Sandvine

Infobox_Company
company_name = Sandvine Incorporated
company_
company_type = Public
tsx|SVC
aim|SAND
company_slogan = Intelligent Broadband Networks
foundation = Waterloo, Ontario (2001)
key_people = Dave Caputo, Co-Founder, President and CEO
Scott Hamilton, CFO
Tom Donnelly, Co-Founder, EVP Marketing & Sales
Brad Siim, Co-Founder, COO and VP Engineering
Don Bowman, Co-Founder, CTO
| location = Waterloo, Ontario
num_employees = 350+ (Q1 2008)
industry =
products =
revenue = $73.7M (2007)
homepage = [http://www.sandvine.com/ www.sandvine.com]

Sandvine Incorporated (tsx|SVC, aim|SAND), is a networking equipment company based in Waterloo, Ontario, Canada.Sandvine products are designed to implement broad network policies, ranging from service creation [ [http://www.sandvine.com/news/pr_detail.asp?ID=100 Sandvine Incorporated: Press Release - StarHub Selects Sandvine to Deploy End-to-End PacketCable MultiMedia™ Solution ] ] through billing [ [http://www.sandvine.com/news/pr_detail.asp?ID=148 Sandvine Incorporated: Press Release - Major Wireless Carrier Selects Sandvine’s 10-Gigabit Ethernet Solution to Give Subscribers More Control over their Mobile Internet Experience ] ] through congestion management through security [ [http://www.thefreelibrary.com/Adelphia+Selects+Sandvine+to+Protect+Subscribers+from+Worms+and+Spam.-a0139417017 Adelphia Selects Sandvine to Protect Subscribers from Worms and Spam. - Free Online Library ] ] . Sandvine targets its products at tier-1 (defined as more than 1 million subscribers) consumer broadband providers, including cable, DSL, and mobile.

Company history

Sandvine was formed in August 2001 in Waterloo, Ontario, Canada, by a team of approximately 30 people from a recently closed Cisco acquisition, PixStream. An initial round of VC funding launched the company with $20M (Cdn). A subsequent round of financing of $19M (Cdn) was completed in May 2005.

In March 2006 Sandvine completed an initial public offering on the London AIM exchange under the ticker 'SAND'. In October 2006 Sandvine completed an initial public offering on the Toronto stock exchange under the ticker 'SVC'.

In June 2007, Sandvine purchased Simplicita and has been integrating Simplita's DNS services into its range of products and services.In June 2007, Sandvine purchased CableMatrix, forming the Service Delivery Business Unit (SDBU).

Initial product sales focused at congestion management as operators struggled with the high growth of broadband. As growth rates slowed down at the end of 2006, operators have shifted focus to revenue generating services and operational expenditure.

Technology

Sandvine's spam-source detection is novel in that it searches for 'sources of spam' rather than messages which are spam in content. The algorithm is documented in Sandvine's patent [ [http://www.freepatentsonline.com/EP1743466.html A SYSTEM AND METHOD FOR DETECTING SOURCES OF ABNORMAL COMPUTER NETWORK MESSAGES - Patent EP1743466 ] ] [ [http://www.wipo.int/pctdb/en/wo.jsp?wo=2005109816 (WO/2005/109816) A SYSTEM AND METHOD FOR DETECTING SOURCES OF ABNORMAL COMPUTER NETWORK MESSAGES ] ] applications, focusing on behaviours inherent to spamming (e.g. using multiple SMTP servers, using multiple source (EHLO) domains, large address books, and other metrics).

Another aspect of Sandvine's technology which is novel is a gnutella-focused P2P path optimizer [ [http://www.wipo.int/pctdb/en/wo.jsp?wo=2003094465 (WO/2003/094465) PATH OPTIMIZER FOR PEER TO PEER NETWORKS ] ] . Bringing the path-costing of the physical topology into the P2P overlay topology allows a mode where congestion is reduced while still delivering the same content and bandwidth to each user. This is a form of least-cost-path routing using content (i.e. file hash) as the destination rather than layer 3 address.

End-to-end policy and quality of service control is enabled via Sandvine's Service Delivery Engine [ [http://www.sandvine.com/products/service_delivery_engine.asp Sandvine Incorporated: Service Delivery Engine ] ] [ [http://www.newswire.ca/en/releases/archive/October2006/10/c6288.html CNW Group | VECIMA NETWORKS INC. | CableMatrix and VCom Showcase First QoS Enhanced Video Conferencing over WiMAX Solution ] ] . This unified policy management allows for guaranteed quality of service for media applications such as video conferencing, VoIP, gaming, interacting with the access and core network. The SDE provides IP Multimedia Subsystem (IMS) standard interfaces, 3GPP standard interfaces, and CableLabs standard interfaces, as well as various Session Border Controller and VoIP softswitch interfaces.

The sandvine "monitoring tool ... [sits] in the middle, imitating both ends of the connection, and sending reset packets to both client and server." [ [http://arstechnica.com/news.ars/post/20071021-comcast-traffic-blocking-even-more-apps-groupware-clients-affected.html Comcast traffic blocking: even more apps, groupware clients affected ] ]

They call this approach "Stateful Policy Management" [http://www.sandvine.com/general/getfile.asp?FILEID=16 "Meeting the Challenge of Today's Evasive P2P Traffic"] ] which works by using stateful deep-packet inspection and packet spoofing. This technique allows the networking device to determine the details of the p2p conversation, including the hash requested. The device can then alter the traffic to augment the algorithms the protocol uses to determine the optimal peer to use, and instead substitute a more optimal peer that is preferable by L3 routing distance. In addition, the device can be used to introduce a network bias in the p2p traffic by allowing internal users to make requests to an external network, but " [turn] away requests from external users", making the entire network a leech.

Controversy

Sandvine is reportedly being used by Comcast in the United States to slow down Internet traffic. Notably a lawsuit [ [http://blog.wired.com/27bstroke6/files/hart_v_comcast.pdf Hart Vs. Comcast] ] was filed against Comcast [ [http://blog.wired.com/27bstroke6/2007/11/comcast-sued-ov.html Comcast lawsuit at Wired.com] ] in November 2007, alleging that Comcast was blocking legal Internet use.

According to independent testing [ [http://www.eff.org/deeplinks/2007/10/comcast-also-jamming-gnutella-and-lotus-notes eff.org article on Comcast jamming Gnutella and Lotus] ] , Comcast injects forged reset packets into peer-to-peer connections, which effectively causes the connections to immediately terminate. This method of network management was described in the IEEE Communications, May 2000 article "Nonintrusive TCP Connection Admission Control for Bandwidth Management of an Internet Access Link" [ [http://www.comsoc.org/ci/public/2000/may/index.html IEEE Communications Interactive ] ] [ [http://www.comsoc.org/ci/private/2000/may/Kumar.html Nonintrusive TCP Connection Admission Control for Bandwidth Management of an Internet Access Link ] ] .

A product whitepaper published by Sandvine confirms that its products are configurable to use "Session Management" capability to reduce customers using BitTorrent from providing downloads to peers who are not close to them on the network. This same capability, however, affects legal uses of BitTorrent (such as open-source project distribution or patch distribution).

In cases where a subscriber is a “seeder” and uploads content to an off net “leecher”, session management is an effective strategy... the subscriber may be session managed without negative impact. This is the default behaviour for Sandvine’s session management policy and limits external leechers from connecting to internal seeds. [Session Management: BitTorrent Protocol - Managing the Impact on Subscriber Experience http://www.sandvine.com/general/getfile.asp?FILEID=21]

References

ee also

*Deep packet inspection

External links

* [http://www.sandvine.com Sandvine]
* [http://slashdot.org/article.pl?sid=07/10/19/1417238 Slashdot: Comcast filtering network packets]
* [http://www.dslreports.com/forum/r18323368-Comcast-is-using-Sandvine-to-manage-P2P-Connections Dslreports: Comcast is using Sandvine to manage P2P Connections]
* [http://www.comsoc.org/ci/private/2000/may/Kumar.html http://www.comsoc.org/ci/private/2000/may/Kumar.html]