AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft...

19
Anycast census and geolocation AIMS: Workshop on Active Internet Measurements 31 March - 2 April 2015 Cicalese Danilo Jordan Auge Diana Joumblatt Dario Rossi Timur Friedman

Transcript of AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft...

Page 1: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

Anycast census and geolocation AIMS: Workshop on Active Internet

Measurements 31 March - 2 April 2015

Cicalese Danilo Jordan Auge Diana Joumblatt Dario Rossi Timur Friedman

Page 2: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

Here is where the anycast instances are

12

Demo: goo.gl/Ff8gdQ

Page 3: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

Here is where the anycast instances are

13

Demo: goo.gl/Ff8gdQ

Page 4: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

14

  Unicast geolocation techniques fail with anycast IPs!

Motivation

MaxMind

iGreedy

MaxMind

8.8.8.8?????

Page 5: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

15

  Unicast geolocation techniques fail with anycast IPs!

  Microsoft: 204.79.197.215 iGreedy: 54 instancesMaxMind: 1 instance

Motivation

MaxMind

iGreedy

MaxMind

Page 6: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

16

  Unicast geolocation techniques fail with anycast IPs!

  Microsoft: 204.79.197.215 iGreedy: 54 instancesMaxMind: 1 instance

Who is using anycast?  DNS root server  Google DNS  Microsoft  AT&T  CDNs: cloudflare, edgecast

Motivation

iGreedy

MaxMind

Page 7: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

Workflow

17

IP targets

Blacklist

Ground Truth Public Info

[INFOCOM-15a] Cicalese, Danilo, Joumblatt, Diana , Rossi, Dario, Buob, Marc-Olivier , Auge, Jordan and Friedman, Timur , A Fistful of Pings: Accurate and Lightweight Anycast Enumeration and Geolocation . In IEEE INFOCOM, Hong Kong, China, Apr 2015.

Previous Measurement (Ground Truth)

Active measurement

Detection/Geolocation Anycast instances

BGP hijack detection

Validation

Characterization

Ripe Planetlab Ark MLab Dasu …

Microsoft

Page 8: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

18

Challenges

Page 9: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

19

Challenges

Page 10: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

110

Challenges

Page 11: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

111

Challenges

Page 12: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

112

Challenges

Page 13: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

113

Challenges

Page 14: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

114

Ripe

  The number of vantage points Planetlab O(102), Ripe O(103)  How the vantage points are distributed

Planetlab

Recall

Page 15: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

115

Planetlab

Ripe

Recall

  The number of vantage points Planetlab O(102), Ripe O(103)  How the vantage points are distributed

  Target: 199.27.134.71 CloudFlare   Public information: 32 replicas

  Planetlab: 21 replicas  245 Vantage points  29 Country  186 AS

  Ripe: 47 replicas   7289 Vantage points  150 Country  2122 AS

Page 16: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

116

Planetlab Ripe

Spain

France

Middle US Nowhere

Precision

Page 17: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

117

  Census:  10 millions of targets  1 sample/Vp  Probing Rate:1k sample per second  Duration: ~ 3 hours

Scalability/Duration

Scanner Scalabity

Page 18: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

118

  Census:  10 millions of targets  1 sample/VpProbing Rate:1k sample per second  Duration: ~ 3 hours

  FastPing:10k sample per second   Census: ~ 18 min  Lose on recall due the firewalls and filtering

Scalability/Duration

Scanner Scalabity

Page 19: AIMS: Workshop on Active Internet Measurements 31 March ... · DNS root server Google DNS Microsoft AT&T CDNs: cloudflare, edgecast Motivation iGreedy MaxMind . Workflow 17 IP targets

PlanetLabX 300 vantage points(VPs)X Limited geographical coverage~ Accuracy of geolocation ~ Availability issuesV Very flexible Very fast

What we need:Accurate geolocation of the VPIncrease the VP diversityExploit the complementary of the platform

RIPEX 6000 vantage points(VPs)-- More constrained(ICMP, traceroute)X Clean APIX Inherently non scalable

How ark can help us

119