Product Overview

One-NDS Directory

Company Confidential
1
Nokia Siemens Networks

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

Contents

Functionality
Standards
Data access protocols
Directory Server concepts
Architecture
Customer references

Company Confidential
2
Nokia Siemens Networks

CN6500EN80GLA00
Product Overview

CN6500EN80GLA00 Product Overview / 22 April 2009

Company Confidential
NSN

One-NDS Directory Functionality Data Store

Application front ends

(e.g. HLR, AAA, 3rd party)

One-NDS Directory
Provides the back end data store

Company Confidential
3
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

One-NDS Directory is a data store

Can be used by any application that needs to store data.
Used by NSN products (e.g. HLR, AAA) or 3rd party applications

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

One-NDS Directory Functionality - Platform

One-NDS Directory
Provides the platform for the application
(e.g. One-HLR, One-MNP, One-EIR)

One-NDS Directory
Provides the back end data store

Company Confidential
4
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

As well as being a data store One-NDS Directory is also the platform for hosting applications,
providing functionality (e.g. Logging and alarm reporting)
One-NDS Directory platform is used by other SDM applications
One-HLR Home Location Register
One-MNP Mobile Number Portability
One-EIR Equipment Identity Register

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

One-NDS Directory Data Store

DirecTree
The name of the in-memory database
Holds all the information associated with data entries
Based on the ISO/IEC & ITU-T X.500 directory specifications

One-NDS Directory includes mechanisms for managing the

DirectTree

Access control (data access restrictions and permissions)

Memory management
Backup & restore of data
Schema management (data structure & rules)
Alarm management & logging

Company Confidential
5
Nokia Siemens Networks

CN6500EN80GLA00
Product Overview

CN6500EN80GLA00 Product Overview / 22 April 2009

Company Confidential
NSN

X500: A Standards Based Architecture

X.500 is a hierarchical directory structure for organising information
ISO/IEC and ITU defined standards

X500 Directories
Can be geographically dispersed:
Providing redundancy over several sites.
Locating data relevant to a geographic area.

Can cater for potentially billions of entries of information

Can be physically distributed:
Multiple physical servers & sites
Appears as a single logical directory server

The One-NDS Directory X.500 implementation

Provides scalability, resilience and required performance levels
Is an ideal choice for the telecommunications industry
Company Confidential
6
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

One-NDS Directory have been developed using the ISO/IEC (International Organisation for
Standardization/International Electro technical Commission) and ITU (International
Telecommunication Union) standards for X.500.
One-NDS Directory has been designed for telecoms applications where typically a database
needs fast access to potentially millions of subscriber entries.

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

Data Access Protocols

Lightweight Directory Access Protocol (LDAP)
Simplified string-based version of the X500 protocol DAP
Openly available for users to access the directory

Simple Object Access Protocol (SOAP)

Used to invoke actions in external applications when a particular value or

set of values is altered in the database.

One-NDS Directory systems use open standard protocols

Network operators have access to their own data
One-NDS Directory does not use proprietary interfaces

Company Confidential
7
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

LDAP is not specified in the X.500 standards, but is a version of the DAP (Directory Access
Protocol) which is specified by X.500:
DAP is used internally within One-NDS Directory
LDAP is used by applications as to access One-NDS Directory
LDAP is automatically converted to DAP for use within One-NDS Directory
Methods are used to perform a complex sequence of database operations using one
LDAP request, thus simplifying the user interface (i.e. adding subscribers).
Soap notifications can be triggered enabling external applications to be notified of updates to
specific data stored within One-NDS Directory.
Using open non proprietary access protocols allows customers the ability to enable access to
One-NDS Directory using their own existing applications.

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

In Summary

One-NDS Directory is a data store

One-NDS Directory is a platform for applications
Based on X500 standards for directory servers
Open access using standard LDAP

Company Confidential
8
Nokia Siemens Networks

CN6500EN80GLA00
Product Overview

CN6500EN80GLA00 Product Overview / 22 April 2009

Company Confidential
NSN

Directory Concepts
Directory Information Base (DIB)

Root DSA

Set of all data stored in One-NDS Directory

Directory Information Tree (DIT)

Structure of the data

ID type

Service 1

Directory System Agent (DSA)

Subscriber 2

Subscriber 1

Entry

Root

Service 2

Entry

Entry

Subscriber Data DSA 1

Service 1
Entry

Entry

Subscriber Data DSA 2

A cluster of nodes containing a subset of the DIB

Together the DSAs implement the overall directory

Company Confidential
9
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

Directory have a hierarchical structure. Data is stored using parent & child relationships i.e.
one entry is the parent for another entry or entries. Whenever a new entry is created it is
necessary to specify which entry should be the parent of that new entry.
Each DSA stores a subset of the DIB.
The number of nodes within each DSA will differ dependent on transaction requirements.

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

DSA Architecture
Directory System Agent (DSA)
DSA

A DSA is a cluster of synchronised

Nominated secondary
(Primary standby)

Primary

physical nodes/servers

Each node in a cluster holds an identical

copy of the data contained within the DSA

Any node within the cluster may receive

read and update requests from external
directory users

The Primary node ensures all updates are

applied to all nodes to maintain data
consistency

Secondary

Redundancy
Within a DSA: loss of a node does not mean loss of service
Company Confidential
10
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

Redundancy within a DSA, loss of a node does not mean loss of service as all data is
replicated on each node.
Any node within a DSA can respond to a database query or update
To maintain data consistency, updates are always passed to the Primary node within a DSA,
the primary node performs the update and replicates changes to all other nodes,
In a normal functioning DSA:
One node will be designated as the Primary
All other nodes will be designated as Secondary's
One Secondary node will be designated as Primary Standby
The number of nodes within each DSA will differ dependent on transaction requirements.

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

10

Distributed Directory Architecture

Root DSA provides a single point of
contact for other systems (e.g. provisioning
system) and greatly simplifies the task of
extending the directory.

Root DSA

Back Ends hold the subscriber data.

BE DSA 2

BE DSA 1

Routing DSAs an internal identity routing

function: identifies the subscriber then
passes request to correct Back End where
subscriber data is held.

Routing DSA
Routing
DSA

Front Ends provide the network interfaces

and execute the application logic.
Application Front Ends (HLR, HSS etc)

Redundancy
Within a DSA: loss of a node does not mean loss of service
Company Confidential
11
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

Different DSAs may have different roles within the system

Routing DSAs, allow for greater distribution of data among multiple BE DSAs
The routing of queries is done using an identity (e.g. subscriber IMSI or MSISDN
The greater the number of entries (e.g. subscribers) the greater the number of identities that
need to be stored therefore the greater the number of BE DSAs required.
Multiple BE DSAs necessitate the requirement for Routing DSAs

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

11

Site Architecture

Site 1

Site 3

Site 2
Front End Nodes

Back End Nodes

Routing Nodes

Root Nodes

Redundancy
Across geographic sites: loss of a site does not mean loss of service

Company Confidential
12
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

Locating nodes from each DSA on different geographic sites provides system redundancy
should a site be lost.

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

12

Transparent Scalability
Back End DSA

Back End DSA

Back End DSA

Back End DSA

Back End DSA

Back End DSA

Routing DSA

Routing DSA

Routing DSA

Increased ID
Capacity

Routing DSA
Front End DSA

Front End DSA

Distributed
Architecture

Front End DSA

Increased Data
Capacity

Back End DSA

Back End DSA

Back End DSA

Add more Back End DSAs for increased data capacity

Add more Routing DSAs for increased ID capacity

Routing DSA

Routing DSA

Add more Front End nodes for transaction capacity

Increased
Transaction
Capacity

Front End DSA

Company Confidential
13
Nokia Siemens Networks

CN6500EN80GLA00 Product Overview / 22 April 2009

When adding routing DSAs there is also a requirement to migrate data (IMSI & MSISDN
entries) from original routing DSA to the new routing DSA.

CN6500EN80GLA00
Product Overview

Company Confidential
NSN

13

In Summary

Directory Server concepts

Directory Information Base (DIB)
Directory Information Tree (DIT)
Directory System Agent (DSA)

Architecture

DSA architecture
Data distribution
Scalability
Redundancy

Company Confidential
14
Nokia Siemens Networks

CN6500EN80GLA00
Product Overview

CN6500EN80GLA00 Product Overview / 22 April 2009

Company Confidential
NSN

14

Scalability and performance

North American Carrier, Proof of Concept December 2006

Requirements
Site 2:
domains and
subscriber
data DSAs

A unified subscriber profile repository

Scalability
Real-time performance and

Injectors and
routing DSAs

continuous availability

Flexibility and adaptability

Performance achieved
250 million subscribers
0.5 TB subscriber data
180,000 tps (20% updates)
1.97 ms average response time

Company Confidential
15
Nokia Siemens Networks

CN6500EN80GLA00
Product Overview

Site 1: domains
and subscriber
data DSAs

Hardware configuration
Sun X4100 (AMD Opteron), 32 GB RAM
Up to 14 Front-End servers

Sun X4600 (AMD Opteron), 64 GB RAM

Up to 26 Back-End servers
Up to 10 Identity/root domains

CN6500EN80GLA00 Product Overview / 22 April 2009

Company Confidential
NSN

15