SlideShare ist ein Scribd-Unternehmen logo
1 von 16
Downloaden Sie, um offline zu lesen
ISP Mapping
                      (Rocketfuel)

                              Simon Wadsworth




Based on ”Measuring ISP Topologies with Rocketfuel” by Spring et al.
                                            
Why map ISPs?
    ●   Real topologies not public
    ●   Want to see router level conectivity and POP 
         structure




                                 
An ISP
    ●   ISP consists of a bunch of POPs connected by a 
          ”backbone”
    ●   Routers connected to backbone links are 
         ”backbone” or ”core” routers
    ●   Every POP has access
         routers providing layer 
         between ISP backbone 
         and neighboring networks


                                
Selecting Measurements
    ●   Only need to take traceroutes expected to transit 
         ISP
    ●   Only need to take one traceroute when two or more 
         enter and leave the ISP at the same point
    ●   So make use of Directed Probing and Path 
         Reductions




                                  
Directed Probing
    ●   Identify traceroutes that transit ISP
    ●   Dependent prefixes
           ●   Prefixes originated by the ISP or single­homed 
                 customers
           ●   All traceroutes to prefix should transit ISP
           ●   Identified from BGP table
    ●   Insiders
           ●   From traceroute server in a dependent prefix


                                      
Directed Probing
    ●   Up/down traces
           ●   Likely to transit ISP based on AS­path




                                     
Path Reductions
    ●   Ingress Reduction
           ●   Two traceroutes from different vantage points to 
                same destination enter at same point
    ●   Egress Reduction
           ●   Traceroutes from same ingress to any prefix behind 
                 same egress witll be same path
    ●   Next­hop AS Reduction
           ●   Path depends on next­hop AS
           ●   Only one race from ingress router to next­hop AS
 
               is valuable           
Alias Resolution
    ●   Found Mercator was efficient, but missed many 
         aliases
    ●   Created Ally, the IP­ID based method of Alias 
         Resolution
    ●   It finds 3x as many Aliases as previous methods




                                
Router Identification
    ●   DNS
           ●   Geographical Location
           ●   Role in topology


    ●   s1­bb11­nyc­3­0.sprintlink.net
           ●   Sprint Backbone Router
    ●   P4­0­0­0.r01.miamifl01.us.bb.verio.net
           ●   Verio Backbone router

                                   
Rocketfuel




              
Rocketfuel
    ●   Egress Discovery
           ●   Find the egress routers, traceroute to each dependent 
                 prefix from a local machine
           ●   Dependent prefixes may be aggregated
           ●   Break them into /24's
    ●   Tasklist Generation
           ●   Use BGP tables to generate list of directed probes
           ●   Dependent prefixes in directed probes replaced with 
                egresses, and duplicates removed

                                        
Rocketfuel
    ●   Path Reductions
           ●   Take tasklist, apply ingress and next­hop AS 
                reductions and generate jobs
           ●   Checks if predicted ingress or egress was used, then 
                job is complete, otherwise other vantage point is 
                chosen
    ●   Execution Engine
           ●   Handles load­limiting, load balancing and different 
                formats of traceroute output

                                     
Evaluation
    ●   Asked ISPs to validate results – Three ISPs assisted
           ●   ISPs said they didn't miss any POPs
           ●   ISPs said they didn't miss any links between POPs
           ●   Missed some access routers
           ●   Received a Good, Very good and Vgood to Excellent 
                rating from the ISPs
    ●   IP address space
           ●   Scans 60 /24s looking for new routers
           ●   They found that they found approximately 48.6 to 
                78.9% of the routers
                                     
Evaluation
    ●   Comparison with RouteViews
           ●   Check number of adjacencies seen in maps compared 
                to RouteViews
           ●   Router­level map should include one link from a 
                router to one in neighboring AS
           ●   Worst case was 70%
    ●   Comparison with Skitter
           ●   Found 7x as many routers, links and IPs by Skitter


                                     
Impact of Reductions
    ●   Reduced number of traces down to 0.1% of those 
         required by a brute­force technique
    ●   Scales well with number of vantage points




                                
Questions




         

Weitere ähnliche Inhalte

Was ist angesagt?

BGP
BGPBGP

Was ist angesagt? (20)

Border Gateway Protocol (BGP)
Border Gateway Protocol (BGP)Border Gateway Protocol (BGP)
Border Gateway Protocol (BGP)
 
OSPF Summary LSA (Type 3 LSA)
OSPF Summary LSA (Type 3 LSA)OSPF Summary LSA (Type 3 LSA)
OSPF Summary LSA (Type 3 LSA)
 
EIGRP (Enhanced Interior Gateway Routing Protocol)
EIGRP (Enhanced Interior Gateway Routing Protocol)EIGRP (Enhanced Interior Gateway Routing Protocol)
EIGRP (Enhanced Interior Gateway Routing Protocol)
 
EIGRP Authentication & Load Balancing
EIGRP Authentication & Load BalancingEIGRP Authentication & Load Balancing
EIGRP Authentication & Load Balancing
 
BGP Path Selection & Attributes BGP Weight & BGP AS-Path Prepending
BGP Path Selection & Attributes BGP Weight & BGP AS-Path PrependingBGP Path Selection & Attributes BGP Weight & BGP AS-Path Prepending
BGP Path Selection & Attributes BGP Weight & BGP AS-Path Prepending
 
OSPF External Route Summarization
OSPF External Route Summarization OSPF External Route Summarization
OSPF External Route Summarization
 
EIGRP Automatic & Manual Summarization
EIGRP Automatic & Manual SummarizationEIGRP Automatic & Manual Summarization
EIGRP Automatic & Manual Summarization
 
Route Redistribution
Route RedistributionRoute Redistribution
Route Redistribution
 
5242 bgp-ospf-redis
5242 bgp-ospf-redis5242 bgp-ospf-redis
5242 bgp-ospf-redis
 
Bgp training
Bgp trainingBgp training
Bgp training
 
EIGRP Configuration
EIGRP ConfigurationEIGRP Configuration
EIGRP Configuration
 
Routing Protocol EIGRP
Routing Protocol EIGRPRouting Protocol EIGRP
Routing Protocol EIGRP
 
BGP
BGP BGP
BGP
 
Ospf area types
Ospf area typesOspf area types
Ospf area types
 
OSPF LSA Types Explained
OSPF LSA Types ExplainedOSPF LSA Types Explained
OSPF LSA Types Explained
 
EIGRP Routing Protocols
EIGRP Routing ProtocolsEIGRP Routing Protocols
EIGRP Routing Protocols
 
OSPF Internal Route Summarization
OSPF Internal Route SummarizationOSPF Internal Route Summarization
OSPF Internal Route Summarization
 
Ospf
OspfOspf
Ospf
 
BGP
BGPBGP
BGP
 
Ospf
OspfOspf
Ospf
 

Ähnlich wie ISP Mapping

Ospf and eigrp concepts and configuration
Ospf and eigrp concepts and configurationOspf and eigrp concepts and configuration
Ospf and eigrp concepts and configuration
IT Tech
 
Chapter 06 - Routing
Chapter 06 - RoutingChapter 06 - Routing
Chapter 06 - Routing
phanleson
 

Ähnlich wie ISP Mapping (20)

bgp features presentation routing protocle
bgp features presentation routing protoclebgp features presentation routing protocle
bgp features presentation routing protocle
 
Internet standard routing protocols
Internet standard routing protocolsInternet standard routing protocols
Internet standard routing protocols
 
Study Notes BGP Exam
Study Notes BGP ExamStudy Notes BGP Exam
Study Notes BGP Exam
 
Routing protocols
Routing protocolsRouting protocols
Routing protocols
 
ROUTING PROTOCOLS new.pptx
ROUTING PROTOCOLS new.pptxROUTING PROTOCOLS new.pptx
ROUTING PROTOCOLS new.pptx
 
BGP Dynamic Routing and Neutron
BGP Dynamic Routing and NeutronBGP Dynamic Routing and Neutron
BGP Dynamic Routing and Neutron
 
PLNOG 6: Rafał Szarecki - Routing w Sieci - Praktyczne aspekty implementacji ...
PLNOG 6: Rafał Szarecki - Routing w Sieci - Praktyczne aspekty implementacji ...PLNOG 6: Rafał Szarecki - Routing w Sieci - Praktyczne aspekty implementacji ...
PLNOG 6: Rafał Szarecki - Routing w Sieci - Praktyczne aspekty implementacji ...
 
Layer3protocols
Layer3protocolsLayer3protocols
Layer3protocols
 
Dynamic routing protocols (CCNA)
Dynamic routing protocols (CCNA)Dynamic routing protocols (CCNA)
Dynamic routing protocols (CCNA)
 
Ospf and eigrp concepts and configuration
Ospf and eigrp concepts and configurationOspf and eigrp concepts and configuration
Ospf and eigrp concepts and configuration
 
Part 10 : Routing in IP networks and interdomain routing with BGP
Part 10 : Routing in IP networks and interdomain routing with BGPPart 10 : Routing in IP networks and interdomain routing with BGP
Part 10 : Routing in IP networks and interdomain routing with BGP
 
Sept 2017 dynamic routing
Sept 2017   dynamic routingSept 2017   dynamic routing
Sept 2017 dynamic routing
 
3 ip routing bgp-updated
3 ip routing bgp-updated3 ip routing bgp-updated
3 ip routing bgp-updated
 
3 ip routing part b
3 ip routing part b3 ip routing part b
3 ip routing part b
 
Routing Protocol in detail
Routing Protocol in detailRouting Protocol in detail
Routing Protocol in detail
 
Bgp
BgpBgp
Bgp
 
BGP Advanced topics
BGP Advanced topicsBGP Advanced topics
BGP Advanced topics
 
Part8-ibgp.pptx
Part8-ibgp.pptxPart8-ibgp.pptx
Part8-ibgp.pptx
 
Chapter 06 - Routing
Chapter 06 - RoutingChapter 06 - Routing
Chapter 06 - Routing
 
AusNOG 2022: Measuring RPKI use in BGP
AusNOG 2022: Measuring RPKI use in BGPAusNOG 2022: Measuring RPKI use in BGP
AusNOG 2022: Measuring RPKI use in BGP
 

Kürzlich hochgeladen

Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
Joaquim Jorge
 

Kürzlich hochgeladen (20)

Tech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdfTech Trends Report 2024 Future Today Institute.pdf
Tech Trends Report 2024 Future Today Institute.pdf
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Advantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your BusinessAdvantages of Hiring UIUX Design Service Providers for Your Business
Advantages of Hiring UIUX Design Service Providers for Your Business
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024Finology Group – Insurtech Innovation Award 2024
Finology Group – Insurtech Innovation Award 2024
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 

ISP Mapping

  • 1. ISP Mapping (Rocketfuel) Simon Wadsworth Based on ”Measuring ISP Topologies with Rocketfuel” by Spring et al.    
  • 2. Why map ISPs? ● Real topologies not public ● Want to see router level conectivity and POP  structure    
  • 3. An ISP ● ISP consists of a bunch of POPs connected by a  ”backbone” ● Routers connected to backbone links are  ”backbone” or ”core” routers ● Every POP has access routers providing layer  between ISP backbone  and neighboring networks    
  • 4. Selecting Measurements ● Only need to take traceroutes expected to transit  ISP ● Only need to take one traceroute when two or more  enter and leave the ISP at the same point ● So make use of Directed Probing and Path  Reductions    
  • 5. Directed Probing ● Identify traceroutes that transit ISP ● Dependent prefixes ● Prefixes originated by the ISP or single­homed  customers ● All traceroutes to prefix should transit ISP ● Identified from BGP table ● Insiders ● From traceroute server in a dependent prefix    
  • 6. Directed Probing ● Up/down traces ● Likely to transit ISP based on AS­path    
  • 7. Path Reductions ● Ingress Reduction ● Two traceroutes from different vantage points to  same destination enter at same point ● Egress Reduction ● Traceroutes from same ingress to any prefix behind  same egress witll be same path ● Next­hop AS Reduction ● Path depends on next­hop AS ● Only one race from ingress router to next­hop AS   is valuable  
  • 8. Alias Resolution ● Found Mercator was efficient, but missed many  aliases ● Created Ally, the IP­ID based method of Alias  Resolution ● It finds 3x as many Aliases as previous methods    
  • 9. Router Identification ● DNS ● Geographical Location ● Role in topology ● s1­bb11­nyc­3­0.sprintlink.net ● Sprint Backbone Router ● P4­0­0­0.r01.miamifl01.us.bb.verio.net ● Verio Backbone router    
  • 11. Rocketfuel ● Egress Discovery ● Find the egress routers, traceroute to each dependent  prefix from a local machine ● Dependent prefixes may be aggregated ● Break them into /24's ● Tasklist Generation ● Use BGP tables to generate list of directed probes ● Dependent prefixes in directed probes replaced with  egresses, and duplicates removed    
  • 12. Rocketfuel ● Path Reductions ● Take tasklist, apply ingress and next­hop AS  reductions and generate jobs ● Checks if predicted ingress or egress was used, then  job is complete, otherwise other vantage point is  chosen ● Execution Engine ● Handles load­limiting, load balancing and different  formats of traceroute output    
  • 13. Evaluation ● Asked ISPs to validate results – Three ISPs assisted ● ISPs said they didn't miss any POPs ● ISPs said they didn't miss any links between POPs ● Missed some access routers ● Received a Good, Very good and Vgood to Excellent  rating from the ISPs ● IP address space ● Scans 60 /24s looking for new routers ● They found that they found approximately 48.6 to  78.9% of the routers    
  • 14. Evaluation ● Comparison with RouteViews ● Check number of adjacencies seen in maps compared  to RouteViews ● Router­level map should include one link from a  router to one in neighboring AS ● Worst case was 70% ● Comparison with Skitter ● Found 7x as many routers, links and IPs by Skitter    
  • 15. Impact of Reductions ● Reduced number of traces down to 0.1% of those  required by a brute­force technique ● Scales well with number of vantage points