Taming Anycast in the Wild Internet

McQuistin, Stephen; Uppu, Sree Priyanka; Flores, Marcel

doi:10.1145/3355369.3355573

Cited by 20 publications

(17 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It plays a vital role for DNS and CDN and services, but different issues have been noted, including the detection latency of IP anycast prefixes [20], AS-level anycast path inflation [21], and client-server mapping limitations that arise in CDN routing [2]. Several enhancements have been discussed focusing on either performance, see, e.g., [22,23], or security, e.g., to mitigate distributed denial-of-service (DDoS) attacks [5]. It has been shown that anycast routing can achieve near-optimal response times and that it can be tailored to suit the QoS requirements of DiffServ networks [24], but these techniques often require knowledge about the global network state (i.e., router loads) [25,26].…”

Section: Related Workmentioning

confidence: 99%

A Cognitive Anycast Routing Method for Delay-Tolerant Networks

Lent

2021

Network

View full text Add to dashboard Cite

A cognitive networking approach to the anycast routing problem for delay-tolerant networking (DTN) is proposed. The method is suitable for the space–ground and other domains where communications are recurrently challenged by diverse link impairments, including long propagation delays, communication asymmetry, and lengthy disruptions. The proposed method delivers data bundles achieving low delays by avoiding, whenever possible, link congestion and long wait times for contacts to become active, and without the need of duplicating data bundles. Network gateways use a spiking neural network (SNN) to decide the optimal outbound link for each bundle. The SNN is regularly updated to reflect the expected cost of the routing decisions, which helps to fine-tune future decisions. The method is decentralized and selects both the anycast group member to be used as the sink and the path to reach that node. A series of experiments were carried out on a network testbed to evaluate the method. The results demonstrate its performance advantage over unicast routing, as anycast routing is not yet supported by the current DTN standard (Contact Graph Routing). The proposed approach yields improved performance for space applications that require as-fast-as-possible data returns.

show abstract

Section: Related Workmentioning

confidence: 99%

A Cognitive Anycast Routing Method for Delay-Tolerant Networks

Lent

2021

Network

View full text Add to dashboard Cite

show abstract

“…To optimize the DNS resolution performance, the routes between users and the nameservers are heavily engineered. IP anycast is a technique leveraged to this end and it has been measured using passive or active analysis [77], [96], [96]- [99]. On the other hand, route hijack against DNS has been discovered and DNS and routing data are combined to detect such incidents [1], [98], [100]- [102].…”

Section: Measurement On Dns and Routing Jointlymentioning

confidence: 99%

DNSWeight: Quantifying Country-Wise Importance of Domain Name System

Chang

Hao

Zhou³

et al. 2021

IEEE Access

View full text Add to dashboard Cite

DNS (Domain Name System) is one fundamental Internet infrastructure related to most network activities. As a feasible tool to govern the Internet, DNS's stability and interoperability will be impacted by the countries' policies or actions along the path. Especially now that many countries have stricter control over the Internet and even sometimes "unplug" it. But there was no study to quantify the countries' impact systematically. To fill this research gap, we present DNSWeight. This new data-driven approach utilizes a large-scale DNS dataset and BGP (Border Gateway Protocol) routing information to calculate the country-importance score so that a country's impact on DNS can be gauged. By applying DNSWeight on large-scale DNS and BGP datasets jointly, our study shows the importance among different countries is divided. A handful of countries show dominant significance to the current DNS ecosystem. Some countries with a history of Internet shutdowns are too influential to be ignored if they choose to break themselves from the Internet. We also examine the impact of IPv6 (IP Version 6) and reveal the "loop" phenomenon that occurs in some DNS queries. In conjunction with our findings, some discussion and suggestions are given. In summary, our study shows that DNS reliability needs to be reconsidered at the country's level.

show abstract

“…Finally, very recent work by McQuistin et al [35] shows that anycast services that make use of multiple network operators can benefit from tailoring their BGP announcements to optimise end-user performance.…”

Section: Related Workmentioning

confidence: 99%

Global-Scale Anycast Network Management with Verfploeter

Vries

Aljammaz²,

Rijswijk-Deij

2020

NOMS 2020 - 2020 IEEE/IFIP Network Operations and Management Symposium

View full text Add to dashboard Cite

Anycast has become a valuable tool for network operators. It plays a vital role in making the DNS root system globally highly available and resilient to stresses from e.g. DDoS attacks. Content delivery networks use it to direct clients to local caches, and to absorb attack traffic. Yet managing an anycast network is far from simple. Earlier work studying a DDoS attack on the DNS root system, for example, shows that even highly distributed anycast networks can be overwhelmed. To manage an anycast service, it is vital to know the catchment of points of presence (PoPs) of the service. In earlier work, we introduced "Verfploeter" a novel active measurement method to determine anycast catchments using ICMP messages. Unlike previously existing approaches, Verfploeter is unbiased, accurate and can be executed directly by the anycast operator without the need for external vantage points. We demonstrated the efficacy of Verfploeter on a testbed and small anycast service. In this paper, we take the next step and deploy Verfploeter on one of the world's largest anycast networks, the Cloudflare CDN with 192 PoPs worldwide. We perform real-world case studies on network planning (what happens when PoPs are switched on or off), troubleshooting (reachability issues of an anycasted prefix) and security (detecting spoofed attack traffic). These case studies show that Verfploeter is highly suitable for such a large-scale operation and gives operators vital insights that allow them to improve network management practices of their anycast service.

show abstract

Taming Anycast in the Wild Internet

Cited by 20 publications

References 26 publications

A Cognitive Anycast Routing Method for Delay-Tolerant Networks

A Cognitive Anycast Routing Method for Delay-Tolerant Networks

DNSWeight: Quantifying Country-Wise Importance of Domain Name System

Global-Scale Anycast Network Management with Verfploeter

Contact Info

Product

Resources

About