Network support for TCP Fast Open. Christoph Paasch
|
|
|
- Claud Gardner
- 7 years ago
- Views:
Transcription
1 Network support for TCP Fast Open Christoph Paasch
2 Outline TCP Fast Open allows to reduce latency and significantly improve user-experience However, naive firewalls and bad Intrusion Detection Systems got in our way We should change that!
3 Latency matters PLT of 25 most popular websites (Latency = 60ms) 4000 Page Load Time [ms] Bandwidth [Mbps] [1] More Bandwidth Doesn t Matter (much). M. Belshe (
4 Latency matters PLT of 25 most popular websites (Latency = 60ms) 4000 PLT of 25 most popular websites (Bandwidth = 5Mbps) Page Load Time [ms] Page Load Time [ms] 4000 Bandwidth [Mbps] Latency [ms] [1] More Bandwidth Doesn t Matter (much). M. Belshe (
5 Latency matters [2] measured impact of latency on service revenue Direct correlation between latency and revenue: 100ms of additional delay has significant impact on the revenue and customer satisfaction [2] Measuring and Mitigating Web Performance Bottlenecks in Broadband Access Networks. S. Sundaresan, et al. ACM IMC 2013.
6 Transmission Control Protocol Used for 95% of the Internet s traffic Provides a reliable and in-order byte-stream service 3-way handshake to establish the connection
7 The TCP joke Hi, I d like to hear a TCP joke. Hello, would you like to hear a TCP joke? Yes, I d like to hear a TCP joke. Ok, I ll tell you a TCP joke.
8 TCP Handshake is expensive Client Server SYN SYN/ACK ACK Data Data
9 TCP Handshake is expensive Client Server SYN 1 RTT before any data is sent SYN/ACK ACK Cellular Network s Data RTT can range in the hundreds of Data milliseconds
10 TCP Fast Open (RFC 7413) Accelerating the TCP Handshake
11 TCP Fast Open (TFO) Allows clients to send SYN with data Enables servers to reply right away with the response Protects itself against DoS through a cookie, unique for each client-ip Standardized at the IETF - RFC 7413 [3] TCP Fast Open. Y. Cheng, J. Chu, S. Radhakrishnan, A. Jain. IETF RFC
12 TFO at Apple TCP Fast Open in ios 9 and OS X (and later) Used for an Apple Service on all ios and OS X devices Public API by using connectx(2) Overall, very beneficial But, Firewalls got in our way
13 TFO in details 1. Cookie Exchange Client Server SYN TFO Cookie Request Generate Cookie: X = Hash(Client_IP, secret) SYN/ACK TFO Cookie = X
14 TFO in details 2. Sending SYN + data Client Server SYN + data TFO Cookie = X SYN/ACK Verify Cookie: X == Hash(Client_IP, secret)
15 TFO in details 3. Server replies with data Client Server SYN + data TFO Cookie = X SYN/ACK Verify Cookie: X == Hash(Client_IP, secret) Data ACK
16 Middlebox issues with TCP Fast Open and their negative impact
17 Middlebox issues Bad Middleboxes and Firewalls respond badly to TCP Fast Open Suppress TCP options Drop packets Mark entire connection as invalid Blackhole the clients
18 Using a new TCP option Issue Simplistic middleboxes remove unknown TCP options
19 Using a new TCP option Issue Simplistic middleboxes remove unknown TCP options Client Server SYN TFO Cookie Request SYN SYN/ACK
20 Using a new TCP option Issue Simplistic middleboxes remove unknown TCP options Impact Clients cannot use TFO, and thus pay a latency cost compared to well-behaving networks
21 Using a new TCP option Issue Simplistic middleboxes drop segments with unknown TCP options
22 Using a new TCP option Issue Simplistic middleboxes drop segments with unknown TCP options Client Server SYN TFO Cookie Request RTO (1s) SYN
23 Using a new TCP option Issue Simplistic middleboxes drop segments with unknown TCP options Impact Client has to retransmit the SYN-segment without the TCP option. The user experiences a high pageload-time.
24 Sending SYN+data Issue Naive middleboxes drop SYN segments with data
25 Sending SYN+data Issue Naive middleboxes drop SYN segments with data Client Server SYN + data TFO Cookie = X RTO (1s) SYN
26 Sending SYN+data Issue Naive middleboxes drop SYN segments with data Impact Clients has to retransmit the SYN-segment without the TCP option. The user experiences a high pageload-time.
27 Acknowledging SYN+data Issue The server acknowledges the SYN+data, thus more than the initial sequence number. Middleboxes might drop the SYN/ACK.
28 Acknowledging SYN+data Issue The server acknowledges the SYN+data, thus more than the initial sequence number. Middleboxes might drop the SYN/ACK. Client Server SYN (Seq=0, len=10) + data SYN/ACK (Ack=11) Expected Ack=1 SYN/ACK (Ack=11)
29 Acknowledging SYN+data Issue The server acknowledges the SYN+data, thus more than the initial sequence number. Middleboxes might drop the SYN/ACK. Impact The middlebox keeps on blocking the server s SYN/ ACK. The session never becomes established.
30 Server sends data right before 3-way handshake completes Issue Bad Intrusion Detection Systems (IDS) start blackholing the client
31 Server sends data right before 3-way handshake completes Issue Bad Intrusion Detection Systems (IDS) start blackholing the client Client SYN + data TFO Cookie = X Server SYN/ACK Data ACK
32 Server sends data right before 3-way handshake completes Issue Bad Intrusion Detection Systems (IDS) start blackholing the client Impact Client loses connectivity to the server. Subsequent connections (non-tfo) also might be blocked by the IDS.
33 How common is this? Mostly, TFO works successfully (~80% success-rate). But
34 How common is this? Mostly, TFO works successfully (~80% success-rate). But 100% of the users of the affected networks are penalized
35 Conclusion Latency has a direct impact on user-experience TCP Fast Open allows to significantly reduce latency Bad middleboxes are interfering with TCP Fast Open Vendors and operators: Take TFO into account for a better user-experience
36 References [1] More Bandwidth Doesn t Matter (much). M. Belshe ( X8rE6Q). [2] Measuring and Mitigating Web Performance Bottlenecks in Broadband Access Networks. S. Sundaresan, et al. ACM IMC [3] TCP Fast Open. Y. Cheng, J. Chu, S. Radhakrishnan, A. Jain. IETF RFC
37 Backup-slides
38 TFO and idempotency Data sent in a SYN might reach the server twice Client Server SYN + data SYN + data SYN + data got delayed in the network SYN/ACK TCP-session terminates ACK SYN + data Old SYN + data finally reaches the server
39 TFO and idempotency Use TFO only with idempotent data (aka., data that can be received twice by the server) E.g.,: TLS (ClientHello) HTTP-Requests
COMP 3331/9331: Computer Networks and Applications. Lab Exercise 3: TCP and UDP (Solutions)
COMP 3331/9331: Computer Networks and Applications Lab Exercise 3: TCP and UDP (Solutions) AIM To investigate the behaviour of TCP and UDP in greater detail. EXPERIMENT 1: Understanding TCP Basics Tools
Protecting Mobile Devices From TCP Flooding Attacks
Protecting Mobile Devices From TCP Flooding Attacks Yogesh Swami % and Hannes Tschofenig* % Nokia Research Center, Palo Alto, CA, USA. * Siemens Corporate Technology, Munich, DE. 1 Motivation Anatomy of
Question: 3 When using Application Intelligence, Server Time may be defined as.
1 Network General - 1T6-521 Application Performance Analysis and Troubleshooting Question: 1 One component in an application turn is. A. Server response time B. Network process time C. Application response
Troubleshooting Tips and Tricks
Troubleshooting Tips and Tricks for TCP/IP Networks June 16, 2011 Laura Chappell Founder Chappell University/Wireshark University laura@chappellu.com SHARKFEST 11 Stanford University June 13 16, 2011 The
Multipath TCP in Practice (Work in Progress) Mark Handley Damon Wischik Costin Raiciu Alan Ford
Multipath TCP in Practice (Work in Progress) Mark Handley Damon Wischik Costin Raiciu Alan Ford The difference between theory and practice is in theory somewhat smaller than in practice. In theory, this
Transport Layer Protocols
Transport Layer Protocols Version. Transport layer performs two main tasks for the application layer by using the network layer. It provides end to end communication between two applications, and implements
Your App and Next Generation Networks
System Frameworks #WWDC15 Your App and Next Generation Networks Session 719 Prabhakar Lakhera Core OS Networking Engineer Stuart Cheshire DEST 2015 Apple Inc. All rights reserved. Redistribution or public
Visualizations and Correlations in Troubleshooting
Visualizations and Correlations in Troubleshooting Kevin Burns Comcast kevin_burns@cable.comcast.com 1 Comcast Technology Groups Cable CMTS, Modem, Edge Services Backbone Transport, Routing Converged Regional
Network Security: Workshop. Dr. Anat Bremler-Barr. Assignment #2 Analyze dump files Solution Taken from www.chrissanders.org
1.pcap - File download Network Security: Workshop Dr. Anat Bremler-Barr Assignment #2 Analyze dump files Solution Taken from www.chrissanders.org Downloading a file is a pretty basic function when described
Challenges of Sending Large Files Over Public Internet
Challenges of Sending Large Files Over Public Internet CLICK TO EDIT MASTER TITLE STYLE JONATHAN SOLOMON SENIOR SALES & SYSTEM ENGINEER, ASPERA, INC. CLICK TO EDIT MASTER SUBTITLE STYLE OUTLINE Ø Setting
An Overview of Multipath TCP
An Overview of Multipath TCP Olivier Bonaventure, Mark Handley, and Costin Raiciu Olivier Bonaventure is a Professor at Catholic University of Louvain, Belgium. His research focus is primarily on Internet
Ignoring the Great Firewall of China
An Overview of Ignoring the Great Firewall of China By: Matt Landau Original Paper: Ignoring the Great Firewall of China Richard Clayton, Steven J. Murdoch, and Robert N. M. Watson University of Cambridge,
Measuring the Evolution of Transport Protocols in the Internet. Alberto Medina Mark Allman Sally Floyd
Measuring the Evolution of Transport Protocols in the Internet Alberto Medina Mark Allman Sally Floyd 1 2 The Internet Protocol Stack Application Presentation Session Transport IP Data link Physical Internet
CIT 380: Securing Computer Systems
CIT 380: Securing Computer Systems Scanning CIT 380: Securing Computer Systems Slide #1 Topics 1. Port Scanning 2. Stealth Scanning 3. Version Identification 4. OS Fingerprinting 5. Vulnerability Scanning
Denial of Service Attacks
2 Denial of Service Attacks : IT Security Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 13 August 2013 its335y13s2l06, Steve/Courses/2013/s2/its335/lectures/malicious.tex,
Host Fingerprinting and Firewalking With hping
Host Fingerprinting and Firewalking With hping Naveed Afzal National University Of Computer and Emerging Sciences, Lahore, Pakistan Email: 1608@nu.edu.pk Naveedafzal gmail.com Abstract: The purpose
Denial Of Service. Types of attacks
Denial Of Service The goal of a denial of service attack is to deny legitimate users access to a particular resource. An incident is considered an attack if a malicious user intentionally disrupts service
MONITORING OF TRAFFIC OVER THE VICTIM UNDER TCP SYN FLOOD IN A LAN
MONITORING OF TRAFFIC OVER THE VICTIM UNDER TCP SYN FLOOD IN A LAN Kanika 1, Renuka Goyal 2, Gurmeet Kaur 3 1 M.Tech Scholar, Computer Science and Technology, Central University of Punjab, Punjab, India
Network Security: Network Flooding. Seungwon Shin GSIS, KAIST
Network Security: Network Flooding Seungwon Shin GSIS, KAIST Detecting Network Flooding Attacks SYN-cookies Proxy based CAPCHA Ingress/Egress filtering Some examples SYN-cookies Background In a TCP 3-way
Analysis on Some Defences against SYN-Flood Based Denial-of-Service Attacks
Analysis on Some Defences against SYN-Flood Based Denial-of-Service Attacks Sau Fan LEE (ID: 3484135) Computer Science Department, University of Auckland Email: slee283@ec.auckland.ac.nz Abstract A denial-of-service
Mobile Communications Chapter 9: Mobile Transport Layer
Mobile Communications Chapter 9: Mobile Transport Layer Motivation TCP-mechanisms Classical approaches Indirect TCP Snooping TCP Mobile TCP PEPs in general Additional optimizations Fast retransmit/recovery
Secure SCTP against DoS Attacks in Wireless Internet
Secure SCTP against DoS Attacks in Wireless Internet Inwhee Joe College of Information and Communications Hanyang University Seoul, Korea iwjoe@hanyang.ac.kr Abstract. The Stream Control Transport Protocol
Sting: a TCP-based network measurement tool
Sting: a TCP-based network measurement tool Stefan Savage Department of Computer Science and Engineering University of Washington Simple problem Can we measure one-way packet loss rates to and from unmodified
TCP and Wireless Networks Classical Approaches Optimizations TCP for 2.5G/3G Systems. Lehrstuhl für Informatik 4 Kommunikation und verteilte Systeme
Chapter 2 Technical Basics: Layer 1 Methods for Medium Access: Layer 2 Chapter 3 Wireless Networks: Bluetooth, WLAN, WirelessMAN, WirelessWAN Mobile Networks: GSM, GPRS, UMTS Chapter 4 Mobility on the
Midterm Exam CMPSCI 453: Computer Networks Fall 2011 Prof. Jim Kurose
Midterm Exam CMPSCI 453: Computer Networks Fall 2011 Prof. Jim Kurose Instructions: There are 4 questions on this exam. Please use two exam blue books answer questions 1, 2 in one book, and the remaining
First Midterm for ECE374 03/09/12 Solution!!
1 First Midterm for ECE374 03/09/12 Solution!! Instructions: Put your name and student number on each sheet of paper! The exam is closed book. You have 90 minutes to complete the exam. Be a smart exam
tcpcrypt Andrea Bittau, Dan Boneh, Mike Hamburg, Mark Handley, David Mazières, Quinn Slack Stanford, UCL
tcpcrypt Andrea Bittau, Dan Boneh, Mike Hamburg, Mark Handley, David Mazières, Quinn Slack! Stanford, UCL Reminder: project goal IPsec SSH TLS Unencrypted TCP traffic today Not drawn to scale Reminder:
Life of a Packet CS 640, 2015-01-22
Life of a Packet CS 640, 2015-01-22 Outline Recap: building blocks Application to application communication Process to process communication Host to host communication Announcements Syllabus Should have
A Resilient Transport Layer for Messaging Systems
Master's Thesis A Resilient Transport Layer for Messaging Systems September 14, 2007 1 Supervision: Dr. Sean Rooney (IBM Research GmbH, Zurich Research Laboratory) Prof. Dr. Gustavo Alonso (ETH Zurich,
Application Delivery Networking
Application Delivery Networking. Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu These slides and audio/video recordings of this class lecture are at: 8-1 Overview
Policy Based Forwarding
Policy Based Forwarding Tech Note PAN-OS 4.1 Revision A 2012, Palo Alto Networks, Inc. www.paloaltonetworks.com Contents Overview... 3 Security... 3 Performance... 3 Symmetric Routing... 3 Service Versus
DIY Internet with MinimaLT. Low-latency secure networking JSConf.EU 2013 Andy Wingo
DIY Internet with MinimaLT Low-latency secure networking JSConf.EU 2013 Andy Wingo wingo@igalia.com Compiler hacker at Igalia Recently: ES6 generators in V8, SpiderMonkey (sponsored by Bloomberg) Not a
How To Protect A Dns Authority Server From A Flood Attack
the Availability Digest @availabilitydig Surviving DNS DDoS Attacks November 2013 DDoS attacks are on the rise. A DDoS attack launches a massive amount of traffic to a website to overwhelm it to the point
Chapter 8 Security Pt 2
Chapter 8 Security Pt 2 IC322 Fall 2014 Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 All material copyright 1996-2012 J.F Kurose and K.W. Ross,
Adopting SCTP and MPLS-TE Mechanism in VoIP Architecture for Fault Recovery and Resource Allocation
Adopting SCTP and MPLS-TE Mechanism in VoIP Architecture for Fault Recovery and Resource Allocation Fu-Min Chang #1, I-Ping Hsieh 2, Shang-Juh Kao 3 # Department of Finance, Chaoyang University of Technology
Firewalls, Tunnels, and Network Intrusion Detection. Firewalls
Firewalls, Tunnels, and Network Intrusion Detection 1 Firewalls A firewall is an integrated collection of security measures designed to prevent unauthorized electronic access to a networked computer system.
CS 3251: Computer Networking 1 Security Protocols I
Georgia Tech CS 3251: Computer Networking 1 Security Protocols I Brad Reaves, PhD Student 11/21/13 (slides from Prof. Patrick Traynor) CS 3251 - Computer Networks I Last Time Trying to prove who you are
Pig Laboratory. Additional documentation for the laboratory. Exercises and Rules. Tstat Data
Pig Laboratory This laboratory is dedicated to Hadoop Pig and consists of a series of exercises: some of them somewhat mimic those in the MapReduce laboratory, others are inspired by "real-world" problems.
Recent advances in transport protocols
Recent advances in transport protocols April 12, 2013 Abstract Transport protocols play a critical role in today s Internet. This chapter first looks at the evolution of the Internet s Transport Layer
Firewalls, Tunnels, and Network Intrusion Detection
Firewalls, Tunnels, and Network Intrusion Detection 1 Part 1: Firewall as a Technique to create a virtual security wall separating your organization from the wild west of the public internet 2 1 Firewalls
Session Hijacking Exploiting TCP, UDP and HTTP Sessions
Session Hijacking Exploiting TCP, UDP and HTTP Sessions Shray Kapoor shray.kapoor@gmail.com Preface With the emerging fields in e-commerce, financial and identity information are at a higher risk of being
Network and Services Discovery
A quick theorical introduction to network scanning January 8, 2016 Disclaimer/Intro Disclaimer/Intro Network scanning is not exact science When an information system is able to interact over the network
TLP WHITE. Denial of service attacks: what you need to know
Denial of service attacks: what you need to know Contents Introduction... 2 What is DOS and how does it work?... 2 DDOS... 4 Why are they used?... 5 Take action... 6 Firewalls, antivirus and updates...
Dos & DDoS Attack Signatures (note supplied by Steve Tonkovich of CAPTUS NETWORKS)
Dos & DDoS Attack Signatures (note supplied by Steve Tonkovich of CAPTUS NETWORKS) Signature based IDS systems use these fingerprints to verify that an attack is taking place. The problem with this method
VoIP 101. E911-Enhanced 911- Used for providing emergency service on cellular and internet voice calls.
If you ve been researching phone systems for awhile, you ve probably heard the term VoIP. What s the definition? Do you need certain hardware for it to work? There are a few questions that should be answered
Multipath TCP. Breaking today's networks with tomorrow's protocol
Multipath TCP Breaking today's networks with tomorrow's protocol Speakers - Who are we? Catherine (Kate) Pearce Security Consultant / Pentester Loves her wine the way she likes her RFCs (Dry) New Zealand
First Midterm for ECE374 02/25/15 Solution!!
1 First Midterm for ECE374 02/25/15 Solution!! Instructions: Put your name and student number on each sheet of paper! The exam is closed book. You have 90 minutes to complete the exam. Be a smart exam
Internet Firewall CSIS 3230. Internet Firewall. Spring 2012 CSIS 4222. net13 1. Firewalls. Stateless Packet Filtering
Internet Firewall CSIS 3230 A combination of hardware and software that isolates an organization s internal network from the Internet at large Ch 8.8: Packet filtering, firewalls, intrusion detection Ch
Introduction to Firewalls Open Source Security Tools for Information Technology Professionals
Introduction to Firewalls Open Source Security Tools for Information Technology Professionals School of Professional Studies (SPS) The City University of New York (CUNY) Aron Trauring Adjunct Professor
La couche transport dans l'internet (la suite TCP/IP)
La couche transport dans l'internet (la suite TCP/IP) C. Pham RESO-LIP/INRIA Université Lyon 1 http://www.ens-lyon.fr/~cpham Basé sur les transparent de Shivkumar Kalyanaraman La couche transport dans
TCP Performance Management for Dummies
TCP Performance Management for Dummies Nalini Elkins Inside Products, Inc. Monday, August 8, 2011 Session Number 9285 Our SHARE Sessions Orlando 9285: TCP/IP Performance Management for Dummies Monday,
Single Pass Load Balancing with Session Persistence in IPv6 Network. C. J. (Charlie) Liu Network Operations Charter Communications
Single Pass Load Balancing with Session Persistence in IPv6 Network C. J. (Charlie) Liu Network Operations Charter Communications Load Balancer Today o Load balancing is still in use today. It is now considered
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs Why Network Security? Keep the bad guys out. (1) Closed networks
TCP SYN Flood - Denial of Service Seung Jae Won University of Windsor wons@uwindsor.ca
TCP SYN Flood - Denial of Service Seung Jae Won University of Windsor wons@uwindsor.ca Abstract TCP SYN flooding attack is a kind of denial-of-service attack. This SYN flooding attack is using the weakness
High-Speed TCP Performance Characterization under Various Operating Systems
High-Speed TCP Performance Characterization under Various Operating Systems Y. Iwanaga, K. Kumazoe, D. Cavendish, M.Tsuru and Y. Oie Kyushu Institute of Technology 68-4, Kawazu, Iizuka-shi, Fukuoka, 82-852,
Introduction about DDoS. Security Functional Requirements
S W G IT P Security Functional Requirements for Anti-DDoS Products Jun Woo Park (junusee@tta.or.kr) TTA, Korea Global Leader of ICT Standardization & Certification Ⅰ Introduction about DDoS Ⅱ Security
IAB CONCERNS ABOUT CONGESTION CONTROL. Iffat Hasnian 1832659
IAB CONCERNS ABOUT CONGESTION CONTROL Iffat Hasnian 1832659 IAB CONCERNS Outline 1- Introduction 2- Persistent High Drop rate Problem 3- Current Efforts in the IETF 3.1 RTP 3.2 TFRC 3.3 DCCP 3.4 Audio
CSE 473 Introduction to Computer Networks. Exam 2 Solutions. Your name: 10/31/2013
CSE 473 Introduction to Computer Networks Jon Turner Exam Solutions Your name: 0/3/03. (0 points). Consider a circular DHT with 7 nodes numbered 0,,...,6, where the nodes cache key-values pairs for 60
CS 640 Introduction to Computer Networks. Network security (continued) Key Distribution a first step. Lecture24
Introduction to Computer Networks Lecture24 Network security (continued) Key distribution Secure Shell Overview Authentication Practical issues Firewalls Denial of Service Attacks Definition Examples Key
An Untold Story of Middleboxes in Cellular Networks
An Untold Story of Middleboxes in Cellular Networks Zhaoguang Wang 1 Zhiyun Qian 1, Qiang Xu 1, Z. Morley Mao 1, Ming Zhang 2 1 University of Michigan 2 Microsoft Research Background on cellular network
Computer Networks and the Internet
? Computer the IMT2431 - Data Communication and Network Security January 7, 2008 ? Teachers are Lasse Øverlier and http://www.hig.no/~erikh Lectures and Lab in A126/A115 Course webpage http://www.hig.no/imt/in/emnesider/imt2431
Distributed Denial of Service Attacks & Defenses
Distributed Denial of Service Attacks & Defenses Guest Lecture by: Vamsi Kambhampati Fall 2011 Distributed Denial of Service (DDoS) Exhaust resources of a target, or the resources it depends on Resources:
SY0-201. system so that an unauthorized individual can take over an authorized session, or to disrupt service to authorized users.
system so that an unauthorized individual can take over an authorized session, or to disrupt service to authorized users. From a high-level standpoint, attacks on computer systems and networks can be grouped
Computer Networks UDP and TCP
Computer Networks UDP and TCP Saad Mneimneh Computer Science Hunter College of CUNY New York I m a system programmer specializing in TCP/IP communication protocol on UNIX systems. How can I explain a thing
Secure Software Programming and Vulnerability Analysis
Secure Software Programming and Vulnerability Analysis Christopher Kruegel chris@auto.tuwien.ac.at http://www.auto.tuwien.ac.at/~chris Operations and Denial of Service Secure Software Programming 2 Overview
CS551 End-to-End Internet Packet Dynamics [Paxson99b]
![CS551 End-to-End Internet Packet Dynamics [Paxson99b]](/thumbs/27/11353987.jpg "CS551 End-to-End Internet Packet Dynamics [Paxson99b]")
CS551 End-to-End Internet Packet Dynamics [Paxson99b] Bill Cheng http://merlot.usc.edu/cs551-f12 1 End-to-end Packet Dynamics How do you measure Internet performance? Why do people want to know? Are ISPs
Final exam review, Fall 2005 FSU (CIS-5357) Network Security
Final exam review, Fall 2005 FSU (CIS-5357) Network Security Instructor: Breno de Medeiros 1. What is an insertion attack against a NIDS? Answer: An insertion attack against a network intrusion detection
This sequence diagram was generated with EventStudio System Designer (http://www.eventhelix.com/eventstudio).
This sequence diagram was generated with EventStudio System Designer (http://www.eventhelix.com/eventstudio). Here we explore the sequence of interactions in a typical FTP (File Transfer Protocol) session.
Defending Computer Networks Lecture 6: TCP and Scanning. Stuart Staniford Adjunct Professor of Computer Science
Defending Computer Networks Lecture 6: TCP and Scanning Stuart Staniford Adjunct Professor of Computer Science Logis;cs HW1 due tomorrow First quiz will be Tuesday September 23 rd. Half hour quiz at start
Computer Networks. Chapter 5 Transport Protocols
Computer Networks Chapter 5 Transport Protocols Transport Protocol Provides end-to-end transport Hides the network details Transport protocol or service (TS) offers: Different types of services QoS Data
A Survey on Congestion Control Mechanisms for Performance Improvement of TCP
A Survey on Congestion Control Mechanisms for Performance Improvement of TCP Shital N. Karande Department of Computer Science Engineering, VIT, Pune, Maharashtra, India Sanjesh S. Pawale Department of
Improving Effective WAN Throughput for Large Data Flows By Peter Sevcik and Rebecca Wetzel November 2008
Improving Effective WAN Throughput for Large Data Flows By Peter Sevcik and Rebecca Wetzel November 2008 When you buy a broadband Wide Area Network (WAN) you want to put the entire bandwidth capacity to
Key Components of WAN Optimization Controller Functionality
Key Components of WAN Optimization Controller Functionality Introduction and Goals One of the key challenges facing IT organizations relative to application and service delivery is ensuring that the applications
Frequently Asked Questions
Frequently Asked Questions 1. Q: What is the Network Data Tunnel? A: Network Data Tunnel (NDT) is a software-based solution that accelerates data transfer in point-to-point or point-to-multipoint network
Firewalls. Chapter 3
Firewalls Chapter 3 1 Border Firewall Passed Packet (Ingress) Passed Packet (Egress) Attack Packet Hardened Client PC Internet (Not Trusted) Hardened Server Dropped Packet (Ingress) Log File Internet Border
M U L T I P A T H T C P, P W N I N G T O D A Y S N E T W O R K S W I T H
M U L T I P A T H T C P, P W N I N G T O D A Y S N E T W O R K S W I T H T O M O R R O W S P R O T O C O L S. Catherine Pearce Catherine.pearce@neohapsis.com, twitter: @secvalve A B S T R A C T : MultiPath
Configuring CSS Remote Access Methods
CHAPTER 11 Configuring CSS Remote Access Methods This chapter describes how to configure the Secure Shell Daemon (SSH), Remote Authentication Dial-In User Service (RADIUS), and the Terminal Access Controller
2 TCP-like Design. Answer
Homework 3 1 DNS Suppose you have a Host C, a local name server L, and authoritative name servers A root, A com, and A google.com, where the naming convention A x means that the name server knows about
Speeding Foreign Exchange (FX) Mobile Trading Apps
Speeding Foreign Exchange (FX) Mobile Trading Apps A Neumob White Paper Introduction: The Costs and Causes of Poor Mobile App Performance The foreign exchange market, or FX, is the mostly widely traded
On evaluating the differences of TCP and ICMP in network measurement
Computer Communications 30 (2007) 428 439 www.elsevier.com/locate/comcom On evaluating the differences of TCP and ICMP in network measurement Li Wenwei b, *, Zhang Dafang a, Yang Jinmin a, Xie Gaogang
Port Scanning. Objectives. Introduction: Port Scanning. 1. Introduce the techniques of port scanning. 2. Use port scanning audit tools such as Nmap.
Port Scanning Objectives 1. Introduce the techniques of port scanning. 2. Use port scanning audit tools such as Nmap. Introduction: All machines connected to a LAN or connected to Internet via a modem
CISCO WIDE AREA APPLICATION SERVICES (WAAS) OPTIMIZATIONS FOR EMC AVAMAR
PERFORMANCE BRIEF CISCO WIDE AREA APPLICATION SERVICES (WAAS) OPTIMIZATIONS FOR EMC AVAMAR INTRODUCTION Enterprise organizations face numerous challenges when delivering applications and protecting critical
Using TrueSpeed VNF to Test TCP Throughput in a Call Center Environment
Using TrueSpeed VNF to Test TCP Throughput in a Call Center Environment TrueSpeed VNF provides network operators and enterprise users with repeatable, standards-based testing to resolve complaints about
IPv6 Performance. Geoff Huston APNIC Labs February 2015
IPv6 Performance Geoff Huston APNIC Labs February 2015 #apricot What are we looking at: How reliable are IPv6 connections? How fast are IPv6 connections? #apricot What are we looking at: How reliable are
LineSwitch: Efficiently Managing Switch Flow in Software-Defined Networking while Effectively Tackling DoS Attacks
LineSwitch: Efficiently Managing Switch Flow in Software-Defined Networking while Effectively Tackling DoS Attacks Moreno Ambrosin, Mauro Conti, Fabio De Gaspari, University of Padua, Italy {surname}@math.unipd.it
La couche transport dans l'internet (la suite TCP/IP)
La couche transport dans l'internet (la suite TCP/IP) C. Pham Université de Pau et des Pays de l Adour Département Informatique http://www.univ-pau.fr/~cpham Congduc.Pham@univ-pau.fr Cours de C. Pham,
CHAPTER 1 PRINCIPLES OF NETWORK MONITORING
CHAPTER 1 PRINCIPLES OF NETWORK MONITORING Jawwad Shamsi and Monica Brocmeyer Department of Computer Science, Wayne State University 5143 Cass Avenue, 431 State Hall, Detroit, MI 48202, USA E-mail:{ jshamsi,
There s nothing like a Firewall. Olivier Paul, GET/INT MONAM 07, Toulouse, France
There s nothing like a Firewall Olivier Paul, GET/INT MONAM 07, Toulouse, France How does this relate to risk? From wikipedia Risk = (probability of incident) * (Cost of incident) From risk evaluation
Network Protocols for Applications of Shared Virtual Reality
Network Protocols for Applications of Shared Virtual Reality Jiri Hnidek Technical University of Liberec Studentska 2 Czech Republic 461 17, Liberec jiri.hnidek@tul.cz ABSTRACT Files are usually used for
The Fundamentals of Intrusion Prevention System Testing
The Fundamentals of Intrusion Prevention System Testing New network-based Intrusion Prevention Systems (IPS) complement traditional security products to provide enterprises with unparalleled protection
TCP loss sensitivity analysis ADAM KRAJEWSKI, IT-CS-CE
TCP loss sensitivity analysis ADAM KRAJEWSKI, IT-CS-CE Original problem IT-DB was backuping some data to Wigner CC. High transfer rate was required in order to avoid service degradation. 4G out of... 10G
A Talari Networks White Paper. Turbo Charging WAN Optimization with WAN Virtualization. A Talari White Paper
A Talari Networks White Paper Turbo Charging WAN Optimization with WAN Virtualization A Talari White Paper 2 Introduction WAN Virtualization is revolutionizing Enterprise Wide Area Network (WAN) economics,
The ISP Column A monthly column on all things Internet
The ISP Column A monthly column on all things Internet Just How Good are You? Measuring Network Performance February 2003 Geoff Huston If you are involved in the operation of an IP network, a question
Efficient Transport of VoIP Firewall Control Signaling
Universität Stuttgart INSTITUT FÜR NACHRICHTENVERMITTLUNG UND DATENVERARBEITUNG Prof. Dr.-Ing. Dr. h. c. mult. P. J. Kühn INSTITUT FÜR KOMMUNIKATIONSNETZE UND RECHNERSYSTEME Prof. Dr.-Ing. Dr. h. c. mult.
Improving the Performance of TCP Using Window Adjustment Procedure and Bandwidth Estimation
Improving the Performance of TCP Using Window Adjustment Procedure and Bandwidth Estimation R.Navaneethakrishnan Assistant Professor (SG) Bharathiyar College of Engineering and Technology, Karaikal, India.
CS5008: Internet Computing
CS5008: Internet Computing Lecture 22: Internet Security A. O Riordan, 2009, latest revision 2015 Internet Security When a computer connects to the Internet and begins communicating with others, it is
TCP/IP Optimization for Wide Area Storage Networks. Dr. Joseph L White Juniper Networks
TCP/IP Optimization for Wide Area Storage Networks Dr. Joseph L White Juniper Networks SNIA Legal Notice The material contained in this tutorial is copyrighted by the SNIA. Member companies and individuals
TCP Fast Open. Sivasankar Radhakrishnan, Yuchung Cheng, Jerry Chu, Arvind Jain. Barath Raghavan ABSTRACT 1. INTRODUCTION
TCP Fast Open Sivasankar Radhakrishnan, Yuchung Cheng, Jerry Chu, Arvind Jain Google sivasankar@cs.ucsd.edu, {ycheng, hkchu, arvind}@google.com Barath Raghavan ICSI barath@icsi.berkeley.edu ABSTRACT Today
Cleaning Encrypted Traffic
Optenet Documentation Cleaning Encrypted Traffic Troubleshooting Guide iii Version History Doc Version Product Date Summary of Changes V6 OST-6.4.300 01/02/2015 English editing Optenet Documentation
Passive Network Traffic Analysis: Understanding a Network Through Passive Monitoring Kevin Timm,
Passive Network Traffic Analysis: Understanding a Network Through Passive Monitoring Kevin Timm, Network IDS devices use passive network monitoring extensively to detect possible threats. Through passive