2 SS7-over-IP Networks

This chapter describes the concept of an SS7-over-IP network and the protocols it uses, the opportunities it provides now, and what it means for future directions. It takes the reader from the current TDM limitations to the role of SIGTRAN to the reasoning of why and when to transition to an SS7-over-IP network.

2.1 SS7-over-IP Networks Overview

An SS7-over-IP network consists of a traditional SS7 network that can integrate IP-enabled or all-IP devices with the protocols defined by the Internet Engineering Task Force (IETF) standards organization.

The SS7-over-IP signaling primarily addresses the transport aspect of SS7. The call-control services and other types of services, therefore, can continue to be offered and deployed without concern for the method of interconnection. The method of service implementation, however, remains dependent on the particular network element chosen to support the service rather than the transport chosen.

This section looks at the limitations of the traditional SS7 network and its network components, the role of SIGTRAN protocols, the purpose of the SS7-over-IP networks, the advantages of transitioning to this network, and when it is time to consider transitioning.

2.2 SS7 limitations

SS7 is a signaling network (data traffic) protocol used to send and receive signaling messages between Signaling End Points over dedicated signaling links. Operators deploy SS7 services over a dedicated network of 56- or 64-kbps Time Division Multiplexed (TDM) lines, or use high-speed T1 (1.5 Mbps) or E1 (2.048 Mbps) lines. SS7 uses centralized databases and services, achieves reliable connections through network management. SS7 signaling is mature, with standards and a rich feature set, and offers these advantages to both wireline and wireless services.

However, SS7 limitations in scalability, bandwidth, and network availability slow network growth and opportunities to participate in new IP services:

  • Scalability is limited by 16-link linksets consisting of 64 kbps transport

    Up to 16 links may be grouped into one circuit, or linkset. Adjacent network elements, such as Signal Transfer Points (STPs) and Service Control Points (SCPs), may be connected by no more than one linkset. The protocol further recommends that links and linksets are configured to no more than 40% of their maximum capacity, so that the alternate path can carry the full load of messages during failover.

  • Bandwidth

    A traditional SS7 message size is limited to about 272 octets. E1/T1 links allow the transmission of larger messages, but not without originating, routing, or end points supporting either large messages or message segmentation.

    Note:

    If an E5-ENET-B card running the IPSG application is used and the E5-ENET-B IPSG High Throughput feature is turned on, then the optimal SS7 message size is 120 octets or less. See Table 5-5 for optimal configurations.

    A bandwidth of 56 kbps or 64 kbps per link and dedicated links reduce flexibility and increase cost significantly when creating sufficient bandwidth for new service applications. In a TDM network, entire transmission segments must be reserved for each call, even if the TDM connection is idle.

TDM-based SS7 is continuing to evolve, but slowly. Instead, wireline and wireless operators are looking to IP solutions.

2.3 Role of SIGTRAN

SIGTRAN is a working group of the IETF, addressing packet-based Public Switched Telephone Network (PSTN) signaling over IP networks. A set of signaling transport protocols has been developed out of the group’s work. For the purposes of this document, the protocols are collectively called the “SIGTRAN” protocols or suite.

The SIGTRAN architecture used by Oracle Communications includes several IETF protocols. Figure 2-1 illustrates their location in the protocol stack:
  • MTP2 User Peer-to-Peer Adaptation Layer (M2PA) protocol; RFC 4165
  • MTP3 User Adaptation Layer (M3UA) protocol; RFC 4666
  • Stream Control Transmission Protocol (SCTP)protocol; RFC 4960

Figure 2-1 SIGTRAN Protocols Used by Oracle Communications


SIGTRAN Protocols Used by Oracle Communications

2.3.1 SCTP (Stream Control Transmission Protocol)

SCTP is a new reliable transport protocol that operates on top of a connectionless packet network such as IP, and operates at the same layer as TCP. It establishes a connection between two endpoints, called an association, for transmission of user messages. To establish an association between SCTP endpoints, one endpoint provides the other with a list of its transport addresses (one or more IP addresses in combination with an SCTP port). These transport addresses identify the addresses that will send and receive SCTP packets. SCTP was developed to eliminate deficiencies in TCP and offers acknowledged, error-free, non-duplicated user data transport.

IP signaling traffic is usually composed of many independent message sequences between many different signaling endpoints. SCTP allows signaling messages to be independently ordered within multiple streams (unidirectional logical channels established from one SCTP end point to another) to ensure in-sequence delivery between associated end points. By transferring independent message sequences in separate SCTP streams, it is less likely that the retransmission of a lost message will affect the timely delivery of other messages in unrelated sequences (called head-of-line blocking). Because TCP does enforce head-of-line blocking, the SIGTRAN Working Group recommends SCTP rather than TCP for the transmission of signaling messages over IP networks.

Security

SCTP provides certain transport-related security features, such as resistance against blind "denial of service" attacks, masquerades, or improper monopolization of services.

SIGTRAN protocols do not define new security mechanisms, as the currently available security protocols provide the necessary mechanisms for secure transmission of SS7 messages over IP networks.

Deviations

The following sections summarize the most important deviations from the IETF RFCs that Oracle has made. Refer to the protocol compliance matrices for details. Contact your Sales Representative for access to the information contained in these documents.

SCTP Multiple Streams

There are several architectural issues regarding the use of multiple streams as described in the SCTP protocol. These issues include:
  • Synchronization between data streams
  • Synchronization from control stream to data streams
  • Load-sharing implementation based on Signaling Link Selection (SLS) across streams, either within a connection or across all of the connections in an Application Server

    Since the underlying SS7 network is connectionless, a stringent requirement for mis-sequenced messages has been set because it is often easier to recover from the loss of a message by a time-out than from one message delivered out-of-sequence. The Message Transfer Part (MTP) is able to maintain a high probability of message sequencing. This is ensured by the MTP user, which generates a value for a Signaling Link Selection (SLS) field as a parameter for each message. As the message is routed through the network, wherever there is a choice to be made between alternate routes, the link selection is made based on the SLS value in the message.

  • Connection behavior when a stream becomes congested

A lack of consensus on the IETF SIGTRAN mailing list regarding these issues resulted in supporting a maximum of two streams: one control stream and one data stream.

SCTP Timer

Based on experiences in the field, Oracle has deviated from some RFC-recommended timer settings, especially those related to retransmission, to better accommodate signaling networks.

The default mode for the retransmission timer (RMODE) is linear, whereas the RFC-recommended timer setting is exponential. Oracle makes both settings available through configuring an association to use either the Linear (LIN) or the exponential (RFC) method. For more information about both modes and the timer settings, see SCTP Timers.

2.3.2 M2PA (MTP2 User Peer-to-Peer Adaptation Layer) Protocol

M2PA is used primarily to replace B-, C-, and D-links. When used with A-links, M2PA connects to Service Switching Points, Signaling Control Points, Home Location Registers and other endpoints. M2PA is a direct replacement for channelized TDM circuits because it provides specific controls for assurance of in-sequence delivery of messages. As such, M2PA is used to connect points that pass call-related data that is time-sensitive, such as ISUP calling data.

Congestion procedures conform to those specified by the ANSI/ITU standards. The M2PA protocol can coexist in a linkset with other link types such as low-speed links and ATM high speed links. When using other link types, the throughput will always match the lowest-speed link in the linkset.

Oracle implemented the M2PA protocol through its IPSG application. For more information on the IPSG application, see IPSG application.

Figure 2-2 M2PA Network

M2PA Network

2.3.3 M3UA (MTP Level 3 User Adaptation Layer) Protocol

M3UA seamlessly transports SS7 MTP3 user part signaling messages over IP using SCTP. M3UA-connected IP endpoints do not have to conform to standard SS7 topology, because each M3UA association does not require an SS7 link; there are no 16-link-per-linkset restrictions. Each M3UA-connected IP endpoint can be addressed by an SS7 point code unique from the signaling gateway’s point code. Oracle offers one type topology for M3UA: IPSG using IPSG-M3UA links.

Note:

A-links for nodes requiring in-sequence delivery of messages should be configured on the IPSG card using M2PA; M3UA does not have sequence numbers to support lossless changeover/changeback.
A routing key defines a set of IP connections as a network path for a portion of SS7 traffic, and is the IETF Signaling Gateway equivalent of a Signal Transfer Point’s SS7 route. Routing keys are supported by the M3UA protocols to partition SS7 traffic using combinations of Destination Point Code (DPC), Origination Point Code (OPC), Service Indicator (SI), Network Indicator (NI), SS7 Subsystem Number (SSN), and/or Circuit Identification Code (CIC) message fields.

M3UA is implemented using IPSG, supporting routing keys in the form of SS7 Routes referencing IPSG M3UA linksets rather than as distinct ‘routing key’ managed elements. Instead, it performs similarly to the M2PA protocol. Each M3UA association is viewed as a link by the core EAGLE, and each IPSG card can have up to 128 associations/links per card. MTP Origin-Based Routing cannot be used with adjacent point codes.

M3UA does not have a 272-octet Signaling Information Field (SIF) length limit as specified by some SS7 MTP3 variants. Larger information blocks can be accommodated directly by M3UA/SCTP without the need for an upper layer segmentation or re-assembly procedure, as specified by the SCCP and ISUP standards. However, a Signaling Gateway will enforce the maximum 272-octet limit when connected to a SS7 network that does not support the transfer of larger information blocks to the destination.

At the Signaling Gateway, M3UA indicates to remote MTP3 users at IP end points when an SS7 signaling point is reachable or unreachable, or when SS7 network congestion or restrictions occur.

2.4 SS7-over-IP signaling transport

SIGTRAN protocols connect IP-based or IP-enabled Media Gateway Controllers (MGCs), Signaling Gateway (SG), switches, databases and other Next Generation signaling applications with traditional circuit-switched signaling architecture.

In SS7-over-IP networks, traditional SS7 signals from a telephone company switch are transmitted to a Signaling Gateway, which wraps the signals in an IP packet for transmission over IP to either the next Signaling Gateway or to a MGC, other Service Control Points, or Mobile Switching Centers (MSCs). SIGTRAN protocols define how the SS7 messages can be transported reliably over the IP network; see also Role of SIGTRAN.

The Signaling Gateway has a critical role in the integrated network and is often deployed in groups of two or more to ensure high availability. The Signaling Gateway provides transparent interworking of signaling between TDM and IP networks. The Signaling Gateway may terminate SS7 signaling or translate and relay messages over an IP network to a Signaling End Point (SEP) or another Signaling Gateway, which may be separate physical devices or integrated in any combination. For example, the EAGLE can perform the functions of a Signal Transfer Point in addition to those of a Signaling Gateway.

2.4.1 From SS7 Message to IP Packet

The following figure and description show how SS7 messages are encapsulated and sent over an IP network to a host in another network.

Figure 2-3 Transmitting an SS7 Message using IP

Transmitting an SS7 Message using IP
  1. A signaling point issues an SS7 message, unaware that there is IP signaling in the network. The message contains Link Status Signaling Units (LSSU), Fill In Signal Units (FISU), Final Signal Units (FSU), and Message Signal Units (MSUs).
  2. The Signaling Gateway receives the SS7 packet and encapsulates all necessary SS7 information into the data section of the IP packet. The packet includes the data, source and destination IP addresses.
  3. The packet travels across the IP network. The network is unaware that it is delivering SS7 data. There is no need to modify the routers or gateways along the way.
  4. The packet is delivered to the Signaling Gateway on the receiving network. The SS7 information is recovered from the IP packet.
  5. A well-formed SS7 packet is sent to the destination Signaling Point.

2.4.2 Communication inside the Wide Area Network (WAN)

The following figure and description show the routing inside the Wide Area Network (WAN).

Figure 2-4 Communication inside the WAN

Communication inside the WAN
  1. The Source Host (Signaling Gateway) builds a packet with a destination IP address.
  2. A router on the LAN converts the packet to the WAN protocol and places it on the WAN.
  3. Each router on the WAN looks at the destination IP address and determines the port to which it forwards the packet. Each router needs to know only how to get the packet closer to the destination.
  4. The final router converts the packet to the local LAN format and delivers it to the Destination Host.

2.5 Reasons to transition to an SS7-over-IP SIGTRAN network

There are many reasons for transitioning to an SS7-over-IP network. The resulting network offers improved cost effectiveness, increased capacity that can be further scaled as needed, a high Quality of Service (QoS) including redundancy and security, and efficient deployment using existing equipment.

2.5.1 Cost Effectiveness

SS7-over-IP networks lower network capital and operational expenditures. SIGTRAN is based on the IP protocol; these networks use industry standard, off-the-shelf network interfaces, cables, switches, and software. Improvements in technology and reductions in cost found in the general computer industry can be applied readily in signaling applications. As an industry standard, SIGTRAN allows customers to interoperate in a multi-vendor environment.

Replacing long-haul point-to-point SS7 links between network elements with IP connectivity can reduce recurring signaling transport costs and the need for dedicated TDM lines. IP-based network monitoring and provisioning improve operation efficiencies.

2.5.2 Increased capacity

SS7-over-IP networks offer increased capacity. The bandwidth overall is greater, both due to inherent capacity and to dynamic bandwidth sharing. Data traffic, including Short Message Service (SMS), can run more efficiently over SIGTRAN. For example, SMS data is saturating some SS7 networks. Using devices such as the EAGLE with its gateway functions, operators can have a Short Message Service Center communicate directly to Home Location Registers (HLR) and Mobile Switching Centers (MSCs) using SIGTRAN.

Flexibility

SIGTRAN uses the packet IP network to define logical connections between devices. Because the network developers, planners, and installers are no longer tied to deploying fixed circuits for signaling, they have the flexibility to define the network as needs and demands change. Flexibility is key in adapting bandwidth on demand; re-dimensioning the SS7-over-IP network can be done completely through software. With legacy SS7, users are limited to either 56 or 64 kbps links.

There is also flexibility when adding capacity for new IP-based solutions and value-added services; future enhancements are more transparent.

2.5.3 Integration

Enabling a network with IP does not require expensive investments or costly upgrades for existing end nodes; it enables migration to packet-based architecture without adding new point codes or reconfiguring the network.

For M2PA, there are no architectural changes. When using SIGTRAN, SS7 routing translations are the same for TDM or IP linksets.

An SS7-over-IP network is the first step to an all-IP network. Figure 2-5 shows the diversity of solutions that are possible using SIGTRAN protocols. For example, M3UA support an IP-enabled Short Message Service Center (SMSC) or Home Location Register (HLR). SS7-over-IP solves the throughput limitations that were inherited from the SS7 standards, thus allowing Short Message Service Center, Home Location Register, and other equipment to support heavy SS7 traffic needs.

Figure 2-5 Typical EAGLE SS7-over-IP Deployment

Typical EAGLE SS7-over-IP Deployment

2.6 Type of Network Change

When considering a transition, determine the type of change to make. Consider the advantages and disadvantages of a dedicated network versus a converged network. Does the equipment need to be phased out or will new equipment be added? Does the network require additional protection or supplier integration through diversity? All these issues should be considered in the initial planning because of their significant impact on the overall network architecture.

2.6.1 Dedicated Network versus Converged IP Network

While a dedicated IP network offers inherent security and minimal routing, a converged network carrying both voice and data also will satisfy these needs at a lower cost, provided that the QoS attributes such as Round Trip Time (RTT), Packet Loss, and Jitter are satisfied. These attributes should always be given the highest priority on the IP network.

Implementing SS7-over-IP on an SS7 system creates a converged IP network that allows quick, cost-effective implementation of IP-based services using existing network elements. The EAGLE, with its Signaling Transfer Point and Signaling Gateway functions, offers a reliable solution for this transition.

Decisions regarding the customization of the IP network are left up to the customer, but Oracle Professional Services can provide recommendations based on their experiences with previous SIGTRAN deployments.

2.6.2 Replacement versus Expansion

When transitioning to an SS7-over-IP network, consider these strategies:

  • Replacement of out-phased (end of life) TDM equipment
  • Gradual replacement, which means coexistence of the two technologies: there is no need to retire an existing switch if you are deploying purely for additional capacity
  • Full accelerated replacement with a short transition period based on cost, efficiency, and fault management. Even if complete transition is desired, it is unrealistic to expect to instantaneously cut over, unless the subscriber base is very small.

    There is enormous leverage when one platform provides both TDM and SS7-over-IP. The issue is more than cost savings. A combined platform can support new multimodal voice, data and video services that utilize a combination of IP data with diverse messaging capabilities, location and presence information, voice connections, speech recognition and Intelligent Network control. Of course, not every application requires every capability, so flexibility is key.

  • Maintaining the existing PSTN network, and use Next Generation Network (NGN) equipment to satisfy growing demands: legacy switches have many features and services.
  • Operators may have to wait until new switches support all required features and services
  • Out-of-region or in-region expansion of traditional services or new features

2.6.3 Diversity

Supporting businesses with critical operations, such as banking, requires strategies for predictable recovery, not only from regular network faults, but also from attacks on signaling networks. When planning to move to an SS7-over-IP network, the operator should consider equipment and connection diversity to assist in recovery.

The range of diversity will differ from customer to customer and it may include a multitude of factors:

  • Entry diversity offers more than one cable entrance into a building
  • Pair and cable diversity provides a local loop connection through multiple, nonadjacent pairs in more than one cable
  • Path or route diversity provides end-to-end, physically or logically separate routes for a circuit
  • Central office diversity provides local loops that terminate in more than one central office
  • Site diversity provides alternative or backup locations

2.7 When to transition to an SS7-over-IP SIGTRAN network

Consider transitioning to an SS7-over-IP network if:

  • Traffic-volume growth on the network is demanding additional capacity
  • New networks are planned or IP services will be added to existing networks
  • Traffic volume between signaling points is surpassing the bandwidth of 16-link linksets
  • A data or voice-over-IP network is already present
  • Signaling traffic is deployed over very high-latency or lossy networks, such as satellite links

If signaling messages are transported over a private intranet, security measures can be applied as deemed necessary by the network operator.