Implementing the Availability Model of a Software-Defined Backbone Network in Möbius
IImplementing the Availability Model of aSoftware-De fi ned Backbone Network in M ¨obius (Technical Report) Gianfranco Nencioni, Bjarne E. Helvik and Poul E. Heegaard
Department of Information Security and Communication Technology,NTNU – Norwegian University of Science and Technology, Trondheim, Norway { gianfranco.nencioni, bjarne.e.helvik, poul.heegaard } @ntnu.no Abstract —Software-de fi ned networking (SDN) promises to im-prove the programmability and fl exibility of networks, but itmay bring also new challenges that need to be explored. Oneopen issue is the quantitative assessment of the properties ofSDN backbone networks to determine whether they can providesimilar availability to the traditional IP backbone networks. Toachieve this goal, a two-level availability model that is ableto capture the global network connectivity without neglectingthe essential details and which includes a failure correlationassessment should be considered. The two-level availability modelis composed by a structural model and the dynamic models ofthe principal minimal-cut sets of the network. The purpose ofthis technical report is to extensively present the implementationon M¨obius of the Stochastic Activity Network (SAN) availabilitymodel of the network elements and the principal minimal-cut setsof a SDN backbone network and the corresponding traditionalbackbone network. I. I
NTRODUCTION
During the recent years, the SDN has emerged as a newnetwork paradigm, which mainly consists of a programmablenetwork approach where the forwarding plane is decoupledfrom the control plane [1], [2]. Despite programmable net-works having been studied for decades, SDN is experiencing agrowing success because it is expected that the ease of chang-ing protocols and provide support for adding new servicesand applications will foster future network innovation, whichis limited and expensive in todays legacy systems.A simpli fi ed sketch of the SDN architecture from IRFTRFC 7426 [1] without the management plane is depicted inFigure 1. The control plane and data plane are separated. Herethe control plane is logically centralised in a software-basedcontroller (“network brain”), while the data plane is composedof the network devices (“network arms”) that conduct thepacket forwarding.The control plane has a northbound and a southbound inter-face. The northbound interface provides an network abstractionto the network applications (e.g. routing protocol, fi rewall, loadbalancer, anomaly detection, etc...), while the southbound in-terface (e.g. OpenFlow) standardises the information exchangebetween control and data planes.In [3], the following set of potential advantages of SDNwere pointed out: • centralised control; • simpli fi ed algorithms; ����������������������� ������������������������������������������ ������������� ������������� ������������������ ������������������ ������������������ �������������������������������������� Fig. 1: SDN architecture (exclusive the management plane) • commoditising network hardware; • eliminating middle-boxes; • enabling the design and deployment of third-party appli-cations.However, from a dependability perspective, the SDN posesa set of new vulnerabilities and challenges compared withtraditional networking, as discussed in [4]: • consistency of network information (user plane stateinformation) and controller decisions; • consistency between the distributed SDN controllers inthe control plane; • increased failure intensities of (commodity) network ele-ments; • compatibility and interoperability between general pur-pose, non-standard network elements • interdependency between path setup in network elementsand monitoring of the data plane in the control plane; • load sharing (to avoid performance bottleneck) and faulttolerance in the control plane have con fl icting require-ments;In [5], a two-level availability model has been proposedin order to capture the global network connectivity withoutneglecting the essential details and which includes a failurecorrelation assessment. The two-level availability model isomposed by a structural model and the dynamic models of theprincipal minimal-cut sets of both the SDN backbone networkand the corresponding traditional backbone network.The purpose of this technical report is the detailed presen-tation of the implementation on M¨obius [14] of the Stochas-tic Activity Network (SAN) availability model of both thenetwork elements and the principal minimal-cut sets. Thesemodels have been used in [5]In Section II, we introduce the nation-wide backbone net-work that has been used for computing the principal minimal-cut sets. The SAN models of the network elements and theprincipal minimal-cut sets are presented in Section III and Sec-tion IV, respectively. Finally, the conclusions are summarizedin Section V. II. M ODEL CASE STUDY
In this technical report and in [5], we consider a nation-wide backbone network that consists of 10 nodes across 4cities, and two dual-homed SDN controllers. See Figure 2for an illustration of the topology. The nodes are located inthe four major cities in Norway, Bergen (BRG), Trondheim(TRD), Stavanger (STV), and Oslo (OSL). Each town hasduplicated nodes, except Oslo which has four nodes (OSL1and OSL2). The duplicated nodes are labelled, X and X ,where X =OSL1, OSL2, BRG, STV, and TRD. In additionto the forwarding nodes, there are two dual-homed SDNcontrollers (SC and SC ), which are connected to TRD andOSL1. ���� ��������������� ���� � ��� � ��� � �� � ���� � ���� � ��� � ��� � ��� � ��� � �� � ���� � ��������������������������������������������������������� ������������������� �������������������������������� Fig. 2: Nation-wide backbone networkGiven this network, for computing and comparing thenetwork availability of SDN with a traditional IP networkwe need to calculate the availability of the single networkelements [12] or of the principal minimal-cut sets [5]. III. SAN
MODEL OF THE NETWORK ELEMENTS
In the following, we present the SAN models of the net-work elements: links (which are the same in both SDN andtraditional network), traditional IP routers, SDN switches, andSDN controllers.
A. Link
The model of a link is assumed to be dominated by physicallink failures. Therefore, a simple two-state Markov modelis used. Figure 3 shows the SAN representation. The linksFig. 3: SAN model of a linkare either up or down due to hardware failure. We use thesame model for both traditional network and SDN. Givenfailure rate λ L and repair rate µ L , the availability of a linkis A L = µ L λ L + µ L . This model is assumed for each of thelink components in the structural model. We don’t know thegeographical location of the nodes and therefor the distancebetween them either, which implies that the length of the linksconnecting the nodes in the network can’t be determined.Hence, in our case studies we have to assume that the linkfailure rate is not dependent of the link length. Note that ingeneral the failure rate is expected to be proportional to thelength of the link. B. Traditional IP router
The SAN model of a traditional router is depicted inFigure 4. In the model we focus on the router functionalitiesand the related failure sources, each component of the routerhas not been considered because it would be dependent ona particular router architecture. In any case, we assume 1+1redundancy of the controller hardware, which is a commonbest practice in any architecture. Multiple failures are notincluded in the model since they are assumed to be lessfrequent and will probably not have signi fi cant impact on theexpected accuracy of the approach.The SAN model of the traditional router is composed ofeight places: • Working represents the state when the system is fullyworking and it is initialized with one token; • failed MAN is equal to 1 when there is a failure of theOperation and Management (O&M), 0 otherwise; • spare CHW represents the state when one of the tworedundant control hardware is failed but the other one iscorrectly working; • sys down is a coverage state and is equal to 1 if there isan unsuccessful activation of the stand-by hardware aftera failure (manual recovery). • failed CHW represents the state when both controllershas an hardware failure;ig. 4: SAN model of a traditional IP router • failed SW is equal to 1 when there is a software failure,0 otherwise; • failed FHW represents the state when there is a perma-nent hardware failure in forwarding plane • failed FHWt represents the presence of a transient hard-ware failure in forwarding plane;The router is failed when the token is not in Working or spare CHW .The places are connected by mean of the following timedactivities with exponential time distribution: • MAN F and
MAN R represent the failure and the recov-ery events of the O&M with a rate of λ dO and µ dO ,respectively; • CHW F represents the failure event of the control hard-ware with a rate of λ dC and there are two cases,with probability C dC a token is put into spare CHW ,otherwise (with probability − C dC ) the system is notable to manage the control hardware failure and thesystem goes down; • CHW F2 represents the failure event of the spare controlwith a rate of λ dC ; • CHW R and
CHW R2 represent the recovery of thecontrol hardware with a rate of µ dC ; • UCHW R represents the recovery after an unsuccessfulactivation of the stand-by hardware with a rate of µ dUC ; • SW F and
SW R represent the failure and the recoveryevents of the software with a rate of λ dS and µ dS ,respectively; • FHW F and
FHW R represent the permanent failure andthe recovery events of the forwarding hardware with arate of λ dF and µ dF , respectively; TABLE I: Model parameters for the IP network with numericalvalues used in the case studies intensity [time] description / λ L = 4 [months] expected time to next link failure /µ L = 15 [minutes] expected time to link repair / λ dF = 6 [months] expected time to next permanent for-warding hardware failure /µ dF = 12 [hours] expected time to repair permanent for-warding hardware / λ dFt = 1 [week] expected time to next transient for-warding hardware failure /µ dFt = 3 [minutes] expected time to repair transient for-warding hardware / λ dC = 6 [months] expected time to next control hardwarefailure /µ dC = 12 [hours] expected time to repair control hard-ware / λ dS = 1 [week] expected time to next software failure /µ dS = 3 [minutes] expected time to software repair / λ dO = 1 [month] expected time to next O&M failure /µ dO = 3 [hours] expected time to O&M repair /µ dUC = 8 [hours] expected time to recover from uncov-ered control hardware failure C dC = 0 . coverage factor TABLE II: Model parameters for the SDN switch intensity description λ F = λ dF intensity of permanent hardware failures µ F = µ dF repair intensity of permanent hardware failures λ Ft = λ dFt intensity of transient hardware failures µ Ft = µ dFt restoration intensity after transient hardwarefailures λ sS = 0 intensity of software failure • FHWt F and
FHWt R represent the transient failure andthe recovery events of the forwarding hardware with arate of λ dF t and µ dF t , respectively;All the model parameters are de fi ned in Table I. Notethat for sake of simplicity we have assumed homogeneousequipment. The table includes the numerical values used in thecase studies and that are inspired by and taken from severalstudies [9], [10], [11]. C. SDN switch
Figure 5 shows the model of the switch in an SDN, whichis signi fi cantly simpler than the router in a traditional network.The states related to the control hardware failures are notcontained in this model, since all the control logic is locatedin the controller. O&M associated with the SDN switch hasbeen also omitted because we assume that the complexity ofthe O&M operations done on a single switch is likely to besmall relative to a router and globally in the controller. Thesoftware is still present but its failure rate will be very lowsince the functionality is much simpler.Table II describes the parameters for modelling the SDNswitch.All SDN parameters are expressed relative to the parametersfor the traditional network (Table I). In an SDN switch,the failure/repair intensities of (permanent/transient) hardwarefailures are the same because failures with the same cause,ig. 5: SAN model of a SDN switchhave the same intensities in both models. However, we assumethat the software on an SDN switch will be much lesscomplicated than on a traditional IP router because the controllogic has been moved to the controllers, and we have set thefailure rate to zero, for the sake of simplicity. D. SDN controller
The SDN controller has been modelled with the SAN modeldepicted in Figure 6. We have assumed that the SDN controlleris a cluster of M processors and the system is working, i.e.,possesses suf fi cient capacity if K out of the M processorsare active, which means that both software and hardware areworking. The other main assumptions of the model are: • single repairman for a hardware failure; • load dependency of software failure when the system isworking, λ S ( N a ) = λ S /N a , where N a is the number ofactive processors; • when the entire system fails, only processors failed due tohardware failures will be down until the system recovers; • load independence of software failure when the systemhas failed, λ S ( N a ) = λ S , since the remaining unfailedprocessors are working at the full capacity.The SAN model of the SDN controller is composed of sixplaces: • Active proc represents the number of active processorsand it is initialized to the total number of processors; • failed MAN is equal to 1 when there is a failure of theO&M, 0 otherwise; • failed SW represents the number of processors where thesoftware has failed; • failed HW represents the number of processors where thehardware has failed; • sys down is a coverage state and is equal to 1 if thehardware failure in one processor forces all the systemto be down; • sw sys down is a coverage state and is equal to 1 if thesoftware failure in one processor causes the crash of allthe processors. Fig. 6: SAN model of SDN controllerThe places are connected by mean of the following timedactivities with exponential time distribution: • MAN F and
MAN R represent the failure and the recov-ery of the O&M with a rate of λ O and µ O , respectively; • SW F represents the failure of the software with a rateof λ S , if the number of active processors is at least K , or N a λ S , otherwise; there are two cases, withprobability C S a token is put into failed SW (if there areenough working processors, the system is still working),otherwise (with probability − C S ) the system is notable to manage the software failure and the system goesdown; • SW R represents the recovery of the software with a rateof µ S ; • USW R represents the recovery of the software crash witha rate of µ US ; • HW F1 represents the failure of the hardware of theactive processors with a rate of N a λ H and there aretwo cases, with probability C C a token is put into failed HW (the hardware is failed but if there are enoughworking processors, the system is working), otherwise(with probability − C C ) the system is not able to managethe hardware failure and the system goes down (note thatif there is already a token in failed MAN or sys down ,the token is forced to be put in failed HW ); • HW F2 represents the failure of the hardware of theprocessors with a failed software with a rate of N s λ H ,where N s is the number of token in failed SW ; • HW R represents the recovery of the hardware with a rateof µ H ; • UHW R represent the recovery after an unsuccessfulactivation of the stand-by hardware with a rate of µ UH ;ABLE III: Model parameters for the SDN controller intensity description λ H = α H λ dC N/K intensity of hardware failures µ H = µ dC hardware repair intensity /µ UH = 0 . h restoration time after uncovered hardware fail-ure λ S = α S λ dS N intensity of software failures µ S = µ dS restoration intensity after software failure /µ US = 0 . h restoration time after uncovered software fail-ure λ O = α O λ dO N intensity of O&M failures µ O = µ dO recti fi cation intensity after O&M failures C H = C dC hardware failure coverage factor C S = 0 . software failure coverage factor Furthermore, the following input and output gates are in-cluded: • IG MAN enables the O&M failure activity only ifthere are no tokens in failed MAN , sys down , and sw sys down ; • IG SW enables the software failure activity only if thereare no tokens in failed MAN , sys down , sw sys down ,and there are active processors and implies the decreaseof the number of active processors; • OG MAN and
OG SSD resets the number of softwarefailures and sets the number of active processors tothe total number of processors minus the number ofprocessors with failed hardware; • OG SD increases the number of failed hardware, resetsthe number of software failure, and sets the number ofactive processors to the total number of processors minusthe number of processors with failed hardware.In the proposed model the system is down where the numberof tokens in
Active proc is lower than K or there is a tokenin failed MAN , in sys down , or in sw sys down .The parameters the SDN controller model are listed inTable III.In an SDN controller, all failure rates are N -times largerthan in the traditional network, where N is the number ofnetwork nodes (10 in the addressed nation-wide backbonenetwork). This is because we assume that the SDN needsroughly the same processing capacity and amount of hardwarethan in the traditional network. Therefore, the failure intensityis assumed to be proportional to N , and of the same orderof magnitude as the total failure intensity of the traditionaldistributed IP router system. For the hardware failures thetotal failure intensity is divided by the number of neededprocessors K = � . · M � , where M = N is the total numberof processors. Moreover, we set the proportionality factors α H , α S , and α O as follows by basing on previous work [12]: α H = 1 , α S = 1 , α O = 0 . , and α C = 1 .IV. SAN MODEL OF THE PRINCIPAL MINIMAL - CUT SETS
In [5], we have determined the minimal-cut sets for the dif-ferent networks (TN: traditional network, F-SDN: forwardingpart of SDN, C-SDN: control part of SDN), then we have identi fi es the principal minimal-cut sets, i.e. the ones withlower cardinality, (see Table IV).Successively, we have evaluated which are the the failurecorrelation sources among the elements composing the prin-cipal minimal-cut set. Table V maps the failure correlationsources to the elements composing the 12 kinds of minimal-cut sets (4 for the traditional network, 8 for the SDN).The considered failure correlation sources are the following:Geographical Proximity (GEO), Physical Proximity (PHY),Common O&M (COM), Miscon fi guration (MIS), Compati-bility Issue (CIS), Homogeneous Equipment (HEQ), Traf fi cMigration (TMI).TABLE V: Type of minimal-cut sets for the different networksvs failure correlation source type network GEO PHY COM MIS CIS TMI HEQ { n,n } TNF-SDNC-SDN { n,n,n } TNF-SDNC-SDN { n,n,l } TNF-SDNC-SDN { n,l,l } TNF-SDNC-SDN
For modelling the availability of the minimal-cuts sets,in [5] we have used a modular and systematic approach tocompose the SAN model of the network elements. In thecomposition, for considering the failure correlation among thenetwork elements we have ”added“, ”modi fi ed“, or ”merged“dependency models. In particular, we have added for GEO,PHY, MIS, and CIS, modi fi ed for TMI and HEQ, and mergedfor COM.Table VI shows the parameters related to the failure corre-lation. In [13], the authors discovered that around of the 10%failures are actually multiple simultaneous failures. Based onthis consideration we have consider an intensity of the corre-lated failures that is ten times lower than the ”original“ one.In particular, the ”original“ intensity of the GEO, PHY, MIS,and CIS are related to the permanent forwarding hardwareor link (depending on the correlated elements), link, O&M,and SDN controller software, respectively. Since the COMfailure is a merge failure correlation, we have considered afailure intensity equal to the intensity of distributed O&Mfailure. For the GEO and CIS recovery, we have considereda rate three times lower than the ”original“ rate since theyneed more time for restoring from the failure source (e.g.blackout) or to discover the origin of the failure. Instead,for the PHY, MIS and COM recovery, the rate for restor-ing the single element as been considered. Moreover, forconducting our sensitivity analysis we use the multiplicativeABLE IV: Principal minimal-cut sets (2 and 3 cardinality) for the different networks cardinality type TN & F-SDN C-SDN2 { n,n } { n BRG , n BRG } { n SC , n SC }{ n STV , n STV }{ n TRD , n TRD } { n,n,n } { n BRG , n STV , n TRD } { n OSL , n OSL , n SC }{ n BRG , n STV , n TRD }{ n,n,l } { n BRG , n STV , l TRD − BRG } { n OSL , n SC , l OSL − SC }{ n BRG , n TRD , l STV − BRG } { n OSL , n SC , l OSL − SC }{ n BRG , n STV , l TRD − BRG } { n SC , n TRD , l TRD − SC }{ n BRG , n TRD , l STV − BRG } { n SC , n TRD , l TRD − SC }{ n,l,l } { n BRG , l STV − BRG , l TRD − BRG } { n SC , l OSL − SC , l OSL − SC }{ n BRG , l STV − BRG , l TRD − BRG } { n SC , l TRD − SC , l TRD − SC } TABLE VI: Model parameters for failure correlation sources intensity description λ GEO = α GEO λ FHW intensity of geographical-spread failure µ GEO = µ FHW / repair rate after a geographical-spread fail-ure λ PHY = α PHY λ L / intensity of physical-spread failure µ PHY = µ L repair rate after a physical-spread failure λ COM = α COM λ dO failure intensity caused by a shared O&M µ COM = µ dO recovery rate from a shared-O&M failure λ MIS = α MIS λ O / miscon fi guration failure intensity µ MIS = µ O intensity to recover from a miscon fi gura-tion failure λ CIS = α CIS λ S / failure intensity caused by a compatibilityissue among different elements µ CIS = µ S / recovery rate from a incompatibility failure C TMI = 0 .
95 + β TMI coverage factor for considering failures in-duced by traf fi c migration C HEQ = 0 .
99 + β HEQ coverage factor for taking into accountfailures due to homogeneous equipment factors α GEO , α P HY , α MIS , α COM , and α CIS and theaddends β T MI and β HEQ . In particular we have considered α GEO,P HY,MIS,COM,CIS ∈ { i } i = 0 , ± , ± , β T MI ∈ {± . , ± . , } , and β HEQ ∈ {± . , } .In the remainder of the section, we brie fl y describe the SANmodel of the principal minimal-cut sets, for further details thereader can fi nd the M¨obius documentation in the appendix. A. { n, n } in TN Figure 7 depicts the SAN model of { n, n } in TN, wherethe two routers are in the same city ( GEO ), share the O&M(
COM ), and if one fails all the traf fi c is managed by the otherone ( TMI ). The SAN model is composed of the SAN of thetwo routers ( * S1 and * S2 ), where the single O&M failureplaces have been deleted and the following places are added: • GEO is equal to 1 when there is a GEO failure, 0otherwise; • failed MAN is equal to 1 when there is a COM failure,0 otherwise.The places are connected by mean of the following timedactivities with exponential time distribution: • MAN F and
MAN R represent the failure and the re-covery of the common O&M with a rate of λ COM and µ COM , respectively; • GEO F and
GEO R represent the failure and the recov-ery from GEO failure with a rate of λ GEO and µ GEO ,respectively.For considering the
TMI failure, the
SW F , FHW F , FHWt F , CHW F2 time activities of the two routers are mod-i fi ed by creating two cases: if both routers are working, withprobability C T MI only one router is failing and instead withprobability − C T MI both the routers are failing, otherwiseonly one router is failing.Furthermore, the following input and output gates are in-cluded: • IG GF and
IG MF enable the GEO and COM failureactivities only if there in a token in both
Working S1 and
Working S2 , i.e. both routers are working, and reset thetoken in both
Working S1 and
Working S2 ; • OG GF and
OG MF set the token in both
Working S1 and
Working S2 again; • OG SW , OG FHW , OG FHWt , and
OG CHW resetthe token in both
Working S1 and
Working S2 and set failed SW , failed FHW , failed FHWt , and failed CHW ,respectively, of both routers.The minimal-cut set is unavailable when there are nottoken in Working S1 , Working S2 , spare CHW S1 , and spare CHW S2 .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A6 and B8, respectively. B. { n, n } in F-SDN Figure 8 shows the SAN model of { n, n } in F-SDN, wherethe two SDN switches ( * S1 and * S2 ) are in the same city( GEO ), if one fails all the traf fi c is managed by the other one( TMI ), and share a common con fi guration ( MIS ). The SANmodel is similar to the one for the two routers (see Figure 7):there is not the part related to the control hardware and thereis the MIS failure instead of the COM failure.The minimal-cut set is unavailable when there are not tokenin
Working S1 and
Working S2 .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A10 and B12, respectively.ig. 7: SAN model of { n, n } in TNFig. 8: SAN model of { n, n } in F-SDNig. 9: SAN model of { n, n } in C-SDN C. { n, n } in C-SDN Figure 9 depicts the SAN model of { n, n } in C-SDN, wherethe two SDN controllers share a common con fi guration ( MIS )and if one fails the other one takes over the control (
TMI ).The SAN model is composed of the SAN of the two SDNcontrollers ( * C1 and * C2 ), where the
MIS place has beenadded and it is by mean of
MIS F and
MIS R timed activities,which represent the failure and the recovery of the commonO&M with a rate of λ MIS and µ MIS , respectively.Moreover, similarly to the two routers and two switchescases, several time activities of the two controllers aremodi fi ed for considering the TMI failure. In particular, the
MAN F , HW F1 , FHWt F , CHW F2 time activities of thetwo controllers are modi fi ed by adding one case: if sys down , sw sys down , and failed MAN of the other router have zerotoken and if Active proc of the addressed router is equal to K ,i.e. the addressed router is not able to ful fi l the demand andthe other router is working, then with probability C T MI onlyone router is failing and instead with probability − C T MI both the routers are failing.Furthermore, the following output gates are included: • OG TM sets failed MAN of both controllers; • OG TH C1 (and
OG TH C2 ) sets sys down C1 (or sys down C2 ), decreases the tokens in
Active proc C2 (or
Active proc C1 ) and increases the tokens in failed HW C1 (or failed HW C2 ); • OG TS C1 (and
OG TS C2 ) similarly sets sys down C1 (or sys down C2 ), decreases the tokens in
Active proc C2 (or
Active proc C1 ) and increases thetokens in failed SW C1 (or failed SW C2 ).The minimal-cut set is unavailable when both the SDNcontrollers are ”singularly“ failed or there is a token in
MIS place. A SDN controller is ”singularly“ failed when
Active proc < K or there is a token in one of these places: failed MAN , sys down , sw sys down .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A1 and B1, respectively. D. { n, n, n } in TN Figure 10 shows the SAN model of { n, n, n } in TN,where the three routers have both HW and SW homogeneousequipment ( HEQ ). Similarly as for the TMI in the two routerscase, time activities are modi fi ed and output gates are addedfor considering the HEQ failure.The minimal-cut set is unavailable when there are not tokenin Working S1 , Working S2 , Working S3 , spare CHW S1 , spare CHW S2 , and spare CHW S3 .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A8 and B7, respectively. E. { n, n, n } in F-SDN Figure 11 depicts the SAN model of { n, n, n } in F-SDNwhere the three SDN switches have mainly HW homogeneousequipment ( HEQ ). The SAN model is similar to the one forthe three routers (see Figure 10): there is not the part relatedig. 10: SAN model of { n, n, n } in TNFig. 11: SAN model of { n, n, n } in F-SDNo the control hardware and there is the MIS failure insteadof the O&M failure.The minimal-cut set is unavailable when there are not tokenin Working S1 , Working S2 , and
Working S3 .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A12 and B11, respectively. F. { n, n, n } in C-SDN Figure 12 depicts the SAN model of { n, n, n } in C-SDN,where the SDN switches are in the same city ( GEO ), insteadthe controller and the switches can have compatibility issues(CIS). The GEO failure is included as in the two router case(see Figure 8). For the CIS failure, the following places (withthe related timed activities and output gates) are added: • CIS that assesses the CIS between the SDN controllerand both the switches; • CIS S1 and
CIS S2 consider the CIS between the SDNcontroller and the single switch (S1 and S2, respectively).The minimal-cut set is unavailable when both SDN switchesare failed and the SDN controller is ”singularly“ failed or thereis a token the the CIS places.Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A3 and B3, respectively. G. { n, n, l } in TN Figure 13 shows the SAN model of SAN model of { n, n, l } in TN, where one router and the link are in the same city( GEO ) and the two routers have homogeneous equipment(
HEQ ). The HEQ failure is added as in the case of only tworouters (see Figure 7), nut note that in this case there is theO&M failure places are not merged because there is not COMfailure here. The GEO place (with the related timed activitiesand output gates) is added between the working places of thelink and one of the SDN switches.The minimal-cut set is unavailable when there are not tokenin
Working S1 , Working S2 , Working L , spare CHW S1 , and spare CHW S2 .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A7 and B6, respectively. H. { n, n, l } in F-SDN Figure 14 depicts the SAN model of { n, n, l } in F-SDN,where one SDN switch and the link are in the same city ( GEO )and the two SDN switches have homogeneous equipment(
HEQ ). The SAN model is similar to the one for the threerouters: there is not the part related to the control hardwareand the O&M failures.The minimal-cut set is unavailable when there are not tokenin
Working S1 , Working S2 , and
Working L .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A11 and B10, respectively. I. { n, n, l } in C-SDN Figure 15 depicts the SAN model of { n, n, l } in C-SDN,where the SDN switch and the link are in the same city ( GEO ),instead the controller and the switch can have compatibilityissues (CIS). The GEO failure is similar to the one of thetwo switches and the link (see Figure 14).The CIS failure issimilar to the one of the two switches and the controller (seeFigure 12).The minimal-cut set is unavailable when both SDN switchand link are failed and the SDN controller is ”singularly“ failedor there is a token the the CIS place.Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A2 and B2, respectively. J. { n, l, l } in TN Figure 16 shows the SAN model of { n, l, l } in TN, wherethe two links are connected to the same router ( PHY ) andthe router and the two links are in the same city (
GEO ). ThePHY place (with the related timed activities and output gates)is added between the working place of the links. Instead, theGEO place is connected to the working places of each networkelement, i.e.the links and the SDN switch.The minimal-cut set is unavailable when there are not tokenin
Working L1 , Working L2 , Working R , and spare CHW .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A5 and B5, respectively. K. { n, l, l } in F-SDN Figure 17 shows the SAN model of { n, l, l } in F-SDN,where the two links are connected to the same SDN switch( PHY ) and the SDN switch and the two links are in the samecity (
GEO ). As in the previous cases, the SAN model is similarto the one for the router and the two links: there is not thepart related to the control hardware and the O&M failures.The minimal-cut set is unavailable when there are not tokenin
Working L1 , Working L2 , and
Working S .Further details on the implementation in M¨obius of theSAN model and the related simulation can be found in theAppendix A9 and B9, respectively. L. { n, l, l } in C-SDN Figure 18 shows the SAN model of { l, l } in C-SDN, wherethe two links are connected to the same SDN switch ( GEO , PHY ). The SDN controller is independent.The two links are unavailable when there are not tokenin
Working L1 and
Working L2 . The unavailability of theminimal-cut set is the multiplication of the unavailability ofthe two links and the unavailability of the SDN controller.Further details on the implementation in M¨obius of theSAN models and the related simulations can be found in theAppendix A4 and B4, respectively.ig. 12: SAN model of { n, n, n } in C-SDNV. C ONCLUSION
The technical report has detailed presented of the imple-mentation on M¨obius of the SAN availability model of boththe network elements and the principal minimal-cut sets. Themodels of principal minimal-cut sets have been have been usedin [5]. A
PPENDIX
M ¨
OBIUS D OCUMENTATION
In the following appendix, the M¨obius documentation ofthe SAN model and the simulation for the principal minimal-cut sets is introduced by indicating the pages of the attacheddocument.
A. Documentation on SAN models
Firstly, we introduce the documentation on the implementa-tion in M¨obius of the SAN model of the principal minimal-cutsets. { n, n } in C-SDN: Form page A-1 to page A-5. { n, n, l } in C-SDN: Form page A-5 to page A-9. { n, n, n } in C-SDN: Form page A-9 to page A-13. { n, l, l } in C-SDN: Form page A-13 to page A-14 themodel of the two links and form page A-55 to page A-57 themodel of the SDN controller. { n, l, l } in TN: Form page A-14 to page A-17. { n, n } in TN: Form page A-17 to page A-22. { n, n, l } in TN: Form page A-22 to page A-28. { n, n, n } in TN: Form page A-28 to page A-35. { n, l, l } in F-SDN: Form page A-35 to page A-37. { n, n } in F-SDN: Form page A-37 to page A-40. { n, n, l } in F-SDN: Form page A-40 to page A-43. { n, n, n } in F-SDN: Form page A-43 to page A-47.
B. Documentation on simulations
Secondly, we introduce the documentation on the simulation(reward and study) in M¨obius of the SAN model of theprincipal minimal-cut sets. { n, n } in C-SDN: In page A-48. { n, n, l } in C-SDN: Form page A-48 to page A-49. { n, n, n } in C-SDN: Form page A-49 to page A-50. { n, l, l } in C-SDN: Form page A-50 to page A-51 themodel of the SDN controller and form page A-51 to pageA-52 the model of the two links. { n, l, l } in TN: Form page A-52 to page A-53. { n, n, l } in TN: In page A-53. { n, n, n } in TN: In page A-54. { n, n } in TN: Form page A-54 to page A-55. { n, l, l } in F-SDN: Form page A-57 to page A-58. { n, n, l } in F-SDN: Form page A-58 to page A-59. { n, n, n } in F-SDN: In page A-59. { n, n } in F-SDN: Form page A-59 to page A-60.R
EFERENCES[1] E. Haleplidis, K. Pentikousis, S. Denazis, J. H. Salim, D. Meyer,and O. Koufopavlou, “Software-de fi ned networking (SDN): Layers andarchitecture terminology,” Internet Research Task Force (IRTF), Requestfor Comments RFC 7426, January 2015.[2] D. Kreutz, F. M. V. Ramos, P. J. E. Ver´ ı ssimo, C. E. Rothenberg,S. Azodolmolky, and S. Uhlig, “Software-de fi ned networking: A com-prehensive survey,” Proceedings of the IEEE , vol. 103, no. 1, pp. 14–76,2015.[3] B. Nunes, M. Mendonca, X.-N. Nguyen, K. Obraczka, and T. Turletti,“A survey of software-de fi ned networking: Past, present, and futureof programmable networks,” Communications Surveys Tutorials, IEEE ,vol. 16, no. 3, pp. 1617–1634, Third 2014.[4] P. E. Heegaard, V. B. Mendiratta, and B. E. Helvik., “Achievingdependability in software-de fi ned networking - a perspective,” in , Munich, Germany, October 2015. ig. 13: SAN model of { n, n, l } in TN [5] G. Nencioni, B. E. Helvik, and P. E. Heegaard, “Including FailureCorrelation in Availability Modelling of a Software-De fi ned BackboneNetwork,” submitted to IEEE TNSM Special Issue on ”Advances inManagement of Softwarized Networks” .[6] G. Ciardo and K. S. Trivedi, “A decomposition approach for stochasticreward net models,” Perf. Eval , vol. 18, pp. 37–59, 1993.[7] R. E. Barlow and F. Proschan,
Statistical Theory of Reliability and LifeTesting: Probability Models . To BEGIN WITH, 1975.[8] K. Kanoun, M. Borrel, T. Morteveille, and A. Peytavin, “Availability ofCAUTRA, a Subset of the French Air Traf fi c Control System.” IEEETrans. Computers , no. 5, pp. 528–535.[9] A. J. Gonzalez and B. E. Helvik, “Characterization of router and linkfailure processes in UNINETT’s IP backbone network,”
InternationalJournal of Space-Based and Situated Computing , 2012.[10] P. Kuusela and I. Norros, “On/off process modeling of ip networkfailures,” in
Dependable Systems and Networks (DSN), 2010 IEEE/IFIPInternational Conference on , June 2010, pp. 585–594.[11] S. Verbrugge, D. Colle, P. Demeester, R. Huelsermann, and M. Jaeger,“General availability model for multilayer transport networks,” in
Pro-ceedings.5th International Workshop on Design of Reliable Communi- cation Networks, 2005. (DRCN 2005) . IEEE, October 16-19 2005, pp.85 – 92.[12] G. Nencioni, B. E. Helvik, A. J. Gonzalez, P. E. Heegaard, andA. Kamisinski, “Availability modelling of software-de fi ned backbonenetworks,” in , June 2016,pp. 105–112.[13] A. J. Gonzalez, B. E. Helvik, J. K. Hellan, and P. Kuusela, “Analysis ofdependencies between failures in the uninett ip backbone network,” in fi c Rim International Symposium on DependableComputing ig. 14: SAN model of { n, n, l } in F-SDNFig. 15: SAN model of { n, n, l } in C-SDNig. 16: SAN model of { n, l, l } in TNFig. 17: SAN model of { n, l, l } in F-SDNFig. 18: SAN model of { l, l } in C-SDN odel: cc Place Attributes : Place Names Initial Markings
Active_proc_C1 N_procActive_proc_C2 N_procMIS 0failed_HW_C1 0failed_HW_C2 0failed_MAN_C1 0failed_MAN_C2 0failed_SW_C1 0failed_SW_C2 0sw_sys_down_C1 0sw_sys_down_C2 0sys_down_C1 0sys_down_C2 0
Timed Activity: HW_F1_C1DistributionParameters Rate
Active_proc_C1->Mark() * hw_fail_rate
ActivationPredicate (none)
ReactivationPredicate (none)
Case Distributions case 1 if (MIS->Mark() == 0 && sys_down_C1->Mark() == 0 && sw_sys_down_C1->Mark() == 0 && failed_MAN_C1->Mark() == 0) return(1-hw_cvg);else return(0); case 2 if (MIS->Mark() == 0 && sys_down_C1->Mark() == 0 && sw_sys_down_C1->Mark() == 0 && failed_MAN_C1->Mark() == 0){ if (sys_down_C2->Mark()==0 && sw_sys_down_C2->Mark()==0 && failed_MAN_C2->Mark()==0 && Active_proc_C1->Mark()==K_th) return(hw_cvg*tmi_cvg); else return(hw_cvg);}else return(1); case 3 if (MIS->Mark() == 0 && sys_down_C1->Mark() == 0 && sw_sys_down_C1->Mark() == 0 && failed_MAN_C1->Mark() == 0){ if (sys_down_C2->Mark()==0 && sw_sys_down_C2->Mark()==0 && failed_MAN_C2->Mark()==0 && Active_proc_C1->Mark()==K_th) return(hw_cvg*(1-tmi_cvg)); else return(0);}else return(0);
Timed Activity: HW_F1_C2DistributionParameters Rate
Active_proc_C2->Mark() * hw_fail_rate
ActivationPredicate (none)
ReactivationPredicate (none)
Case Distributions case 1 if (MIS->Mark() == 0 && sys_down_C2->Mark() == 0 && sw_sys_down_C2->Mark() == 0 && failed_MAN_C2->Mark() == 0) return(0);else return(1-hw_cvg); case 2 if (MIS->Mark() == 0 && sys_down_C2->Mark() == 0 && sw_sys_down_C2->Mark() == 0 && failed_MAN_C2->Mark() == 0){ if (sys_down_C1->Mark()==0 && sw_sys_down_C1->Mark()==0 && failed_MAN_C1->Mark()==0 && Active_proc_C2->Mark()==K_th) return(hw_cvg*tmi_cvg); else return(hw_cvg);}else return(1);
A – 1 ase 3 if (MIS->Mark() == 0 && sys_down_C2->Mark() == 0 && sw_sys_down_C2->Mark() == 0 && failed_MAN_C2->Mark() == 0){ if (sys_down_C1->Mark()==0 && sw_sys_down_C1->Mark()==0 && failed_MAN_C1->Mark()==0 && Active_proc_C2->Mark()==K_th) return(hw_cvg*(1-tmi_cvg)); else return(0);}else return(0);
Timed Activity: HW_F2_C1Distribution Parameters Rate hw_fail_rate * failed_SW_C1->Mark()
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_F2_C2Distribution Parameters Rate hw_fail_rate * failed_SW_C2->Mark()
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_R_C1Distribution Parameters Rate hw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_R_C2Distribution Parameters Rate hw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_F_C1Distribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(failed_MAN_C2->Mark() == 0 && sys_down_C2->Mark() == 0 && sw_sys_down_C2->Mark() == 0) return(tmi_cvg);else return(1); case 2 if(failed_MAN_C2->Mark() == 0 && sys_down_C2->Mark() == 0 && sw_sys_down_C2->Mark() == 0) return(1-tmi_cvg);else return(0);
Timed Activity: MAN_F_C2Distribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(failed_MAN_C1->Mark() == 0 && sys_down_C1->Mark() == 0 && sw_sys_down_C1->Mark() == 0) return(tmi_cvg);else return(1); case 2 if(failed_MAN_C1->Mark() == 0 && sys_down_C1->Mark() == 0 && sw_sys_down_C1->Mark() == 0) return(1-tmi_cvg);else return(0);
A – 2 imed Activity: MAN_R_C1Distribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_R_C2Distribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MIS_FDistribution Parameters Rate mis_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MIS_RDistribution Parameters Rate mis_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_C1Distribution Parameters Rate if(Active_proc_C1->Mark() >= K_th) return(sw_fail_rate);else return(sw_fail_rate * Active_proc_C1->Mark());
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 if (sys_down_C2->Mark()==0 && sw_sys_down_C2->Mark()==0 && failed_MAN_C2->Mark()==0 && Active_proc_C1->Mark()==K_th) return(sw_cvg*tmi_cvg);else return(sw_cvg); case 3 if (sys_down_C2->Mark()==0 && sw_sys_down_C2->Mark()==0 && failed_MAN_C2->Mark()==0 && Active_proc_C1->Mark()==K_th) return(sw_cvg*(1-tmi_cvg));else return(0);
Timed Activity: SW_F_C2Distribution Parameters Rate if(Active_proc_C2->Mark() >= K_th) return(sw_fail_rate);else return(sw_fail_rate * Active_proc_C2->Mark());
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 if (sys_down_C1->Mark()==0 && sw_sys_down_C1->Mark()==0 && failed_MAN_C1->Mark()==0 && Active_proc_C2->Mark()==K_th) return(sw_cvg*tmi_cvg);else return(sw_cvg); case 3 if (sys_down_C1->Mark()==0 && sw_sys_down_C1->Mark()==0 && failed_MAN_C1->Mark()==0 && Active_proc_C2->Mark()==K_th) return(sw_cvg*(1-tmi_cvg));
A – 3 lse return(0);
Timed Activity: SW_R_C1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_C2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UHW_R_C1Distribution Parameters Rate uhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UHW_R_C2Distribution Parameters Rate uhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: USW_R_C1Distribution Parameters Rate usw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: USW_R_C2Distribution Parameters Rate usw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_MAN_C1Predicate (MIS->Mark() == 0 && failed_MAN_C1->Mark() == 0 && sys_down_C1->Mark() == 0 && sw_sys_down_C1->Mark() == 0)
Function ; Input Gate: IG_MAN_C2Predicate (MIS->Mark()==0 && failed_MAN_C2->Mark() == 0 && sys_down_C2->Mark() == 0 && sw_sys_down_C2->Mark() == 0)
Function ; Input Gate: IG_MFPredicate (MIS->Mark() == 0 && failed_MAN_C1->Mark() == 0 && sys_down_C1->Mark() == 0 && sw_sys_down_C1->Mark() == 0 && failed_MAN_C2->Mark() == 0 && sys_down_C2->Mark() == 0 && sw_sys_down_C2->Mark() == 0)
Function ; InputGate: IG_SW_C1Predicate (MIS->Mark() ==0 && failed_MAN_C1->Mark() ==0 && sys_down_C1->Mark() ==0 && sw_sys_down_C1->Mark() == 0 && Active_proc_C1->Mark() > 0)
Function
Active_proc_C1->Mark()--;
Input Gate: IG_SW_C2Predicate (failed_MAN_C2->Mark() ==0 && sys_down_C2->Mark() ==0 && sw_sys_down_C2->Mark() == 0 && Active_proc_C2->Mark() > 0)
A – 4 unction
Active_proc_C2->Mark()--;
Output Gate: OG_MAN_C1Function
Active_proc_C1->Mark() = N_proc - failed_HW_C1->Mark();failed_SW_C1->Mark()=0;
Output Gate: OG_MAN_C2Function
Active_proc_C2->Mark() = N_proc - failed_HW_C2->Mark();failed_SW_C2->Mark()=0;
Output Gate: OG_MRFunction ; Output Gate: OG_SD_C1Function failed_HW_C1->Mark()++;Active_proc_C1->Mark() = N_proc - failed_HW_C1->Mark();failed_SW_C1->Mark()=0;
Output Gate: OG_SD_C2Function failed_HW_C2->Mark()++;Active_proc_C2->Mark() = N_proc - failed_HW_C2->Mark();failed_SW_C2->Mark()=0;
Output Gate: OG_SSD_C1Function
Active_proc_C1->Mark() = N_proc - failed_HW_C1->Mark();failed_SW_C1->Mark()=0;
Output Gate: OG_SSD_C2Function
Active_proc_C2->Mark() = N_proc - failed_HW_C2->Mark();failed_SW_C2->Mark()=0;
Output Gate: OG_TH_C1Function sys_down_C2->Mark()=1;Active_proc_C2->Mark()--;failed_HW_C1->Mark()++;
Output Gate: OG_TH_C2Function sys_down_C1->Mark()=1;Active_proc_C1->Mark()--;failed_HW_C2->Mark()++;
Output Gate: OG_TMFunction failed_MAN_C1->Mark()=1;failed_MAN_C2->Mark()=1;
Output Gate: OG_TS_C1Function sw_sys_down_C2->Mark()=1;Active_proc_C2->Mark()--;failed_SW_C1->Mark()++;
Output Gate: OG_TS_C2Function sw_sys_down_C1->Mark()=1;Active_proc_C1->Mark()--;failed_SW_C2->Mark()++;
Model: csl
Place Attributes : Place Names Initial Markings
Active_proc N_procCIS 0Failed_L 0GEO 0Working_L 1Working_S 1failed_FHW_S 0failed_FHWt_S 0failed_HW 0failed_MAN 0
A – 5 ailed_SW 0failed_SW_S 0sw_sys_down 0sys_down 0
Timed Activity: CIS_FDistribution Parameters Rate cis_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CIS_RDistribution Parameters Rate cis_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_F_SDistribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_SDistribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_SDistribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_SDistribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_FDistribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_F1Distribution Parameters Rate
Active_proc->Mark() * hw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1
A – 6 f (sys_down->Mark() == 0 && sw_sys_down->Mark() == 0 && failed_MAN->Mark() == 0) return(1-hw_cvg);else return(0); case 2 if (sys_down->Mark() == 0 && sw_sys_down->Mark() == 0 && failed_MAN->Mark() == 0) return(hw_cvg);else return(1);
Timed Activity: HW_F2Distribution Parameters Rate hw_fail_rate * failed_SW->Mark()
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_RDistribution Parameters Rate hw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_FDistribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_RDistribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_FDistribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_RDistribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_FDistribution Parameters Rate if(Active_proc->Mark() >= K_th) return(csw_fail_rate);else return(csw_fail_rate * Active_proc->Mark());
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 sw_cvg
Timed Activity: SW_F_SDistribution Parameters Rate
A – 7 w_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_RDistribution Parameters Rate csw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_SDistribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UHW_RDistribution Parameters Rate uhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: USW_RDistribution Parameters Rate usw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_CFPredicate (CIS->Mark() == 0 && Working_S->Mark()==1 && failed_MAN->Mark() == 0 && sys_down->Mark() == 0 && sw_sys_down->Mark() == 0)
Function
Working_S->Mark()=0;
Input Gate: IG_GFPredicate (Working_L->Mark()==1 && Working_S->Mark()==1)
Function
Working_L->Mark()=0;Working_S->Mark()=0;
Input Gate: IG_MANPredicate (failed_MAN->Mark() == 0 && sys_down->Mark() == 0 && sw_sys_down->Mark() == 0)
Function ; Input Gate: IG_SWPredicate (failed_MAN->Mark() ==0 && sys_down->Mark() ==0 && sw_sys_down->Mark() == 0 && Active_proc->Mark() > 0)
Function
Active_proc->Mark()--;
Output Gate: OG_CRFunction
Working_S->Mark()=1;
Output Gate: OG_GRFunction
Working_L->Mark()=1;Working_S->Mark()=1;
Output Gate: OG_MANFunction
Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Output Gate: OG_SDFunction failed_HW->Mark()++;Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
A – 8 utput Gate: OG_SSDFunction
Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Model: css
Place Attributes : Place Names Initial Markings
Active_proc N_procCIS 0CIS_S1 0CIS_S2 0GEO 0Working_S1 1Working_S2 1failed_FHW_S1 0failed_FHW_S2 0failed_FHWt_S1 0failed_FHWt_S2 0failed_HW 0failed_MAN 0failed_SW 0failed_SW_S1 0failed_SW_S2 0sw_sys_down 0sys_down 0
Timed Activity: CIS_FDistribution Parameters Rate cis_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CIS_F_S1Distribution Parameters Rate cis_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CIS_F_S2Distribution Parameters Rate cis_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CIS_RDistribution Parameters Rate cis_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CIS_R_S1Distribution Parameters Rate cis_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CIS_R_S2Distribution Parameters Rate cis_rcv_rate
Activation Predicate (none)
A – 9 eactivation Predicate (none)
Timed Activity: FHW_F_S1Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_F_S2Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S1Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S2Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S1Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S2Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S1Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S2Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_FDistribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate
A – 10 eo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_F1Distribution Parameters Rate
Active_proc->Mark() * hw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (sys_down->Mark() == 0 && sw_sys_down->Mark() == 0 && failed_MAN->Mark() == 0) return(1-hw_cvg);else return(0); case 2 if (sys_down->Mark() == 0 && sw_sys_down->Mark() == 0 && failed_MAN->Mark() == 0) return(hw_cvg);else return(1);
Timed Activity: HW_F2Distribution Parameters Rate hw_fail_rate * failed_SW->Mark()
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_RDistribution Parameters Rate hw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_FDistribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_RDistribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_FDistribution Parameters Rate if(Active_proc->Mark() >= K_th) return(csw_fail_rate);else return(csw_fail_rate * Active_proc->Mark());
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 sw_cvg
Timed Activity: SW_F_S1Distribution Parameters Rate sw_fail_rate
A – 11 ctivation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_S2Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_RDistribution Parameters Rate csw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UHW_RDistribution Parameters Rate uhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: USW_RDistribution Parameters Rate usw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_CFPredicate (Working_S1->Mark()==1 && Working_S2->Mark()==1 && failed_MAN->Mark() == 0 && sys_down->Mark() == 0 && sw_sys_down->Mark() == 0)
Function
Working_S1->Mark()=0;Working_S2->Mark()=0;
Input Gate: IG_CF_S1Predicate (CIS_S2->Mark() == 0 && Working_S1->Mark()==1 && failed_MAN->Mark() == 0 && sys_down->Mark() == 0 && sw_sys_down->Mark() == 0)
Function
Working_S1->Mark()=0;
Input Gate: IG_CF_S2Predicate (CIS_S1->Mark()==0 && Working_S2->Mark()==1 && failed_MAN->Mark() == 0 && sys_down->Mark() == 0 && sw_sys_down->Mark() == 0)
Function
Working_S2->Mark()=0;
Input Gate: IG_GFPredicate (Working_S1->Mark()==1 && Working_S2->Mark()==1)
Function
Working_S1->Mark()=0;Working_S2->Mark()=0;
Input Gate: IG_MANPredicate (failed_MAN->Mark() == 0 && sys_down->Mark() == 0 && sw_sys_down->Mark() == 0)
A – 12 unction ; Input Gate: IG_SWPredicate (failed_MAN->Mark() ==0 && sys_down->Mark() ==0 && sw_sys_down->Mark() == 0 && Active_proc->Mark() > 0)
Function
Active_proc->Mark()--;
Output Gate: OG_CRFunction
Working_S1->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_CR_S1Function
Working_S1->Mark()=1;
Output Gate: OG_CR_S2Function
Working_S2->Mark()=1;
Output Gate: OG_GRFunction
Working_S1->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_MANFunction
Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Output Gate: OG_SDFunction failed_HW->Mark()++;Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Output Gate: OG_SSDFunction
Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Model: ll
Place Attributes : Place Names Initial Markings
Failed_L1 0Failed_L2 0GEO 0PHY 0Working_L1 1Working_L2 1
Timed Activity: GEO_FDistribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_F1Distribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_F2
A – 13 istribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_R1Distribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_R2Distribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: PHY_FDistribution Parameters Rate phy_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: PHY_RDistribution Parameters Rate phy_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_GFPredicate (Working_L1->Mark()==1 && Working_L2->Mark()==1)
Function
Working_L1->Mark()=0;Working_L2->Mark()=0;
Input Gate: IG_PFPredicate (Working_L1->Mark()==1 && Working_L2->Mark()==1)
Function
Working_L1->Mark()=0;Working_L2->Mark()=0;
Output Gate: OG_GRFunction
Working_L1->Mark()=1;Working_L2->Mark()=1;
Output Gate: OG_PRFunction
Working_L1->Mark()=1;Working_L2->Mark()=1;
Model: rll
Place Attributes : Place Names Initial Markings
Failed_L1 0Failed_L2 0GEO 0PHY 0Working_L1 1Working_L2 1Working_R 1failed_CHW 0failed_FHW 0failed_FHWt 0
A – 14 ailed_MAN 0failed_SW 0spare_CHW 0sys_down 0
Timed Activity: CHW_FDistribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_F2Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_RDistribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R2Distribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_FDistribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_RDistribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_FDistribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_RDistribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_F
A – 15 istribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_F1Distribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_F2Distribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_R1Distribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_R2Distribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_FDistribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_RDistribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: PHY_FDistribution Parameters Rate phy_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: PHY_RDistribution Parameters Rate phy_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 16 imed Activity: SW_FDistribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_RDistribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_RDistribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_GFPredicate (Working_L1->Mark()==1 && Working_L2->Mark()==1 && Working_R->Mark()==1)
Function
Working_L1->Mark()=0;Working_L2->Mark()=0;Working_R->Mark()=0;
Input Gate: IG_PFPredicate (Working_L1->Mark()==1 && Working_L2->Mark()==1)
Function
Working_L1->Mark()=0;Working_L2->Mark()=0;
Output Gate: OG_GRFunction
Working_L1->Mark()=1;Working_L2->Mark()=1;Working_R->Mark()=1;
Output Gate: OG_PRFunction
Working_L1->Mark()=1;Working_L2->Mark()=1;
Model: rr
Place Attributes : Place Names Initial Markings
Failed_MAN 0GEO 0Working_S1 1Working_S2 1failed_CHW_S1 0failed_CHW_S2 0failed_FHW_S1 0failed_FHW_S2 0failed_FHWt_S1 0failed_FHWt_S2 0failed_SW_S1 0failed_SW_S2 0spare_CHW_S1 0spare_CHW_S2 0sys_down_S1 0sys_down_S2 0
Timed Activity: CHW_F2_S1Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
A – 17 eactivation Predicate (none)
Case Distributions case 1 if (Working_S2->Mark() == 1) return(tmi_cvg);else return(1); case 2 if (Working_S2->Mark() == 1) return(1-tmi_cvg);else return(0);
Timed Activity: CHW_F2_S2Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1) return(tmi_cvg);else return(1); case 2 if (Working_S1->Mark() == 1) return(1-tmi_cvg);else return(0);
Timed Activity: CHW_F_S1Distribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_F_S2Distribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_R2_S1Distribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R2_S2Distribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 18 imed Activity: CHW_R_S1Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R_S2Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_F_S1Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: FHW_F_S2Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: FHW_R_S1Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S2Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S1Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1
A – 19 f(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: FHWt_F_S2Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: FHWt_R_S1Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S2Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_FDistribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_FDistribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_RDistribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_S1
A – 20 istribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: SW_F_S2Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: SW_R_S1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_R_S1Distribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_R_S2Distribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_GFPredicate (Working_S1->Mark()==1 && Working_S2->Mark()==1)
Function
Working_S1->Mark()=0;Working_S2->Mark()=0;
Input Gate: IG_MFPredicate
A – 21
Working_S1->Mark()==1 && Working_S2->Mark()==1)
Function
Working_S1->Mark()=0;Working_S2->Mark()=0;
Output Gate: OG_CHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_CHW_S1->Mark()=1;failed_CHW_S2->Mark()=1;
Output Gate: OG_FHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHW_S1->Mark()=1;failed_FHW_S2->Mark()=1;
Output Gate: OG_FHWtFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHWt_S1->Mark()=1;failed_FHWt_S2->Mark()=1;
Output Gate: OG_GRFunction
Working_S1->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_MRFunction
Working_S1->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_SWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;
Model: rrl
Place Attributes : Place Names Initial Markings
Failed_L 0GEO 0Working_L 1Working_S1 1Working_S2 1failed_CHW_S1 0failed_CHW_S2 0failed_FHW_S1 0failed_FHW_S2 0failed_FHWt_S1 0failed_FHWt_S2 0failed_MAN_S1 0failed_MAN_S2 0failed_SW_S1 0failed_SW_S2 0spare_CHW_S1 0spare_CHW_S2 0sys_down_S1 0sys_down_S2 0
Timed Activity: CHW_F2_S1Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S2->Mark() == 1) return(heq_cvg);
A – 22 lse return(1); case 2 if (Working_S2->Mark() == 1) return(1-heq_cvg);else return(0);
Timed Activity: CHW_F2_S2Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1) return(heq_cvg);else return(1); case 2 if (Working_S1->Mark() == 1) return(1-heq_cvg);else return(0);
Timed Activity: CHW_F_S1Distribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_F_S2Distribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_R2_S1Distribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R2_S2Distribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R_S1Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
A – 23 eactivation Predicate (none)
Timed Activity: CHW_R_S2Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_F_S1Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHW_F_S2Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHW_R_S1Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S2Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S1Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2
A – 24 f(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_F_S2Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_R_S1Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S2Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_FDistribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_FDistribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_RDistribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_F_S1Distribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 25 ase Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: MAN_F_S2Distribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: MAN_R_S1Distribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_R_S2Distribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_S1Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: SW_F_S2Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);
A – 26 lse return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: SW_R_S1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_R_S1Distribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_R_S2Distribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_GFPredicate (Working_L->Mark()==1 && Working_S2->Mark()==1)
Function
Working_L->Mark()=0;Working_S2->Mark()=0;
Output Gate: OG_CHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_CHW_S1->Mark()=1;failed_CHW_S2->Mark()=1;
Output Gate: OG_FHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHW_S1->Mark()=1;failed_FHW_S2->Mark()=1;
Output Gate: OG_FHWtFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHWt_S1->Mark()=1;failed_FHWt_S2->Mark()=1;
Output Gate: OG_GRFunction
Working_L->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_MANFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;
Output Gate: OG_SWFunction
Working_S1->Mark()=0;
A – 27 orking_S2->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;
Model: rrr
Place Attributes : Place Names Initial Markings
Working_S1 1Working_S2 1Working_S3 1failed_CHW_S1 0failed_CHW_S2 0failed_CHW_S3 0failed_FHW_S1 0failed_FHW_S2 0failed_FHW_S3 0failed_FHWt_S1 0failed_FHWt_S2 0failed_FHWt_S3 0failed_MAN_S1 0failed_MAN_S2 0failed_MAN_S3 0failed_SW_S1 0failed_SW_S2 0failed_SW_S3 0spare_CHW_S1 0spare_CHW_S2 0spare_CHW_S3 0sys_down_S1 0sys_down_S2 0sys_down_S3 0
Timed Activity: CHW_F2_S1Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S2->Mark() == 1 && Working_S3->Mark()==1) return(heq_cvg);else return(1); case 2 if (Working_S2->Mark() == 1 && Working_S3->Mark()==1) return(1-heq_cvg);else return(0);
Timed Activity: CHW_F2_S2Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S3->Mark()==1) return(heq_cvg);else return(1); case 2 if (Working_S1->Mark() == 1 && Working_S3->Mark()==1) return(1-heq_cvg);else return(0);
Timed Activity: CHW_F2_S3Rate
A – 28 istribution Parameters chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark()==1 && Working_S2->Mark() == 1) return(heq_cvg);else return(1); case 2 if (Working_S1->Mark()==1 && Working_S2->Mark() == 1) return(1-heq_cvg);else return(0);
Timed Activity: CHW_F_S1Distribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_F_S2Distribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_F_S3Distribution Parameters Rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 chw_cvg
Timed Activity: CHW_R2_S1Distribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R2_S2Distribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R2_S3
A – 29 istribution Parameters Rate chw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R_S1Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R_S2Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: CHW_R_S3Distribution Parameters Rate chw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_F_S1Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHW_F_S2Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHW_F_S3Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1)
A – 30 return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHW_R_S1Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S2Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S3Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S1Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_F_S2Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_F_S3Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 31 ase Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_R_S1Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S2Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S3Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_F_S1Distribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: MAN_F_S2Distribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: MAN_F_S3Distribution Parameters Rate man_fail_rate
A – 32 ctivation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1 && Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: MAN_R_S1Distribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_R_S2Distribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_R_S3Distribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_S1Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: SW_F_S2Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: SW_F_S3
A – 33 istribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1&& Working_S3->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: SW_R_S1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S3Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_R_S1Distribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_R_S2Distribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UCHW_R_S3Distribution Parameters Rate uchw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Output Gate: OG_CHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_CHW_S1->Mark()=1;failed_CHW_S2->Mark()=1;failed_CHW_S3->Mark()=1;
Output Gate: OG_FHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_FHW_S1->Mark()=1;
A – 34 ailed_FHW_S2->Mark()=1;failed_FHW_S3->Mark()=1;
Output Gate: OG_FHWtFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_FHWt_S1->Mark()=1;failed_FHWt_S2->Mark()=1;failed_FHWt_S3->Mark()=1;
Output Gate: OG_MANFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;failed_SW_S3->Mark()=1;
Output Gate: OG_SWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;failed_SW_S3->Mark()=1;
Model: sll
Place Attributes : Place Names Initial Markings
Failed_L1 0Failed_L2 0GEO 0PHY 0Working_L1 1Working_L2 1Working_S 1failed_FHW 0failed_FHWt 0failed_SW 0
Timed Activity: FHW_FDistribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_RDistribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_FDistribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_RDistribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_FDistribution Parameters Rate
A – 35 eo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_F1Distribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_F2Distribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_R1Distribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_R2Distribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: PHY_FDistribution Parameters Rate phy_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: PHY_RDistribution Parameters Rate phy_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_FDistribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_RDistribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 36 nput Gate: IG_GFPredicate (Working_L1->Mark()==1 && Working_L2->Mark()==1 && Working_S->Mark()==1)
Function
Working_L1->Mark()=0;Working_L2->Mark()=0;Working_S->Mark()=0;
Input Gate: IG_PFPredicate (Working_L1->Mark()==1 && Working_L2->Mark()==1)
Function
Working_L1->Mark()=0;Working_L2->Mark()=0;
Output Gate: OG_GRFunction
Working_L1->Mark()=1;Working_L2->Mark()=1;Working_S->Mark()=1;
Output Gate: OG_PRFunction
Working_L1->Mark()=1;Working_L2->Mark()=1;
Model: ss
Place Attributes : Place Names Initial Markings
GEO 0MIS 0Working_S1 1Working_S2 1failed_FHW_S1 0failed_FHW_S2 0failed_FHWt_S1 0failed_FHWt_S2 0failed_SW_S1 0failed_SW_S2 0
Timed Activity: FHW_F_S1Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: FHW_F_S2Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
A – 37 imed Activity: FHW_R_S1Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S2Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S1Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: FHWt_F_S2Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: FHWt_R_S1Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S2Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_FDistribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 38 imed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MIS_FDistribution Parameters Rate mis_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MIS_RDistribution Parameters Rate mis_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_S1Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: SW_F_S2Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-tmi_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(tmi_cvg);else return(1);
Timed Activity: SW_R_S1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 39 nput Gate: IG_GFPredicate (Working_S1->Mark()==1 && Working_S2->Mark()==1)
Function
Working_S1->Mark()=0;Working_S2->Mark()=0;
Input Gate: IG_MFPredicate (Working_S1->Mark()==1 && Working_S2->Mark()==1)
Function
Working_S1->Mark()=0;Working_S2->Mark()=0;
Output Gate: OG_FHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHW_S1->Mark()=1;failed_FHW_S2->Mark()=1;
Output Gate: OG_FHWtFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHWt_S1->Mark()=1;failed_FHWt_S2->Mark()=1;
Output Gate: OG_GRFunction
Working_S1->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_MRFunction
Working_S1->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_SWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;
Model: ssl
Place Attributes : Place Names Initial Markings
Failed_L 0GEO 0Working_L 1Working_S1 1Working_S2 1failed_FHW_S1 0failed_FHW_S2 0failed_FHWt_S1 0failed_FHWt_S2 0failed_SW_S1 0failed_SW_S2 0
Timed Activity: FHW_F_S1Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
A – 40 imed Activity: FHW_F_S2Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHW_R_S1Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S2Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S1Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_F_S2Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_R_S1Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
A – 41 eactivation Predicate (none)
Timed Activity: FHWt_R_S2Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_FDistribution Parameters Rate geo_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: GEO_RDistribution Parameters Rate geo_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_FDistribution Parameters Rate link_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: L_RDistribution Parameters Rate link_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_S1Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(heq_cvg);else return(1);
Timed Activity: SW_F_S2Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if(Working_S1->Mark()==1 && Working_S2->Mark()==1) return(1-heq_cvg);else return(0); case 2 if(Working_S1->Mark()==1 && Working_S2->Mark()==1)
A – 42 return(heq_cvg);else return(1);
Timed Activity: SW_R_S1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_GFPredicate (Working_L->Mark()==1 && Working_S2->Mark()==1)
Function
Working_L->Mark()=0;Working_S2->Mark()=0;
Output Gate: OG_FHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHW_S1->Mark()=1;failed_FHW_S2->Mark()=1;
Output Gate: OG_FHWtFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_FHWt_S1->Mark()=1;failed_FHWt_S2->Mark()=1;
Output Gate: OG_GRFunction
Working_L->Mark()=1;Working_S2->Mark()=1;
Output Gate: OG_SWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;
Model: sss
Place Attributes : Place Names Initial Markings
Working_S1 1Working_S2 1Working_S3 1failed_FHW_S1 0failed_FHW_S2 0failed_FHW_S3 0failed_FHWt_S1 0failed_FHWt_S2 0failed_FHWt_S3 0failed_SW_S1 0failed_SW_S2 0failed_SW_S3 0
Timed Activity: FHW_F_S1Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1)
A – 43 return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: FHW_F_S2Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: FHW_F_S3Distribution Parameters Rate fhw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: FHW_R_S1Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S2Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHW_R_S3Distribution Parameters Rate fhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_F_S1Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 44 ase Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_F_S2Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_F_S3Distribution Parameters Rate fhwt_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: FHWt_R_S1Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S2Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: FHWt_R_S3Distribution Parameters Rate fhwt_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_F_S1Distribution Parameters Rate sw_fail_rate
A – 45 ctivation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: SW_F_S2Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: SW_F_S3Distribution Parameters Rate sw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(1-heq_cvg);else return(0); case 2 if (Working_S1->Mark() == 1 && Working_S2->Mark() == 1 && Working_S3->Mark() ==1) return(heq_cvg);else return(1);
Timed Activity: SW_R_S1Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S2Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_R_S3Distribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
A – 46 utput Gate: OG_FHWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_FHW_S1->Mark()=1;failed_FHW_S2->Mark()=1;failed_FHW_S3->Mark()=1;
Output Gate: OG_FHWtFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_FHWt_S1->Mark()=1;failed_FHWt_S2->Mark()=1;failed_FHWt_S3->Mark()=1;
Output Gate: OG_SWFunction
Working_S1->Mark()=0;Working_S2->Mark()=0;Working_S3->Mark()=0;failed_SW_S1->Mark()=1;failed_SW_S2->Mark()=1;failed_SW_S3->Mark()=1;
A – 47 ange Study Variable Assignments for Study
CC_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n
K_th int Fixed 8 - - - -N_proc int Fixed 10 - - - -hw_cvg double Fixed 0.97 - - - -hw_fail_rate double Fixed 1.0E-8 - - - -hw_rcv_rate double Fixed 2.0E-5 - - - -man_fail_rate double Fixed 1.0E-6 - - - -man_rcv_rate double Fixed 9.0E-5 - - - -mis_fail_rate double Manual [5.0E-6, 5.0E-7, 5.0E-8, 5.0E-9,5.0E-10] - - - -mis_rcv_rate double Fixed 9.0E-5 - - - -sw_cvg double Fixed 0.9 - - - -sw_fail_rate double Fixed 2.0E-5 - - - -sw_rcv_rate double Fixed 0.006 - - - -tmi_cvg double Manual [0.9, 0.93, 0.95, 0.97, 1.0] - - - -uhw_rcv_rate double Fixed 6.0E-4 - - - -usw_rcv_rate double Fixed 6.0E-4 - - - -
Performance Variable Model: CC_unavailability
Top Level Model Information Child Model Name ccModel Type SAN Model
Performance Variable : U_cc
AffectingModels ccImpulseFunctionsRewardFunction (Reward is over all Available Models) if (( (cc->Active_proc_C1->Mark()
SimulatorStatistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
CSL_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n
K_th int Fixed 8 - - - -N_proc int Fixed 10 - - - -cis_fail_rate double Manual [2.0E-4, 2.0E-5, 2.0E-6, 2.0E-7,2.0E-8] - - - -cis_rcv_rate double Fixed 0.002 - - - -
A – 48 sw_fail_rate double Fixed 2.0E-5 - - - -csw_rcv_rate double Fixed 0.006 - - - -fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -hw_cvg double Fixed 0.97 - - - -hw_fail_rate double Fixed 1.0E-8 - - - -hw_rcv_rate double Fixed 2.0E-5 - - - -link_fail_rate double Fixed 1.0E-6 - - - -link_rcv_rate double Fixed 0.01 - - - -man_fail_rate double Fixed 1.0E-6 - - - -man_rcv_rate double Fixed 9.0E-5 - - - -sw_cvg double Fixed 0.9 - - - -sw_fail_rate double Fixed 2.0E-20 - - - -sw_rcv_rate double Fixed 0.006 - - - -uhw_rcv_rate double Fixed 6.0E-4 - - - -usw_rcv_rate double Fixed 6.0E-4 - - - -
Performance Variable Model: CSL_unavailability
Top Level Model Information Child Model Name cslModel Type SAN Model
Performance Variable : U_csl
Affecting Models cslImpulseFunctionsReward Function (Reward is over all Available Models) if (csl->Working_S->Mark()==0 && csl->Working_L->Mark()==0 && (csl->Active_proc->Mark()
SimulatorStatistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
CSS_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n
K_th int Fixed 8 - - - -N_proc int Fixed 10 - - - -cis_fail_rate double Manual [2.0E-4, 2.0E-5, 2.0E-6, 2.0E-7,2.0E-8] - - - -
A – 49 is_rcv_rate double Fixed 0.002 - - - -csw_fail_rate double Fixed 2.0E-5 - - - -csw_rcv_rate double Fixed 0.006 - - - -fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -hw_cvg double Fixed 0.97 - - - -hw_fail_rate double Fixed 1.0E-8 - - - -hw_rcv_rate double Fixed 2.0E-5 - - - -man_fail_rate double Fixed 1.0E-6 - - - -man_rcv_rate double Fixed 9.0E-5 - - - -sw_cvg double Fixed 0.9 - - - -sw_fail_rate double Fixed 2.0E-20 - - - -sw_rcv_rate double Fixed 0.006 - - - -uhw_rcv_rate double Fixed 6.0E-4 - - - -usw_rcv_rate double Fixed 6.0E-4 - - - -
Performance Variable Model: CSS_unavailability
Top Level Model Information Child Model Name cssModel Type SAN Model
Performance Variable : U_css
Affecting Models cssImpulseFunctionsReward Function (Reward is over all Available Models) if (css->Working_S1->Mark()==0 && css->Working_S2->Mark()==0 && (css->Active_proc->Mark()
SimulatorStatistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
C_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n
K_th int Fixed 8 - - - -N_proc int Fixed 10 - - - -hw_cvg double Fixed 0.97 - - - -hw_fail_rate double Fixed 1.0E-8 - - - -
A – 50 w_rcv_rate double Fixed 2.0E-5 - - - -man_fail_rate double Fixed 1.0E-6 - - - -man_rcv_rate double Fixed 9.0E-5 - - - -sw_cvg double Fixed 0.9 - - - -sw_fail_rate double Fixed 2.0E-5 - - - -sw_rcv_rate double Fixed 0.006 - - - -uhw_rcv_rate double Fixed 6.0E-4 - - - -usw_rcv_rate double Fixed 6.0E-4 - - - -
Performance Variable Model: C_unavailability
Top Level Model Information Child Model Name SDNcontrollerModel Type SAN Model
Performance Variable : U_c
AffectingModels SDNcontrollerImpulseFunctionsRewardFunction (Reward is over all Available Models) if (SDNcontroller->Active_proc->Mark()
SimulatorStatistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
LL_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n geo_fail_rate double Manual [1.0E-5, 1.0E-6, 1.0E-7, 1.0E-8,1.0E-9] - - - -geo_rcv_rate double Fixed 0.01 - - - -link_fail_rate double Fixed 1.0E-6 - - - -link_rcv_rate double Fixed 0.01 - - - -phy_fail_rate double Manual [1.0E-5, 1.0E-6, 1.0E-7, 1.0E-8,1.0E-9] - - - -phy_rcv_rate double Fixed 0.003 - - - -
Performance Variable Model: LL_unavailability
Top Level Model Information Child Model Name llModel Type SAN Model
Performance Variable : U_ll
Affecting Models llImpulse FunctionsReward Function (Reward is over all Available Models)
A – 51 f (ll->Working_L1->Mark()==0 && ll->Working_L2->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
RLL_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n chw_cvg double Fixed 0.97 - - - -chw_fail_rate double Fixed 9.0E-9 - - - -chw_rcv_rate double Fixed 2.0E-5 - - - -fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -link_fail_rate double Fixed 1.0E-6 - - - -link_rcv_rate double Fixed 0.01 - - - -man_fail_rate double Fixed 5.0E-7 - - - -man_rcv_rate double Fixed 9.0E-5 - - - -phy_fail_rate double Manual [1.0E-5, 1.0E-6, 1.0E-7, 1.0E-8,1.0E-9] - - - -phy_rcv_rate double Fixed 0.003 - - - -sw_fail_rate double Fixed 2.0E-6 - - - -sw_rcv_rate double Fixed 0.006 - - - -uchw_rcv_rate double Fixed 3.0E-5 - - - -
Performance Variable Model: RLL_unavailability
Top Level Model Information Child Model Name rllModel Type SAN Model
Performance Variable : U_rll
Affecting Models rllImpulse FunctionsReward Function (Reward is over all Available Models) if (rll->Working_L1->Mark()==0 && rll->Working_L2->Mark()==0 && rll->Working_R->Mark()==0 && rll->spare_CHW->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval Estimate
A – 52 nclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
RRL_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n chw_cvg double Fixed 0.97 - - - -chw_fail_rate double Fixed 9.0E-9 - - - -chw_rcv_rate double Fixed 2.0E-5 - - - -fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -heq_cvg double Manual [0.98, 0.99, 1.0] - - - -link_fail_rate double Fixed 1.0E-6 - - - -link_rcv_rate double Fixed 0.01 - - - -man_fail_rate double Fixed 5.0E-7 - - - -man_rcv_rate double Fixed 9.0E-5 - - - -sw_fail_rate double Fixed 2.0E-6 - - - -sw_rcv_rate double Fixed 0.006 - - - -uchw_rcv_rate double Fixed 3.0E-5 - - - -
Performance Variable Model: RRL_unavailability
Top Level Model Information Child Model Name rrlModel Type SAN Model
Performance Variable : U_rrl
Affecting Models rrlImpulse FunctionsReward Function (Reward is over all Available Models) if (rrl->Working_S1->Mark()==0 && rrl->Working_S2->Mark()==0 && rrl->Working_L->Mark()==0 && rrl->spare_CHW_S1->Mark()==0 && rrl->spare_CHW_S2->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
A – 53 ange Study Variable Assignments for Study
RRR_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n chw_cvg double Fixed 0.97 - - - -chw_fail_rate double Fixed 9.0E-9 - - - -chw_rcv_rate double Fixed 2.0E-5 - - - -fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -heq_cvg double Manual [0.98, 0.99, 1.0] - - - -man_fail_rate double Fixed 5.0E-7 - - - -man_rcv_rate double Fixed 9.0E-5 - - - -sw_fail_rate double Fixed 2.0E-6 - - - -sw_rcv_rate double Fixed 0.006 - - - -uchw_rcv_rate double Fixed 3.0E-5 - - - -
Performance Variable Model: RRR_unavailability
Top Level Model Information Child Model Name rrrModel Type SAN Model
Performance Variable : U_rrr
Affecting Models rrrImpulse FunctionsReward Function (Reward is over all Available Models) if (rrr->Working_S1->Mark()==0 && rrr->Working_S2->Mark()==0 && rrr->Working_S3->Mark()==0 && rrr->spare_CHW_S1->Mark()==0 && rrr->spare_CHW_S2->Mark()==0 && rrr->spare_CHW_S3->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
RR_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n chw_cvg double Fixed 0.97 - - - -chw_fail_rate double Fixed 9.0E-9 - - - -chw_rcv_rate double Fixed 2.0E-5 - - - -fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -man_fail_rate double Manual [5.0E-5, 5.0E-6, 5.0E-7, 5.0E-8, - - - -
A – 54 .0E-9]man_rcv_rate double Fixed 9.0E-5 - - - -sw_fail_rate double Fixed 2.0E-6 - - - -sw_rcv_rate double Fixed 0.006 - - - -tmi_cvg double Manual [0.9, 0.93, 0.95, 0.97, 1.0] - - - -uchw_rcv_rate double Fixed 3.0E-5 - - - -
Performance Variable Model: RR_unavailability
Top Level Model Information Child Model Name rrModel Type SAN Model
Performance Variable : U_rr
Affecting Models rrImpulse FunctionsReward Function (Reward is over all Available Models) if (rr->Working_S1->Mark()==0 && rr->Working_S2->Mark()==0 && rr->spare_CHW_S1->Mark()==0 && rr->spare_CHW_S2->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Model: SDNcontroller
Place Attributes : Place Names Initial Markings
Active_proc N_procfailed_HW 0failed_MAN 0failed_SW 0sw_sys_down 0sys_down 0
Timed Activity: HW_F1Distribution Parameters Rate
Active_proc->Mark() * hw_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 if (sys_down->Mark() == 0 && sw_sys_down->Mark() == 0 && failed_MAN->Mark() == 0) return(1-hw_cvg);else return(0); case 2
A – 55 f (sys_down->Mark() == 0 && sw_sys_down->Mark() == 0 && failed_MAN->Mark() == 0) return(hw_cvg);else return(1);
Timed Activity: HW_F2Distribution Parameters Rate hw_fail_rate * failed_SW->Mark()
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: HW_RDistribution Parameters Rate hw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_FDistribution Parameters Rate man_fail_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: MAN_RDistribution Parameters Rate man_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: SW_FDistribution Parameters Rate if(Active_proc->Mark() >= K_th) return(sw_fail_rate);else return(sw_fail_rate * Active_proc->Mark());
Activation Predicate (none)
Reactivation Predicate (none)
Case Distributions case 1 case 2 sw_cvg
Timed Activity: SW_RDistribution Parameters Rate sw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: UHW_RRate
A – 56 istribution Parameters uhw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Timed Activity: USW_RDistribution Parameters Rate usw_rcv_rate
Activation Predicate (none)
Reactivation Predicate (none)
Input Gate: IG_MANPredicate (failed_MAN->Mark() == 0 && sys_down->Mark() == 0 && sw_sys_down->Mark() == 0)
Function ; Input Gate: IG_SWPredicate (failed_MAN->Mark() ==0 && sys_down->Mark() ==0 && sw_sys_down->Mark() == 0 && Active_proc->Mark() > 0)
Function
Active_proc->Mark()--;
Output Gate: OG_MANFunction
Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Output Gate: OG_SDFunction failed_HW->Mark()++;Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Output Gate: OG_SSDFunction
Active_proc->Mark() = N_proc - failed_HW->Mark();failed_SW->Mark()=0;
Range Study Variable Assignments for Study
SLL_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -link_fail_rate double Fixed 1.0E-6 - - - -link_rcv_rate double Fixed 0.01 - - - -phy_fail_rate double Manual [1.0E-5, 1.0E-6, 1.0E-7, 1.0E-8,1.0E-9] - - - -phy_rcv_rate double Fixed 0.003 - - - -sw_fail_rate double Fixed 2.0E-20 - - - -sw_rcv_rate double Fixed 0.006 - - - -
Performance Variable Model: SLL_unavailability
Top Level Model Information Child Model Name sllModel Type SAN Model
A – 57 erformance Variable : U_sll
Affecting Models sllImpulse FunctionsReward Function (Reward is over all Available Models) if (sll->Working_L1->Mark()==0 && sll->Working_L2->Mark()==0 && sll->Working_S->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
SSL_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -heq_cvg double Manual [0.98, 0.99, 1.0] - - - -link_fail_rate double Fixed 1.0E-6 - - - -link_rcv_rate double Fixed 0.01 - - - -sw_fail_rate double Fixed 2.0E-20 - - - -sw_rcv_rate double Fixed 0.006 - - - -
Performance Variable Model: SSL_unavailability
Top Level Model Information Child Model Name sslModel Type SAN Model
Performance Variable : U_ssl
Affecting Models sslImpulse FunctionsReward Function (Reward is over all Available Models) if (ssl->Working_S1->Mark()==0 && ssl->Working_S2->Mark()==0 && ssl->Working_L->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,
A – 58 top Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
SSS_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -heq_cvg double Manual [0.98, 0.99, 1.0] - - - -sw_fail_rate double Fixed 2.0E-20 - - - -sw_rcv_rate double Fixed 0.006 - - - -
Performance Variable Model: SSS_unavailability
Top Level Model Information Child Model Name sssModel Type SAN Model
Performance Variable : U_sss
Affecting Models sssImpulse FunctionsReward Function (Reward is over all Available Models) if (sss->Working_S1->Mark()==0 && sss->Working_S2->Mark()==0 && sss->Working_S3->Mark()==0){ return(1);}else{ return(0);}
Simulator Statistics Type Time Averaged Interval of TimeOptions Estimate MeanInclude Lower Bound on Interval EstimateInclude Upper Bound on Interval EstimateEstimate out of Range ProbabilitiesConfidence Level is RelativeParameters Start Time 0.0,Stop Time 10000000,Confidence Confidence Level 0.95Confidence Interval 0.1
Range Study Variable Assignments for Study
SS_study in Project
SDNbackbone : Variable Type Range Type Range Increment Increment Type Function n fhw_fail_rate double Fixed 9.0E-9 - - - -fhw_rcv_rate double Fixed 2.0E-5 - - - -fhwt_fail_rate double Fixed 2.0E-6 - - - -fhwt_rcv_rate double Fixed 0.006 - - - -geo_fail_rate double Manual [9.0E-8, 9.0E-9, 9.0E-10, 9.0E-11,9.0E-12] - - - -geo_rcv_rate double Fixed 7.0E-6 - - - -mis_fail_rate double Manual [5.0E-6, 5.0E-7, 5.0E-8, 5.0E-9,5.0E-10] - - - -mis_rcv_rate double Fixed 9.0E-5 - - - -sw_fail_rate double Fixed 2.0E-20 - - - -sw_rcv_rate double Fixed 0.006 - - - -tmi_cvg double Manual [0.9, 0.93, 0.95, 0.97, 1.0] - - - -
A – 59 erformance Variable Model: SS_unavailability
Top Level Model Information Child Model Name ssModel Type SAN Model
Performance Variable : U_ss
Affecting Models ssImpulse FunctionsReward Function (Reward is over all Available Models) if (ss->Working_S1->Mark()==0 && ss->Working_S2->Mark()==0){ return(1);}else{ return(0);}