the real-time Internet routing observatory Pietro G. Giardina - - PowerPoint PPT Presentation

the real-time Internet routing observatory

Pietro G. Giardina – Enrico Gregori – Alessandro Improta Luciano Lenzini – Alessandro Pischedda – Lorenzo Rossi – Luca Sani

Internet

Everyone knows the role of the Internet in our society, but since its commercialization in 1995, no one knows its complete structure anymore

Why is it important to reveal the Internet structure?

In theory... To understand how packets are routed in the Internet To develop more efficient and scalable interdomain routing protocols and architectures To create economy-based models of the global Internet growth To build better topology generators to simulate the Internet ...

Why is it important to reveal the Internet structure?

In practice... To understand how to optimize Internet paths by analyzing possible deficiencies To select data centers for server replicas by taking into account the Internet paths To properly select peers and diversify upstream providers based on their connectivity ...

Why is it important to discover the Internet structure?

... but most of all, to plan an optimal inter-domain network configuration to maintain an acceptable level of service in case of malicious or unintentional faults.

Internet structure: the AS-level

“An AS is a connected group of one or more IP prefixes run by one or more network operators which has a single and clearly defined routing policy”. [RFC 1930] Example of ASes AS 137 GARR AS 2597 ccTLD.it AS 3269 Telecom Italia AS 6882 Rete Telematica Regione Toscana AS 6691 BNL AS 21115 Nestle’ Italia 44,389 AS numbers were found active in January 2013

Data sources

BGP route collector projects Traceroute infrastructures

Data collected are however largely incomplete We quantified the percentage of transit ASes whose connectivity can be discovered as 15.90% using only BGP route collectors and as 23.50% using also Traceroute infrastructures (May 2014)

1

• E. Gregori, A. Improta, L. Lenzini, L. Rossi, L. Sani, ”A Novel Methodology to Address the Internet AS-level Data

Incompleteness”, to appear in IEEE/ACM Transactions on Networking, 2014 2

• A. Faggiani, E. Gregori, A. Improta, L. Lenzini, V. Luconi, L. Sani, ”A Study on Traceroute Potentiality in Revealing the

Internet AS-level Topology”, in Proceedings of IFIP TC-6 Networking, pp. 1-9, Trondheim, Norway, June 2-4 2014

Italian AS-level map completeness

In Feb 2014, there was only one single route collector active in Italy (RIS, rrc10, @MIX in Milan) Out of 742 ASes located in Italy,

• nly 22 ASes were feeding that

route collector Only 10 of them were announcing their full routing table

Our efforts

Traceroute infrastructure Portolan: Network sensing architecture BGP route collector Isolario: the real-time Internet routing observatory

Portolan: Network sensing architecture

Portolan is a crowdsourcing measurement architecture that exploits smartphones to perform traceroute campaigns Thanks to smartphone pervasiveness and crowsourcing, Portolan is able to monitor the Internet from its periphery Last campaign (Aug 2014) discovered 30,890 AS connections unrevealed in AS-level topologies gathered by BGP Route Collectors (+13.53%)

Isolario: the real-time Internet routing observatory

Isolario - The Book of Islands ”where we discuss about all islands of the world, with their ancient and modern names, histories, tales and way of living...” Benedetto Bordone (Italian cartographer)

Isolario is a research project aimed at collecting BGP data from volunteer participants in change of inter-domain related services to help network administrators in troubleshooting reachability issues Participants need to open a BGP session with Isolario providing BGP message related to all the Internet subnets In change, Isolario offers real-time monitoring services based on the aggregation of every routing information collected (do-ut-des)

Classic BGP Route Collector

A Route Collector (RC) is a device which collects BGP routing data from co-operating ASes.

Isolario system overview

Unlike classic route collectors, Isolario uses incoming BGP flows also to create services for the participants

Isolario service classes

Service classes Routing table based services Subnet based services

Routing table based services

Single flow elaboration Service accessible to the owner of the feeder only

Routing table based services

BGP flow viewer Allows a real-time analysis of the UPDATE messages announced to Isolario Routing table viewer Allows to monitor the reachability of a user-selected portion of routing table Route flap detector Allows to identify which prefixes are unstable causing unnecessary traffic

• ver the network

Subnet based services

Multiple flow elaboration on a given subnet Service accessible to the owner of the subnet only

Subnet based services

My subnet reachability Allows to monitor the reachability of each subnet owned by the feeder from the perspective of every other Isolario feeder

Future services

Website reachability: monitors how my AS reaches a website (e.g. www.google.it) Prefix hijack watchdog: monitors hijack attempts from each feeder RIB related to the user subnets and notify such attempts via mail to the user Reachability reports: monitors the feeder routes in every other feeder RIB and provides a daily/weekly/monthly report of announcements/withdrawn via mail to the user Historic applications: exploits existing route collector data (e.g. RouteViews, RIPE NCC RIS) as well as Isolario data, when available, to show the historic version of existing applications (e.g. my subnet reachability or routing table viewer ...

Data we plan to provide to research community

Monthly analyses

1 AS-level Topology (Global and Geographic) 2 Economic AS-level Topology (Global and Geographic) 3 AS characteristics 4 Feeder contribution 5 Total coverage of RCs

MRT data

1 RIB feeder snapshots every 2 hours 2 UPDATE collections every 5 minutes

Current feeders

1 AS 2597 (ccTLD.it) 2 AS 6882 (Regione Toscana) 3 AS 12637 (Seeweb) 4 AS 16004 (MIX) 5 AS 20912 (Panservice) 6 AS 25309 (TOP-IX) 7 AS 24796 (NAMEX) 8 AS 39120 (Convergenze) 9 AS 197440 (ccTLD.it - Anycast) 10 AS 197835 (Ninux)

1 day data gathering Isolario revealed 2483 AS connections unrevealed by other RC projects

Thank you for your attention

Any question? If you want to join Isolario, please contact us: alessandro.improta@iit.cnr.it luca.sani@iit.cnr.it Our publications can be found at www.isolario.it