首页 > 最新文献

ACM Sigcomm Computer Communication Review最新文献

英文 中文
Measuring DNS over TCP in the era of increasing DNS response sizes 在DNS响应量不断增加的时代,通过TCP测量DNS
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-04-30 DOI: 10.1145/3544912.3544918
Mike Kosek, T. Doan, Simon Huber, Vaibhav Bajpai
The Domain Name System (DNS) is one of the most crucial parts of the Internet. Although the original standard defined the usage of DNS over UDP (DoUDP) as well as DNS over TCP (DoTCP), UDP has become the predominant protocol used in the DNS. With the introduction of new Resource Records (RRs), the sizes of DNS responses have increased considerably. Since this can lead to truncation or IP fragmentation, the fallback to DoTCP as required by the standard ensures successful DNS responses by overcoming the size limitations of DoUDP. However, the effects of the usage of DoTCP by stub resolvers are not extensively studied to this date. We close this gap by presenting a view at DoTCP from the Edge, issuing 12.1M DNS requests from 2,500 probes toward Public as well as Probe DNS recursive resolvers. In our measurement study, we observe that DoTCP is generally slower than DoUDP, where the relative increase in Response Time is less than 37% for most resolvers. While optimizations to DoTCP can be leveraged to further reduce the response times, we show that support on Public resolvers is still missing, hence leaving room for optimizations in the future. Moreover, we also find that Public resolvers generally have comparable reliability for DoTCP and DoUDP. However, Probe resolvers show a significantly different behavior: DoTCP queries targeting Probe resolvers fail in 3 out of 4 cases, and, therefore, do not comply with the standard. This problem will only aggravate in the future: As DNS response sizes will continue to grow, the need for DoTCP will solidify.
域名系统(DNS)是互联网最重要的组成部分之一。虽然最初的标准定义了DNS over UDP (DoUDP)和DNS over TCP (DoTCP)的使用,但UDP已经成为DNS中使用的主要协议。随着新的资源记录(rr)的引入,DNS响应的大小大大增加。由于这可能导致截断或IP碎片,因此标准要求退回到DoTCP,通过克服DoUDP的大小限制来确保成功的DNS响应。然而,到目前为止,存根解析器使用DoTCP的影响还没有得到广泛的研究。我们通过在DoTCP边缘展示一个视图来缩小这个差距,从2,500个探针向公共和探针DNS递归解析器发出121m个DNS请求。在我们的测量研究中,我们观察到DoTCP通常比DoUDP慢,在DoUDP中,对于大多数解析器,响应时间的相对增加小于37%。虽然可以利用对DoTCP的优化来进一步减少响应时间,但我们表明对公共解析器的支持仍然缺失,因此为未来的优化留下了空间。此外,我们还发现公共解析器对于DoTCP和DoUDP通常具有相当的可靠性。然而,探测解析器表现出明显不同的行为:针对探测解析器的DoTCP查询在4种情况中有3种失败,因此不符合标准。这个问题在未来只会加剧:随着DNS响应大小的持续增长,对DoTCP的需求将会固化。
{"title":"Measuring DNS over TCP in the era of increasing DNS response sizes","authors":"Mike Kosek, T. Doan, Simon Huber, Vaibhav Bajpai","doi":"10.1145/3544912.3544918","DOIUrl":"https://doi.org/10.1145/3544912.3544918","url":null,"abstract":"The Domain Name System (DNS) is one of the most crucial parts of the Internet. Although the original standard defined the usage of DNS over UDP (DoUDP) as well as DNS over TCP (DoTCP), UDP has become the predominant protocol used in the DNS. With the introduction of new Resource Records (RRs), the sizes of DNS responses have increased considerably. Since this can lead to truncation or IP fragmentation, the fallback to DoTCP as required by the standard ensures successful DNS responses by overcoming the size limitations of DoUDP. However, the effects of the usage of DoTCP by stub resolvers are not extensively studied to this date. We close this gap by presenting a view at DoTCP from the Edge, issuing 12.1M DNS requests from 2,500 probes toward Public as well as Probe DNS recursive resolvers. In our measurement study, we observe that DoTCP is generally slower than DoUDP, where the relative increase in Response Time is less than 37% for most resolvers. While optimizations to DoTCP can be leveraged to further reduce the response times, we show that support on Public resolvers is still missing, hence leaving room for optimizations in the future. Moreover, we also find that Public resolvers generally have comparable reliability for DoTCP and DoUDP. However, Probe resolvers show a significantly different behavior: DoTCP queries targeting Probe resolvers fail in 3 out of 4 cases, and, therefore, do not comply with the standard. This problem will only aggravate in the future: As DNS response sizes will continue to grow, the need for DoTCP will solidify.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"34 1","pages":"44 - 55"},"PeriodicalIF":2.8,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"77862925","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Recommendations for designing hybrid conferences 设计混合会议的建议
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-04-30 DOI: 10.1145/3544912.3544920
Vaibhav Bajpai, O. Hohlfeld, J. Crowcroft, S. Keshav, H. Schulzrinne, J. Ott, Simone Ferlin Oliveira, Georg Carle, Andrè L. Hines, A. Raake
During the COVID-19 pandemic, many smaller conferences have moved entirely online and larger ones are being held as hybrid events. Even beyond the pandemic, hybrid events reduce the carbon footprint of conference travel and makes events more accessible to parts of the research community that have difficulty traveling long distances, while preserving most advantages of in-person gatherings. While we have developed a solid understanding of how to design virtual events over the last two years, we are still learning how to properly run hybrid events. We present guidelines and considerations-spanning technology, organization and social factors-for organizing successful hybrid conferences. This paper summarizes and extends the discussions held at the Dagstuhl seminar on "Climate Friendly Internet Research" held in July 2021.
在2019冠状病毒病大流行期间,许多小型会议完全转向在线,而大型会议则以混合活动的形式举行。即使在大流行期间,混合活动也减少了会议旅行的碳足迹,使难以长途旅行的研究界人士更容易参加会议,同时保留了面对面聚会的大部分优势。虽然在过去的两年中,我们已经对如何设计虚拟事件有了深入的了解,但我们仍在学习如何正确运行混合事件。我们提出了指导方针和考虑-跨越技术,组织和社会因素-组织成功的混合会议。本文对2021年7月在Dagstuhl举行的“气候友好型互联网研究”研讨会的讨论进行了总结和延伸。
{"title":"Recommendations for designing hybrid conferences","authors":"Vaibhav Bajpai, O. Hohlfeld, J. Crowcroft, S. Keshav, H. Schulzrinne, J. Ott, Simone Ferlin Oliveira, Georg Carle, Andrè L. Hines, A. Raake","doi":"10.1145/3544912.3544920","DOIUrl":"https://doi.org/10.1145/3544912.3544920","url":null,"abstract":"During the COVID-19 pandemic, many smaller conferences have moved entirely online and larger ones are being held as hybrid events. Even beyond the pandemic, hybrid events reduce the carbon footprint of conference travel and makes events more accessible to parts of the research community that have difficulty traveling long distances, while preserving most advantages of in-person gatherings. While we have developed a solid understanding of how to design virtual events over the last two years, we are still learning how to properly run hybrid events. We present guidelines and considerations-spanning technology, organization and social factors-for organizing successful hybrid conferences. This paper summarizes and extends the discussions held at the Dagstuhl seminar on \"Climate Friendly Internet Research\" held in July 2021.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"14 1","pages":"63 - 69"},"PeriodicalIF":2.8,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"82019967","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Hyper-specific prefixes 专门化的前缀
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-04-30 DOI: 10.1145/3544912.3544916
Khwaja Zubair Sediqi, Lars Prehn, Oliver Gasser
Autonomous Systems (ASes) exchange reachability information between each other using BGP---the de-facto standard inter-AS routing protocol. While IPv4 (IPv6) routes more specific than /24 (/48) are commonly filtered (and hence not propagated), route collectors still observe many of them. In this work, we take a closer look at those "hyper-specific" prefixes (HSPs). In particular, we analyze their prevalence, use cases, and whether operators use them intentionally or accidentally. While their total number increases over time, most HSPs can only be seen by route collector peers. Nonetheless, some HSPs can be seen constantly throughout an entire year and propagate widely. We find that most HSPs represent (internal) routes to peering infrastructure or are related to address block relocations or blackholing. While hundreds of operators intentionally add HSPs to well-known routing databases, we observe that many HSPs are possibly accidentally leaked routes.
自治系统(as)使用BGP交换彼此之间的可达性信息——事实上的标准as间路由协议。虽然比/24(/48)更具体的IPv4 (IPv6)路由通常被过滤(因此不传播),但路由收集器仍然观察到许多路由。在这项工作中,我们仔细研究了这些“超特异性”前缀(HSPs)。特别是,我们分析了它们的流行程度、用例,以及运营商是有意还是无意地使用它们。虽然它们的总数随着时间的推移而增加,但大多数hsp只能被路由收集器对等体看到。尽管如此,一些热休克蛋白可以持续一整年并且广泛传播。我们发现大多数hsp代表对等基础设施的(内部)路由或与地址块重定位或黑洞有关。虽然数百家运营商有意将HSPs添加到知名的路由数据库中,但我们观察到许多HSPs可能是意外泄露的路由。
{"title":"Hyper-specific prefixes","authors":"Khwaja Zubair Sediqi, Lars Prehn, Oliver Gasser","doi":"10.1145/3544912.3544916","DOIUrl":"https://doi.org/10.1145/3544912.3544916","url":null,"abstract":"Autonomous Systems (ASes) exchange reachability information between each other using BGP---the de-facto standard inter-AS routing protocol. While IPv4 (IPv6) routes more specific than /24 (/48) are commonly filtered (and hence not propagated), route collectors still observe many of them. In this work, we take a closer look at those \"hyper-specific\" prefixes (HSPs). In particular, we analyze their prevalence, use cases, and whether operators use them intentionally or accidentally. While their total number increases over time, most HSPs can only be seen by route collector peers. Nonetheless, some HSPs can be seen constantly throughout an entire year and propagate widely. We find that most HSPs represent (internal) routes to peering infrastructure or are related to address block relocations or blackholing. While hundreds of operators intentionally add HSPs to well-known routing databases, we observe that many HSPs are possibly accidentally leaked routes.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"249 1","pages":"20 - 34"},"PeriodicalIF":2.8,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"80675085","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
A case for an open customizable cloud network 一个开放的可定制云网络的案例
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-04-30 DOI: 10.1145/3544912.3544919
K. Barabash, David Breitgand, Etai Lev-Ran, D. Lorenz, D. Raz
Cloud computing is transforming networking landscape over the last few years. The first order of business for major cloud providers today is to attract as many organizations as possible to their own clouds. To that end cloud providers offer a new generation of managed network solutions to connect the premises of the enterprises to their clouds. To serve their customers better and to innovate fast, major cloud providers are currently on the route to building their own "private Internets", which are idiosyncratic. On the other hand, customers that do not want to stay locked by vendors and who want flexibility in using best-for-the-task services spanning multiple clouds and, possibly, their own premises, seek for solutions that will provide smart overlay connectivity across clouds. The result of these developments is a multiplication of closed idiosyncratic solutions rather than an open standardized ecosystem. In this editorial note we argue for desirability of such an ecosystem, outline the main requirements and sketch possible solutions. We focus on enterprise as our primary use case and illustrate the main ideas through it, but the same principles apply to various different use cases.
在过去的几年里,云计算正在改变网络的格局。今天,主要云提供商的首要任务是吸引尽可能多的组织使用他们自己的云。为此,云提供商提供了新一代的托管网络解决方案,将企业的场所连接到他们的云。为了更好地为客户服务并快速创新,主要的云提供商目前正在构建自己的“私有互联网”,这是一种独特的方式。另一方面,不希望被供应商锁定的客户,以及希望在使用跨多个云和可能的自己的场所的最佳任务服务方面具有灵活性的客户,寻求能够跨云提供智能覆盖连接的解决方案。这些发展的结果是封闭的特殊解决方案的倍增,而不是开放的标准化生态系统。在这篇社论中,我们论证了这样一个生态系统的可取性,概述了主要需求,并概述了可能的解决方案。我们将企业作为我们的主要用例,并通过它说明主要思想,但是相同的原则适用于各种不同的用例。
{"title":"A case for an open customizable cloud network","authors":"K. Barabash, David Breitgand, Etai Lev-Ran, D. Lorenz, D. Raz","doi":"10.1145/3544912.3544919","DOIUrl":"https://doi.org/10.1145/3544912.3544919","url":null,"abstract":"Cloud computing is transforming networking landscape over the last few years. The first order of business for major cloud providers today is to attract as many organizations as possible to their own clouds. To that end cloud providers offer a new generation of managed network solutions to connect the premises of the enterprises to their clouds. To serve their customers better and to innovate fast, major cloud providers are currently on the route to building their own \"private Internets\", which are idiosyncratic. On the other hand, customers that do not want to stay locked by vendors and who want flexibility in using best-for-the-task services spanning multiple clouds and, possibly, their own premises, seek for solutions that will provide smart overlay connectivity across clouds. The result of these developments is a multiplication of closed idiosyncratic solutions rather than an open standardized ecosystem. In this editorial note we argue for desirability of such an ecosystem, outline the main requirements and sketch possible solutions. We focus on enterprise as our primary use case and illustrate the main ideas through it, but the same principles apply to various different use cases.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"250 1","pages":"56 - 62"},"PeriodicalIF":2.8,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"86706884","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Programming socket-independent network functions with nethuns 用nethun编程与套接字无关的网络功能
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-04-30 DOI: 10.1145/3544912.3544917
Nicola Bonelli, F. D. Vigna, Alessandra Fais, G. Lettieri, G. Procissi
Software data planes running on commodity servers are very popular in real deployments. However, to attain top class performance, the software approach requires the adoption of accelerated network I/O frameworks, each of them characterized by its own programming model and API. As a result, network applications are often closely tied to the underlying technology, with obvious issues of portability over different systems. This is especially true in cloud scenarios where different I/O frameworks could be installed depending on the configuration of the physical servers in the infrastructure. The nethuns library proposes a unified programming abstraction to access and manage network operations over different I/O frameworks. The library is freely available to the community under the BSD license and currently supports AF_XDP and netmap for fast packet handling along with the classic AF_PACKET and the pcap library. Network applications based on nethuns need only to be re-compiled to run over a different network API. The experiments prove that the overhead introduced by nethuns is negligible, hence making it a convenient programming platform that eases the coding process while guaranteeing high performance and portability. As proofs of concept, a handy traffic generator as well as the popular Open vSwitch application have been successfully ported and tested over nethuns.
运行在商用服务器上的软件数据平面在实际部署中非常流行。然而,为了获得一流的性能,软件方法需要采用加速的网络I/O框架,每个框架都有自己的编程模型和API。因此,网络应用程序通常与底层技术紧密相连,在不同系统之间存在明显的可移植性问题。在云场景中尤其如此,在云场景中,可以根据基础架构中物理服务器的配置安装不同的I/O框架。nethuns库提出了一个统一的编程抽象来访问和管理不同I/O框架上的网络操作。该库在BSD许可下免费提供给社区,目前支持AF_XDP和netmap,用于快速数据包处理,以及经典的AF_PACKET和pcap库。基于nethun的网络应用程序只需要重新编译以在不同的网络API上运行。实验证明,nethuns带来的开销可以忽略不计,因此使其成为一个方便的编程平台,在保证高性能和可移植性的同时简化了编码过程。作为概念的证明,一个方便的流量生成器以及流行的Open vSwitch应用程序已经成功地移植并在nethns上进行了测试。
{"title":"Programming socket-independent network functions with nethuns","authors":"Nicola Bonelli, F. D. Vigna, Alessandra Fais, G. Lettieri, G. Procissi","doi":"10.1145/3544912.3544917","DOIUrl":"https://doi.org/10.1145/3544912.3544917","url":null,"abstract":"Software data planes running on commodity servers are very popular in real deployments. However, to attain top class performance, the software approach requires the adoption of accelerated network I/O frameworks, each of them characterized by its own programming model and API. As a result, network applications are often closely tied to the underlying technology, with obvious issues of portability over different systems. This is especially true in cloud scenarios where different I/O frameworks could be installed depending on the configuration of the physical servers in the infrastructure. The nethuns library proposes a unified programming abstraction to access and manage network operations over different I/O frameworks. The library is freely available to the community under the BSD license and currently supports AF_XDP and netmap for fast packet handling along with the classic AF_PACKET and the pcap library. Network applications based on nethuns need only to be re-compiled to run over a different network API. The experiments prove that the overhead introduced by nethuns is negligible, hence making it a convenient programming platform that eases the coding process while guaranteeing high performance and portability. As proofs of concept, a handy traffic generator as well as the popular Open vSwitch application have been successfully ported and tested over nethuns.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"58 1","pages":"35 - 48"},"PeriodicalIF":2.8,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"80046721","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
P4RROT: Generating P4 Code for the Application Layer P4RROT:为应用层生成P4代码
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-04-06 DOI: 10.1145/3594255.3594258
Csaba Györgyi, S. Laki, S. Schmid
Throughput and latency critical applications could often benefit of performing computations close to the client. To enable this, distributed computing paradigms such as edge computing have recently emerged. However, with the advent of programmable data planes, computations cannot only be performed by servers but they can be offloaded to network switches. Languages like P4 enable to flexibly reprogram the entire packet processing pipeline. Though these devices promise high throughput and ultra-low response times, implementing application-layer tasks in the data plane programming language P4 is still challenging for an application developer who is not familiar with networking domain. In this paper, we first identify and examine obstacles and pain points one can experience when offloading server-based computations to the network. Then we present P4rrot, a code generator (in form of a library) which allows to overcome these limitations by providing a user-friendly API to describe computations to be offloaded. After discussing the design choices behind P4rrot, we introduce our proof-of-concept implementation for two P4 targets: Netronome SmartNIC and BMv2. To demonstrate the applicability of P4rrot, we investigate case studies in the context of publish-subscribe sensor data processing and real-time data streaming, supporting, in particular, MQTT-SN and MoldUDP packets.
吞吐量和延迟关键型应用程序通常可以从靠近客户机执行计算中获益。为了实现这一点,最近出现了诸如边缘计算之类的分布式计算范式。然而,随着可编程数据平面的出现,计算不仅可以由服务器执行,还可以卸载到网络交换机上。像P4这样的语言可以灵活地重新编程整个包处理管道。尽管这些设备承诺高吞吐量和超低响应时间,但对于不熟悉网络领域的应用程序开发人员来说,在数据平面编程语言P4中实现应用层任务仍然具有挑战性。在本文中,我们首先确定并检查在将基于服务器的计算卸载到网络时可能遇到的障碍和痛点。然后我们介绍了P4rrot,这是一个代码生成器(以库的形式),它通过提供一个用户友好的API来描述要卸载的计算,从而克服了这些限制。在讨论了P4rrot背后的设计选择之后,我们介绍了两个P4目标的概念验证实现:Netronome SmartNIC和BMv2。为了证明P4rrot的适用性,我们在发布-订阅传感器数据处理和实时数据流的背景下进行了案例研究,特别是支持MQTT-SN和MoldUDP数据包。
{"title":"P4RROT: Generating P4 Code for the Application Layer","authors":"Csaba Györgyi, S. Laki, S. Schmid","doi":"10.1145/3594255.3594258","DOIUrl":"https://doi.org/10.1145/3594255.3594258","url":null,"abstract":"Throughput and latency critical applications could often benefit of performing computations close to the client. To enable this, distributed computing paradigms such as edge computing have recently emerged. However, with the advent of programmable data planes, computations cannot only be performed by servers but they can be offloaded to network switches. Languages like P4 enable to flexibly reprogram the entire packet processing pipeline. Though these devices promise high throughput and ultra-low response times, implementing application-layer tasks in the data plane programming language P4 is still challenging for an application developer who is not familiar with networking domain. In this paper, we first identify and examine obstacles and pain points one can experience when offloading server-based computations to the network. Then we present P4rrot, a code generator (in form of a library) which allows to overcome these limitations by providing a user-friendly API to describe computations to be offloaded. After discussing the design choices behind P4rrot, we introduce our proof-of-concept implementation for two P4 targets: Netronome SmartNIC and BMv2. To demonstrate the applicability of P4rrot, we investigate case studies in the context of publish-subscribe sensor data processing and real-time data streaming, supporting, in particular, MQTT-SN and MoldUDP packets.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"28 1","pages":"30 - 37"},"PeriodicalIF":2.8,"publicationDate":"2022-04-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"81632403","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
One bad apple can spoil your IPv6 privacy 一个坏苹果可以破坏你的IPv6隐私
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-03-16 DOI: 10.1145/3544912.3544915
Said Jawad Saidi, Oliver Gasser, Georgios Smaragdakis
IPv6 is being more and more adopted, in part to facilitate the millions of smart devices that have already been installed at home. Unfortunately, we find that the privacy of a substantial fraction of end-users is still at risk, despite the efforts by ISPs and electronic vendors to improve end-user security, e.g., by adopting prefix rotation and IPv6 privacy extensions. By analyzing passive data from a large ISP, we find that around 19% of end-users' privacy can be at risk. When we investigate the root causes, we notice that a single device at home that encodes its MAC address into the IPv6 address can be utilized as a tracking identifier for the entire end-user prefix---even if other devices use IPv6 privacy extensions. Our results show that IoT devices contribute the most to this privacy leakage and, to a lesser extent, personal computers and mobile devices. To our surprise, some of the most popular IoT manufacturers have not yet adopted privacy extensions that could otherwise mitigate this privacy risk. Finally, we show that third-party providers, e.g., hypergiants, can track up to 17% of subscriber lines in our study.
IPv6正被越来越多的人采用,部分原因是为了方便已经安装在家中的数百万智能设备。不幸的是,我们发现,尽管互联网服务提供商和电子供应商努力提高最终用户的安全性,例如采用前缀轮换和IPv6隐私扩展,但很大一部分最终用户的隐私仍然处于危险之中。通过分析来自大型ISP的被动数据,我们发现大约19%的最终用户的隐私可能处于危险之中。当我们调查根本原因时,我们注意到,在家中将其MAC地址编码为IPv6地址的单个设备可以用作整个最终用户前缀的跟踪标识符-即使其他设备使用IPv6隐私扩展。我们的研究结果表明,物联网设备对这种隐私泄露的贡献最大,个人电脑和移动设备的影响较小。令我们惊讶的是,一些最受欢迎的物联网制造商还没有采用隐私扩展,否则就会降低这种隐私风险。最后,我们表明第三方提供商,例如,在我们的研究中,可以跟踪高达17%的用户线路。
{"title":"One bad apple can spoil your IPv6 privacy","authors":"Said Jawad Saidi, Oliver Gasser, Georgios Smaragdakis","doi":"10.1145/3544912.3544915","DOIUrl":"https://doi.org/10.1145/3544912.3544915","url":null,"abstract":"IPv6 is being more and more adopted, in part to facilitate the millions of smart devices that have already been installed at home. Unfortunately, we find that the privacy of a substantial fraction of end-users is still at risk, despite the efforts by ISPs and electronic vendors to improve end-user security, e.g., by adopting prefix rotation and IPv6 privacy extensions. By analyzing passive data from a large ISP, we find that around 19% of end-users' privacy can be at risk. When we investigate the root causes, we notice that a single device at home that encodes its MAC address into the IPv6 address can be utilized as a tracking identifier for the entire end-user prefix---even if other devices use IPv6 privacy extensions. Our results show that IoT devices contribute the most to this privacy leakage and, to a lesser extent, personal computers and mobile devices. To our surprise, some of the most popular IoT manufacturers have not yet adopted privacy extensions that could otherwise mitigate this privacy risk. Finally, we show that third-party providers, e.g., hypergiants, can track up to 17% of subscriber lines in our study.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"6 1","pages":"10 - 19"},"PeriodicalIF":2.8,"publicationDate":"2022-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"81532605","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 14
M-Lab m - lab
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-01-30 DOI: 10.1145/3523230.3523236
Phillipa Gill, C. Diot, Lai Yi Ohlsen, M. Mathis, Stephen Soltesz
Measurement Lab (M-Lab) is an open, distributed server platform on which researchers have deployed measurement tools. Its mission is to measure the Internet, save the data and make it universally accessible and useful. This paper serves as an update on the MLab platform 10+ years after its initial introduction to the research community [5]. Here, we detail the current state of the M-Lab distributed platform, highlights existing measurements/data available on the platform, and describes opportunities for further engagement between the networking research community and the platform.
测量实验室(M-Lab)是一个开放的分布式服务器平台,研究人员在其上部署了测量工具。它的使命是衡量互联网,保存数据,并使其普遍可访问和有用。本文在MLab平台首次引入研究界10多年后对其进行了更新[5]。在这里,我们详细介绍了M-Lab分布式平台的现状,重点介绍了平台上现有的测量/数据,并描述了网络研究社区和平台之间进一步合作的机会。
{"title":"M-Lab","authors":"Phillipa Gill, C. Diot, Lai Yi Ohlsen, M. Mathis, Stephen Soltesz","doi":"10.1145/3523230.3523236","DOIUrl":"https://doi.org/10.1145/3523230.3523236","url":null,"abstract":"Measurement Lab (M-Lab) is an open, distributed server platform on which researchers have deployed measurement tools. Its mission is to measure the Internet, save the data and make it universally accessible and useful. This paper serves as an update on the MLab platform 10+ years after its initial introduction to the research community [5]. Here, we detail the current state of the M-Lab distributed platform, highlights existing measurements/data available on the platform, and describes opportunities for further engagement between the networking research community and the platform.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"73 1 1","pages":"34 - 37"},"PeriodicalIF":2.8,"publicationDate":"2022-01-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"87757353","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Answering three questions about networking research 回答三个关于网络研究的问题
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-01-30 DOI: 10.1145/3523230.3523238
J. Rexford, S. Shenker
Researchers often talk about specific technical trends or research topics. But we rarely talk about how and why we do the research that we do. The process of submitting and reviewing papers puts our ideas through a particular kind of filter that may make all of the research seem like it follows some standard rubric, a SIGCOMM Normal Form if you will. During a panel at HotNets'21, five researchers---Hari Balakrishnan, Jon Crowcroft, Jennifer Rexford, Scott Shenker, and David Tennenhouse---each answered three questions about how they pick their own research topics, what areas they would like to see more research on, and how they evaluate conference papers. Due to the unexpectedly positive response to that panel, CCR will be publishing a series of answers to these three questions, starting with two participants from the panel but reaching out to others to provide answers from a broader cross-section of the SIGCOMM community.
研究人员经常谈论特定的技术趋势或研究主题。但我们很少谈论我们如何以及为什么做我们所做的研究。提交和审查论文的过程使我们的想法通过了一种特殊的过滤器,这可能会使所有的研究看起来都遵循一些标准的规则,如果你愿意的话,一个SIGCOMM标准形式。在HotNets'21的一个小组讨论中,五位研究人员——Hari Balakrishnan, Jon Crowcroft, Jennifer Rexford, Scott Shenker和David Tennenhouse——每人回答了三个问题,关于他们如何选择自己的研究主题,他们希望在哪些领域看到更多的研究,以及他们如何评估会议论文。由于对该小组的积极回应出乎意料,CCR将发布一系列关于这三个问题的答案,从小组的两位参与者开始,但会向其他人提供来自SIGCOMM社区更广泛的答案。
{"title":"Answering three questions about networking research","authors":"J. Rexford, S. Shenker","doi":"10.1145/3523230.3523238","DOIUrl":"https://doi.org/10.1145/3523230.3523238","url":null,"abstract":"Researchers often talk about specific technical trends or research topics. But we rarely talk about how and why we do the research that we do. The process of submitting and reviewing papers puts our ideas through a particular kind of filter that may make all of the research seem like it follows some standard rubric, a SIGCOMM Normal Form if you will. During a panel at HotNets'21, five researchers---Hari Balakrishnan, Jon Crowcroft, Jennifer Rexford, Scott Shenker, and David Tennenhouse---each answered three questions about how they pick their own research topics, what areas they would like to see more research on, and how they evaluate conference papers. Due to the unexpectedly positive response to that panel, CCR will be publishing a series of answers to these three questions, starting with two participants from the panel but reaching out to others to provide answers from a broader cross-section of the SIGCOMM community.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"48 1","pages":"42 - 44"},"PeriodicalIF":2.8,"publicationDate":"2022-01-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"77150906","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Towards client-side active measurements without application control 在没有应用程序控制的情况下实现客户端活动测量
IF 2.8 4区 计算机科学 Q3 COMPUTER SCIENCE, INFORMATION SYSTEMS Pub Date : 2022-01-30 DOI: 10.1145/3523230.3523234
Palak Goenka, K. Zarifis, Arpit Gupta, Matt Calder
Monitoring performance and availability are critical to operating successful content distribution networks. Internet measurements provide the data needed for traffic engineering, alerting, and network diagnostics. While there are significant benefits to performing end-user active measurements, these capabilities are limited to a small number of content providers with application control. In this work, we present a solution to the long-standing problem of issuing active measurements from clients without requiring application control, e.g., injecting JavaScript to the content served. Our approach uses server-side programmable features of the Network Error Logging specification that allow a CDN to induce a browser connection to an HTTPS server of the CDN's choosing without application control.
监控性能和可用性对于成功运营内容分发网络至关重要。Internet测量为流量工程、警报和网络诊断提供了所需的数据。虽然执行终端用户活动度量有很大的好处,但这些功能仅限于少数具有应用程序控制的内容提供者。在这项工作中,我们提出了一个长期存在的问题的解决方案,即在不需要应用程序控制的情况下从客户端发出活动测量,例如,向所服务的内容注入JavaScript。我们的方法使用了网络错误日志规范的服务器端可编程特性,允许CDN在没有应用程序控制的情况下诱导浏览器连接到CDN选择的HTTPS服务器。
{"title":"Towards client-side active measurements without application control","authors":"Palak Goenka, K. Zarifis, Arpit Gupta, Matt Calder","doi":"10.1145/3523230.3523234","DOIUrl":"https://doi.org/10.1145/3523230.3523234","url":null,"abstract":"Monitoring performance and availability are critical to operating successful content distribution networks. Internet measurements provide the data needed for traffic engineering, alerting, and network diagnostics. While there are significant benefits to performing end-user active measurements, these capabilities are limited to a small number of content providers with application control. In this work, we present a solution to the long-standing problem of issuing active measurements from clients without requiring application control, e.g., injecting JavaScript to the content served. Our approach uses server-side programmable features of the Network Error Logging specification that allow a CDN to induce a browser connection to an HTTPS server of the CDN's choosing without application control.","PeriodicalId":50646,"journal":{"name":"ACM Sigcomm Computer Communication Review","volume":"16 1","pages":"20 - 27"},"PeriodicalIF":2.8,"publicationDate":"2022-01-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"73313576","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
期刊
ACM Sigcomm Computer Communication Review
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1