Communication is what DDS is "all about". OpenSplice DDS is used in many very challenging ultra large scale systems where vast amounts of data have to be distributed in real-time to tens of thousands of devices.
Apart from the DDSI comunication service as part of the OpenSplice Core, the following advanced communication addons are available to meet your Data Distribution Service needs:
OpenSplice RTNetworking provides native Real-Time network-scheduling for deterministic large-scale systems.
OpenSplice SecureNetworking provides a secure version (with encryption and access-control) of the OpenSplice RTNetworking service.
-
The OpenSplice RTNetworking service provides essential features for achieving both scalability as well as Real-time determinism in mission-critical systems where important high-priority data must ‘pre-empt’ less-important data.
The OpenSplice RTNetworking architecture supports multiple runtime configured ‘network-channels’ each representing a pre-emptive priority-band inclusive traffic-shaping and data-urgency (Latency-Budget QoS) driven network-packing.
The proper network-channel is automatically chosen based upon the actual importance (Transport_Priority QoS) of published data. The channel-specific traffic-shaping and bandwidth limitation effectively shield faulty and/or misbehaving applications from monopolizing the network resources.
-
The OpenSplice Secure RTNetworking module implements a service of OpenSplice that provides secure data distribution over untrusted networks. Fast and predictable networking between the nodes of the information backbone is an essential part of our solution; so is Information Assurance.
The OpenSplice Secure RTNetworking module is a commercial pluggable service option to the OpenSplice Core infrastructure. The Secure RTNetworking module complements the advanced Real-time networking features by offering a dedicated crypto-channel per network distribution channel between nodes.
The OpenSplice Secure RTNetworking module extends the default “network scheduler” with configurable cryptographic protection per Network Channel implementing the following security properties:- Information exchanged between nodes of the OpenSplice-based information backbone over unsecure networks cannot be eavesdropped or modified without detection while in transit
- Complete, reliable, and readily evaluatable separation between the area in which the information is processed in unencrypted form (RED, on the node) and the area to which critical (classified) information not permitted to flow in unencrypted form (BLACK, network), achieved by means of concentration and restriction of network connectivity to exactly one process on each node
- Information of different classification is cryptographically separated while in transit between different nodes (resulting in stronger separation than labeling only, and no infiltration or exfiltration between different classifications while in transit)
- Information received via the network can only be retrieved in its unencrypted (RED) form on nodes that
- are accredited for the security level of this information and
- host applications that have a need-to-know for the information
- Authenticity of all information exchanged between nodes
This infrastructure security solution ensures Information Assurance (IA) for all DDS-based cooperation and information exchange between the DDS nodes over untrusted communication infrastructures. The Secure Networking module allows the reliable separation of applications with different clearances deployed on different nodes in a way that ensures transparency to the applications, thus supporting full portability.
The OpenSplice Secure RTNetworking module is the first building block for a complete QoS-enabled IA solution offering end-to-end security between all applications (distributed or co-located), including mandatory access control for all data flowing between applications and detailed security audit of application interactions.
