Download
1 / 29
290 likes | 382 Vues
Delve into the depths of the Internet with insights on network telescopes, Jovian plots, and data analysis. Learn about Internet background radiation, peering strategies, and the NZ Routing Census. Discover how small providers can collectively boost network security. Explore the nuances of predicting IBR arrivals and the significance of CDF plots. Unravel the mysteries of network slicing and the implications for system administrators. Join the quest for knowledge and collaboration in the digital realm. Let's navigate the complex web of data and infrastructure together!
E N D
THE INTERNET A tour of the entire Internet set to a Bach cello suite by YoYo Ma.
Every yeah I get screwed by NZNOG • First up in the morning • Every year the WAND guys try and poison me. • Scheduled time gets longer • Multiple talks. • Being a member of the program committee didn’t seem to help this. • Stop the madness!
Internet Compost (gnu doo)
Math content • Not too bad - Don’t be scared. • If I can do it, you can too.
Network Content • Don’t be scared if you’re a: • First time NZNOG visitor. • New to Networking. • Recently suffered head trauma. • System Administrator.
Internet Background Radiation and Network Telescopes • 2 second version • A whole video from 2 years ago if you want to know more.
Jovian Plot • Short version • A whole video from last year if you want to know more.
Can one slice predict another? • Can we use one of these slices (networks) to predict the IBR arriving at another slice (network)?
95% chance 95% of the time • 30 Random IP addresses per /24 can predict the arrivals (with 95% confidence) at the other addresses 95% of the time. (Phew - what a mouthfull)
What this means. • If you donate 30 addresses, • And your neighbours do the same, • You can predict the IBR arrivals on the rest of your IP addresses 95% of the time.
Compost peering • Would you like some of my waste?
Team approach • Everyone needs to be involved. • No small provider can do this alone • Useless to use your 24 to detect for your neighbour (horizontal slicing == bad)
It has benefit for New Zealand Network operators. • Generally small clustered address ranges. • Telcos and Carriers don’t NEED to be involved. • Eg 203/8 and 202/8
Outcomes • On a 24 level you can detect your own • Give users a webpage telling them weather • You can detect for your neighbours • Weathr forcasring • Same order
Other people • Dshield - Cant tell whats good or bad. • Paranoid people with Eye-See-Em-Pee attack. • Team Cymru - Trying to do this on the whole net - Large target market. Need IPs in every place due to lack of IBR spacial uniformaity • CAIDA / UCSD - Backscatter
Large telescope • Large telescope can be avoided • This can not be avoided - because it’s IS the address range. If they avoid it • Then we’re all good • If they don’t’ avoid then the will hit the tripwires
NZ Routing Census • What DO we mean by an National Table? • 202/8 space • 203/8 space • Other… • See if we can get enough coverage
How do we do this? • Central point of Compost collection. • Distributed collection. • We need distributed small addresses, not large blocks. • Holes from supernets (even as small as /32s) • Spare addresses from dialup pools. • Real time vs Batch processing • You run the infrastructure can be batch • Centrally run down GRE tunnel
Extended • Number of src addresses • Dest ports • Active monitoring • Worms one part worse than others • Wix and Ape were not built in a day • Big data sets are useful
Where to from here. • Look for a place to host. • Deploy infrastructure • Gather interested parties • Conduct Census • Gather useful statistics • Step 3: Profit!
