CA2252792A1 - Apparatus and method for preventing network server overload - Google Patents

Apparatus and method for preventing network server overload Download PDF

Info

Publication number
CA2252792A1
CA2252792A1 CA002252792A CA2252792A CA2252792A1 CA 2252792 A1 CA2252792 A1 CA 2252792A1 CA 002252792 A CA002252792 A CA 002252792A CA 2252792 A CA2252792 A CA 2252792A CA 2252792 A1 CA2252792 A1 CA 2252792A1
Authority
CA
Canada
Prior art keywords
source
messages
transactions
interval
server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
CA002252792A
Other languages
French (fr)
Inventor
Donald Edward Smith
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Iconectiv LLC
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of CA2252792A1 publication Critical patent/CA2252792A1/en
Abandoned legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46Multiprogramming arrangements
    • G06F9/50Allocation of resources, e.g. of the central processing unit [CPU]
    • G06F9/5083Techniques for rebalancing the load in a distributed system
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/11Identifying congestion
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/26Flow control; Congestion control using explicit feedback to the source, e.g. choke packets
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/29Flow control; Congestion control using a combination of thresholds
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1001Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2209/00Indexing scheme relating to G06F9/00
    • G06F2209/50Indexing scheme relating to G06F9/50
    • G06F2209/5019Workload prediction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2209/00Indexing scheme relating to G06F9/00
    • G06F2209/50Indexing scheme relating to G06F9/50
    • G06F2209/5022Workload threshold

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

An apparatus and method for preventing overload of a network server by messages received from a source initiating network server transactions. The method and apparatus use available network traffic measurements to estimate target transaction rates and admission factors. The method includes the steps, executed by a processor, of establishing a target incoming transaction workload per measurement interval (602), estimating from measurements obtained during the measurement interval the transaction workload offered by a source (604), and reducing a rate at which new transactions are initiated by the source to match the incoming transaction workload to the target workload when the offered transaction workload exceeds a threshold (606).

Description

CA 022~2792 1998-10-28 W 097/45792 PCTrUS97/06058 APPARATUS AND METHOD FOR PREVENTING NETWORK SERVER OVERLOAD
BACKGROUND OF THE INVENTION
The present invention relates to telecomml-nication networks, and more particularly to systems and methods for controlling network server message flow to prevent server overload.
Telecommunications services are coming to rely more and more on real time network servers. In the traditional telephony arena, Service Control Points (SCPs) have been tr~nsl~ting "freephone" numbers (800 numbers in the U. S. A.) into real telephone numbers for years. SCPs will soon support a range of intelligent network services, such as voice activated dialing, local number portability, calling name delivery and other screening features, automated telephone polling, and personal communications services. These services increase the demand on SCPs and require SCPs to handle transactions that vary widely in the number of messages per transaction and their real time costs. An analogue of the SCP for video dial tone services is a Level 1 Gateway.
In a video dial tone network a Level 1 Gateway screens video session requests and instructs other network elements to set up connections. Level 1 Gateways also handle multiple transaction types, e.g., session requests for interactive TV and for pay-per-view events.
Service demand volatility threatens the integrity of the services that such network servers provide. In an environment of rapid service introduction~ ordinary traffic engineering may not keep pace with the growth and fluctuations in load placed on network servers. The servers may experience occasional or even frequent overloads.
Overload controls must therefore complement engineering practices.
Prior art controllers implement a trial and error search to establish proper control values relating measurements taken by the controller to server workload capacity. Examples of such measurements include the number of messages that flowinto the server, the number of messages that encounter excessive response times, and processor utilization.
The prior art search algorithms suffer from two major limitations. First, the search algorithms update control parameters on a much longer time scale thanarriving transactions (seconds vs. a few milliseconds). As a result, convergence of the total transaction rate to a desired value can be slow.

SUBSTITUTE SHEET (RUI_E 26) CA 022~2792 1998-10-28 2 PCTrUS97106058 Second, some of the measurements the server uses to trigger controls, such as the number of incoming messages and the number of messages encountering excessive delay, are difficult to relate to the server workload capacity. For example, the amount of time the server needs to process a message varies considerably, so thenumber of incoming messages alone does not indicate the load on the server. Similarly, when messages encounter excessive delay, it is not obvious how to use counts of such messages to take control actions, especially when transactions span multiple measurement intervals.
When a server determines that it is in overload, it must instruct traffic sources to reduce the number of new transactions to the server. A source is a logical grouping of transactions; one source is the smallest stream of translations subject to a single overload control request. Present controllers in SCPs tightly couple the way servers specify the amount of traffic reduction to a technique for reducing traffic.
SCPs block incoming calls with Automatic Code Gapping ("ACG"), illustrated in Fig. 1. In ACG, the source blocks all new transactions 1 that occur during a gap interval 3. When the gap interval has finished, the next incoming new transaction, 5, 6, or 7, will be accepted. Imrnediately following the acceptance of the new transaction, the next gap interval begins. Thus, an ACG request to a source tells it to initiate at most one new transaction per "g" seconds, where g is the gap interval.
Conventional gapping techniques store predetermined tables of gap intervals at the sources. In response to congestion, the server transmits to the source an "overload level," an index into the table. The source then applies the gap corresponding to the overload level.
A limitation of this type of controller is that the fixed list of values may not contain the proper control values necessary to remedy a given server overload condition. A controller that is restricted to selecting a control value from a fixed list exhibits characteristic oscillations in transaction throughput as the server alternately selects overload levels that are too large and too small. The larger the mism~tch between the values on the fixed list and the values actually needed to control the overload, the larger the swings in throughput. The frequency of the oscillations is CA 022~2792 1998-10-28 W 097/45792 PCT~US97/06058 governed by the length of the measurement interval, since the controller picks a new value from the list once per interval.
Conventional gapping techniques tend to yield less than optimal throughput because they tend to turn traffic on and then off for too long. Additionally, 5 because applying conventional gapping the server transmits the same indices to all the sources of a given service type, large, high traffic sources tend to be throttled more severely than low traffic sources.
There is, therefore, a need for a method of controlling message flow to prevent server overload that overcomes the limitations of conventional techniques. For 10 example, network server overload controllers should reduce the load incoming to the server to the maximum level it can comfortably handle. In a multi-service environment, a controller should also block demands for individual services provided by the network server.
DESCRTPTION OF THE INVENTION
The present invention overcomes the limitations of conventional techniques by implementing a method for preventing overload of a network server by messages received from a source initi~ting a network server transaction. The method includes the steps, executed by a processor, of establishing a target incoming transaction workload per measurement interval, es~im~ting from measurements obtained during the 20 measurement interval the transaction workload offered by a source, and reducing a rate at which new transactions are initiated by the source to match the incoming transaction workload to the target workload when the offered transaction workload exceeds a threshold.
The invention also comprises an apparatus for preventing overload of a 25 network server by messages received from a source initiating a network servertransaction. The apparatus includes structure for establishing a target incomingtransaction workload per measurement interval, structure for estimating from measurements obtained during the measurement interval an incoming transaction workload offered by a source, and structure for reducing a rate at which new 30 transactions are initiated by the source to match the target incoming transaction workload when the offered transaction workload exceeds a threshold.

CA 022~2792 1998-10-28 W 097t45792 PCTAUS97/06058 Both the foregoing general description and the following detailed description are exemplary and explanatory and are intended to provide further explanation of the invention as claimed.
BRIEF DF.~CRIPTION OF THE DRAWINGS
The accompanying drawings provide a further understanding of the invention. They illustrate embo-lim~.nlc of the invention and, together with thedescription, explain the principles of the invention.
Fig. 1 is a diagram of transaction and gap intervals;
Fig. 2 is a block diagram of a video dial tone network;
Fig. 3 is a block diagram of a network application using a service control point;
Fig. 4is a block diagram of an apparatus for preventing network server overload in accordance with one embodiment of the present invention;
Fig. 5 is a block diagram of an apparatus for preventing network server 15 overload in accordance with one embodiment of the present invention;
Fig. 6 is a flow diagram of a method for controlling server overload;
Fig. 7 is a flow diagram of a "search-type" overload control method according to one embodiment of the present invention;
Fig. 8 is a flow diagram of a "drop-type" overload control method according to one embodiment of the present invention;
Fig. 9 is a flow diagram of a "usage" overload control method according to one embodiment of the present invention;
Fig. 10 is a flow diagram of a "fair share" overload control method according to one embodiment of the present invention; and Fig. 11 is a flow diagram of an overload control method for reducing operating system conflicts according to one embodiment of the present invention. BEST MODE FOR CARRYING OUT THE INVENTION
The present invention can be implemented in a variety of telecommunication networks including, for example, video dial-tone networks. Fig. 2 is a block diagram of such a video dial-tone network. As shown, a video dial-tone network typically includes a Level 1 gateway 200, video information providers ("VIPs") CA 022~2792 1998-10-28 W O 97/45792 PCTrUS97/06058 S
202a-c, an ATM network 204, and access system and local distribution facilities 206a-b.
Users 208a-g connect to the network via access system and local distribution facilities 206a-b. In Fig. 2, solid lines represent ATM connections while broken lines represent control signal connections.
Level I Gateway 200 plays the role of network server in a video dial tone network. The Level 1 Gateway manages network sessions. It determines whether a given video information user 208a-g may connect to video information providers 202a-c or vice-versa. An example of such a session may be a video on demand viewing or a pay-per-view event. If the user is authorized to make the desired connection, then Level 1 Gateway 200 confirms with user 208a and provider 202a that they agree toengage in a session. Level I Gateway 200 then issues orders to ATM network 204 to allocate logical paths and bandwidth for the connection. At each stage of session setup, Level 1 Gateway 200 records the status of the video service provided by the network and the network connections.
Thus, to enable a video session setup, several messages must be commllnicated between network elements including a set top box, the video information provider, and ATM switches. Through ATM network 204 and access system and local distribution facilities 206a-b, Level I Gateway 200 mediates this exchange of messages.
If any of the messages involved in session setup fails to reach its destination, the session will not be established.
An embodiment of the controller of the present invention prevents network servers such as Level 1 gateway 200 from overload caused by messages sent to it for processing video dial-tone network services. The controller seeks a target rate for the aggregate transaction stream caused by users initiating video service requests and computes admission factors that specify the fraction of new transactions that sources such as access system and local distribution 206a-b should admit for processing.The present invention can also be implemented in intelligent networks, such as the Advanced Intelligent Network (AIN). Fig. 3 is a block diagram of an intelligent network. The intelligent network of Fig. 3 includes SCPs 300a and 300b ~ 30 (paired for reliability), .~ign.lling transfer points ("STPs") 302a and 302b (also paired for reliability), and service switching points ("SSPs") 304a-304n capable of common CA 022~2792 1998-10-28 W 097/45792 PCT~US97/06058 -6-channel switching. The SCPs serve as network servers. One common application using SCPs as network servers includes the translation of "800" telephone numbers. For this translation, an SSP 304a-n receives dialed "800" numbers and launches a common channel signaling query to SCP 300a or 300b through STP 302a or 302b. SCP 300a or 5 300b processes this query, translates the received "800" number, and returns the tr~n~ tçcl number to the originating SSP.
An embodiment of a controller according to the present invention is illustrated in the block diagram of Fig. 4. Controller 400 includes mass storage 402, main memory 404, central processing unit (CPU) 406, and input/output (I/O) device 10 408. Main memory 404 contains overload control program 410 implementing overload methods for the present invention. Main memory 404 also includes computer program code that computes traffic measurements 412 associated with overload control at specified intervals. CPU 406 executes the computer program load stored in main memory 404. Input/output device 408 handles the controller's access to mass storage 15 402 and serves as a gateway to network traffic resources.
One of ordinary skill in the art will recognize that one or more of the functions performed by computer program code in controller 400 can be implemented in computer hardware such as microprocessors and integrated circuits. In one such alternative embodiment of a controller, illustrated in the block diagram of Fig. 5, 20 controller 500 includes target establisher 502, incoming transaction workload estimator 504, and rate reducer 506. Controller 500 is connected to mass storage 508 in a network server. Target establisher 502 measures incoming server messages in eachmeasurement interval and computes a target incoming transaction workload. From target establisher 502 measurements, incoming transaction workload estimator 50425 estimates an incoming transaction workload offered by a source. Rate reducer 506 then reduces the rate at which new transactions are initiated by the source to match the incoming transaction workload when the offered transaction workload exceeds a threshold.
In accordance with the present invention an overload controller located 30 in a network server or attached to a network server performs several tasks as illustrated by the flow diagram of Fig. 6. Preferably, an overload controller establishes a target CA 022=,2792 1998-10-28 W 097/45792 PCT~US97/06058 incoming workload per measurement interval to be used during overload (step 602).
Then, the overload controller computes the offered load of sources from measurements of arriving messages (step 604). Finally, when the offered workload is greater than the threshold reducing the new transaction rate from each source to match the incoming S workload target (step 606). In accordance with the invention, steps 602 and 604 could be reversed.
In one embodiment, the target incoming workload may be determined and fixed ahead of time based on historical network traffic statistics. In an alternative embodiment, the controller can generate the target dynamically. For example, the value 10 for the target incoming workload may be fixed at a level that provides a desired maximum fraction of time for the server to spend on transaction processing (i.e., the server capacity). In another example, a controller counts messages whose response times exceed a threshold and computes dynamically an appl.,pliate target incoming workload from this count. The target incoming workload is expressed in terms of 15 messages per second and represents a workload target when the transaction mix does not vary widely.
In accordance with the present invention, the output of a server overload controller is a computed value ("admission factor") representing the fraction of new transaction requests a source may send to the server during the coming measurement 20 interval. The server communicates the admission factor to a source in response to new transactions from the source. It takes some time for the response message to reach the source and for the source to update the admission factor. If the controller allows a source to send the first message of a transaction, it also allows any network node to send subsequent messages corresponding to this transaction.
In one embodiment of the present invention, a controller controls the number of transactions transmitted to a network server by updating the admission factor at the end of a measurement interval and applying it to sources during the next measurement interval. Before an overload, the admission factor equals one (othervalues may also be used to detect overload conditions). A controller detects an 30 overload and then modifies the admission factor during later measurement intervals for CA 022~2792 1998-10-28 as long as the overload condition is detected or until the admission factor is less than one.
The following notation is used to describe the operation of the controllers of the present invention. It is ~c.sum~d that each value identified below is S measured at the end of a measurement interval ("the present interval") and measurements obtained during the present interval will be used to update the value of the admission factor for the next interval.
~ A' denotes the number of messages that arrived at the server in the present interval.
~ D denotes the number of dropped messages in the present interval.
~ F denotes the number of messages that fini~h.od service in the present interval.
~ p denotes the transaction-related processor utilization in the present interval.
~ C denotes the admission factor used in the present interval, where 0 ~ C < 1.
Search-Type Controller In one embodiment of the present invention the overload controller is a "search-type" controller, i.e., the controller continually seeks to determine the maximum number of messages to admit to the server in a measurement interval. This embodiment of the controller, illustrated in the flow diagram of Fig. 7, uses a binary feedback scheme that lowers or raises C by a multiplicative factor (selected at step 700) according to 20 whether messages are or are not dropped in an interval.
The controller updates the admission factor C at the end of every measurement interval. The admission factor in the present interval is updated in one of two ways depending on the number of dropped messages D during the present interval.
If a server drops messages during the present measurement interval (determined at step 25 702), then the admission factor for the next measurement interval is computed by multiplying the admission factor for the present interval by a constant b, a number preferably between zero and one (step 704). If no messages were dropped during the present measurement interval, the admission factor for the next interval is the lesser of either the admission factor for the present interval divided by b or one (step 706). The 30 computed admission factor is used to control the rate at which transactions are initiated CA 022~2792 1998-10-28 g by sources (step 708). This computation of the admission factor for the next measurement interval is expressed in the following computer program code segment:
if ( D > 0) C C*b else C min(C/b, 1.0) The assignment operator (the arrow; ) indicates that the value of C gets overwritten by the expression on the right. When C becomes too large, work arrives too quickly and the workload builds up until response times get so large that the server drops messages.
10 Then, C becomes smaller, the server works off its backlog, and the cycle repeats.
Drop Type Controller When feedback indicating whether a server is overloaded is infrequent relative to message interarrival times, convergence of admission factors to the values that prevent overload can be slow if search-type controllers are used. To compensate 15 for slow feedback another embodiment of the present invention updates admission factors in one step using dropped messages.
An embodiment of a drop-type controller follows the steps shown in the flow diagram of Fig. 8. The steps shown in Fig. 8 are executed at the end of each measurement interval. The controller discovers a surrogate for the target incoming 20 workload per measurement interval (step 802). The surrogate is Alm~,, the maximum number of messages the server should receive in a measurement interval. A new episode of overload is signaled by the dropping of messages. Once the server begins to drop messages, the difference between the number of messages it accepts and the number it drops in a measurement interval indicates the maximum acceptable workload in 25 messages. Hence, A'",ar is initially set to this value.
The controller estimates the number of messages that will be offered in the next interval to be A = Al/C (step 804). At the end of the present interval, the controller updates the admission factor as follows (Step 806). If the server has dropped messages or if the admission factor is less than one, the admission factor is set equal to 30 the lesser of either the admission factor for the present interval multiplied by the ratio of A'm~,r to A' for the present interval or one. If messages are dropped during the present CA 022~2792 1998-10-28 W 097t45792 PCTAUS97/06058 interval, A',na~ for the next interval is the difference between the number of messages that arrived at the server during the present interval and the number of dropped messages during this interval. If there are no dropped messages, but the admission factor is still less than one, A~ remains unchanged. The following computer program code segment5 illustrates these steps:
if(D>OorC< 1.0){
if(D>O) A'm~x = A' - D;

C ~, m~x,1.ol = min~ C m~X,1.0 }

Rt~.tAining the old value of A'n,ar when no drops occur allows the admission factor to return to 1.0 when the overload subsides. If A'n~ar were equal to the current number of incoming messages, the factor A ~ r IA ' multiplying C would always be at most 1.0 and the admission factor could never grow back to 1Ø This controller also includes checks that denominators are not zero.
Drop-Type Controller with History In a drop-type controller, the estimate A'"~ar = A' - D can be inaccurate for at least two reasons. First, the server can buffer messages. In the interval when the server first drops messages, the difference between incoming and dropped messages can overestimate the correct number to admit, since some of the incoming messages are buffered instead of dropped. Second, messages dropped in one interval may have arrived in another. This is a significant factor causing the difference between incoming and dropped messages to underestimate the right number of messages to admiL
A more subtle limitation in drop controllers is that once the server stops dropping messages, the value of A In~ar stays fixed. Unfortunately, the message capacity of the server may not stay fixed. For example, if the average real time cost per message drops, the old value of A 'mar may be unnecessarily low.
An embodiment of the present invention accounting for the server message drop history fixes the problem of poorly chosen values of A'ma,. by mAintAining a CA 022~2792 1998-10-28 W O 97/45792 PCT~US97/06058 history of the value A~m~ in a circular array having H elements. At the end of ameasurement interval, the server overwrites the oldest member of the array with A' - D.
If D > 0, the server sets A'",~ equal to the average of the values in the array. Otherwise, A~m~ remains unchanged. The new admission factor is set exactly as in a drop type controller. Defining A'm~,r as an average over several measurements when the server drops messages addresses the variability in a single measurement.
Drop History Controller With Growth In still another embodiment of the present invention, server control is based on the number of dropped messages and the potential to increase, or "grow," the 10 target maximum number of messages that arrive for server processing during a time interval. This embodiment of the server controller is the same as a drop historycontroller except that it updates A '"",~ according to the rule A '",~,~ max (A'mUX, A' ), when D = 0. In intervals when the server does not drop messages but the admission factor is still less than 1.0, this rule takes advantages of random fluctuations in the 15 number of messages arriving to the server to explore whether the server actually can accept more messages per interval than A'",~,~. In this way, the limit Aln,~,~ is raised until the server again drops messages, at which time, its growth may be halted.
Usa~ge Controller In another embodiment of the present invention, the controller monitors 20 server processor utilization instead of dropped messages. In certain applications, usage controllers provide an advantage over the drop type controllers because they need not translate the server processing capacity into messages per unit time. This embodiment follows the steps illustrated in the flow diagram of Fig. 9.
The controller selects T, the target utilization level for transaction 25 processing during overload (step 902). For example, a server operator may not want the transaction-related processor utilization to go above 92%. The operator may also want to build in a safety margin and therefore set T to represent a maximum value less than 0.92, like 0.90. The maximum incoming transaction workload per measurement interval is then given by TI, where I is the duration of the measurement interval.
The usage controller updates the admission factor from the present interval to the next interval as follows. First the controller infers the offered transaction CA 022~2792 1998-10-28 W 097/45792 PCTrUS97/06058 load in the next interval as follows. The average processing time per message in the present interval is p l/F; thus the arriving workload in that interval may be estimated as A' p I/F (step 904). Since this quantity represents approximately C times the offered workload, an estimate of the offered workload is computed according to the expression 5 W = A ' p l/(FC). The controller subsequently forecasts the offered workload in the next interval to be equal to the offered workload in the present interval (step 906). Then W is the offered workload forecast for the next interval.
At the end of the present measurement interval the controller computes an updated admission factor according to the following expression (step 908):
if(p>TorC<1.0) C min (TIIW, 1.0) = min ( C A --, 1.0) Before an overload, C typically is equal to 1.0, so the test p > T detects an overload.
Once admission factors have been applied, the same test typically fails, so the second test C < 1.0 prevents controls from being removed abruptly and gradually raises C back to 1.0 when the overload subsides. The computed admission factor is used by the controller to control the transaction rate (step 910).
Fair Share Controllers In an environment where a single network server provides multiple services, a controller must not only reduce the load coming to the server to themaximum level it can handle during overloads, the controller must also block excessive demands for services individually. For example, if a sudden increase in the demand for one service overloads the server (a focused overload occurs), the network operator might want to cut back traffic directed to the service causing the overload, but not traffic of other services. On the other hand, in a general overload (the loads of all services increase), the controller could cut back all traffic in proportion to demand.
In general, a controller in a multiservice environment must allocate "fair shares" of the server capacity to competing services. An embodiment of a fair share controller executes the algorithm below at the end of each measurement interval:if (server is overloaded or control was active in current measurement interval) {

CA 022~2792 1998-10-28 WO 97/4S792 PCTrUS97/06058 for each service determine fair share [service~;
for each service {
if ( demand[service] > fair_share[service] ) accept at most fair_share[servicej;
else accept demand[service];
}
}

Several aspects of the algorithm deserve further elaboration. First, the initial if statement both activates and removes controls. A.~.~uming the server is initially not overloaded, it activates overload controls when the server becomes overloaded.
Once controls are active, the measurements that detected an overload may (and should, if the control effectively reduces traffic) indicate that the server is no longer overloaded.
However, the demand may still be too high. The algorithm continues to estimate demand as long as controls are active. Otherwise, controls might be removed abruptly, resulting in oscillations in and out of overload.
The array fair_share specifies how much processing capacity the server allocates to each service in the coming measurement interval. The fair share is not necessarily the maximum amount of processing the service could consume; if a service's demand is less than the available capacity server processing capacity may be allocated to another service. The sum of all the fair shares must be less than the server capacity, as the sum is generally what the services are expected to use.
Controls that dynamically compute the share of server processing capacity for each service typically require information about all services at once.
Revenue-based controls might well have the same property if priorities are not absolute (i.e., do not shut off one service completely before cutting back a higher priority service).
In general, the calculation of fair share could involve table lookups if priorities are static or comparisons of measurements under more dynamic allocation algorithms. Since the resource allocated is processing capacity, fair share must- 30 ultimately be converted into units of time or processor utilization.

CA 022~2792 1998-10-28 W 097/45792 PCT~US97/06058 -14-The quantity demand refers to the workload the sources offer. Since some of this offered load may be blocked at the sources by a controller, the server infers the offered load from internal measurements and prior admission factors.
Both usage and drop controllers can be modified to produce fair share S controllers for servers providing multiple services. In the case where a server provides multiple services, the notation describing controller operation must be modiiled as follows:
~ A '(s) denotes the number of messages of service s that arrived at the server in the current interval. A' = 2A' (s) is the number of messages from all services. Omitting an argument from a measurement represents the sum over all services.
~ C(s) is the admission factor for service s (i.e., the admission factor that all sources belonging to service s use) for the current method. 0 s C (s) s 1.
~ D (s) denotes the number of messages the server dropped in the current interval.
~ A'"""~ (s) is the maximum number of messages the server should accept from service s in the coming measurement interval.
~ F (s) denotes the number of messages of service s that finisht-d service in the current interval.
~ p(s) denotes the processor utilization due to processing of service s work in the current interval.
~ T(s) denotes the target transaction-related utilization level for service s work in the next interval.

A fair share drop controller uses counts of dropped and arriving messages to detect overload and estimate demand including the history and growth modifications.
30 An embodiment of a drop controller method that enforces fair shares for different , CA 022~2792 1998-10-28 W 097/45792 PCT~US97/06058 services provided by the computer's process scheduler includes the steps of the following algorithm:
for each s: {
if (D(s)>OorminC(s)< 1.0) {

1 H-l if (D(s)>O) A ma~(S) ~ H 2 A i (S) -D, (s) S else A'n,al. (s) max (A'"""~ (s),A ' (s));

C (s) min(C (s) A' (s), 1.0) A '(s) }

15 The subscript i indexes measurement intervals, with 0 denoting the current one and higher numbers denoting intervals further in the past.
The inside "if" statement in the algorithm computes the fair share for processes that are dropping messages. The else statement raises the share once the service stops overloading the server. As in a usage controller, the min function serves 20 to accept the smaller of the service's demand and the service's fair share.
During an overload, a fair share usage controller reduces incoming traffic until the server utilization is at the overall target T. In addition, a fair share usage controller is designed to reduce traffic from each service in proportion to how much the service's demand exceeds its recent usage. For example, if only one service is causing 25 the overload, then a fair share controller cuts back traffic directed to that one service, without affecting other services. An embodiment of a fair share controller follows steps illustrated in the flow diagram of Fig. 10 when there is an overload. The controller divides up the target T into "fair shares" for the services on the server in proportion to the loads they offered before the overload (step 1002). Next, it sets the admission 30 factor for each service (step 1004) to reduce the service's workload to the service's fair share (step 1006).

CA 022~2792 1998-10-28 The fair share or target for service s is defined as follows: if U(s) is an es~im~t~ of the utilization of service s prior to the overload and U = 2U(s), then T(s) = U(s) T

U(s) is computed by averaging service utilization measurements over a number H of past measurement intervals. That is, if pj (s), i = 0, . . ., H- 1, are the last H measurements of 5 service s's utilization, then U(s) = 1 ~ pj(S) H i=o At the end of each measurement interval, a fair share controller updates the circular arrays of utilization histories for each service. Then it updates the admission factors for each service:
if (p>T or mi~l C(s~ < 1.0) C(s) min(T(5)1,1.0) = min(C(s) F(s) T(s) 10) W(s) A '(s) P(s) A usage type controller keeps processor utilization at a safe, target level while m~int~ining maximum transaction throughput. A fair share usage controller achieves these objectives and it controls an overload by cutting back traffic from the service causing the overload and allowing the server to continue processing nearly all the traffic other services offer. There is latitude in a fair share controller to give services 15 priorities, e.g. by multiplying the fair shares T(s) by weights. In one embodiment of the invention, these weights correspond to service revenue requirements.

Overload Controller Compensating for Server Process Scheduling CA 022~2792 1998-10-28 Another embodiment of the present invention is suited for an environment where the servers offer multiple services whose demand is likely to be volatile, where at any time, demand for one of the services could increase and push the total load beyond what the server can handle. In such an event, the server must decrease the amount of S traffic it accepts. A server controller must choose which traffic to accept and which to reject. Server controllers determine how much of the server processing capacity to allocate to competing services when the total demand exceeds the server capacity and limit the incoming demand of those services to their allocations.
Allocation questions such as these also fall within the domain of the 10 operating system's process scheduler. When different processes handle different services, the process scheduler prioritizes competing services because it determines when and for how long each process runs. The overload controller also assigns services priorities because it governs how much work of each type gets admitted to the server. Overload controllers designed according to the present embodiment recognize and deal with these 15 overlapping priority assignments.
Controllers designed according to the present invention compensate for the interaction of server overload controls and process scheduling. In an environment where a server has a scheduler implemented in the UNIX operating system, the UNIX
scheduler gives different processes time slices in a round robin fashion.
A process may use part or all of its time slice, which roughly translates into a guaranteed share of processing capacity per process. Other processes may, in effect use the portion of the time slice that a given process does not need, thereby taking more than their guaranteed share of real time.
Typically a server has a single, multitasking processor; however, the present invention also has application in a multiprocessor environment. There are typically two types of processes controlled by an operating system, transaction handling processes and overhead processes. There is a one-to-one correspondence between transaction-handling processes and services. The overhead process represents all the other tasks the server processor must perform including operating system chores,maintenance, measurements, and the overload control itself.

CA 022~2792 1998-10-28 Preferred embodiments of the fair share usage controller can be modified to handle interaction with server process scheduling. A usage controller is designed to create fire walls between services when one service's demand suddenly increases while the other services' demands remain roughly constant. A usage controller allocates server S processing capacity to services roughly in proportion to their recent usage levels. The intent is to give those services not responsible for the overload as much serverprocessing capacity as they have recently been using and to cut back traffic from the offending service.
To deal with processes other than transactions, in this embodiment, when 10 the total measured utilization p exceeds Pm~ ~ where Pm;~x is a predetermined total utilization threshold, the server control is activated. The symbol Povhd represents the processor utilization due to overhead processes in the current interval, i.e. Povhd =P-~,p(S).
One embodiment of a server overload controller that reduces operating 15 systems conflicts includes the steps shown in the flow diagram of Fig. 1 1. The overload controller estimates the recent processor utilization of each service (step 1102). Next the controller compares the processor utilization valve to a threshold (step 1104) and tests C(s) to determine if it is less than 1.0 (step 1106). The controller subsequently allocates an amount of processor capacity for overhead processing (step 1108), 20 computes a fair share processor utilization level for the service using equations introduced below (step 1110), and replaces the computed admission factor with a newly computed admission factor, computed using the fair share processor utilization level (step 1112). The newly computed admission factor is used to control the number of messages processed by the network server (step 1114).
To define the fair share of a services, denoted here by T(s), let pj(s) ,i =
O,..., H-l, be the last H measurements of service s's utilization (0 indexes the current interval and the subscripts increase with age), and define:
H-l U(s) = H ~ Pi (S) CA 022~2792 1998-10-28 U(s) estimates the utilization of service s prior to the overload. Set U = ~, U (s). At the end of each measurement interval and prior to the algorithm below, the server updates each U(s). Then the server executes the following algorithm:
if (P'>Pma~; or min C(s)< 1.0 ) for each s ~

T(s) = U (Pm~ Pov~d) C(s) min(c(s) ( ) ( ),1.0) A (s)p(s) The use of the difference (Pma~; ~ P.~Vhd) in the fair share assignment 10 effectively allocates overhead the same amount of processor capacity in the next interval as it used in the current one.
The fair share T(s) of service s depends on all services through the sum U; it also depends upon overhead processes through (P",~,~ ~Pn~ ) Consequently, the fair shares of all services are calculated jointly. The min function sets the new admission factor to accept all of service s's demand if the demand is forecast to be less than the amount T (s) I of time the processor can devote to service s. Otherwise it sets the admission factor to accept only T (s) 1 seconds of work from service s which is its fair share.
Adaptive Gapping The preceding discussion did not specify how sources should implement admission factors because determining and implementing adrnission factors are separate, independent operations. One possible implementation of admission factors is by percent-blocking, in which the source chooses at random a specified fraction of new transactions for admission. The table-driven code gapping approach is another method of implem~n~ing admission factors.

CA 022~2792 1998-10-28 The present invention prefereably uses automatic code gapping to admit new transaction requests. The gap intervals are adaptively recalculated, based on the admission factor, each time that the SCP tells its source that its congestion level has changed.
In response to a request from a server to reduce the number of new transactions transmitted to the server by the admission factor C, the source measures its input transaction rate, ~, and calculates its new gap interval, gnew~ as:

gneW= (C;l,) - ;~ .

Sirnilarly, in response to a request from a server to increase the number of new transactions transmitted to the server by the admission factor C, the source measures its input transaction rate, ~, and calculates its new gap interval, using this same expression.
Although the above-described calculations were performed at the source, this adaptive gap technique may alternatively be performed at the server level. The main difference between calculating the new gap interval, gnew~ at the server rather than the source is that the server does not know, and cannot directly measure ~. According to the present invention, however, the server infers ~ based on the source's output 20 transaction rate, ~Out. In particular, the server measures ~0u~ and then estimates ~ as:

;l = (;~oul) gold~

where gold is the present gap interval. Having estimated ~, the server calculates gnew using the same method as the source. Finally, the server transmits the new gap interval to the source.
Note that the adaptive code gapping algorithm could be used in sources in combination with the admission factor algorithms described above or with any algorithm the server uses to set admission factors. Similarly, if the server uses one of 30 the admission factor algorithms described above, a source can send to the server the CA 022~2792 1998-10-28 fraction of transactions specified by the admission factor using any method of blocking transactions the source chooses.
While there has been illustrated and described what are at present considered to be preferred embodiments and methods of the present invention, it will be S understood by those skilled in the art that various changes and modifications may be made, and equivalents may be substituted for elements thereof without departing from the true scope of the invention.
In addition, many modifications may be made to adapt a particular element, technique or implementation to the teachings of the present invention without 10 departing from the central scope of the invention. Therefore, it is intended that this invention not be limited to the particular embodiments and methods disclosed herein, but that the invention include all embodiments falling within the scope of the appended claims.

Claims (8)

We claim:
1. A method for preventing overload of a network server by messages received from a source initiating network server transactions comprising the steps, executed by a processor, of:
determining a multiplicative factor having a value greater than zero but less than one;
generating at each of a plurality of measurements an admission factor using said multiplicative factor; and controlling a rate at which transactions are initiated by the source using said admission factor.
2. A method for preventing overload of a network server by messages received from a source initiating network server transactions comprising the steps, executed by a processor, of:
determining a desired maximum number of messages for the network server to receive in a measurement interval;
estimating from said desired maximum number of messages and from an admission factor, a number of messages that will be offered to the server in a subsequent measurement interval;
computing an updated admission factor from said desired maximum number of messages, said admission factor, and said estimated number of messages that will be offered to the server in a subsequent measurement interval; and controlling a rate at which transactions are initiated by the source using said admission factor.
3. A method for preventing overload of a network server by messages received from a service initiating network server transactions comprising the steps, executed by a processor, of:
comparing a processor utilization value to a total processor utilization threshold;

comparing an admission factor for said service to the number one;
averaging a utilization of said service over a specified number of prior measurement intervals;
allocating an amount of processor capacity for overhead processing in a subsequent interval equal to an amount of processor capacity allocated to overhead processing in a current interval;
computing a fair share processor utilization level for said service from the processor capacity remaining after subtracting said allocated amount of processor capacity for overhead processing from said threshold;
replacing an old admission factor for said service with a new admission factor for said service, computed from said fair share processor utilization level; and controlling a number of messages processed by the network server using said new admission factor.
4. An apparatus for preventing overload of a network server by messages received from a source initiating network server transactions comprising:
means for establishing a target incoming transaction workload per measurement interval;
means for estimating from measurements obtained during said measurement interval an incoming transaction workload offered by a source; and means for reducing a rate at which new transactions are initiated by said source to match said target incoming transaction workload when said offered transaction workload exceeds a threshold.
5. A method of adaptively modifying a gap interval that is used by a source to limit the number of transactions per predetermined measurement interval transmitted from the source to a network server, comprising:
measuring the mean time between new transaction requests received at the source;
calculating a new gap interval based on the measured mean time and an admission factor;

blocking transaction requests input to the source based on the new gap interval at the source.
6. An apparatus for preventing overload of a service control point by messages received from a source initiating service control point transactions comprising:
means for establishing a target incoming transaction workload per measurement interval;
means for estimating from measurements obtained during said measurement interval an incoming transaction workload offered by a source; and means for reducing a rate at which new transactions are initiated by said source to match said target incoming transaction workload when said offered transaction workload exceeds a threshold.
7. A method of adaptively modifying a gap interval that is used by a source to limit the number of transactions per predetermined measurement interval transmitted from the source to a service control point comprising the steps, executed by a processor, of:
measuring the mean time between transactions sent from the source to the service control point during the measurement interval;
calculating an estimated mean time between transactions input at the source by subtracting the gap interval from the measured mean time between transactions;
calculating a new gap interval based on the mean time between transactions and a predetermined admission factor;
transmitting the new gap interval from the service control point to the source;
blocking transaction requests input to the source using the new gap interval at the source.
8. A method for preventing overload of a level one gateway by messages received from a source initiating level one gateway transactions comprising the steps, executed by a processor, of:
determining a desired maximum number of messages for the level one gateway to receive in a measurement interval;
estimating from said desired maximum number of messages and from an admission factor, a number of messages that will be offered to the level one gateway in a subsequent measurement interval;
computing an updated admission factor from said desired maximum number of messages, said admission factor, and said estimated number of messages that will be offered to the level one gateway in a subsequent measurement interval; and controlling a rate at which transactions are initiated by the source using said admission factor.
CA002252792A 1996-05-24 1997-04-11 Apparatus and method for preventing network server overload Abandoned CA2252792A1 (en)

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US1833796P 1996-05-24 1996-05-24
US1830896P 1996-05-24 1996-05-24
US60/018,308 1996-05-24
US60/018,337 1996-05-24

Publications (1)

Publication Number Publication Date
CA2252792A1 true CA2252792A1 (en) 1997-12-04

Family

ID=26690966

Family Applications (1)

Application Number Title Priority Date Filing Date
CA002252792A Abandoned CA2252792A1 (en) 1996-05-24 1997-04-11 Apparatus and method for preventing network server overload

Country Status (4)

Country Link
EP (1) EP0901656A4 (en)
JP (1) JPH11514177A (en)
CA (1) CA2252792A1 (en)
WO (1) WO1997045792A1 (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FI113444B (en) * 1998-10-09 2004-04-15 Teliasonera Finland Oyj Method and system for establishing a telecommunication connection
US6658473B1 (en) 2000-02-25 2003-12-02 Sun Microsystems, Inc. Method and apparatus for distributing load in a computer environment
EP1137295A1 (en) 2000-03-20 2001-09-26 BRITISH TELECOMMUNICATIONS public limited company Communications network
EP1303952A1 (en) * 2000-07-27 2003-04-23 Siemens Aktiengesellschaft Method and device for providing overload protection in services involving data transmission
WO2003010907A1 (en) * 2001-07-25 2003-02-06 Atitania Ltd. Load balancing a distributed processing system
EP1367779A1 (en) * 2002-05-31 2003-12-03 Universiteit Twente Robust congestion control mechanisms for communication networks
US20100149973A1 (en) * 2006-10-09 2010-06-17 Daniel Krupp Method and Apparatus for use in a Communications Network
US8040805B2 (en) * 2006-10-09 2011-10-18 Telefonaktiebolaget L M Ericsson (Publ) Load control in a communication network

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5067074A (en) * 1989-10-27 1991-11-19 At&T Bell Laboratories Control of overload in communications networks

Also Published As

Publication number Publication date
JPH11514177A (en) 1999-11-30
EP0901656A4 (en) 2000-06-14
WO1997045792A1 (en) 1997-12-04
EP0901656A1 (en) 1999-03-17

Similar Documents

Publication Publication Date Title
US5878224A (en) System for preventing server overload by adaptively modifying gap interval that is used by source to limit number of transactions transmitted by source to server
US7400633B2 (en) Adaptive bandwidth throttling for network services
KR100235689B1 (en) The improved dynamic bandwidth predicting and adapting apparatus and method in high speed packet switch
US5067074A (en) Control of overload in communications networks
JP3497577B2 (en) Window and Rate Application Control Method in Network
US5940372A (en) Method and system for selecting path according to reserved and not reserved connections in a high speed packet switching network
US5787163A (en) Intelligent load balancing of special service calls based on availability of terminations
CA2009729C (en) A predictive access-control and routing system for integrated services telecommunication networks
KR100235690B1 (en) The improved dynamic bandwidth predicting and adapting apparatus and method
US6353616B1 (en) Adaptive processor schedulor and method for reservation protocol message processing
US20030236887A1 (en) Cluster bandwidth management algorithms
US20030200317A1 (en) Method and system for dynamically allocating bandwidth to a plurality of network elements
JP2001077848A (en) Band allocating method
Smith Ensuring robust call throughput and fairness for SCP overload controls
US5754786A (en) System and method for integrated overload control and message distribution
CA2252792A1 (en) Apparatus and method for preventing network server overload
CA2328845C (en) Direct customer control of a network router
Srinivasan et al. Fuzzy connection admission control for self-managed networks
Kihl et al. Load balancing strategies for TINA networks
RU2183912C1 (en) Method for controlling digital data burst streams
JPH02185134A (en) Intra-network resource managing method
Au et al. Analysis of leaky bucket mechanism based on burstiness characterization
Du et al. Performance and Service Delay Guarantees for Web Servers: A Robust Control Approach.

Legal Events

Date Code Title Description
EEER Examination request
FZDE Discontinued