From n-gate.com: Some academics arrive to tell us that (once - - PowerPoint PPT Presentation

from n gate com some academics arrive to tell us that
SMART_READER_LITE
LIVE PREVIEW

From n-gate.com: Some academics arrive to tell us that (once - - PowerPoint PPT Presentation

From n-gate.com: Some academics arrive to tell us that (once again) they have Fixed The Future Internet that you can Internet, and (once again) it runs on top of the current actually-working internet, use today and (once again) if you


slide-1
SLIDE 1

Future Internet that you can use today

From n-gate.com: Some academics arrive to tell us that (once again) they have Fixed The Internet, and (once again) it runs on top

  • f the current actually-working internet,

and (once again) if you sign up you can communicate with as many as twelve

  • ther computers.

Kamila Součková Mateusz Kowalski

“ ”

FOSDEM 2020

slide-2
SLIDE 2

$ whoami

Mateusz Kowalski

  • I deploy stuff that actually works
  • The bigger it is, the better it works
  • I am not an academic

Kamila Součková

  • I identify problems in systems before

they eat your time, your product, and your family dog

  • I know a bit about a lot of things
slide-3
SLIDE 3

$ whoami

Mateusz Kowalski

  • I deploy stuff that actually works
  • The bigger it is, the better it works
  • I am not an academic

Kamila Součková

  • I identify problems in systems before

they eat your time, your product, and your family dog

  • I know a bit about a lot of things
slide-4
SLIDE 4
  • 1. Designing a new Internet

○ What is wrong with the Internet today? ○ SCION: A clean-slate redesign

  • 2. How can you use it today?

○ Deployment ○ Source code and API ○ Anapaya production network, SCIONLab research network

slide-5
SLIDE 5
  • 1. Designing a new Internet
slide-6
SLIDE 6
slide-7
SLIDE 7

“Throw and Pray” vs Smart End Host

slide-8
SLIDE 8

“Throw and Pray” vs Smart End Host

slide-9
SLIDE 9

route control, failure isolation, and explicit trust information for end-to-end communication

slide-10
SLIDE 10
slide-11
SLIDE 11

Path control in SCION

  • end host selects path (from given options: != source routing)
  • routers just follow the instructions
  • ISP policies enforced (user cannot “invent” paths)
slide-12
SLIDE 12

Isolation Domains (ISDs)

  • an ISD is connected,

but sovereign

  • ISD independently

chooses policies

  • trust + routing in an

ISD are independent

slide-13
SLIDE 13

SCION goodies

  • Scalability

○ routers are stateless ○ hierarchical routing

  • Native multipath
  • Fault tolerance

○ control plane: the usual ○ + “DIY”: if a path stops working, just switch to another one ⇒ instant

slide-14
SLIDE 14
slide-15
SLIDE 15
  • 2. Join the hype train
slide-16
SLIDE 16

Anapaya Production Network

join at www.anapaya.net

slide-17
SLIDE 17

SCIONLab Research Network

join at www.scionlab.org

slide-18
SLIDE 18

“How can I run it?”

  • reference SCION implementation

can run on any server

  • SCION-IP Gateway enables

IP-based applications to transparently use SCION

  • SCION over IP enables mixed

networks

slide-19
SLIDE 19

“Hello world” in SCION

import scion scion.init() paths = scion.get_paths(my_destination) print(f'Got {len(paths)} paths') my_path = my_choose_path(paths) # implement whatever you need with scion.connect(my_destination, my_path) as s: s.write(b'Hello SCION!')

* Python API not final yet; contact us to get an early version

slide-20
SLIDE 20

What can you do with it?

We can’t wait to see:

  • interesting use-cases for path control
  • efficient use of multipath
  • using path awareness for better network utilisation
  • implications for security
  • ISP issues: traffic engineering, path policies...
slide-21
SLIDE 21

DEMO

www.scionlab.org

slide-22
SLIDE 22

Resources

  • https://www.scion-architecture.net
  • https://www.scionlab.org
  • https://www.anapaya.net
  • https://github.com/scionproto/scion
  • https://github.com/netsec-ethz/scion-apps
slide-23
SLIDE 23

Say hi!

skamila@ethz.ch ◆ kowalski@anapaya.net kamila @ freenode ◆ mkowalski @ freenode @kamila:unchat.cat ◆ @mkowalski:matrix.org #scion:inf.ethz.ch Mail: IRC: Matrix: