net neutrality a primer. network neutrality the promise of the internet means networks should be...
TRANSCRIPT
![Page 1: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/1.jpg)
NET NEUTRALITYA primer
![Page 2: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/2.jpg)
Network Neutrality
• The promise of the Internet• Means networks should be dumb• Because for once, dumb is good:– Dumb networks are necessary for open and free
communication– Key to innovation– The promise of the Internet
![Page 3: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/3.jpg)
Who wouldn’t want this?
• Telecom providers feel left out of the Internet economy :-(– Dear Google: We’re the reason you’re successful.
Shouldn’t you pay us for all the traffic we bring you?• Internet Service Providers want to ration
bandwidth by application• Create tiered access– “value-add” for the consumer – BitTorrent and MMORPGs? $$$
![Page 4: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/4.jpg)
Their needs
![Page 5: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/5.jpg)
![Page 6: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/6.jpg)
The Internets: Not a truck
![Page 7: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/7.jpg)
How?
• Traffic shaping• Deep Packet Inspection– Telecom provider buys special
box– Special box peeks into your
internet connections– Tries to identify applications
and services using known patterns
– Even encrypted protocols have identifiable patterns..
![Page 8: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/8.jpg)
![Page 9: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/9.jpg)
![Page 10: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/10.jpg)
Meanwhile…
![Page 11: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/11.jpg)
![Page 12: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/12.jpg)
![Page 13: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/13.jpg)
![Page 14: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/14.jpg)
![Page 15: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/15.jpg)
![Page 16: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/16.jpg)
![Page 17: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/17.jpg)
![Page 18: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/18.jpg)
![Page 19: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/19.jpg)
![Page 20: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/20.jpg)
![Page 21: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/21.jpg)
![Page 22: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/22.jpg)
#iranelectionJUNE 2009, TEHRAN
![Page 23: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/23.jpg)
Censorship in Iran
• Between 5 and 10 million websites, according to government statements– Dissident and reformist political content– Secular viewpoints– Ba’hai faith, Kurdish movements– Sins: Pornography, drug, alcohol, gambling– Foreign media sites– Tools for circumventing filters– 9% of all Farsi blogs– Myspace, Orkut, Flickr, Bebo, Metacafe, Photobucket,
Del.ic.io.us
![Page 24: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/24.jpg)
And during the 2009 election..
![Page 25: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/25.jpg)
Iran Facts
• 23 million Internet users in Iran (28 million in Canada)
• 35% of the Iranian population• 60,000 active Farsi blogs• 1/3 of the Iranian population is between 15
and 29 years old
![Page 26: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/26.jpg)
Circumventing Censorship
• SSL encrypted proxy servers• Freegate• Tor• OpenVPN tunnels• SSH tunnels
![Page 27: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/27.jpg)
![Page 28: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/28.jpg)
Iran blocking ports?
• We needed to know if it was true that connections originating inside Iran were being blocked by port
• We had no friends in Iran to help us test this• Then we had an idea..
![Page 29: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/29.jpg)
![Page 30: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/30.jpg)
Testing Connectivity from Within Iran
• Follow these steps:– Step 1: Google for publicly accessible FTP server– Step 2: Connect with FTP client and initiate active
mode data connection back to client– Step 3: Wait to see if connection successfully
completes or not• Implemented in a program that did this
automatically– Link at the end of presentation
![Page 31: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/31.jpg)
Results
• So how many ports were being blocked?
None!
![Page 32: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/32.jpg)
However..
• There were credible reports from Iran of connectivity problems
• A pattern emerged– Affected connections are slow, very slow– The port does not matter– Destination does not matter– What matters is the protocol you’re using to
communicate
![Page 33: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/33.jpg)
An experiment
• We wanted to verify a theory that deep packet inspection technology was behind the censorship
• The SSH protocol was chosen• Modifications were made to OpenSSH to fully
encrypt the initial handshake– To avoid detection by deep packet inspection
technology
![Page 34: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/34.jpg)
Result
• Significant performance differences observed between normal SSH and the modified SSH– This strongly suggested that some sort of deep
packet inspection technology was being used • Later, sources in Iran credibly claimed that
Western technology was being used to implement state censorship policy– Packet shaping, deep packet inspection technology– Specific products cited
![Page 35: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/35.jpg)
Conclusion
• By definition, deep-packet inspection, packet shaping technology is censorship technology
• The introduction of a policy of service or application preference, an intentional bias
• The technology is not evil– But it can be
• Similarly, the export of technology to Iran is not a bad thing
![Page 36: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/36.jpg)
Thank you!
![Page 37: NET NEUTRALITY A primer. Network Neutrality The promise of the Internet Means networks should be dumb Because for once, dumb is good: – Dumb networks](https://reader035.vdocuments.net/reader035/viewer/2022062423/56649e2e5503460f94b1f029/html5/thumbnails/37.jpg)
Links
• http://opennet.net/studies/Iran2009• http://github.com/brl/ftpscan• http://github.com/brl/obfuscated-ssh• E-mail– [email protected]– [email protected]