DEFENSE INFORMATION SYSTEM NETWORK SATELLITE SERVICE

Bruce BennettDefense Information Systems Agency

Falls Church~ VAand

Christopher MeyerJithin Raghunath

Booz Allen HamiltonHerndon, VA

ABSTRACT

Services and Agencies continue to deploy IPSA TCOM systems while awaiting migration to theJoint IP Modem (JIPM). As the JIPM nearsproduction, challenges such as establishingresponsibility for development of a common enduser terminal, satellite and hub resource allocationand management, and long term sustainment for theend-to-end SATCOM infrastructure must beaddressed.

Currently, the DoD Gateway hosts numerous IPSA TCOM systems including Linkway, iDirect, andDVB-RCS. All of the SATCOM systems areresponsible for providing Defense InformationSystems Network (DISN) connectivity and servicesto the Warfighter. The Defense InformationSystems Agency (DISA) aims to establishcommonality and interoperability among thecurrent capabilities. To achieve this end state,DISA is evaluating the establishment of a DISNSatellite Service (DSS) provided as an extension 0.(existing IP SA TCOM systems, DISN transport, andRF services embedded at the DOD Gateways. Aspart of the DISN Satellite Service, DISA isdesigning a ubiquitous IP SA TCOM suite capableofproviding DISN connectivity and access to all ofthe DISN services including VTC, VoIP, NIPR, andSIPR. This paper will further elaborate theproposed DSS end user terminal components andcapabilities and the advantages it provides to thedeployed Warfighter.

INTRODUCTION

The dynamic landscape of the Global War on Terror(GWOT) has led Combatant Commands (COCOMs) tosubmit Joint Urgent Operational Need Statements(JUONS) to gain support for unmet Warfighterrequirements. The Defense Information Systems

978-1-4244-2677-5/08/$25.00 ©2008 IEEE

Agency (DISA) has been successful in supporting boththe COCOMs and Warfighter by applying a quickreaction capability to engineer tum-key solutions that arecost-effective, efficient, on-schedule, and sustainable.

A prime example of this is DISA's support of a USCentral Command (USCENTCOM) JUONS, to developa Commercial Off The Shelf (COTS) based two-way IPSATCOM solution. Utilizing the open standard DVB­RCS to provide backhaul and further dissemination oftactical Unmanned Aerial Systems (UAS) platfonnsfrom within the USCENTCOM Area of Responsibility(AOR). Figure 1 illustrates the operational architectureof the Digital Video Broadcast - Return ChannelSatellite (DVB-RCS) system. [1] The DVB-RCS system,consists of a standards-based platform utilizing a DVB-Sforward link to maintain compatibility with the GlobalBroadcast Service (GBS), and also provides a Multi­Frequency Time Division Multiple Access (MF-TDMA)return channel for file and video backhaul capabilities.

.u .• ~'~.~ "7{•..,., ," ~, -<=:1~·~·, _ ; ..,;, .', ".'/ \.....,.~»,!==) •..• G.,.~:.::;~:..-:J..~O:oQo.~

.. .• 1.- .........-... 'I'I1II111'. I:!M.~" ac<~,.

Figure 1 - USCENTCOM DVB-RCS Architecture

Recently, DJSA was requested to support similaremerging SATCOM requirements on behalf of theUSCENTCOM Surgeon General. The Surgeon Generalrequired increased throughput for transmission ofComputed Tomography (CT) scans, voice, and VTCtraffic to medical treatment facilities throughout theCENTCOM AOR and Landstuhl Regional MedicalFacility. Additionally, Europe Command (EUCOM)

10f7

expressed interest in a deployable capability across theAtlantic region with connectivity into DISN services foraccess to unclassified and classified data, voice, andvideo networks. These two requests, in conjunction withthe currently deployed suites, illustrate a Warfighterneed for a rapidly deployable two-way broadbandcapability with access to DISN services.

DISA has a methodology in place for employment of aQuick Reaction Capability (QRC) Systems Engineeringprocess to satisfy these types of Warfighterrequirements. This iterative process enables productrealization with reduced cost and time and its successhas been the catalyst for establishment of the DISNSatellite Service as a provider of DISN Services to thetactical edge. The end user component of the DISNSatellite Service is a modular plug-and-play terminalcalled the DISN Deployed Access Node (DDAN)comprised of standards-based, leading edge SATCOMand networking components. One of the key technologyenablers of the DDAN is the Transmission ControlProtocol (TCP) Traffic Accelerator which compensatesfor the inherent delay in satellite-based TCPtransmissions. Information assurance and networkcentric visibility have been designed into the DISNSatellite Service architecture. The DISN SatelliteService and the DISN Deployed Access Node map toongoing initiatives, demonstrating a common objectiveof communications interoperability with the added bonusof reduced operating costs.

SYSTEMS ENGINEERING A QUICK REACTIONCAPABILITY (QRC)

DISA's response for quick reaction capabilities hasfocused on delivering solutions to fulfill missionobjectives in a timely manner, rather than meetingdetailed requirements or specifications. This systemengineering process has been successful with JUONSbecause the statements are typically high leveldescriptions of problems and critical needs. The urgentneeds have a fixed completion date, but supportflexibility in the design and architecture, allowing DISAto implement innovative and efficient solutions. Thisflexibility allows the system to be designed to meet 80%of the objective solution on-time, rather than sufferschedule delays for non-critical requirements.

DISA's capability for rapid system development is builtupon the continual evaluation and testing of commercialtechnologies. The Broadcast Technology AssessmentFacility (BTAF) at DISA has been tasked withevaluating COTS products and emerging standards andprotocols that can benefit the Warfighter. Technology

20f7

successfully tested in the BTAF are then evaluated inoperational proof of concepts through militarydemonstrations and exercises to validate Warfighterbenefits. Continual validation of commercial productsallows DISA to use operationally proven and availabletechnology to quickly meet urgent Warfighter needs.

The Quick Reaction Capability Systems Engineeringprocess is illustrated in Figure 2. Through the use ofCOTS equipment and carefully orchestrated technologyinsertions, the initially fielded capability provides amigration path to the final architecture vision whilemeeting the Warfighter's immediate needs. DISA hassuccessfully employed this technique to satisfy a numberof urgent operational needs including the USCENTCOMDVB-RCS system.

Figure 2 - Quick Reaction Capability Engineering

DISN SATELLITE SERVICES

The DISN Satellite Service provides seamless convergedDISN services over various satellite transport streamsfrom any DoD Gateway in support of the Warfighter'sever-changing requirements. The DSS offers end-to-endconnectivity and includes the satellite hub located at aDoD Gateway, the supporting bandwidth (which in mostcases will be the Wideband Global Satellite (WGS)), andthe deployed end-user terminal. As part of the DSSconcept, associated operation and maintenance (O&M)costs and end-to-end terminal engineering costs arerecouped through a fee-for-service structure.

The DISN Satellite Service will be provided as anextension of existing IP SATCOM systems, DISNtransport, and RF services embedded at the DODgateways. Content will be extended to strategicenterprises though DISN Core transport, with contentmanaged via a net-centric content dissemination and

management solution. The service will be availablecontinuously, and access will be controlled and grantedby agreement between the Theater NetOps Center (TNC)and the Unified/Specified Combatant CommandInformation Management authority. TheDISNSATCOM Services Manager will maintain systemconfiguration management and authority to operateresponsibility. As such, the service manager willprovide configuration information to the TNC/customerfacilitating network access. There will be three primaryfunctional areas of the DISN Satellite Service., illustratedin figure 3 below:

1. Systems Engineering: Develop and offer modular­based end-user equipment with an integratedservices router to provide DISN capabilities andservices from the sustaining base to the tactical edge.

2. Operations: As part of the DISN Satellite Service,Gateway Service Desks will be established toprovide customer support and global oversight andmanagement of the DISN Converged Networkarchitecture including Information Assurancesupport as necessary.

3. Sustainment: Establish a common supportinfrastructure eased through componentcommonality and employment of standards-basedCOTS devices.

.,,,(~ .-~\<'

e

Figure 3 - Proposed DISN Satellite ServicesArchitecture

DISN DEPLOYED ACCESS NODE

The deployed portion of the DISN Satellite Service iscalled the DISN Deployed Access Node (DDAN) whichcontains user owned and operated equipment. TheDDAN architecture, illustrated in figure 4 , consists ofCOTS equipment integrated into transit cases in amodular configuration and is completely customizablefor various DISN services such as NIPRNet., SIPRNet,

30f7

Video Production, VTC, and VoIP. The DDAN offersboth unclassified and classified base suite which providethe foundation for additional plug-and-play modules thatcan be deployed according to mission requirements.

Wktw~.....

r- AtAt •At.

cu.:-:~ -=U[J] ~e_~Figure 4 - DISN Deployed Access Node Proposed

Architecture

In order to transmit over WGS, the DDAN will befielded with a Ka-band antenna and SATCOM modem.The 1.2m antenna and associated 10W linear Ka-bandblock up-converter (BUC) will allow for successfultransmission over WGS from most locations throughoutthe world. Initially, the DDAN will be integrated with aDVB-RCS/S2 modem for communication with the DoDGateway.[2] This COTS modem will migrate to the JointIP Modem (JIPM) as it becomes available. The JIPMwill provide a similar DVB-RCS/S2 transmissionscheme with an added mesh and Transmission Security(TRANSEC) capability.

The Unclassified Base Suite module consists of a 4RUtransit case that houses the DDAN SATCOM modem,Performance Enhancement Proxy (PEP), and Cisco 2811Integrated Services Router. Keeping in line withstandards based technology, the PEP adheres to theSatellite Communication Protocol Standards (SCPS)protocol to ensure interoperability with various PEPdevices. The PEP helps mitigate the inherent latency inSATCOM connections that result in a round trip time(RTT) of 600 milliseconds. With PEP equipment inline,TCP-based applications such as FTP and HTTP will beable to perform at near terrestrial levels. The Cisco 2811Integrated Services Router provides routing and layer 2switching via a 16 port EtherSwitch module. Inaddition, the 2811 has the Cisco UnifiedCommunications Manager Express and Power over

-<$

•••..a.I .......·~: ..I....

f'••••

Figure 5 - SCPS TCP Spoofing

The performance advantages of using TCP accelerationtechnology has been tested at the Defense InformationSystems Agency (DISA) Broadcast TechnologyAssessment Facility (BTAF). PEP devices from variousvendors were evaluated in order to determine TCPacceleration capabilities over a simulated DVB-RCSnetwork composed of a 23.5Mb/s forward link and a4Mb/s return link. IP services including FTP, HTTPS,VoIP and Video have been tested with various vendorsto assess each vendor's acceleration capabilities.Vendor interoperability was also tested to verify howwell the open standards based SCPS protocol has beenintegrated among the various vendors. The test bedarchitecture tested communications from Hub to onesuite (Figure 6).

...------.rTT.~ ..-------...

standards based Space Communications ProtocolsStandards Transport Protocol (SCPS-TP).[4] Transportlayer PEPs work by breaking the end-to-end TCPconnection, running the optimized SCPS-TP protocolacross the satellite link, and 'spoofing' the TCPconnection between the client and the server Thisspoofing therefore prevents the TCP congestion controlalgorithm from activating, therefore allowing the fullbandwidth of the SATCaM link to be utilized.

The SCPS protocol requires TCP Accelerator gateways,also known as Performance Enhancing Proxies (PEPs) ateach end of the SATCaM link. These devices receivethe TCP data from the server and client at each end andutilize the SCPS protocol between themselves in order toensure the reliable delivery of the TCP data over theSCPS protocol. These gateways result in a shortenedTCP feedback control loop, effectively reducing theRTT from approximately 600 milliseconds, which is thetypical latency over a SATCaM link to 1-10milliseconds (Figure 5).

TECHNOLOGY ENABLERS

Ethernet which allows for easy plug-and-playconnections ofVoIP phones.

The Classified Base Suite module, which providesclassified transport of content, consists of a 5 RU transitcase housing the High Assurance Internet ProtocolEncryption (HAIPE) device, PEP, Cisco 2811 Router,and Amino Set Top Box. The HAIPE device providesType I encryption of incoming and outgoing data trafficin accordance with National Security Agency (NSA)mandates. The PEP and Cisco 2811 router have thesame functionality and capabilities as that of theUnclassified Base Suite. The Amino AmiNet 130 SetTop Box decodes MPEG-2, MPEG-4, and H.264streaming video content such as that provided byunmanned aerial vehicles (UAVs).

Employment of the Performance Enhancing Proxiesdevices is one of the primary techniques used foraccelerating TCP traffic over a high latency SATCOMlink. This technology works by utilizing a variety ofprotocols, the most common of which is the open

Two-way satellite communications have progressed atan exponential rate and user expectations have alsoexpanded from simple file transfers and web browsing toreal-time collaboration and broadband videodistribution.. Real-time services including sensor dataand intelligence information as well as TCP-basedapplications are critical in achieving total informationawareness on the battlefield.[3] DISA is striving toprovide the Warfighter with the end-to-end networkinfrastructure required to support this objective withbroadband capable DDAN SATCaM terminals andmission defined modularity. Configuration of theDDAN will allow customers to select modules for VTC,VoIP, and Video Backhaul capabilities. The VTCmodule provides real-time high definition video and CDquality audio collaboration between users through theuse of a Tandberg 1700 video system which interfaceswith the DISN Video Services hub located at the DoDGateway sites. The VoIP module, in conjunction withthe Cisco 2811 routers, provides voice communicationcapability on either SIPR or NIPR networks. The localCall Manager will connect to the Cisco Call Managerlocated at the DoD Gateway for world-wide voicecommunications. The Video Production moduleconsists of a MPEG-4 video encoder that provides theability to encode, process, and transmit streaming fullmotion video for further dissemination to other users.MPEG-4 encoding reduces the bandwidth required forprocessing the locally sourced NTSC video.

40f7

.:<Sk:.~. ,r·-·:··~····~/: •• :.:. --. oL.... •~.:.. •.••• / '.. ..; ~1oYI'"

". Ic:a~'-'" '.' II....~.

--- IIIw.1

Figure 6 - PEP Performance Test Bed

The PEP devices from all vendors were able tosignificantly boost the throughput of the TCP traffic oversimulated DVB-RCS network. The Paessler RouterTraffic Generator (PRTG) program captured real-timebandwidth utilization over the forward and return link.The results below demonstrate the throughputcapabilities before and after using TCP accelerationtechnology over the simulated DVB-RCS network.Without TCP acceleration~ the forward link throughputaveraged around 600Kb/s over the 23.5Mb/s forwardlink~ while the return link traffic averaged around400Kb/s over the 4Mb/s return link (Figure 7).

Figure 7 - TCP Throughput Without Acceleration

By placing PEPs at both the hub and suite of thesimulated DVB-RCS network~ TCP acceleration wasachieved over the simulated link. The forward link wasable to max out at the allocated 23.5Mb/s while thereturn link was able to transmit at 4Mb/s (Figure 8).

50f7

Figure 8 - TCP Throughput With Acceleration

The utilization of TCP acceleration technologies throughthe use of PEPs increased the forward link throughput bynearly 40 times while return link throughput wasincreased 10 fold over the existing network. Thisenhanced throughput forgoes the need to purchaseadditional costly satellite bandwidth.

INFORMATION ASSURANCE AND NETOPSVISIBILITY

Video and data dissemination will be an enterprise-wideservice and occur autonomously based on policiesestablished at the DISN Satellite Services hub.Management of this content will be performed by thedesignated information manager(s)~ and the proceduresfor this management will be decided based on residentcapabilities of the best available content managementsoftware solution. [5]

The management and operational support required fromthe DISN Satellite Services differ for every mission~ butcan be summarized in four basic service offerings:

1. End-to-End Turn-Key: The DISN customer wants aturn-key IP SATCOM Service solution with DISNmanaged services on the local LAN. DISA will engineerand be responsible for configuration of all customerpremise equipment to include the local LAN. This isexpected to be the rarest form of support

~ Scenario example: Small customer who is unfamiliarand uncomfortable managing their own satellite andLAN equipment.

2. Service Delivery Node: The DISN customer wants anIP SATCOM solution for a DISN Service Node. DISAwill engineer and be responsible for configuration andOperation and Management (O&M) of all customerpremise equipment only. The local LAN will be theresponsibility of the customer.~ Scenario example: Establishment of a forward

operating base in a location such as AFRICOM withlittle terrestrial infrastructure.

3. DISN Entry Point: The customer desires DISNservices, but will provide their own customer premiseequipment and LAN Equipment. DISA will onlyprovide and manage access to the DoD Gateway.~ Scenario example: Customer already has their own

SATCOM terminal (e.g. Joint Network Node(JNN)), but requires DISN services.

4. DISN Transport: The customer wants to use theTeleport as a transport mechanism and no additionalDISN services are required. DISA will maintain currentresponsibility for any DISN tail-circuits required tosupport the specified mission~ Scenario example: Special Operations customer with

their own SATCOM terminal connecting to thedistant end for content.

RELATIONSHIP TO KEY INITIATIVES

The DoD is migrating applications, services, andnetworks to a common infrastructure based upon theInternet Protocol (IP). The IP network layer will be thecommon layer for interfacing between terrestrial,satellite, and wireless transport networks as well asbetween applications and transport networks. The sub­network transmission mechanisms such as Multi­protocol Label Switching (MPLS) in the varioustransport networks will be tailored to their particularenvironment to optimize the delivery of IP-basedservices. DISA will lead the way in establishingcommonality in satellite network architectures in orderto achieve E2E capabilities including enabling DISN­wide dynamic bandwidth allocation, quality of service,and intelligent management of satellite networkresources. [6]

One component of the migration to an Everything OverIP (EoIP) architecture is the standardization of the DoD­wide IP SATCOM modem detailed within the Joint IPModem specifications.[7] The DISN Satellite Service

60f7

will leverage the JIPM hubs projected to be installed intothe DoD Gateways in FYIO through FYII.Additionally, the DISN Satellite Service will leveragethe abundant bandwidth available through the WGSconstellation. Network and system management of theJIPM hubs and associated deployed terminals will beprovided by the Gateway Services Desks (GSDs). TheGSDs will be established at each Theater NetOps Centerspecifically for the IP SATCOM systems currently beinginstalled.[8] This commonality in hub components,network management personnel, equipment, andprocedures will result in significant reductions inoperations and maintenance costs through economies ofscale.

DISA and the DISN Satellite Service will recoup thecosts associated with technology refresh, engineering,end-user support, and equipment O&M through theadoption of the service delivery node fee structurecurrently in place for DISN services deliveredterrestrially. The fee structure will differ based on theservices provided to the logical units as well as theamount of aggregate bandwidth being utilized. DSS endusers who are geographically disparate, but sharing acommon satellite broadcast segment, will be groupedinto logical units for costs sharing.

CONCLUSIONS

The establishment of the DISN Satellite Service realizesDISA's vision through several facets. First, the DSSprovides DISA a structured enterprise wide systemsengineering approach to extend DISA-providedcapabilities and services to the tactical edge. Second, theDSS provides guidance to ensure the communicationssystems evolve into a single virtual DoD terrestrial andsatellite communications network providing capabilitiesand services from the sustaining base to the tacticaledge. Finally, the establishment of the DSS ensuresoversight for DoD satellite network's transition fromATM based services to those supporting MPLS thusincreasing traffic management, reliability, andperformance.

DISA has a significant role in the tacticalcommunications arena and has initiated a push toprovide DISN services to the tactical edge. Thevalidation of several urgent operational needs statementshas demonstrated the Warfighter' s need for a rapidlydeployable communications solution with robust,broadband connectivity. The DISN Satellite Serviceoffers the DISN Deployable Access Node as the materialsolution to satisfy the Warfighter's current and futurecommunications needs.

The authors wish to thank the following individuals fortheir invaluable contributions to this publication: DillonBussert, Boris Kilimnik, and Pupun Das.

REFERENCES

[1] ETSI, "Digital Video Broadcasting (DVB);Interaction Channel for Satellite DistributionSystems," ETSI EN 301 790, Apr 2005.[2] ETSI, "Digital Video Broadcasting (DVB); Secondgeneration framing structure, channel coding andmodulation systems for Broadcasting, InteractiveServices, News Gathering and other broadband satelliteapplications," ETSI EN 302 307, Mar 2005.[3] Bennett, Greeves, Hemmings, Skowronski, "TacticalService Providers: Wireless and SATCOM Integrationfor Tactical Services", MILCOM 2007, Orlando, FL,2007.[4] "RFC 793 - Transmission Control Protocol v4".September 2001.[5] Hershey, Runyon, Wang, "Metrics for End-to-EndMonitoring and Management of Enterprise Systems",MILCOM 2007, Orlando, FL, 2007.[6] Global Information Grid Net-Centric ImplementationDocument, Quality of Service (T300) V3.0, 29 April2007.[7] "JIPM Performance Specification," DISA, July2007.[8] "DOD Gateway Service Desk Strategic Plan,"DISA, April 2008.

70f7