Claim Missing Document
Check
Articles

Found 24 Documents
Search

Analysis of Policy Based Routing (PBR) and Failover in Dual-WAN Networks Daryan Pratama Alifi; Ichwan Nul Ichsan
Aviation Electronics, Information Technology, Telecommunications, Electricals, and Controls (AVITEC) Vol 8, No 1 (2026): February
Publisher : Institut Teknologi Dirgantara Adisutjipto

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.28989/avitec.v8i1.3605

Abstract

Reliance on stable and high-speed internet connectivity is crucial for modern business operations. A failure in a single internet link often leads to significant disruptions in productivity. This study designs and implements a Dual-WAN network architecture utilizing Policy-Based Routing (PBR) combined with an automated failover mechanism on a MikroTik router. Unlike prior studies that primarily employ the Per-Connection Classifier (PCC) Load Balancing method to maximize bandwidth aggregation, this research prioritizes session integrity to minimize disruptions in sensitive applications. To validate the proposed method, a comparative analysis was performed against the conventional PCC method. The results indicate that while PCC yields a higher theoretical aggregated throughput (468.5 Mbps), it suffers from a high session drop rate in secure connections. In contrast, the proposed PBR implementation demonstrates superior connection stability with a maximum throughput of 344.25 Mbps on the primary link, alongside a responsive failover mechanism achieving a recovery latency of under 1000 ms with minimal packet loss (1–2 packets). This study concludes that the PBR architecture provides a more reliable solution compared to standard load balancing for Small Office Home Office (SOHO) and SME environments requiring high availability.
Hyperparameter Tuning of XGBoost for Flooding Attack Detection in SDN-based Vehicular Ad Hoc Networks (VANETs) under Limited Resources Chairunisa Rahma Putri; Galura Muhammad Suranegara; Ichwan Nul Ichsan
Aviation Electronics, Information Technology, Telecommunications, Electricals, and Controls (AVITEC) Vol 8, No 1 (2026): February
Publisher : Institut Teknologi Dirgantara Adisutjipto

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.28989/avitec.v8i1.3510

Abstract

Software-Defined Network (SDN) based Vehicular Ad Hoc Network (VANET) infrastructure network enables centralized vehicle control. However, due to its centralized nature, SDN-based VANET is vulnerable to flooding attacks such as Distributed-Denial of Services (DDoS) or Denial of Service (DoS) attacks that can disrupt network availability and endanger traffic safety. This study aims to detect flooding attacks using the Extreme Gradient Boosting (XGBoost) algorithm with a focus on hyperparameter tuning in a limited computing environment to find optimal hyperparameter values for the model. This study uses basic Google Colab with 12 GB RAM with a total dataset of 431,371 entries. The results obtained from this study conclude that hyperparameter tuning achieves optimal performance at n_estimators = 150 and max_depth = 15, resulting in 99.97% accuracy, 99.99% precision, 99.97% recall, and 99.98% F1 score, which proves the effectiveness of the model in detecting flooding attacks. The novelty of this study lies in the application and evaluation of hyperparameter tuning on the XGBoost algorithm in a resource-constrained environment to improve attack detection in SDN-VANET.
Performance Evaluation of a TP-Link CPE220 Point-to-Point Wireless Backhaul Hashfi Adha Fadhillah; Ichwan Nul Ichsan
SISTEMASI Vol 15, No 6 (2026): Sistemasi: Jurnal Sistem Informasi
Publisher : Universitas Islam Indragiri

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32520/stmsi.v15i6.6284

Abstract

This study aims to implement and evaluate the performance of a point-to-point wireless backhaul network between two buildings using the TP-Link CPE220 based on the IEEE 802.11b/g/n standard in a high-interference environment. The implementation was carried out between two buildings approximately 100 meters apart under line-of-sight (LOS) conditions, where the Internet connection from the office building was distributed to the workshop building through the wireless backhaul and subsequently forwarded via a router and an access point. The network performance was evaluated under four testing scenarios: the wireless backhaul link, the workshop router, the access point under no-load conditions, and the access point under a multi-user environment. Measurements were conducted 15 times during the morning, afternoon, and evening using throughput, delay, jitter, and Received Signal Strength Indicator (RSSI) as the evaluation parameters. The results show that the average download throughput decreased from 95.27 Mbps at the source to 57.13 Mbps across the wireless backhaul and 55.56 Mbps at the unloaded access point. Under the multi-user scenario, where 10 devices simultaneously streamed video content, the average download throughput declined to 11.49 Mbps, while delay and jitter increased to 367.29 ms and 66.69 ms, respectively. The analysis indicates that the performance degradation was primarily caused by reduced signal quality over the backhaul link, interference within the 2.4 GHz frequency band, and increased channel contention under multi-user conditions. Nevertheless, the TP-Link CPE220 was able to provide stable inter-building connectivity for small- to medium-scale network deployments, sustaining throughput exceeding 55 Mbps under normal operating conditions.
Performance Analysis of Docker-based NFV Service Chaining Networks in a Single-Host Environment Rayhan Ziqrul Fitroh; Ichwan Nul Ichsan
SISTEMASI Vol 15, No 2 (2026): Sistemasi: Jurnal Sistem Informasi
Publisher : Universitas Islam Indragiri

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.32520/stmsi.v15i2.5898

Abstract

Network Function Virtualization (NFV) and Service Function Chaining (SFC) enable network functions to be deployed as Virtual Network Functions (VNFs) on flexible commodity servers. However, chaining multiple VNFs within a service chain may degrade data-plane performance, particularly in container-based environments. This study analyzes the performance of container-based SFC in a single-host Docker environment under three scenarios: (1) a direct client–server connection without VNFs (baseline), (2) the addition of a single Layer 3 (L3) VNF in the form of an iptables firewall, and (3) the integration of an L3 firewall VNF combined with a Layer 4 (L4) load balancer VNF based on HAProxy. Performance evaluation was conducted by measuring TCP throughput using iperf3, end-to-end latency using ping, and CPU utilization of each container using docker stats. The results indicate that adding the L3 firewall reduces throughput by approximately 33% and nearly doubles latency compared to the baseline. Meanwhile, incorporating the L4 load balancer causes throughput degradation of up to 92%. CPU utilization analysis shows that the kernel-space firewall introduces minimal additional overhead in user space, whereas the L4 VNF becomes the primary source of CPU saturation. These findings suggest that, in container-based SFC deployments on a single-host Docker environment, performance bottlenecks are primarily driven by user-space L4 VNFs rather than kernel-based L3 forwarding. Therefore, L4 VNFs require special consideration when designing service chaining architectures for resource-constrained edge nodes.