Design of IP Virtual Private Networks under End-to-end QoS Constraints