State of the Art on Network Troubleshooting
Van Tong, Sami Souihi, Hai Anh Tran, Abdelhamid Mellouk · 2023
This chapter presents the state of the art on network troubleshooting and a traditional troubleshooting architecture for non-encrypted traffic. It then discusses its limitations when traffic is encrypted. Nowadays, many new protocols (e.g. TLS1.3, QUIC, etc.) are designed to provide encryption and authentication for data communication in the network. The network traffic can be encrypted by encryption protocols such as IPsec, TLS, etc. This leads to many obstacles for network troubleshooting for encrypted traffic related to network monitoring approaches and intrusion detection systems. Network performance monitoring is an essential part of the data collection module to collect network parameters for network troubleshooting. Distributed denial-of-service (DDoS) protection is necessary in network operations. It aims to detect DDoS traffic and redirect it to a migration system to filter out DDoS traffic from legitimate traffic.