290 likes | 379 Views
THE INTERNET. A tour of the entire Internet set to a Bach cello suite by YoYo Ma. Every yeah I get screwed by NZNOG. First up in the morning Every year the WAND guys try and poison me. Scheduled time gets longer Multiple talks.
E N D
THE INTERNET A tour of the entire Internet set to a Bach cello suite by YoYo Ma.
Every yeah I get screwed by NZNOG • First up in the morning • Every year the WAND guys try and poison me. • Scheduled time gets longer • Multiple talks. • Being a member of the program committee didn’t seem to help this. • Stop the madness!
Internet Compost (gnu doo)
Math content • Not too bad - Don’t be scared. • If I can do it, you can too.
Network Content • Don’t be scared if you’re a: • First time NZNOG visitor. • New to Networking. • Recently suffered head trauma. • System Administrator.
Internet Background Radiation and Network Telescopes • 2 second version • A whole video from 2 years ago if you want to know more.
Jovian Plot • Short version • A whole video from last year if you want to know more.
Can one slice predict another? • Can we use one of these slices (networks) to predict the IBR arriving at another slice (network)?
95% chance 95% of the time • 30 Random IP addresses per /24 can predict the arrivals (with 95% confidence) at the other addresses 95% of the time. (Phew - what a mouthfull)
What this means. • If you donate 30 addresses, • And your neighbours do the same, • You can predict the IBR arrivals on the rest of your IP addresses 95% of the time.
Compost peering • Would you like some of my waste?
Team approach • Everyone needs to be involved. • No small provider can do this alone • Useless to use your 24 to detect for your neighbour (horizontal slicing == bad)
It has benefit for New Zealand Network operators. • Generally small clustered address ranges. • Telcos and Carriers don’t NEED to be involved. • Eg 203/8 and 202/8
Outcomes • On a 24 level you can detect your own • Give users a webpage telling them weather • You can detect for your neighbours • Weathr forcasring • Same order
Other people • Dshield - Cant tell whats good or bad. • Paranoid people with Eye-See-Em-Pee attack. • Team Cymru - Trying to do this on the whole net - Large target market. Need IPs in every place due to lack of IBR spacial uniformaity • CAIDA / UCSD - Backscatter
Large telescope • Large telescope can be avoided • This can not be avoided - because it’s IS the address range. If they avoid it • Then we’re all good • If they don’t’ avoid then the will hit the tripwires
NZ Routing Census • What DO we mean by an National Table? • 202/8 space • 203/8 space • Other… • See if we can get enough coverage
How do we do this? • Central point of Compost collection. • Distributed collection. • We need distributed small addresses, not large blocks. • Holes from supernets (even as small as /32s) • Spare addresses from dialup pools. • Real time vs Batch processing • You run the infrastructure can be batch • Centrally run down GRE tunnel
Extended • Number of src addresses • Dest ports • Active monitoring • Worms one part worse than others • Wix and Ape were not built in a day • Big data sets are useful
Where to from here. • Look for a place to host. • Deploy infrastructure • Gather interested parties • Conduct Census • Gather useful statistics • Step 3: Profit!