Network Geographics - Data Control

Data Control

One recurring theme in our projects is networking and the control of data. This control includes both traditional security-oriented prohibitisions and performance-oriented shaping.

Security Control

We have developed and managed firewalls and IPSec gateways since the early days of both technologies. We are experienced with the standard elements of network security including firewalls, VPNs, wireless security and intrusion detection.

Specfically, we have worked with network security technologies from the following companies:

Cisco (PIX, ASA, IOS)
Juniper (netscreen, JunOS)
Checkpoint
Snort
netfilter (iptables)

With a deep understanding of firewall and network security technologies, Network Geographics is uniquely well positioned to assist customers in migrating from one security vendor's technology to another vendor's technogly. Network Geographics has developed analysis technolgy that enables the automation of much of the conversion, so the result is acquired faster and is more accurate compared to conversions done by hand without tools.

Our technological advantage means that not only are our results fast and accurate, we can also offer very competitive rates. Contact us for further details or a quote.

Traffic Engineering

We have developed caching systems for both standard web traffic and peer-to-peer traffic such as bittorrent. One of our team members is an active program committee member for Apache Traffic Server (ATS). We have worked with bittorrent using both the original TCP based protocol and the newer uTP protocol.

By caching popular content, our clients get the best of both worlds, making their customers happy by delivering content in a timely manner and improving the utilization of their network pipes by not needlessly redelivering the same content again and again.

We have worked with netfilter's quality of service tools including tc, iptables, and ebtables. The netfilter and iproute2 infrastructure gives a very rich set of functionality to control how data packets should be allocated across limited network bandwidth.