Airtel Dark Tunnel Config File Download Extra Quality Apr 2026

Values are averaged across 10 DWDM spans (200 km–800 km). The modest capacity reservation (≈ 4 %) is justified for premium‑SLA services. | Threat | Mitigation | |--------|------------| | Man‑in‑the‑Middle (MITM) on CFD | Mutual TLS, certificate pinning, and short‑lived signatures (TTL ≤ 24 h). | | Configuration replay | Version numbers and valid_until timestamps; agents reject older versions. | | Key compromise | Automated key‑rotation (90‑day cycle) via HashiCorp Vault; immediate revocation list broadcast. | | Denial‑of‑Service on CFD server | Rate‑limit per‑agent, CDN front‑end, and HA load‑balancer. | | EQ‑policy abuse | Policy‑engine validation – only pre‑approved traffic classes can request EQ (via service‑catalog). |

All steps are logged in the for audit. 5. Performance & Quality Impact | Metric | Baseline (no EQ) | With EQ (lab) | Observed in field (Jan‑2026) | |--------|------------------|---------------|-------------------------------| | Latency (p99) | 3.4 ms (DWDM 600 km) | 2.8 ms | 2.9 ms | | Jitter (p99) | 0.45 ms | 0.12 ms | 0.14 ms | | Packet loss | 0.08 % | < 0.01 % (FEC) | 0.015 % | | Throughput impact | — | ~‑4 % of link capacity (reserved for EQ) | −3.5 % | | Config‑apply time | 12 s (manual) | 5 s (CFD) | 4.8 s |

| Goal | Benefit | |------|----------| | | Reduces manual provisioning errors, speeds up service roll‑out, and enforces policy compliance. | | Extra‑Quality (EQ) traffic treatment | Guarantees enhanced QoS (lower latency, jitter, and packet loss) for premium services (e.g., 5G‑Ue, enterprise SD‑WAN, edge‑AI). | | End‑to‑end telemetry & verification | Provides visibility into configuration integrity and performance impact. |