21  Converged Networks and QoS

networking-core
network
mech
converged

21.1 Start With Traffic That Competes

A converged network carries different kinds of traffic over shared infrastructure. A sensor alarm, maintenance laptop, camera feed, voice call, and cloud sync may all want the same capacity at the same time.

QoS is the decision about what gets protected when the network is busy. The useful design story names the traffic classes, proves the bottlenecks, and shows how priority rules behave under load.

Overview: One Fabric, Many Traffic Classes

A converged network carries voice, video, data, building automation, and IoT traffic on one IP infrastructure. The win is operational: one cabling plant, one switch fabric, one addressing model, and one monitoring surface instead of separate systems for phones, cameras, sensors, and workstations.

The risk is also operational. When every device shares the same fabric, a camera stream, guest download, firmware job, or broadcast storm can delay the alarm packet unless the design includes segmentation, priority, and measured capacity.

Convergence should therefore be described as a contract, not just a topology. The contract states which services share cables and switches, which services remain logically separated, which traffic may cross boundaries, and which packets receive preferential treatment when links are busy. A building may be easier to run when phones, cameras, sensors, access control, and user devices all use IP, but the network still has to respect their different risk profiles. A late guest download is annoyance; a late door-controller message or alarm packet can be a safety and operations failure.

The practical design question is not whether one fabric can carry all traffic. It is whether the shared fabric can preserve each service objective under load. That means the designer needs evidence: VLAN or SSID boundaries, route and firewall rules, queue mappings, priority policing, busy-hour utilization, and test results that show critical traffic still meets latency and loss targets when ordinary traffic is noisy.

Without that evidence, convergence can hide risk behind tidy diagrams. With it, the same fabric becomes reviewable, testable, and maintainable.

Legacy building network diagram showing separate phone, video, data, and automation infrastructures.
Separate networks provide natural isolation, but they duplicate cabling, tools, skills, and maintenance contracts.
Modern converged IP network carrying phones, cameras, computers, and IoT sensors on one managed infrastructure.
Convergence works when the shared fabric still preserves service boundaries for voice, video, control, telemetry, and best-effort data.

Physical Consolidation

Ethernet, Wi-Fi, PoE, IP addressing, and common switching move many building services onto one managed network.

Logical Separation

VLANs, ACLs, SSIDs, network access control, and routing policy keep service classes from becoming one flat failure domain.

Priority Under Load

QoS markings and queue policy protect alarms, control loops, voice, and video when shared links become congested.

Design doctrine: converge the cabling and management plane, not the risk. A strong IoT design can explain which traffic shares infrastructure, which traffic is isolated, which packets receive priority, and what evidence proves the policy holds under load.

Practitioner: Build A Traffic-Class Ledger

A converged design should start with a ledger, not a switch order. The ledger names each service class, its isolation boundary, its expected behavior during congestion, and the test that proves the policy is working.

For each class, record the requirement before choosing the mechanism. Alarms need bounded delivery under competing load. Voice needs low jitter. Cameras need sustained throughput without starving control traffic. Telemetry may tolerate delay, but broker backlog can still hide failures. Guest and maintenance traffic should usually be isolated and shaped. Once those requirements are visible, VLANs, ACLs, DSCP markings, queue policy, policing, and monitoring can be selected to serve an explicit outcome rather than a vendor-default template.

The ledger should also name ownership. Facilities, IT, security, and operations often share a converged network but measure success differently. A useful record states who can approve new devices, who owns QoS marking rules, who reviews firewall exceptions, and which test must be rerun when a gateway, camera, controller, access point, or uplink changes.

Quality of service mechanisms showing traffic classification, marking, queueing, shaping, and forwarding treatment.
QoS is a queueing decision: when links are busy, classified traffic should receive the treatment promised by the design.
Traffic Class
Boundary
Queue Treatment
Evidence To Keep
Life Safety / Alarms
Dedicated VLAN or SSID, restricted sources and destinations, redundant path where required.
Strict priority or highest assured class, with policing to prevent misuse.
Alarm latency under camera, guest, and firmware-load tests.
Control Loops
Separate building-control segment with controller-only access.
Low-latency assured forwarding and bounded retry behavior.
Round-trip latency, packet loss, and controller timeout records.
Voice / Video
Voice VLAN, camera VLAN, or dedicated SSID with known uplink reservations.
Voice receives low jitter; video receives bandwidth without starving alarms.
MOS or jitter records for voice and throughput or dropped-frame records for video.
Telemetry
Sensor segment with broker, gateway, or cloud egress allow-listing.
Best effort or low assured class unless readings are operationally critical.
Delivery rate, broker backlog, and gateway uplink utilization.
Bulk / Guest
Isolated user or maintenance segment with no direct access to control assets.
Best effort, rate limited, or shaped so it cannot consume critical queues.
Rate-limit tests and proof that guest traffic cannot reach IoT control networks.

Mark At The Edge

Classify traffic near the device or access switch, then decide whether to trust, rewrite, or discard DSCP values from endpoints.

Police Priority

A priority queue without rate limits can be abused or misconfigured until it starves every other class.

Test Congestion

QoS is unproven until alarms, control packets, voice, video, telemetry, and guest traffic are tested together at busy-hour load.

Under The Hood: Shared Media And Shared Queues

Two mechanisms decide whether convergence works under pressure. At the access layer, wireless stations contend for airtime with CSMA/CA or a related scheduling method. At the forwarding layer, switches and routers choose which queued packet leaves next.

The important detail is that segmentation and QoS solve different problems. Segmentation controls who can talk to whom and limits broadcast or security blast radius. QoS controls which packet receives service first when a shared resource is congested. A VLAN can isolate cameras from controllers, but it does not make an oversubscribed uplink faster. A priority queue can protect alarms under load, but it does not stop an untrusted device from reaching the wrong subnet unless access policy also exists.

CSMA/CA sequence showing channel sensing, random backoff, transmission, acknowledgement, collision, and contention-window growth.
On shared wireless channels, devices listen before transmitting and use random backoff to reduce repeated collisions.

CSMA/CA improves fairness, but it does not guarantee that every urgent packet can transmit immediately. Dense Wi-Fi, battery devices waking together, hidden nodes, and retries can still create jitter. That is why converged wireless designs need airtime planning, channel reuse, retry limits, and priority mapping from access categories into the wired QoS policy.

End-to-end behavior depends on each hop honoring the same intent. A packet marked as urgent at a sensor may be rewritten at the access point, remapped at the switch, ignored by a router, or policed at a WAN edge. The review should trace a critical packet from device to application and confirm where markings are trusted, where they are rewritten, and where queue limits prevent a misconfigured priority flow from starving the rest of the fabric.

Network slicing and QoS priority diagram showing multiple service classes sharing one physical infrastructure.
Segmentation and queue policy let multiple services share infrastructure without pretending they have identical risk or timing needs.
Mechanism
What It Solves
Boundary
Review Question
VLANs / SSIDs
Separate broadcast domains and access policy on the shared fabric.
They do not create bandwidth or latency guarantees by themselves.
Can an untrusted or bulky class reach a control asset?
DSCP / 802.1p
Carry a priority signal that switches, routers, and wireless access points can map into queues.
Endpoints may lie, mark incorrectly, or be re-marked at domain boundaries.
Where is the packet first trusted, classified, or rewritten?
Priority Queueing
Moves urgent traffic ahead of ordinary traffic when a link is congested.
Unbounded priority traffic can starve every lower queue.
What policing or shaping prevents priority abuse?
Shaping / Policing
Smooths or caps traffic so bulk flows do not dominate shared links.
Incorrect limits can drop useful telemetry or hide real capacity problems.
Are limits tied to measured busy-hour traffic and service objectives?

21.2 Practice: Network QoS Simulator

21.3 Summary

Converged networks reduce duplicated infrastructure by carrying voice, video, data, building automation, and IoT services on one managed IP fabric. They are safe for IoT only when the shared fabric preserves service boundaries: segment traffic classes, classify packets at the edge, police priority use, and test alarms or control traffic while lower-priority traffic is busy.

21.4 Key Takeaway

Converge the infrastructure, not the failure domain: every shared IoT network needs explicit segmentation, QoS treatment, and congestion evidence for each traffic class.

21.5 See Also

Packet Switching and Network Performance

Connect converged-network behavior to multiplexing, queuing, throughput, and delay.

Collision Design and Shared Channels

Plan collision domains and retry behavior for dense IoT networks sharing radio airtime.

Wireless Access: Wi-Fi

Map Wi-Fi airtime, access categories, coverage, and capacity into a converged network.

Network Physical Classification

Compare the physical media choices that can carry a shared IoT service fabric.