Chapters

11 Network Design: Evidence and Architecture Workflow

design-methodology
network

11.1 Start With the Decision

This section: Start With the Decision — A network choice should follow the device, traffic, place, and failure evidence.

A network choice should follow the device, traffic, place, and failure evidence. Start with the payload, the data each device sends; latency, the time a message takes to arrive; and the gateway, if one joins the device network to another network. Keep those facts ahead of vendor features.

11.2 Route Overview

This section: Route Overview — This is part 2 of 2.

This is part 2 of 2. Review Network Design: Tail Risk and Scope for the preceding evidence.

11.3 Learning Objectives

This section: Learning Objectives

  • Build a network evidence route from system needs.
  • Apply a staged workflow to architecture decisions.

11.4 Chapter Roadmap

This section: Chapter Roadmap

  • Build Network Evidence Route
  • Why IoT Network Design Is Different
  • The Evidence Types
  • The First Questions
  • The Network Design Sequence
  • What Belongs in Later Chapters
  • Worked Example: A Building Monitor
  • Incremental Examples
  • Try It Now: Reject a Weak Topology Claim
  • Micro-Exercise: Pick the Evidence
  • Practice Checks
  • Match Evidence to Question
  • Order Introduction Workflow
  • Label the Network Evidence Route
  • Knowledge Check
  • Knowledge Check: Simulation Use
  • Common Pitfalls
  • 1. Treating Simulation as the First Step
  • 2. Confusing a Diagram With Evidence
  • 3. Averaging Away Risk
  • 4. Forgetting the Operator
  • Summary
  • See Also
  • References
  • What’s Next
  • Key Takeaway

11.5 Build Network Evidence Route

This section: Build Network Evidence Route — Use this route before arguing for LoRaWAN, Thread, Zigbee, Wi-Fi, Ethernet, LTE-M, NB-IoT, or any simulator.

Use this route before arguing for LoRaWAN, Thread, Zigbee, Wi-Fi, Ethernet, LTE-M, NB-IoT, or any simulator.

First: Name the communication promise. Write the device class, payload, sender, receiver, interval, latency target, loss tolerance, command behavior, and failure behavior.

Next: Map the physical and operational boundary. Record placement, power source, gateway access, backhaul, installation owner, monitoring owner, update path, security boundary, and maintenance window.

Then: Choose evidence for the risky claim. Pair each claim with the evidence type that can test it: RF survey for coverage, packet capture for protocol timing, current logging for retry cost, simulation for scale assumptions, and pilot logs for installed behavior.

After that: Decide what would change the design. Define the metric or field signal that would trigger a gateway move, topology change, retry-limit change, segmentation change, or local fallback.

11.6 Why IoT Network Design Is Different

This section: Why IoT Network Design Is Different — Traditional enterprise networks often assume stable power, managed devices, predictable locations, and mature monitoring.

Traditional enterprise networks often assume stable power, managed devices, predictable locations, and mature monitoring. IoT networks often add constraints that make those assumptions weak.

Constraint
Why It Matters
Evidence to Seek
Unreliable placement
Devices may be behind walls, inside equipment, outdoors, underground, mobile, or installed by non-network specialists.
Site plan, RF survey, gateway logs, pilot packet captures, weak-area map.
Low-power operation
Battery nodes cannot always listen, retry, scan, or relay without affecting maintenance intervals.
Duty-cycle estimate, measured current, retransmission rate, firmware sleep behavior.
Mixed traffic
Telemetry, alerts, commands, joins, updates, and maintenance events create different load and latency patterns.
Traffic inventory, peak scenario, queue and retry assumptions, timestamped tests.
Physical exposure
Weather, interference, materials, terrain, and mounting choices affect links after installation.
Environmental assumptions, survey evidence, pilot season or condition notes.
Operational ownership
A design that cannot be provisioned, monitored, updated, or troubleshot will fail even if the topology is sound.
Runbook, ownership map, alerting plan, key rotation process, support boundaries.

A topology choice has to fit the site and the service. In Figure 11.1, star, mesh, tree, and hybrid are options, not a ranking. The worked building case shows why: environmental and occupancy sensing may start with a star-of-stars layout, but walls and equipment rooms still call for a site survey and pilot gateway logs. Later lighting control may need a separate resilient segment because its traffic and fallback needs differ. The comparison helps the team ask which path is weak, which service depends on it, and what field evidence would change the proposed layout.

Comparison of star, mesh, tree, and hybrid IoT network topologies with their main strengths and tradeoffs.
Figure 11.1: Star, mesh, tree, and hybrid topologies solve different deployment constraints; none is automatically best for every IoT system.

Within the visual Figure 11.1, IoT Network Topologies establishes the opening checkpoint because it uses IoT Network Topologies to locate a communication boundary. Star Topology develops the Why IoT Network Design Is Different reading by showing how it uses Star Topology to locate a communication boundary; Mesh Topology completes it by showing where it uses Mesh Topology to locate a communication boundary. The sequence makes Star, mesh, tree, and hybrid topologies solve different deployment constraints; none is automatically best for every IoT system auditable for Why IoT Network Design Is Different.

11.7 The Evidence Types

This section: The Evidence Types — Different evidence types answer different design questions.

Different evidence types answer different design questions. A good network review combines them rather than treating one artifact as proof of everything.

Evidence
Answers
Does Not Prove
Use When
Paper design
Requirements, assumptions, topology options, gateway candidates, risks, and scenarios.
Real radio behavior, installed interference, actual device firmware behavior.
You need the decision question and boundaries made explicit.
Simulation
How a modeled network behaves under selected traffic, topology, failure, and scaling assumptions.
That the model matches the site unless assumptions are validated.
Physical testing is expensive or the team must compare scenarios before pilot work.
Packet capture
What packets, retries, timing, handshakes, and protocol behavior actually occurred.
Long-term coverage across every location or future growth behavior.
You need to diagnose real traffic or validate a pilot.
RF survey
Signal strength, noise, weak zones, gateway placement candidates, and interference clues.
Application behavior, queueing, firmware sleep behavior, or cloud latency.
Coverage and placement are uncertain.
Pilot logs
Installed performance, gateway metrics, outages, battery trend, maintenance workload, and user-facing behavior.
All future scale or weather conditions unless the pilot covers them.
The design is close enough to test in a limited real deployment.

11.8 The First Questions

This section: The First Questions — Before selecting a simulator or drawing a topology, answer these questions.

Before selecting a simulator or drawing a topology, answer these questions.

1. What must work?Name the monitoring, alerting, control, location, metering, or maintenance outcome.
2. Where are nodes?List locations, movement, mounting constraints, obstacles, and gateway access.
3. What traffic exists?Separate periodic telemetry, alerts, commands, joins, updates, and maintenance traffic.
4. What delay is acceptable?Separate dashboards, alarms, local control, batch logging, and maintenance tasks.
5. What can fail?Name tolerable packet loss, gateway outage, backhaul outage, interference, power loss, and maintenance windows.
6. Who operates it?Define ownership, provisioning, segmentation, monitoring, firmware updates, and support process.
Introductory rule: If a network claim cannot be connected to a requirement and an evidence source, it is not ready for a deployment decision.

11.9 The Network Design Sequence

This section: The Network Design Sequence — The design sequence is not strictly linear.

The design sequence is not strictly linear. Teams may loop back when evidence contradicts assumptions. Still, the work usually follows a stable path.

Evidence for The Network Design Sequence starts at Figure 11.2 with Network. Contrast Decision Review against it to make The design loop keeps requirements, models, measurements, validation, and decisions connected reviewable rather than assumed.

Network design review loop showing requirements, candidate design, model, results, field validation, and design basis.
Figure 11.2: The design loop keeps requirements, models, measurements, validation, and decisions connected.

Inspect Figure 11.2 at Network and note that it uses Network to locate a communication boundary. Compare Decision Review, which uses Decision Review to mark a decision point, before reading Requirements as the place that uses Requirements to state a required condition. The comparison turns The design loop keeps requirements, models, measurements, validation, and decisions connected into a bounded The Network Design Sequence choice.

11.9.1 1. Requirements

Define the communication need in terms that can be tested. Record the device classes, their placement, who sends and receives each payload, and how often communication occurs. State the latency target, loss tolerance, command behavior, and expected behavior during failures. These details give later topology and protocol comparisons a clear basis.

Include energy, security, scale, maintenance, and operations in the same requirements record. Note power sources, gateway access, backhaul, update paths, security boundaries, and ownership of installation and monitoring. Replace vague phrases such as “good coverage” or “low latency” with the condition that evidence must test. The requirements should make clear which communication promise is being assessed and under which physical and operational constraints.

11.9.2 2. Candidate Design

Compare topology and protocol options against the stated device, traffic, placement, power, and failure requirements. Star, mesh, tree, star-of-stars, and hybrid patterns represent different tradeoffs rather than levels of maturity. A useful comparison explains why an option fits the service and site, which assumptions it depends on, and which claims still need evidence.

Environmental and occupancy sensing may begin with a star-of-stars proposal, while walls and equipment rooms still require a site survey and pilot gateway logs. Future lighting control may need a separate resilient segment because its traffic and fallback requirements differ. Keep each proposal connected to its reason, risk, and evidence plan, including the field finding that would prompt a topology or segmentation change.

11.9.3 3. Model or Measurement Plan

Choose the smallest evidence plan that can answer the decision question. A table and site walk may be sufficient for some decisions; others require simulation, packet capture, an RF survey, current logging, or a pilot. Select the method by the claim being tested rather than by the availability of a particular tool.

Use an RF survey to investigate coverage, packet capture to examine protocol timing, current logging to assess retry cost, simulation to explore scale assumptions, and pilot logs to examine installed behavior. These sources answer different questions and may need to be combined. Document the assumptions behind the plan and identify the result that would change the proposed design. Simulation results will also need comparison with field evidence.

11.9.4 4. Metrics and Scenarios

Select metrics that directly address the requirement being assessed. Relevant measures may include delivery, latency, jitter, throughput, queue depth, recovery time, battery current, route repair, join behavior, and gateway load. The choice should follow the communication promise: alarm timing calls for latency evidence, while retry cost calls for current measurements.

Assess these measures under relevant normal, peak, failure, environmental, maintenance, and growth conditions. Keep results tied to the scenario and location where they were obtained. Average latency, packet delivery, or gateway load can hide weak locations, burst failures, and retry storms, so use distributions or scenario-specific results where those risks matter. State which metric or field signal would trigger reconsideration of placement, topology, retry limits, segmentation, or fallback behavior.

11.9.5 5. Validation

Compare model claims with field evidence that addresses the same requirement and relevant scenario. Pilot logs show installed behavior, while RF surveys, packet captures, and current traces support checks on coverage, protocol timing, and retry cost. Use these sources according to the claim under review; a topology diagram shows structure but does not establish whether the deployment meets its requirements.

If pilot logs disagree with simulation assumptions, revise the model or the design. Examine distributions or scenario-specific results where averages could hide weak locations or burst failures. Record what the comparison supports, its limitations, and the remaining risks. Simulation credibility depends on this connection to measured behavior, and contradictory evidence may require returning to an earlier design decision.

11.9.6 6. Design Basis

Record the chosen design, rejected alternatives, assumptions, evidence, limitations, remaining risks, and the conditions that would reopen the design. This keeps future maintainers from inheriting an unexplained topology.

Minimum design-basis handoff: include the deployment question, the selected topology and protocol choice, the two or three rejected alternatives, the requirement each choice protects, the evidence source used to support it, the assumption that would invalidate it, and the metric or field signal that would prompt redesign. If any row is blank, the design is still a hypothesis rather than a review-ready choice.

11.10 What Belongs in Later Chapters

This section: What Belongs in Later Chapters — This chapter only sets the mental model.

This chapter only sets the mental model. The next chapters handle the detailed work.

If You Need To
Go To
What You Will Practice
Understand topology tradeoffs
Network Design Fundamentals
Requirements, topology patterns, gateway placement, acceptance criteria.
Choose validation tools
Network Simulation Tools
Tool roles, model types, packet captures, simulation scope, limitations.
Run a disciplined study
Network Design Methodology
Scenario design, assumptions, repeated runs, analysis, refinement, validation.
Judge evidence quality
Network Design Methodology
Assumption logs, scenario design, validation criteria, and redesign triggers.
Inspect measured traffic
Network Traffic Analysis
Packet captures, timing evidence, retry behavior, gateway logs, and diagnosis views.

11.11 Worked Example: A Building Monitor

This section: Worked Example: A Building Monitor — A building team wants environmental monitoring, occupancy insight, and future lighting integration.

A building team wants environmental monitoring, occupancy insight, and future lighting integration. A weak introduction-level response would be “use a mesh network because it is reliable.” A stronger introduction-level response creates an evidence route.

Question
Initial Answer
Risk
Evidence Needed
Device classes
Environmental sensors, occupancy sensors, gateways, and possible future lighting nodes.
Future control traffic may have different latency and fallback needs.
Separate traffic inventory and deployment phases.
Placement
Multiple floors, rooms, service areas, and equipment zones.
Walls, equipment rooms, and floor separation can create weak paths.
Site survey and pilot gateway logs.
Topology
Monitoring can start as star-of-stars; powered lighting may need a separate resilient segment later.
A single shared topology may overcomplicate low-power sensors or under-serve control needs.
Candidate design comparison and segmentation plan.
Validation
Start with a limited pilot before scaling.
A small pilot may miss busy periods, maintenance windows, or seasonal conditions.
Normal, peak, failure, maintenance, and growth scenarios.

The key lesson is not the exact topology. The key lesson is that each decision has a reason, a risk, and an evidence plan.

11.12 Incremental Examples

This section: Incremental Examples — Beginner Example: A classroom temperature logger sends one MQTT message every five minutes through Wi-Fi.

Beginner Example: A classroom temperature logger sends one MQTT message every five minutes through Wi-Fi. The evidence route can stay small: confirm Wi-Fi RSSI at the intended shelf, check DHCP and MQTT reconnect behavior after an access-point restart, and record whether delayed messages are acceptable for a classroom dashboard.

Intermediate Example: A freezer-alarm pilot uses LoRaWAN sensors across a warehouse. The evidence route must include gateway placement, RSSI/SNR by freezer row, spreading factor distribution, join success after a power event, alarm latency percentiles, and battery current during retry bursts. A topology diagram alone cannot show whether the coldest weak-signal corner is safe.

Advanced Example: A campus wants environmental sensing now and lighting control later. Treat monitoring and control as different network promises. Use Thread or Zigbee mesh assumptions only after checking powered-router density, route repair time, command acknowledgement timing, segmentation, commissioning ownership, and fallback behavior if the gateway or cloud path is unavailable.

11.13 Try It Now: Reject a Weak Topology Claim

This section: Try It Now: Reject a Weak Topology Claim — Review this claim: “Use mesh because it is reliable for all building sensors.” Rewrite it as one reviewable network-design statement.

Review this claim: “Use mesh because it is reliable for all building sensors.” Rewrite it as one reviewable network-design statement. Your rewrite should name the device class, traffic type, site constraint, topology option, evidence source, and one condition that would force redesign.

11.14 Micro-Exercise: Pick the Evidence

This section: Micro-Exercise: Pick the Evidence

For a battery sensor that misses alarms during busy periods, choose the first two evidence sources you would request: RF survey, packet capture, current trace, gateway queue metrics, simulator output, support ticket log, or dashboard screenshot. Explain which claim each source can and cannot prove.

11.15 Practice Checks

This section: Practice Checks

Common Pitfalls

This section: Common Pitfalls

Simulation is useful after the team knows what question it is answering. Start with requirements, assumptions, and scenarios.

A diagram shows structure. Evidence shows whether the structure can meet coverage, traffic, latency, energy, failure, and operations requirements.

Average latency, average packet delivery, or average gateway load can hide weak locations, burst failures, retry storms, and tail behavior. Ask for distributions or scenario-specific results where the risk matters.

Deployment success depends on provisioning, monitoring, updates, key management, physical access, documentation, and support ownership. Include operations in the design from the beginning.

11.16 Summary

This section: Summary — First: IoT network design follows an evidence route that connects requirements, topology, model assumptions, metrics, validation, and decisions.

First: IoT network design follows an evidence route that connects requirements, topology, model assumptions, metrics, validation, and decisions.

Next: Simulation is useful when it answers a specific question under documented assumptions; it is not a replacement for requirements or field validation.

Then: Different evidence sources answer different questions: paper design, simulation, packet capture, RF survey, pilot logs, and operations metrics.

After that: A deployment-ready design basis explains the chosen design, rejected alternatives, evidence, limits, and remaining risk.

11.17 See Also

This section: See Also — First: Network Design Fundamentals explains topology and protocol tradeoffs once the communication promise is clear.

First: Network Design Fundamentals explains topology and protocol tradeoffs once the communication promise is clear.

Next: Network Simulation Tools shows when ns-3, OMNeT++/INET, Cooja, packet captures, or RF tools fit a design question.

Then: Network Traffic Analysis teaches packet-capture viewpoints for diagnosing timing, retry, broker, and gateway behavior.

After that: Network Design Methodology turns the evidence route into a repeatable study plan with scenarios and validation boundaries.

References

This section: References — First: IETF RFC 6550, RPL: IPv6 Routing Protocol for Low-Power and Lossy Networks.

First: IETF RFC 6550, RPL: IPv6 Routing Protocol for Low-Power and Lossy Networks.

Next: IETF RFC 7252, The Constrained Application Protocol (CoAP).

Then: IETF RFC 8200, Internet Protocol, Version 6 (IPv6) Specification.

After that: Wireshark, User’s Guide, for packet-capture evidence and troubleshooting.

11.18 What’s Next

This section: What’s Next

If you want to…Read this
Learn topology fundamentals in depthNetwork Design Fundamentals
Explore available validation toolsNetwork Simulation Tools
Apply a disciplined study processNetwork Design Methodology
Judge whether evidence is strong enoughNetwork Design Methodology
Inspect packet and gateway evidenceNetwork Traffic Analysis
PreviousCurrentNext
Design Thinking ValidationNetwork Design IntroductionNetwork Design Fundamentals

11.19 Key Takeaway

This section: Key Takeaway — Start network design by defining the communication need: who talks to whom, how often, with what payload, under what latency, power, and reliability constraints.

Start network design by defining the communication need: who talks to whom, how often, with what payload, under what latency, power, and reliability constraints. Technology selection comes after that.

11.20 Continue Your Route

This section: Continue Your Route — This is the last part of this chapter.

This is the last part of this chapter. Return to Network Design: Tail Risk and Scope or continue from the design-methodology module index.

Find help

3 reviewed answers.

Where should I start in a module?

Open the module page from the sidebar to see its chapters in order. Use the module map to return to a topic you need.

Modules and paths

Reviewed

What can I try when a project does not work?

Check the symptom, then work through the diagnostic steps. Keep the error message and the smallest example that reproduces it.

When you are stuck

Reviewed

How do interactive examples work?

Use the interactive guide to check how examples and simulations work before changing your project.

Interactive examples guide

Reviewed