[en] Middleboxes such as firewalls, NAT, proxies, or Deep Packet Inspection play an increasingly important role in various types of IP networks, including enterprise and cellular networks. Recent studies have shed the light on their impact on real traffic and the complexity of managing them. Network operators and researchers have few tools to understand the impact of those boxes on any path. In this paper, we propose tracebox, an extension to the widely used traceroute tool, that is capable of detecting various types of middlebox interference over almost any path. tracebox sends IP packets containing TCP segments with different TTL values and analyses the packet encapsulated in the returned ICMP message. Further, as recent routers quote, in the ICMP message,
the entire IP packet that they received, \tracebox is able to detect any modification performed by upstream middleboxes. In addition, tracebox can often pinpoint the network hop where the middlebox interference occurs. We evaluate tracebox with measurements performed on PlanetLab nodes. Our analysis reveals various types of middleboxes that were not expected on such an experimental testbed supposed to be connected to the Internet without any restriction.
Disciplines :
Sciences informatiques
Auteur, co-auteur :
Detal, Grégory
Hesmans, Benjamin
Bonaventure, Olivier
Vanaubel, Yves ; Université de Liège - ULiège > Dép. d'électric., électron. et informat. (Inst.Montefiore) > Réseaux informatiques
Donnet, Benoît ; Université de Liège - ULiège > Dép. d'électric., électron. et informat. (Inst.Montefiore) > Algorithmique des grands systèmes
Langue du document :
Anglais
Titre :
Revealing Middlebox Interference with Tracebox
Date de publication/diffusion :
octobre 2013
Nom de la manifestation :
ACM/USENIX Internet Measurement Conference (IMC)
Date de la manifestation :
23 - 25 octobre 2013
Manifestation à portée :
International
Titre de l'ouvrage principal :
ACM/USENIX Internet Measurement Conference
Peer reviewed :
Peer reviewed
Projet européen :
FP7 - 318627 - MPLANE - mPlane – an Intelligent Measurement Plane for Future Network and Application Management
J. Sherry, S. Hasan, C. Scott, A. Krishnamurthy, S. Ratnasamy, and V. Sekar, "Making middleboxes someone else's problem: Network processing as a cloud service," in Proc. ACM SIGCOMM, August 2012.
B. Carpenter and S. Brim, "Middleboxes: Taxonomy and issues," Internet Engineering Task Force, RFC 3234, February 2002.
Z. Wang, Z. Qian, Q. Xu, Z. Mao, and M. Zhang, "An untold story of middleboxes in cellular networks," in Proc. ACM SIGCOMM, August 2011.
M. Honda, Y. Nishida, C. Raiciu, A. Greenhalgh, M. Handley, and H. Tokuda, "Is it still possible to extend TCP," in Proc. ACM/USENIX Internet Measurement Conference (IMC), November 2011.
R. Stewart, Q. Xie, K. Morneault, C. Sharp, H. Schwarzbauer, T. Taylor, I. Rytina, M. Kalla, L. Zhang, and V. Paxson, "Stream control transmission protocol," Internet Engineering Task Force, RFC 2960, October 2000.
A. Ford, C. Raiciu, M. Handley, and O. Bonaventure, "TCP extensions for multipath operation with multiple addresses," Internet Engineering Task Force, RFC 6824, January 2013.
V. Jacobson et al., "traceroute," UNIX, man page, 1989, see source code: ftp://ftp.ee.lbl.gov/traceroute.tar.gz.
J. Postel, "Internet control message protocol," Internet Engineering Task Force, RFC 792, September 1981.
F. Baker, "Requirements for IP version 4 routers," Internet Engineering Task Force, RFC 1812, June 1995.
R. Ierusalimschy, L. H. de Figueiredo, and W. Celes, "LUA, an extensible extension language," Software: Pactice & Experience, Vol. 26, no. 6, pp. 635-652, June 1996.
P. Biondi, "Scapy," see http://www.secdev.org/projects/scapy/.
G. Detal, "tracebox," July 2013, see http://www.tracebox.org.
E. Kohler, R. Morris, B. Chen, J. Jannotti, and F. Kaashoek, "The click modular router," ACM Transactions on Computer Systems, Vol. 18, no. 3, pp. 263-297, August 2000.
B. Hesmans, "Mbclick," July 2013, see https://bitbucket.org/ bhesmans/mbclick.
A. Heffernan, "Protection of BGP sessions via the TCP MD5 signature option," Internet Engineering Task Force, RFC 2385, August 1998.
V. Jacobson, R. Braden, and D. Borman, "TCP extensions for high performance," Internet Engineering Task Force, RFC 1323, May 1992.
Microsoft, "Patch available to improve TCP initial sequence number randomness," Microsoft, Microsoft Security Bulletin MS99-066, October 1999, see http://technet.microsoft.com/en-us/security/bulletin/ms99-046.
M. Mathis, J. Mahdavi, S. Floyd, and A. Romanow, "TCP selective acknowledgement options," Internet Engineering Task Force, RFC 2018, October 1996.
C. Paasch, "Presentation ietf 87," July 2013, see http://tools.ietf.org/agenda/87/slides/slides-87-tcpm-11.pdf.
J. Mogul and S. Deering, "Path MTU discovery," Internet Engineering Task Force, RFC 1191, November 1990.
A. Medina, M. Allman, and S. Floyd, "Measuring interactions between transport protocols and middleboxes," in Proc. ACM SIGCOMM Internet Measurement Conference (IMC), October 2004.
P. Srisuresh and M. Holdrege, "IP network address translator (NAT) terminology and considerations," Internet Engineering Task Force, RFC 2663, August 1999.
B. Donnet and T. Friedman, "Internet topology discovery: a survey," IEEE Communications Surveys and Tutorials, Vol. 9, no. 4, December 2007.
H. Haddadi, G. Iannaccone, A. Moore, R. Mortier, and M. Rio, "Network topologies: Inference, modeling and generation," IEEE Communications Surveys and Tutorials, Vol. 10, no. 2, pp. 48-69, April 2008.
M. Torren, "tcptraceroute - a traceroute implementation using TCP packets," UNIX, man page, 2001, see source code: http://michael.toren.net/ code/tcptraceroute/.
M. Luckie, Y. Hyun, and B. Huffaker, "Traceroute probe methode and forward IP path inference," in ACM SIGCOMM Internet Measurement Conference (IMC), October 2008.
B. Augustin, X. Cuvellier, B. Orgogozo, F. Viger, T. Friedman, M. Latapy, C. Magnien, and R. Teixeira, "Avoiding traceroute anomalies with Paris traceroute," in Proc. ACM/USENIX Internet Measurement Conference (IMC), October 2006.
E. Katz-Bassett, H. Madhyastha, V. Adhikari, C. Scott, J. Sherry, P. van Wesep, A. Krishnamurthy, and T. Anderson, "Reverse traceroute," in Proc. USENIX Symposium on Networked Systems Design and Implementations (NSDI), June 2010.
B. Donnet, P. Raoult, T. Friedman, and M. Crovella, "Efficient algorithms for large-scale topology discovery," in Proc. ACM SIGMETRICS, June 2005.
R. Beverly, A. Berger, and G. Xie, "Primitives for active Internet topology mapping: Toward high-frequency characterization," in Proc. ACM/USENIX Internet Measurement Conference (IMC), November 2010.
T. Bourgeau and T. Friedman, "Efficient IP-level network topology capture," in Proc. Passive and Active Measurement Conference (PAM), March 2013.
K. Ramakrishnan, S. Floyd, and D. Black, "The addition of explicit congestion notification (ECN) to IP," Internet Engineering Task Force, RFC 3168, September 2001.
