently promoted to head up the company's Service Provider Apps & Platforms developments, talks to Light Reading's Founder and CEO Steve Saunders about how he's bringing cloud video, mobile and virtualization together to empower network operators.
Flash Poll
Live Streaming Video
Charting the CSP's Future
Six different communications service providers join to debate their visions of the future CSP, following a landmark presentation from AT&T on its massive virtualization efforts and a look back on where the telecom industry has been and where it's going from two industry veterans.
LRTV Huawei Video Resource Center
Huawei Introduces Integrated Cloud Computing Service

3|30|17   |     |   (0) comments


Lian Shaoxiong, director of DC marketing at Huawei, demonstrates the company's cloud data center booth for a more integrated cloud computing solution for telecom service providers.
LRTV Huawei Video Resource Center
Video Evolution Increases Demand on High-Quality Experience

3|30|17   |     |   (0) comments


Heavy Reading Analyst Aditya Kishore discusses the trends of video evolution. As the service of video broadens and the quality increases, there is endless possibility waiting to be explored within the industry. How service providers create infrastructure, network and innovation to maintain the high-quality experience of the consumers has also become increasingly ...
LRTV Huawei Video Resource Center
Telefonica on the Process of NFV Implementation

3|30|17   |     |   (0) comments


Telefonica CTO Enrique Blanco discusses the evolution of the company's strategy and prospective on NFV.
LRTV Huawei Video Resource Center
Vodafone's Strategy for Achieving High Network Availability

3|30|17   |     |   (0) comments


Klaudius Koschella, the head of Access Q. Transmission at Vodafone, discusses what Vodafone's strategy is for achieving high network availability through Robust Network Service.
LRTV Huawei Video Resource Center
Huawei Digital Transformation Forum at MWC

3|30|17   |     |   (0) comments


Influencers in the telecom industry exchange the latest trends and insights on operation and digital transformation.
LRTV Huawei Video Resource Center
Michael Howard on MWC UBCTO Conference

3|30|17   |     |   (0) comments


Michael Howard, senior research director and advisor of IHS Markit, touches on cloudification of operators and the key takeaways during Huawei's UBCTO conference.
LRTV Custom TV
What Is MACOM's Role in Enabling the Upgrade From 100G to 400G Optical Connectivity?

3|30|17   |     |   (0) comments


MACOM's Vivek Rajgarhia, vice president and GM of Lightwave Networking Components, discusses MACOM's complete solution of innovative technologies and products that have achieved success in the PON access market, as well as in Long Haul, Metro and DCI networks with 100G to 400G technology.
LRTV Custom TV
Affirmed Networks Is Setting Up New Standards for IoT

3|30|17   |     |   (0) comments


As a market leader helping mobile operators embrace the benefits of virtualized networks, Affirmed Networks is seeing significant interest by service providers worldwide to deploy NFV-based networks as the foundation for IoT service delivery. This video interview between Heavy Reading analyst Steve Bell and Angela Whiteford, Affirmed Networks' vice president of ...
LRTV Documentaries
MLBAM: Live Sports Streaming Will Be Big

3|30|17   |     |   (0) comments


MLB Advanced Media EVP and CTO Joe Inzerillo explains why live sports streaming will take off over the next few years despite major technical challenges.
LRTV Custom TV
Xilinx Disruptive Technology Breakthrough for 5G Wireless

3|30|17   |     |   (0) comments


Xilinx has integrated multi-giga-sample RF data converters into its 16nm MPSoCs devices for the industry's first All Programmable RFSoC, eliminating the need for discrete ADCs and DACs.
LRTV Huawei Video Resource Center
Turkcell Challenges Turkey's Current TV Market

3|29|17   |     |   (0) comments


Baris Zavaroglu, TV and rntertainment business director of Turkcell, explains Turkcell's strategy in elevating the small and uncertain TV market in Turkey.
LRTV Huawei Video Resource Center
Altibox’s Infrastructure Synergy Strategy Reduces Deployment Costs

3|29|17   |     |   (0) comments


Thomas Skjelbred, CEO of Altibox, on how to improve efficiency and reduce deployment coast through infrastructure synergy in Norway.
Upcoming Live Events
May 15-17, 2017, Austin Convention Center, Austin, TX
May 15, 2017, Austin Convention Center - Austin, TX
June 6, 2017, The Joule Hotel, Dallas, TX
All Upcoming Live Events
Infographics
With the mobile ecosystem becoming increasingly vulnerable to security threats, AdaptiveMobile has laid out some of the key considerations for the wireless community.
Hot Topics
Unlocking China's $194B Telecom Market
Robert Clark, 3/27/2017
About That Broadband Privacy Vote
Mari Silbey, Senior Editor, Cable/Video, 3/29/2017
Ericsson Tightens Focus, Warns of $1.7B Q1 Hit
Iain Morris, News Editor, 3/28/2017
WiCipedia: Supergirls, No More Excuses & Media Monitoring
Eryn Leavens, Special Features & Copy Editor, 3/24/2017
Like Us on Facebook
Twitter Feed
BETWEEN THE CEOs - Executive Interviews
TEOCO Founder and CEO Atul Jain talks to Light Reading Founder and CEO Steve Saunders about the challenges around cost control and service monetization in the mobile and IoT sectors.
At MWC 2017, Qualcomm's CTO Matt Grob talks to Light Reading's CEO and Founder Steve Saunders about the progress being made in the development of the technologies and standards that will underpin 5G.
Animals with Phones
Working From Home Doesn't Work for Everyone Click Here
You shouldn't nap on your keyboard, for instance.
Live Digital Audio

Playing it safe can only get you so far. Sometimes the biggest bets have the biggest payouts, and that is true in your career as well. For this radio show, Caroline Chan, general manager of the 5G Infrastructure Division of the Network Platform Group at Intel, will share her own personal story of how she successfully took big bets to build a successful career, as well as offer advice on how you can do the same. We’ll cover everything from how to overcome fear and manage risk, how to be prepared for where technology is going in the future and how to structure your career in a way to ensure you keep progressing. Chan, a seasoned telecom veteran and effective risk taker herself, will also leave plenty of time to answer all your questions live on the air.