Deterministic behavior in a shared physical network
A method for providing a deterministic behavior in a shared physical network is disclosed. The method may be performed in a device controlling a Virtual Local Area Network, VLAN, of the shared physical network. The method includes rate limiting amount of inbound traffic for each traffic flow in the VLAN and assigning a respective priority for each traffic flow in the VLAN.
1. A method for providing a deterministic behavior in a shared physical network, the method being performed in a device controlling a Virtual Local Area Network, VLAN, of the shared physical network, the method comprising:
rate limiting an amount of inbound traffic for each traffic flow in the VLAN wherein the rate limiting includes setting a certain bandwidth limitation for each traffic flow based on prior knowledge of traffic in the shared physical network by using a monitoring tool that provides an estimation of the required bandwidth and/or by previous knowledge of application demand,
assigning a respective priority for each traffic flow in the VLAN, and
allowing an information technology traffic flow and an operational technology traffic flow in the shared physical network,
wherein the shared physical network controls an automation system.
2. The method as claimed in claim 1 , comprising performing the rate limiting in one or both of: an access port and a trunk port.
3. The method as claimed in claim 1 , wherein the VLAN implements an IEEE 802.1Q Standard.
4. The method as claimed in claim 3 , wherein the shared physical network is an IEEE 802.3 Ethernet network.
5. A Virtual Local Area Network, VLAN, configured for providing a deterministic behavior in a physical network, the VLAN communicating over Ethernet, and the VLAN being configured to:
rate limit an amount of inbound traffic for each traffic flow in the VLAN, wherein the VLAN is configured to set a certain bandwidth limitation for each traffic flow based on prior knowledge of traffic in the shared physical network by using a monitoring tool that provides an estimation of the required bandwidth and/or by previous knowledge of application demand,
assign a respective priority for each traffic flow in the VLAN, and
allow an information technology traffic flow and an operational technology traffic flow in the shared physical network,
wherein the shared physical network controls an automation system.
6. The VLAN as claimed in claim 5 , configured to perform the rate limiting in one or both of: an access port and a trunk port.
7. The VLAN as claimed in claim 5 , implementing an IEEE 802.1Q Standard.
8. A computer program stored on a non-transitory computer-readable medium and configured for a device controlling a Virtual Local Area Network, VLAN, of a shared physical network, the computer program comprising computer program code, which, when run on processing circuitry of the device causes the device to perform a method of providing a deterministic behavior in the shared physical network, the method including:
rate limiting an amount of inbound traffic for each traffic flow in the VLAN, wherein the rate limiting includes setting a certain bandwidth limitation for each traffic flow based on prior knowledge of traffic in the shared physical network by using a monitoring tool that provides an estimation of the required bandwidth and/or by previous knowledge of application demand,
assigning a respective priority for each traffic flow in the VLAN, and
allowing an information technology traffic flow and an operational technology traffic flow in the shared physical network
wherein the shared physical network controls an automation system.
9. A computer program product comprising:
a non-transitory computer-readable medium, and
a computer program stored on the computer-readable medium and configured for a device controlling a Virtual Local Area Network, VLAN, of a shared physical network, the computer program comprising computer program code, which, when run on processing circuitry of the device, causes the device to perform a method of providing a deterministic behavior in the shared physical network, the method including:
rate limiting an amount of inbound traffic for each traffic flow in the VLAN, wherein the rate limiting includes setting a certain bandwidth limitation for each traffic flow based on prior knowledge of traffic in the shared physical network by using a monitoring tool that provides an estimation of the required bandwidth and/or by previous knowledge of application demand,
assigning a respective priority for each traffic flow in the VLAN, and
allowing an information technology traffic flow and an operational technology traffic flow in the shared physical network,
wherein the shared physical network controls an automation system.