1 <,&+%"& - - PDF document

SLIDE 1

1

• !

"# $%#&! &"& $%#&!

'

& &(& "

n ""&& "&&%%(&! n ( &")! n *&(&"&+&! n )%,&%%&

+(& &!

L L L L

• +(&+&++

n &

n "&&($

n %(&".+"

%( +&/$$/+(&

n 0)&""(%

"&("$

n "&$1"&2-3/ $

1243

4

%+()++

$

,&&+&&&"$

'$

&5&&%"&%/$/

• '672&&

8

+()&+%%"&9&5$

• $

+&+(&+&"&"&$

4$

%&+&(&"+(&$

J J J J

cap

:

+(&"%% )

n

;5"%() ( %&&$

n

+&&(

n

*(&

$

<,&5"+%"&

'$

"""%)9&%"+

• $

5+&

4$

+)

n

""&&&%( $

=

&

$ ("%&/"

,&"5"+%"&

'$ <+&&(""&"

+

• $ >%% 5+&

4$ )"+)(

SLIDE 2

2

?

<,&+%"&

n <,&+&")+(&$

@

,&+%"&!

n <,&+& cap cap cap

A

,&+%"&!

n <,&+& n <&&+"%&12-3$ n B,,&&&&&$

Per path-id queues

1 2 1 1

2

5"+%"&

cap cap cap

cap cap

• 5"+%"&

n *"&,& n ("&(%,&$

cap cap cap cap cap cap

'

&

$ ("%&/"

,&+%"&"5" +%"&

'$ <+&&(""&"

+

• $ >%% 5+&

SLIDE 3

3

• 9&+%+(&

n <&&+++(&,&+&

n (timestamp, hash(src, dst, key, timestamp)

n &&%"+(&

n (N, T, timestamp, hash(pre-cap, N, T)) n &"()&.&"&/$$-'672

&"&

J J J J

pre1 pre2 cap1 cap2

4

"%"+(&

$

%&& &$

'$

&%.+&+C

• $

&%()("&C+D

J J J J

cap1 cap2 data N, T, timestamp, hash(pre-cap, N, T)

:

7""+

n + "&&

"$

n 0*-$';E5*

n +++(&&4=2& n "+(&&4@=& =

7""&

n &%+()&"&%&F$ n B%."+)/

&FF!%&

n (%&&&(""()FF!

J J J J

cap1 cap2 data N, T, timestamp, hash(pre-cap, N, T)

sent + pkt_len N

?

#&&()("&'&"&

T t1 t2 t3

a slot is created a slot is expired

TTL

average rate N/T average rate N/T

t T

bytes N bytes N n %&.+&/"&+()

&"&&F$

t4 t5

@

7""(%,&

n

&+("&(%,&,&$

n

(%"&,&&(""()F< path-identifier queue Validate capability requests per-destination queue regular packets Y N low priority queue legacy packets Queue on most recent tags Keeps a queue if a destination receives faster than a threshold rate R

SLIDE 4

4

A

&

$ ("%&/"

,&+%"&"5" +%"&

'$ <+&&(""&"

+

• $ >%% 5+&

'2

++&(%%

n B"+(&5

&&$

n +)

n 5,&&&

n *(& +)

n 5,&& n +&( &"& n & & &%%

"&$

'

>

''

0 %"%%&&

n BB1243

n ,&")%% &+) n 5"%%&+) n "+(&

n *&(1GH2/"&2'3

n "%

n I)

n (&%% '-

&'+

n "+)&+"+&& n &

n &%%%."%'267! n B%+"&%&

… … 10 legitimate users 1-100 attackers 10Mb bottleneck destination colluder

1Mb 1Mb

'4

&()+%"&

Internet Internet SIFF SIFF pushback pushback TVA TVA

SLIDE 5

5

':

&(,&+%"&

TVA TVA

'=

&(5"+%"&

SIFF SIFF TVA TVA

'?

++&(%%

'@

&

n 6)(

n +& "++()&)&%

%&$

n #"+&+&

n ("%& n 7""&"+ n +"%% 5+&

n .

n &(" +

n <,&/,&

n <(&& "%%

n %% "%%+)

'A

)+&%J&&"

n

("&(%,&$ path-identifier queue Validate capability requests per-destination queue regular packets Y N low priority queue legacy packets

• 2

9&+%+(&

n <&&+++(&,&+&

n (timestamp, hash(src, dst, key, timestamp)

n &&%"+(&

n (N, T, timestamp, hash(pre-cap, N, T)) n &"()&.&"&/$$-'672

&"&

J J J J

pre1 pre2 cap1 cap2 cap1 cap2 data

SLIDE 6

SLIDE 7

ERROR: undefined OFFENDING COMMAND: STACK: