Designing an EFFICIENT NETWORK INFRASTRUCTURE
Workflow design has come a long way from the days of the standalone video production system. News outlets of all sizes and post-production facilities demand workflows that are fully integrated into the various levels of operation, making content simultaneously accessible to all stakeholders in a collaborative environment. (See Figure 1 on page 60.) This requires networked digital video systems and effectively managed content, which is not always easy when working with highly sensitive audio and video assets.
The following network infrastructure design goals are fundamental to improving workflow efficiency:
- Minimize downtime through redundancy, no single point of failure and the resiliency to recover quickly from a failure of any part of the network, with minimum impact on production;
- Maximize network throughput and bandwidth;
- Establish architecture for data storage and data path;
- Set a high standard for information security;
- Tie in all aspects of workflow from ingest to playout;
- Allow for the movement of content in any direction;
- Enable work in various video formats and resolutions;
- Improve tracking and management of audio and video assets;
- Facilitate executive review and approval of content in real time via the network;
- Enable craft editors to access and work with different parts of a project, such as graphics, title and effects, simultaneously; and
- Establish a clear policy for media to be archived.
A highly adaptive digital media network is needed to accomplish these goals. The network combines the next generation of IP switching, routing and security infrastructure, with a digital media creation and management solution. The combination provides an integrated, multiservice IT architecture for digital content production and distribution — maximizing workflow efficiency and business continuity.
The network infrastructure will interact with all layers of the production process, including users, applications, metadata, servers and services. Thus, the storage area network (SAN), the type of network switches, security, Ethernet cables and digital asset management (DAM) system should be well thought out during the design phase. (See Figure 2 on page 62.)
The SAN subsystem has to offer a common view of media resources across the network infrastructure, such as virtualization. It should be designed with a server chassis that has dual integrated switches for redundancy to minimize downtime, easy storage scalability and an open storage networked approach for faster access to content.
The SAN subsystem is the repository for content in a collaborative workflow environment. Therefore, content must be accessible at all times. To achieve this, servers are typically configured with multiple network interface cards (NIC) and dual-homed to the access layer switches for dual connectivity to the content.
Selecting network switches
All gigabit switches are not created equally. The network switches must have the capacity to handle a collaborative workflow with the intelligent movement of high-quality audio and video data across the digital media network, from ingest to playout.
Unlike regular data files, which can be segmented and reassembled, audio and video has to stream sequentially. This requires a network switch with the following features:
- Switching capacity of 136Gb/s and throughput of 102 millions of packets per second (Mpps);
- Agility and highly advanced, programmable, application-specific integrated circuits (ASICs);
- A distributed architecture and throughput;
- Optimized features for superior endpoint-to-endpoint performance; and
- Wired-speed, nonblocking architecture that offers reliability, availability and security to the network.
All switches connecting to the SAN must have:
- Layer 3 capability and 10GigE in order to handle inter virtual local area network (VLAN) routing;
- The ability to manage the high level of throughput; and
- The proper caching mechanism to handle the oversubscription level — which can be caused by the SAN and video application read and write I/O demand on a switch port.
Oversubscription occurs when the amount of internal switching fabric bandwidth allocated to a given switch port is less than the device connection speed at that port. For example, if a port on a switch has a connection speed of 1Gb/s but is unable to achieve wire-rate 2Gb/s of performance, then the port is said to be oversubscribed.
Routing between VLANs and the corporate network can be implemented by static or a dynamic routing protocol. For the purpose of redundancy, the network should be designed with a minimum of two access switches, and they should be configured with a redundancy protocol such as Virtual Router Redundancy Protocol (VRRP).
VRRP eliminates the single point of failure on the network. It also allows each switch to act as the master router for one VLAN and the backup router for another VLAN. In the event of a switch failure, the healthy switches will become the master router for both VLANs, thus keeping the communication path intact.
Securing the network
I once visited a client site and had to go through an extensive process in order to get access to the building. First, I had to clear one guard station, where I was given a token. Then, I had to present the token at a second guard station before I was given permission to enter the building. However, when I got to the server room and logged into the systems, I noticed they did not have any antivirus protection software or firewall for protection from the outside world.
It is important that business operators do not overlook the value of information that's moving over the network. Companies often go to great lengths to protect physical property, but do not discern the importance of protecting creative and intellectual assets.
The digital video system network should be protected with a firewall device that can process data at wire speed. Through the use of security applications and security policies, a network admission control regimen should be in place to inspect all people, applications and systems accessing the network.
Meeting the high I/O demands of video editing applications requires an agile workflow with an IP base solutions infrastructure. The network cable of choice is gigabit Ethernet, also known as GigE or 1000BASE-T. GigE is base Ethernet and Fast Ethernet technology, and it comes in two forms: copper (Cat 5e or Cat 6) and fiber. Ethernet is the network media of choice for a LAN, so by using GigE, network engineers and architects do not need to relearn a new technology in order to implement and provide support for GigE.
A digital media creation solution should be attached to a DAM system that is built around an agile IT application and service infrastructure. The DAM system should possess the following components:
- Lightweight directory access protocol for tight access control and ease of directory browsing, and a cluster server configuration for high availability of the content database;
- An open platform that integrates applications and systems into the production workflow, and supports a wide range of industry standards and application programming interfaces (APIs);
- Content management tools and centralized administration;
- Access to up-to-date project assets and information for people across the organization, including producers, graphic artists, assistant editors, writers, storyboard artists, video and audio editors, directors, archivists, and legal and finance departments;
- Embedded control and communication, with automatic revision tracking, conflict management and integrated messaging — so noneditors can efficiently and accurately log and mark material;
- Task automation for such processes as encoding, transcoding and transfers in the background; and
- Archive tools that improve access while saving online storage space.
Meeting the demand of today's fast-moving workflow requires a highly adaptive, digital media network. (See Figure 3.) The network must intelligently integrate with the IT physical infrastructure and the IT service infrastructure to optimize rich media application management, security and throughput. This seamless integration is necessary to maximize workflow and ensure business continuity.
Dennis M. Glenn is a solutions architect for the Global Client Solutions group at Avid Technology. He is a Cisco Certified Network Professional (CCNP) and a Microsoft Certified System Engineer (MCSE) with more than 10 years of network design and system integration experience.
Get the TV Tech Newsletter
The professional video industry's #1 source for news, trends and product and tech information. Sign up below.