isp mapping
DESCRIPTION
Presentation given regarding ISP Mapping, based on a paper which presents Rocketfuel by Spring et al.TRANSCRIPT
![Page 1: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/1.jpg)
ISP MappingISP Mapping(Rocketfuel)(Rocketfuel)
Simon WadsworthSimon Wadsworth
Based on ”Measuring ISP Topologies with Rocketfuel” by Spring et al.
![Page 2: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/2.jpg)
Why map ISPs?
● Real topologies not public● Want to see router level conectivity and POP
structure
![Page 3: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/3.jpg)
An ISP
● ISP consists of a bunch of POPs connected by a ”backbone”
● Routers connected to backbone links are ”backbone” or ”core” routers
● Every POP has accessrouters providing layer between ISP backbone and neighboring networks
![Page 4: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/4.jpg)
Selecting Measurements
● Only need to take traceroutes expected to transit ISP
● Only need to take one traceroute when two or more enter and leave the ISP at the same point
● So make use of Directed Probing and Path Reductions
![Page 5: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/5.jpg)
Directed Probing
● Identify traceroutes that transit ISP● Dependent prefixes
● Prefixes originated by the ISP or singlehomed customers
● All traceroutes to prefix should transit ISP● Identified from BGP table
● Insiders● From traceroute server in a dependent prefix
![Page 6: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/6.jpg)
Directed Probing
● Up/down traces● Likely to transit ISP based on ASpath
![Page 7: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/7.jpg)
Path Reductions
● Ingress Reduction● Two traceroutes from different vantage points to
same destination enter at same point
● Egress Reduction● Traceroutes from same ingress to any prefix behind
same egress witll be same path
● Nexthop AS Reduction● Path depends on nexthop AS● Only one race from ingress router to nexthop AS
is valuable
![Page 8: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/8.jpg)
Alias Resolution
● Found Mercator was efficient, but missed many aliases
● Created Ally, the IPID based method of Alias Resolution
● It finds 3x as many Aliases as previous methods
![Page 9: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/9.jpg)
Router Identification
● DNS● Geographical Location● Role in topology
● s1bb11nyc30.sprintlink.net● Sprint Backbone Router
● P4000.r01.miamifl01.us.bb.verio.net● Verio Backbone router
![Page 10: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/10.jpg)
Rocketfuel
![Page 11: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/11.jpg)
Rocketfuel
● Egress Discovery● Find the egress routers, traceroute to each dependent
prefix from a local machine● Dependent prefixes may be aggregated● Break them into /24's
● Tasklist Generation● Use BGP tables to generate list of directed probes● Dependent prefixes in directed probes replaced with
egresses, and duplicates removed
![Page 12: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/12.jpg)
Rocketfuel
● Path Reductions● Take tasklist, apply ingress and nexthop AS
reductions and generate jobs● Checks if predicted ingress or egress was used, then
job is complete, otherwise other vantage point is chosen
● Execution Engine● Handles loadlimiting, load balancing and different
formats of traceroute output
![Page 13: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/13.jpg)
Evaluation
● Asked ISPs to validate results – Three ISPs assisted● ISPs said they didn't miss any POPs● ISPs said they didn't miss any links between POPs● Missed some access routers● Received a Good, Very good and Vgood to Excellent
rating from the ISPs
● IP address space● Scans 60 /24s looking for new routers● They found that they found approximately 48.6 to
78.9% of the routers
![Page 14: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/14.jpg)
Evaluation
● Comparison with RouteViews● Check number of adjacencies seen in maps compared
to RouteViews● Routerlevel map should include one link from a
router to one in neighboring AS● Worst case was 70%
● Comparison with Skitter● Found 7x as many routers, links and IPs by Skitter
![Page 15: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/15.jpg)
Impact of Reductions
● Reduced number of traces down to 0.1% of those required by a bruteforce technique
● Scales well with number of vantage points
![Page 16: ISP Mapping](https://reader033.vdocuments.net/reader033/viewer/2022052223/5575d18dd8b42a917e8b481b/html5/thumbnails/16.jpg)
QuestionsQuestions