ࡱ; (  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~Root Entry  !r\V)䰱 PresentationStarImpress 5.0nquu511L0555زeÇ V^!՘dw(6AG@awuС 200 ه~8k֬+Vl۶?߻w1^SI/_3fIG&&&[l8qYrrrBCCϟ?O3SfxDocumentInfo  T1D V19 T1 Info 0 Info 1 Info 2 Info 3 T1pKY < TASK,0,1,H 1,0,100,1,Oh+'0 h t 11@)< @Cv[@+@d XOutdevItemPool 1   )     &'()*+,-./06789:;UVWXYZ[\]c !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstt      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefdM0f'@qXX',@X':@2XXXX&' @X'@Arrow ArrowddXXXS'c@4ArrowddXX'.@j,XXX'"@,XX'@XX'@X@X@'X@EX@cX@X@X@X'@XX'b@I̙XX X2XD'6@22ddX'(@X'"@BMvv(@@SD@x^SI 0 s\ z 46ZBn8x)1̔.<觔B+̄ ޢ40:prf |q]~+H~|WFMbP@aoCē[ȡz6~U{߃  3<%P)3T) 4 6XXXX&X.X6X>XFXNXVX^KK@ XX(L @MM"@ XXNN"@ XXOO"@* XXPP"@X XXQQ(@XXXRR @SS @TT @UU@XVV2@#XXXX WW @IXX @_YY @uZZ @[[ @\\ @]] @__ @`` @aa @bb @%cc @;dd @Qee @g@X@X@X@X@X@%dX@EX@dX@X p@%'''''''XXX&X2X8XP @''''''''''''XX X&X8XJX\Xn**<@&XXXX X&77R@6&,,,,XXXX&X2X8HH b@+'!+''XXXX X&X2XDff@\ JJ KKMMNNOOPPQQUUVV JJ KKMMNNOOPPQQUUVV JJKKMMNNOOPPQQUUVV JJKKMMNNOOPPQQUUVV JJKKMMNNOOPPQQUUVV JJKKMMNNOOPPQQUUVV JJKKMMNNOOPPQQUUVV QQVV IIQQVV  JJKKMMNNOOPPQQUUVV  JJKKMMNNOOPPQQUUVV  JJKKMMNNOOPPQQUUVV  JJKKMMNNOOPPQQUUVVJJKK JJKKMMNNOOPPQQUUVV JJKKMMNNOOPPQQUUVV JJKKMMNNOOPPQQUUVVXXJXXXXX@X|XXXXXZXXXX X\J@ X8p5c&DbZ;]?^|2Rq M {  1 O m ) Q g  S i    4 J ` v &Ff'Gg {c PuvEditEngineItemPool Z6fp0g*T@o Z,StarBats 8,StarBats dg ,StarBats d],StarBats dS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandZ "X,StarBatsN -",StarBatsN -",StarBatsN -"` ` ,StarBatsN -" ,StarBatsN -",StarBatsN -"hh,StarBatsN -",StarBatsN -",StarBatsN -"pp,StarBatsN - ",StarBatsN -",StarBatsN -",StarBatsN -"` ` ,StarBatsN -" ,StarBatsN -",StarBatsN -"hh,StarBatsN -",StarBatsN -",StarBatsN -"pp,StarBatsN - ZH,StarBats d,StarBats dg ,StarBats d],StarBats dS3Times New RomandS3Times New Roman,,dS3Times New RomandS3Times New RomandS3Times New Roman dZ Z,StarBats d,StarBats dg ,StarBats d],StarBats dS3Times New RomandS3Times New RomandddS3Times New RomandddS3Times New RomandddS3Times New RomandddS3Times New RomandddZ Z,StarBats d,StarBats dg ,StarBats d],StarBats dS3Times New RomandS3Times New Roman dS3Times New RomandS3Times New RomandS3Times New Roman dS3Times New Roman dZZr,StarBats -Z Z"d,StarBats -"},StarBats -V ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats dd-"d,StarBats dd-"d,StarBats dd-"d,StarBats dd-Z Zr,StarBats *Z  Z,StarBats d,StarBats ,g ,StarBats d],StarBats dS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandZ  Z,StarBats d,StarBats !g ,StarBats d],StarBats dS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandZ ` Z"d,StarBats -},starbats KV ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z L Z,StarBats d,StarBats dg ,StarBats d],StarBats dS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandS3Times New RomandZ Z"d,StarBats -",StarBats KV ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z Z"d,StarBats -"},StarBats -V ,starbats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z  Z"d,StarBats -W,starbats KV ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z Z"d,StarBats -},starbats JV ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z  Z"d,StarBats -S,starbats KV ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z Z"d,StarBats -"},StarBats -,starbats I",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z Z"d,StarBats -"},StarBats -V ,starbats I",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z Z"d,StarBats -},starbats KV ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -Z Z"d,StarBats -},starbats dV ,StarBats K",StarBats -,StarBats K"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -"d,StarBats -ZXXXXxX XuXX XXX=X"X&X*X;/X[3X{7X;X?XCXGXLX;P @Ep@gpXX@qjdddxFdddsFdddxdddxY dddY ddd YDdddYD dddYD dddYD 8ddd8YD XdddXYD ddDd FdddxdddxYD!ddd!YDXX!X4XGX`XyXXXXXXX"X5XN<( n@ lr!  XXXX X&X,X2X8X>XD ( @Ww StarBats!"- StarBatsX!! StarBats!r-j StarBats!d StarBats!"- StarBats!K StarBatsS!"- StarBatsN!Kdd StarBatsS!"-  StarBatsX!,  StarBats!r*  starbats!d ` starbats!K StarBats!"K starbats!K  starbatsW!K starbats!J  starbatsS!K starbatsX!I starbats!I starbats!KXXGXXXX+XdXXXXHXXXX,XeXXXXIX@'-?@yvdddddXdddddddY dddY} V dddV YdddYdddYdddddY #dd}d dddV dddV dddddd dddddddddddZ#dd}d<dddV Nddd* dddW+ dddS,SdddXX!X4XGX`XyXXXXXXXX)X<XOXbXuXXXXXA'@ zdddddddddd $dd d#d dd dXd  ddddddLddXXX&X2X>XJXVXbXnXzXX1'(@z$dXX+'2@.{"-XXXX '@K . . . . . . . ". '. ,. 1. 6. ;. ~@. tE. jJ. `O. VT. LY. B^. 8c. O. E. ; . 1. '. . . #. '. ,. 1. 6. ;. @. E. J. O. T. Y. ^. . . . w. m. c. Y. O#. E(. ;-. 12. '7. <. A. F. J. O. T. Y. ^. . . . . . . . #. (. -. x2. n7. d<. ZA. PF. FK. X'@"X'@FXX'@؁X'@1X%'@"dXS' @2"' @H' @^{( @np p;http://www.research.att.com/~smb/talks/pushback-dodcert.pdf;http://www.research.att.com/~smb/talks/pushback-dodcert.pdfW!X!p7http://www.ietf.org/html.charters/diffserv-charter.html7http://www.ietf.org/html.charters/diffserv-charter.htmlW!X!px3http://darkwing.uoregon.edu/~joe/how-to-go-fast.ppt3http://darkwing.uoregon.edu/~joe/how-to-go-fast.pptW!X! pv2http://www.nanog.org/mtg-9910/ppt/robert/index.htm2http://www.nanog.org/mtg-9910/ppt/robert/index.htmW!X!p8http://www.napster.com/www.napster.comW!X! p;http://www.caida.org/http://www.caida.orgW!X! pChttp://www.internet2.edu/http://www.internet2.eduW!X! pX#http://condor.depaul.edu/~jkristof/#http://condor.depaul.edu/~jkristof/W!X! px3http://ist.uwaterloo.ca/cn/Residence/rn-excess.html3http://ist.uwaterloo.ca/cn/Residence/rn-excess.htmlW!X!pHhttp://www.aciri.org/floyd/http://www.aciri.org/floyd/W!X!p9http://www.ietf.org/http://www.ietf.orgW!X!p;http://www.nanog.org/http://www.nanog.orgW!X!pl-http://listserv.nd.edu/archives/resnet-l.html-http://listserv.nd.edu/archives/resnet-l.htmlW!X!pf*http://www.theorygroup.com/Archive/Unisog/*http://www.theorygroup.com/Archive/Unisog/W!X! px3http://www.aciri.org/floyd/talks/pushback-Nov00.pdf3http://www.aciri.org/floyd/talks/pushback-Nov00.pdfW!X! p8http://www.cs.washington.edu/homes/savage/traceback.thml8http://www.cs.washington.edu/homes/savage/traceback.thmlW!X! pn.http://www.research.att.com/lists/ietf-itrace/.http://www.research.att.com/lists/ietf-itrace/W!X! p:http://www.us.uu.net/gfx/projects/security/centertrack.pdf:http://www.us.uu.net/gfx/projects/security/centertrack.pdfW!X! pn.http://www.stuartchesire.org/rans/Latency.html.http://www.stuartchesire.org/rans/Latency.htmlW!X!pAhttp://www.illinois.net/http://www.illinois.netW!X!p?http://www.startap.net/http://www.startap.netW!X!p=http://www.cogent.com/http://www.cogent.comW!X!XXXX7XX;X~XXXuXXKXXXLXX@XXFXXPXXTT UV.WE\^f___dGddeeef/fWfvffffffPg* "XX,StarBatsN -",StarBatsN -",StarBatsN -"` ` ,StarBatsN -" ,StarBatsN -",StarBatsN -"hh,StarBatsN -",StarBatsN -",StarBatsN -"pp,StarBatsN - ( StarBats!"-!''Times New Roman'Od 08s2 +iStandardStandard%'''''''''''''''+;(,,--..g* (@'A'1'+''!'''''''''%'Object with arrowStandardObject with arrow'''''''Object with shadowStandardObject with shadow+;(,,--..Object without fillStandardObject without fill'TextStandardText'' Text bodyStandard Text body'''Text body justfiedStandardText body justfied''+'First line indentStandardFirst line indent''g*@'TitleStandardTitle'''Title1StandardTitle1 '''+;(,,--..+''Title2StandardTitle2 ''+;(,,--..g*@'A'+''HeadingStandardHeading''A''Heading1StandardHeading1''A'''Heading2StandardHeading2''A''''Dimension LineStandardDimension Line'''''''Home~LT~Gliederung 1Home~LT~Gliederung 1''g*@' A'1'+''!''' ''''''%'Home~LT~Gliederung 2Home~LT~Gliederung 1Home~LT~Gliederung 2@'A' 1'+''!''' '''''%'Home~LT~Gliederung 3Home~LT~Gliederung 2Home~LT~Gliederung 3@'A' 1'+''!''''''''%'Home~LT~Gliederung 4Home~LT~Gliederung 3Home~LT~Gliederung 4@'A' 1'+''!''''''''%'Home~LT~Gliederung 5Home~LT~Gliederung 4Home~LT~Gliederung 5@'A' 1'+''!''''''''%'Home~LT~Gliederung 6Home~LT~Gliederung 5Home~LT~Gliederung 6@'A' 1'+''!''''''''%'Home~LT~Gliederung 7Home~LT~Gliederung 6Home~LT~Gliederung 7@'A' 1'+''!''''''''%'Home~LT~Gliederung 8Home~LT~Gliederung 7Home~LT~Gliederung 8@'A' 1'+''!''''''''%'Home~LT~Gliederung 9Home~LT~Gliederung 8Home~LT~Gliederung 9@'A' 1'+''!''''''''%' Home~LT~Titel Home~LT~Titel''QQg*@'A'1'+''!''' ''''''%'Home~LT~UntertitelHome~LT~Untertitel''QQg*@'A' 1'+''!''' ''''''%'Home~LT~NotizenHome~LT~Notizen''g*@'A'1'+''!'''''''''%'Home~LT~HintergrundobjekteHome~LT~Hintergrundobjekte+;(,,--..Home~LT~HintergrundHome~LT~Hintergrund4'''''''''          +;(,,--..//00112233445566TitleTitle@SubtitleSubtitle@Background objectsBackground objects@ Background Background@NotesNotes@ Outline 1 Outline 1@ Outline 2 Outline 1 Outline 2@ Outline 3 Outline 2 Outline 3@ Outline 4 Outline 3 Outline 4@ Outline 5 Outline 4 Outline 5@ Outline 6 Outline 5 Outline 6@ Outline 7 Outline 6 Outline 7@ Outline 8 Outline 7 Outline 8@ Outline 9 Outline 8 Outline 9@(\P\D\ f p  v * 62^Cv0C98E7F73}Balance_AFade_ADry ShortNameMicp&FXValues&{97A77BA0-D94D-11D1-9D9D-00A0C98E7F73}?&{49BBB260-D94A-11D1-9D9D-00A0C98E7F73}?&{EBCD6860-0522-11D2-B724-444553540000}/q&/Karaoke - Rm (Vocal Accomp)r&&{5963911B-D956-11D1-9D9D-00A0C98E7F73}Balance_AFade_ADry? ShortNameMics&DrMdM>JoeMn0T1|IV19V1 8ODrLy LAYER_LAYOUTDrLy LAYER_BCKGRNDDrLy LAYER_BACKGRNDOBJDrLyLAYER_CONTROLSDrLy!LAYER_MEASURELINESDrMP'JoeMTlDrML DrOb<SVDr&i%(DrOb<SVDr&A.K(DrOb<SVDr&iC%YDrOb<SVDr&A.CKYDrXXgg fHome~LT~GliederungDrMP|JoeMVmRDrML DrObSVDr&VmR'Home~LT~HintergrundVmRDrObSVDr&p `KL!PStandardp `KL!P{xV4B1f SANS 2001Standardg*<( (@'A'   DrObSVDr&&`KEPStandard&`KEPxV4B1!John Kristoff - DePaul UniversityStandardg*<( (@'A'+'!!!DrObSVDr&aL`K#`PStandardaL`K#`PxV4B1lStandardg*<( (@'A'+'DrObSVDr&_es! Home~LT~Titel_espxV4B1[#Click to edit the title text format Home~LT~Titel<( (@'DrObQSVDr&_exJ(Home~LT~Gliederung 1_exJ xV4B1 %Click to edit the outline text formatHome~LT~Gliederung 1<( (@'Second Outline LevelHome~LT~Gliederung 2<( (@'Third Outline LevelHome~LT~Gliederung 3<( (@'Fourth Outline LevelHome~LT~Gliederung 4 <( (@'Fifth Outline LevelHome~LT~Gliederung 5 <( (@'Sixth Outline LevelHome~LT~Gliederung 6 <( (@'Seventh Outline LevelHome~LT~Gliederung 7 <( (@'Eighth Outline LevelHome~LT~Gliederung 8<( (@'Ninth Outline LevelHome~LT~Gliederung 9<(  ( DrXXHomegg ^Home~LT~GliederungDrMP]JoeMTlDrML DrObuSVDr&TlStandardTlDrObuSVDr&Tl StandardTlDrObuSVDr&Tl StandardTlDrObSVDr&5 B"0! Home~LT~Titel5 B"0dxV4B1OClick to move the slide Home~LT~Titel<( (@'DrObSVDr& 3CG]# Home~LT~Notizen 3CG]mxV4B1XClick to edit the notes formatHome~LT~Notizen<( (@'DrXXHomegg VHome~LT~GliederungDrPgcJoeMTlDrML8DrMD,DrXXgg FHome~LT~GliederungDrPg{JoeMVmRDrML8DrMD,DrOb3SVDr&_e! Home~LT~Titel_exV4B1"Avoiding Network Capacity Collapse Home~LT~Titelg* <( ( @'+'"""""""DrObSVDr&_exJ Standard_exJpxV4B1Q John KristoffStandardg* <( ( @'1'+'   Standardg* <( (@'1'+'jtk@depaul.eduStandardg* <( ( @'1'+' +1 312 362-5878Standardg* <( ( @'1'+' DePaul UniversityStandardg* <( ( @'1'+' Chicago, IL 60604Standardg* <( ( @'1'+' DrXXgg JHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPgtJoeMVmRDrML8DrMD,DrOb SVDr&_e! Home~LT~Titel_exV4B1{Capacity Collapse Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1iScarcity of capacityHome~LT~Gliederung 1g* <( ( @'A' -(Dropped Traffic / Offered Traffic) increasesHome~LT~Gliederung 1g* <( ( @'A'- -#Goodput decreases (approaches zero)Home~LT~Gliederung 1g* <( ( @'A'# #Response time increasesHome~LT~Gliederung 1g* <( ( @'A' %Very little or no real work gets doneHome~LT~Gliederung 1g* <( ( @'A'% %DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrOb]SVDr& 3CG]#Home~LT~Notizen 3CG]xV4B1Goodput, as opposed to badput refers to the amount of data that is transmitted successfully without being lost or retransmitted.Home~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPg JoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1Statistical Multiplexing Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1u$A primary advantage of data networksHome~LT~Gliederung 1g* <( ( @'A'$ $(Available capacity can be used by anyoneHome~LT~Gliederung 1g* <( ( @'A'( (+Share capacity on first in, first out basisHome~LT~Gliederung 1g* <( ( @'A'+ +$Build network based on average usageHome~LT~Gliederung 1g* <( ( @'A'$ $But IP is arbitarily burstyHome~LT~Gliederung 1g* <( ( @'A' )Hence, will probably have some congestionHome~LT~Gliederung 1g* <( ( @'A') )%How do you prevent capacity collapse?Home~LT~Gliederung 1g* <( ( @'A'% %DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPgJJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1IP Type of Service Field Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1t_exJUxV4B1:"The Type of Service provides an indication of the abstract parameters of the quality of service desired." - RFC 791, September 1981Home~LT~Gliederung 1g*<( (@'A'+' hHome~LT~Gliederung 1g*<( (@'A'+' Home~LT~Gliederung 1g*<( (@'A'+' -Twenty years later and still no Internet QoS!Home~LT~Gliederung 1g*<( (@'A'+'- -DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizent 3CG]UxV4B1>The DiffServ Working Group of the IETF has redefined the ToS octet in the IPv4 and IPv6 header. See the DiffServ Working Group homepage for more information.Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPg%JoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1TCP Congestion Avoidance Home~LT~Titelg* <( ( @'+'DrOb/SVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1TCP cannot control congestionHome~LT~Gliederung 1g* <( ( @'A'  .It can react based on implicit network signalsHome~LT~Gliederung 1g* <( ( @'A'. . (Assumes packet loss is due to congestionHome~LT~Gliederung 1g* <( ( @'A'( ("TCP is quite good - maybe too goodHome~LT~Gliederung 1g* <( ( @'A'" "4Tries to fully utilize network - it can go very fastHome~LT~Gliederung 2g* <( (@'A' 4#Want TCP to go slow? Drop packets!Home~LT~Gliederung 1g* <( ( @'A'# # Dropping packets reduces goodputHome~LT~Gliederung 1g* <( ( @'A'   DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0 DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPg+JoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1ICMP, UDP and Multicast Home~LT~Titelg* <( ( @'+'DrOb6SVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1)Some protocols unresponsive to congestionHome~LT~Gliederung 1g* <( ( @'A') ),Luckily TCP accounts for ~90% of the trafficHome~LT~Gliederung 1g* <( ( @'A', ,Congestion control is neededHome~LT~Gliederung 1g* <( ( @'A'  A function of the networkHome~LT~Gliederung 2g*<( (@'A'  How do we do it? is the questionHome~LT~Gliederung 1g* <( ( @'A'  RED and ECNHome~LT~Gliederung 2g*<( (@'A'  Scheduling and rate limitingHome~LT~Gliederung 2g*<( (@'A' Price incentivesHome~LT~Gliederung 2g*<( (@'A' DrXXgg NHome~LT~GliederungDrPg%JoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0 DrObSVDr& 3CG]#Home~LT~Notizen 3CG]ixV4B1TAt first thought it might make sense to rate limit these protocols, but in doing so you not only run into the usual rate limiting problems (see the accompanying whitepaper to this presentation), but you may also break certain network management applications (e.g. pathchar).Home~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPgjJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1What about IPv6, ATM, MPLS... Home~LT~Titelg* <( ( @'+'DrOboSVDr&_exJ(Home~LT~Gliederung 1 _exJxV4B1&Are these ubiquituous in your network?Home~LT~Gliederung 1g* <( ( @'A'& & Thought so.Home~LT~Gliederung 1g* <( ( @'A'  %Probably wouldn't be a panacea anywayHome~LT~Gliederung 1g* <( ( @'A'% %Next slide please...Home~LT~Gliederung 1g* <( ( @'A' DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0 DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPgJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1(D)DoS Attacks are Related Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1q)But we won't talk specifically about themHome~LT~Gliederung 1g* <( ( @'A') )$Congestion control ideas may help usHome~LT~Gliederung 1g* <( ( @'A'$ $With some added featuresHome~LT~Gliederung 2g* <( (@'A' +Probably only a temporary       !"#$%&')*capacity collapseHome~LT~Gliederung 1g* <( ( @'A'+ +(Include this in capacity management planHome~LT~Gliederung 1g* <( ( @'A'( (DrXXgg NHome~LT~GliederungDrPgYJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizen 3CG] xV4B1p ^The following are references to some of the latest work being done to mitigate (D)DoS attacks:Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A'PushbackHome~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A' TracebackHome~LT~Notizeng* <( (@'A' Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A' CenterTrackHome~LT~Notizeng* <( (@'A' Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPg JoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1Let's Get More Capacity Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1t+LAN capacity is cheap, we can overprovisionHome~LT~Gliederung 1g*<( (@'*A'+ +Leased WAN links can be costlyHome~LT~Gliederung 1g*<( (@'*A' )Internet service can definitely be costlyHome~LT~Gliederung 1g*<( (@'*A') ) Operational versus capital costsHome~LT~Gliederung 1g*<( (@'*A'  +Ugh... provisioning problems and lead timesHome~LT~Gliederung 1g*<( (@'*A'+ +Need simple, cheap and fastHome~LT~Gliederung 1g*<( (@'*A' +We only get to pick one, maybe two if luckyHome~LT~Gliederung 1g*<( (@'*A'+ +DrXXgg NHome~LT~GliederungDrPg'JoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObiSVDr& 3CG]#Home~LT~Notizen  3CG]xV4B1LAN costs are usually only one time capital outlays. This makes it easy to buy more than enough capacity (e.g. Gigabit Ethernet is cheap!)Home~LT~Notizeng* <( (@'A'WAN links can be expensive, but they are coming down. For example, Ameritech is selling its GigaMAN service, essentially gigabit ethernet (1 Gb/s), for less than it would cost for an OC3c (155 Mb/s).Home~LT~Notizeng* <( (@'A'Internet service however is still very expensive in the typical case. Although some new providers have begun to appear with attractive offers (e.g.).Home~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPg+JoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1yAccess Blocking Home~LT~Titelg* <( ( @'+'DrOb>SVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1DNS black holingHome~LT~Gliederung 1g*<( (@'*A' IP router filtersHome~LT~Gliederung 1g*<( (@'*A'  Null routesHome~LT~Gliederung 1g*<( (@'*A'  Site blockingHome~LT~Gliederung 1g*<( (@'*A'  DrXXgg NHome~LT~GliederungDrPg%JoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizen 3CG]ixV4B1FLExample Cisco ACL to block access to one server from a local Ethernet LAN.Home~LT~Notizeng* <( (@'A'(-)*Home~LT~Notizeng* <( (@'A' int Ethernet0Home~LT~Notizeng* <( (@'A' % ip address 140.192.1.0 255.255.255.0Home~LT~Notizeng* <( (@'A'% ip access-group 101 inHome~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A'/access-list 101 deny ip any host 216.52.135.148Home~LT~Notizeng* <( (@'A'/!access-list 101 permit ip any anyHome~LT~Notizeng* <( (@'A'!DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPgJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1w Rate Limiting Home~LT~Titelg* <( ( @'+'    DrObSVDr&_exJ(Home~LT~Gliederung 1R_exJ3xV4B1 IP, UDP and TCP based - usuallyHome~LT~Gliederung 1g* <( ( @'A'  IP addressesHome~LT~Gliederung 1g* <( ( @'A'  Protocol portsHome~LT~Gliederung 1g* <( ( @'A'  Strict limitsHome~LT~Gliederung 1g* <( ( @'A'  Dynamic limitsHome~LT~Gliederung 1g* <( ( @'A' DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObDSVDr& 3CG]#Home~LT~Notizen 3CG]xV4B1MExample Cisco CAR 2 Mb/s limit configuration on default Napter TCP port 6699.Home~LT~Notizeng* <( (@'A'Home~LT~Notizeng* <( (@'A' int Ethernet0Home~LT~Notizeng* <( (@'A'  % ip address 140.192.1.0 255.255.255.0Home~LT~Notizeng* <( (@'A'%%d rate-limit input access-group 101 2000000 64000 128000 \ conform-action transmit exceed-action dropHome~LT~Notizeng* <( (@'A'ddHome~LT~Notizeng* <( (@'A'*access-list 101 permit tcp any any eq 6699Home~LT~Notizeng* <( (@'A'**access-list 101 deny ip any anyHome~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPgVJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1UIUC Rate Limiting Experiment Home~LT~Titelg* <( ( @'+'DrOb[SVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1%Allow full capacity access by defaultHome~LT~Gliederung 1g* <( ( @'A'% %'"Out-of-profile" users are rate limitedHome~LT~Gliederung 1g* <( ( @'A'' '+Increasingly aggressive limits if necessaryHome~LT~Gliederung 1g* <( ( @'A'+ +(Analyzing cflowd data to determine usageHome~LT~Gliederung 1g* <( ( @'A'( ((Dynamically upload CAR configs once/hourHome~LT~Gliederung 1g* <( ( @'A'( (Scaling issues - a tad scaryHome~LT~Gliederung 1g* <( ( @'A' ehttp://www.ncne.nlanr.net/training/techs/2001/0128/presentations/2000101-kline1_files/v3_document.htmHome~LT~Gliederung 1g*<( (@'A'eeDrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrOb@SVDr& 3CG]#Home~LT~Notizen 3CG]xV4B11Also see University of Waterloo's technique here:Home~LT~Notizen<( (@'Home~LT~Notizen<( (@' DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPgkJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1Active Queue Management Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1_exJwxV4B1V,One way to control congestion in the networkHome~LT~Gliederung 1g*<( (@'+A', , Tail drop (FIFO queueing)Home~LT~Gliederung 1g*<( (@'+A' Random Early Detection (RED)Home~LT~Gliederung 1g*<( (@'+A' &Explicit Congestion Notification (ECN)Home~LT~Gliederung 1g*<( (@'+A'& &Probably coupled with REDHome~LT~Gliederung 2g* <( (@',A'  $Ongoing experimentation and researchHome~LT~Gliederung 1g*<( (@'+A'$ $Implementations availableHome~LT~Gliederung 1g*<( (@'+A' DrXXgg NHome~LT~GliederungDrPgXJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizen 3CG]xV4B1;This is what I have kind been playing around with. It have as noticeable affect as some of the other solutions, but it plays nicely in the whole Internet transparent, end-to-end model thing. On our Internet border router, it is only useful for outbound traffic as that is the constrained link and that is the only direction we have any control over. It would be nice if ISPs did more on their side, but typically they are hestitant to install filters, AQM or other mechanisms on behalf of individual customers unless perhaps in the case of a temporary (D)DoS attack.Home~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPgzJoeMVmRDrML8DrMD,DrObSVDr&_ex! Home~LT~Titel_exxV4B1Tail Drop Illustrated Home~LT~Titelg* <( ( @'+'DrObSVDr&S@StandardS@NAT5 PNG  IHDR^٤sBITOIDATxyPWo`EAP(^\"J(au=j=׃JVBxGJC1* QQ@8Dc834st0'tׯyRB}&l"S@ŋׯ_rwwwuue26(/"55C>>>;v,3`j@eEEE/_3w܁͛uuu&&&+Wܽ{w=!ĞgZXXP(ܿKK7l`ff>>> SB9y$,)+..۷/3Fa!vܾ}{ҤI_|Ś5kܫ" 7;;D_7%B,J , 0hР޽{ݻWb!͜9ɩk{fffppÇGր = W"/@PPҥKb7FWky_vܲc@vFƦVB~'WWWKK/^ݛGC>x !!(%66Snݺ:zh8;;O2%//ロ1clT*}Ƀ߿޽7o888 2dĈgϞ2e E/ѥ;44qjvFLc9...yyyϟ?}vv˗_.H:ۥ8`kkykך+oicÆ lGL { LĽ{QQQ  7nP( =z,))w޹s^|qk׮999)n!!Ct)$%%֭[?#Njoo^} ۳g˗#""|||ԀӞ>} _>|g̘i ,X_%H={t5xxxܼyS`6mt*׀B!۱xcǎYXX$%%JSBz9qD333OOOй^C]t)?^SB"HN>gϞBXlcc4g{ϬY ==]ҋWZУGիWD:???KK05 D;X~Çѣni! V\\38.Bze˖jzlkk_raPk׮;w̙3y ?+++G!=ꫯ+Z J3f̸t钭mnnndd$ KSz%݉H$jmm׿5lذz LLLζ/((7n-A2fuFI02MA$w9tи&J{Itt4>}zĈElPt@IRcR=lذojZڶmۚϟL_̱VHSEibb5556m>|#G,U$ A Bo^"HA!P >sDbjjjjjMg6YBA^ee?}EGG/\i85Q#+ّrAgC^bbs]J*//_dg}6agg}uz]ڔ րԥΕߥ;vD"X,zGgUF!33333brw:(=zSo Q1a7viӦ988PVȠ.KW^XXX%[ fD"¶lei.^(L =$U^ɂyA}}K,TO4ML"[GjWg!RVXqFY[M&M7n6o\VV>o|O>4Ũw"(**fffIIIU׬YӫW/K999.]Zd M1Ҭ&22)88ӧ۷o/--Zjd?˖-c;Nѣy@XP]]=`III!Hh)v999ѱ@yc(MEEņ h)O?utt,**"#9?M<2w &(o)333zgXh+V}={ lF L f!!!*3ԩSN%ɜQyEW```FFFzzŋij(,,ܴi{Iųhu@v 1cFFFFff&2.$sAAApeX0ɝѥ &۷(:::i&4l0ss󆆆v2ѥ@ƈٳgl򻎎6SSSx!Ƹ»)iCgz fv!P\\Lc^񱲲ھ};żU)//޽{+ԀCڳg/^8TUUUccckk֭[]\\40}tUb_nJJJRǏȷӧUEbffc`jВX,611xtpUTT.\Tq`oo/_e\~֭;|mmT*mooOJJ6l˗/wV2-5665%s}"eggOdill}( Ԡϟ#%e`^׮]#_={-*㹸L<Ʀ499\/>t]3b+Ԡӧfff2vЖ+++PL;)[*#G\v*נcAݽx1:...cƌquuz2P[[knn0ʕ+W\>}Y˒@ѿ*XYUUUUUU___RRRSSѣGm|1c&Mr1Y95\r Dĉ?c z^ ~Ad|~ttŽ?ãG~7n<}4;;;;;;!!㹻L>= @_5bE7L oϗOBP&&&˗/W xβ%"(777//ƍ077OBCCCCCܥX\&H222V^M& |رc׮]{ҥOJO>DZ5\vmժU؁.[… _Vؘ̽eggwq]fgx|>_Yz4AAALv 'O7oYaaa 55TVVرIz~5<<|Ŋd&,]h*55fΜq͛7N3gs uuul 05͝;W k׮w:yi)M}| fVUU;dtդ b0A$;wnxg`xVq EBCC>.3D"Qjjj`` Dx˗|C{챳 {Ctt˗/SRRX Kf,..^t@ 8~̙SRRvtFd:::Μ9 9rdDD… LUYYi&&Kn?ԩSqqq{=zhrrrJJʈ lW[:"I>dȐ .0|;wd-bիW)R|~xx8N .NSQQ#GO9Uz)[[[y_~)++[|9y%x?/R"׮] .) 믿ʾ">L1>26?9oN##8Ν;G2nܸH$~Ybb"+'RË/dfO<oh#juuu˖-# cQ7~j8{,ܻw'OrqI53>>zZ[[ΝK* Y +WC```UUu[n :O(ERoN];"Hb 033pR uݻw@`+5hټy3oX O'O;z$: wWIƒp9c1::&&&'N!N[L~6jT"TzA055MNN_^__]2IO&툳g|uVW^%KRRR O iiidtbb"#+Wח-[FY .d;..95Bضm%#;D` k?q 555fjiiYlYLL %#D TblO?bHE@ׯ_O8Ç~~~W\q*߿?!qm>5jŋ1/ *...--Ud8'5DGG٥Z[[R&Tbw] .//OLL$ԠԐ󓓓_]ݽIUDhw](?F%5'4enn=zȖ߹sŨI׾Zgg纺;wƃmJPgEDuu>,H-,,Ct59sM6-22 G]`"? BHL !s>^lIENDB`DrXXgg JHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPgW+*JoeMVmRDrML8DrMD,DrObSVDr&_ex! Home~LT~Titel_exxV4B1yRED Illustrated Home~LT~Titelg* <( ( @'+'DrObn)SVDr&U/f])FStandardU/f])F((NAT5 (PNG  IHDRG  V7sBITO IDATx{\gv\Wx")i񒩙YeT*M5ex-˱P$,kJ(xYSIP" cu/噝ݙggge *hh  ,>|8///''_eYVѸscƌqww]# Ϋ8~iii_mi1a oj4N4,Tp ŋ-ھ}{mm-Hƍ'NثW={jZNWUUuܹ˗/r]vĈTkR @ V^iӦJBH׮]Ǐ?nܸ^zYZvΝхcwY)A(ZzzԩS+**7n\LLLnl\:11qwssꫯ"""$:BFEE%&&BFz.]NIIٳۧj?9s]hcbbht:3|6#wHwwgCĖ?aBȡCElY!K ॗ^"YFH#?~Ŋ,N>n ,IIIUUUÆ ;w/\pĈӦMRtAF ϯ0333$$D^ zQPPcǎiӦI 8VP={[H#h"..vZz  M2UV.]:~} f'͛7 u_ry58w܀rsse.??ݻ,_[[{…۷o߹s޽{# 4h߾}v$.<_ @)NA֭[u9vO<p:n֬Y_|񅫫krr)SDF Ѯ];"ҪU{HڗVMNNnѢիN-WjB:t OwfEafժU}ܹs\ҰaC):·ATbŽzvZllD] 0 C8Cl޼Y_zU.j04Ƅ]dee}N/hs pq²,Ƚ2QN:u̙ӧOgff}޽رc#G޽?,zH5p$SMH ;wܲeKNNN݃VR(+y楥׮]k׮c$JJJ/^yZBɓ‚iW'7WWQF|7}DjP+WiO?/++ϧNꄑ0rY[Ʊz%a Z3f?!?ڷoo*m7o2R TNy8ZHJJ7o^ ܰaCXX2ԄXHļz>&&ʕ+4#|`$8%́͛qF/t94f͚,~ Z/D=~G7nHMMEh5G~.ŕ+W2 s져Tu떸"QSS3cƌΟ??$$v9JǝZX s 111崫0f̘CҮ&/_iZjE}"7n,,,]8֭[;Dk4;wJt0 4nXfj`ߑu8I [eddTWW2kq w!<6T͛7]V~~Zzz:!$""v!ݻqÇ"HRMc5P%%%ݺuر#ZR @! ]#R 1~AV)..&HS ]tEM6ecRSS[nZj*eee&MHYB^x[F+))Ytim6DTb޽H[~p|xTTD 3cƌ?\Ѯ… Ϝk4ꔔ?~ƍ ._V^-u,O=hWN[b=9!~-7m׮]G=w͛7WZ$O H5>#h1ZWր-s ,JMYzshBw}ױc72֥T0xl*bز2t "ydNG ڷo1wwM6;R ƚ_kJJJf͎;6pg|嗲&.]|g~ٳrvT㟦oK-c8\s\mڴڵkw…]n۶$55C'O~w/RjSL?~MM̈́ dyFr1{쳦> Mϥ}  NPPŋgϞݼy?~n݊ScLMG 508鈼:m6__߻w#Fx'۶m/#;KTT?]1_ꎐjxyynݺ˸w_-(!;w R ]B\Bŋ7'66F.:DT~5pUjkk.]ڦM۷etF3i$5 @Ӕ)S!֚F+/<800Ν;3g:t˗j?992$$O6-5~K.mذ!*@~%!00o߾.\صk+B޽{BsrrEEE:uO>oVLLTBkKnV5o\w'!k֬~ܗ_~IR@EEVmРAUU˲%%%oV%if޽B>}:!gX+ܢM6UVVҮD̽adb@˲ 8%Kbcc/Kח6jԈ{ŋsq5jԨ;vq611qW\رu%Ox,aZmFFshN۴i7aaa660 0{d0[At'^zU322!aaaFk49sXĉAAA;wiW_5k˲֭ac@(˲Ǐ믟xAovvvHHÇ'nڈY7o^~[!ÇOEtz+))2bĈuq׊;wƌݯ_ӧOھnqqqJJӧ/_S[[Kqwwo׮]DDرce;4TP[f޼y .lݺ]-[tR-VRR)VmB hɒ%[lt>}̜9^n&ą >7BF矫H5IJJڱcGYYHv8`Ʀ vڵ}vJ|ܹszjJWSScǎ#GpnV۷o߰0&4nܸI&5믿~yyy͘1cܹ:uTpz>''ٳgϞɱv 4=z3}Yn"*!UuuӧJJJ~dsp9rT@z @=jH5PR T@z @=jH5PR T@z @=jH5PR T@z @=jH5PR T@z @=j. 0,8>y2܆D1Ѩ*"^a\f Ø]hO]u%"vp#p?#)˼;P ev"D6x_e%-Hn; N ܣq&lC_ ۙHɒ%K*++>U/ɲlppVN\\\ (NkfH]u]/[k[RTev+R!wex1_QǏ2Nee+}[ZgIJ4nE [RV5[*ᯈel}Sdv8V-[ իWk4G;P_ԂD GѶl !l )Z7%'GEi!&`YV0 h_ȱّ?ShUȊv}U_(ű}$lKu]X 諭%Q#^9:M%|bv!Hף 6|s >.ը 02mKȺrbFJՈ?;biI]jnәO±ǥF'g֕c]F23< ֦8Z]@٘]k:8ii]3Z@ȳj#@;K llzj@ F$G,=[u`ouZMQtU~:eE;WdbueR ' ?9q%:g>uT6@}':[ʬP5 dUj@ÇJݫ2~Sc$Ч9Аj@<# j@R ĂTj Їj "oK s UɓG]8 "lذ?N]0bYYYV:uBY`?III͛7רQ#77HIbqqq g;cǎ9񀀀\ى'~鰰ǏӮ>Ӕs .=hz9m4* j*/ٳK.Nf[uu#GRRRW]]mv}ٳSN2F @Xnnʕ+'LTy dRYYk׮ÇzAOO{nĈ!!!&LxV^tS1RźwDp؏HK9rd֭Œa3&<uKرcȐ!#*OFGGӮ#R)((㏷mVUUEh4'NlٲӦMۺukÆ e>oذ;**v-˲۷oꫯ=/ԩӬYM˳bxx\5*RM޽׭[7TVVn߾=>>ڵk77ɓ'Ϝ9 G b+Vh۶-BY`?"Ҥ;wB|||,Yk.1`{'T>ذa_߿ ƏRd9*V]]S'Ю#v[n]hQii)!d~XXF Ua+V"@؏˲{y/BȠAz)u90~GGp؏1iҤ .BZhlٲٳg.!?]8UQQќ9s.\뛜HRMyn@jH5޽;00p˖-...ѹ3f`%%%[v!؊7oFFF9s2t]viӆvQj9U]]Ip ؏ٱc[oUZZf͚ӧ3 C(͝;v D1ziii~yFy -99˯Z@@Z@pfȌN:5mtiii4I!-%%%!!?]8Gò+>C^߭[u2lu9s#|IڅS@OIIɴiӾ[FA-nK'C-**ڿahWD0nڵ!/Bҫ%:h. d]!c<=ev뙎">b;WH^/>sQ9BFd T}7mk\K;tѫVFLr#B,[͚5;pr %Y%dO$lǕQ*[F )%3!3BjEGs̙XV{m.!dɒ%eڵM??.hrc5e_ue-ZH?V;vتUڵeju{R C=qPE5(R0 j]"Ww{r3Lm!DZccƼ72=Yx6nxfVUnIeu;[AM[0{ .|RM)xnJkw~XJ5ՎfmW-oZ-ٖ-݌gbi@`˔K ƉcFǘ~Mg#fYQ( ݜKG뵯!Z9!34i@,o}o )X`ҹ|ǧ k:)O*ϊ3h=Ii*Ҋwg˜F>,M$FFs W7- !r:_״i?v 9y&*#;r͚5tHiiill,* DܺuM68VpoaKNy i 72k#&9ë~sIbex%h,GF-vv" dTEE➰4{iP8^]ML_`^)h(䘀L(fzLuEHvlz7 rXMr~tѤßf հx5[/tZgMZH.sm|E·ƭ j3?3@ȯ5]X`əzkK]F-iZT b@RH5Ⱦ<f![Ņ3XX%d9H5PR ŲlTTs\^@!b͛7iWs7]7nL)"H5PR TjfI/J\v¦c;@L_9)bŦH[ԅ/gM cpK-=niEp6vQ2jZFZjll)# #xxr4,<RT.!̄;LG#X"v tR.i/*fi*ӰYҤ=Zik['$R UӤ|\IENDB`DrXXgg JHome~LT~GliederungDrPgwJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrOb7SVDr& 3CG]#Home~LT~Notizen 3CG]xV4B1ZInstead of the average running queue length, you could use the instantaneous queue length.Home~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPgJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1t Scheduling Home~LT~Titelg* <( ( @'+'    DrObSVDr&_exJ(Home~LT~Gliederung 1V_exJ7xV4B1#Alter transmission order of packetsHome~LT~Gliederung 1g* <( ( @'A'# #Can be based on:Home~LT~Gliederung 1g* <( ( @'A'  IP AddressesHome~LT~Gliederung 2g* <( (@'A'   Priority (e.g. ToS bits)Home~LT~Gliederung 2g* <( (@'A'  Protocols (e.g. SSH)Home~LT~Gliederung 2g* <( (@'A'  Flow characteristicsHome~LT~Gliederung 2g* <( (@'A'  &Must define capacity/weight for queuesHome~LT~Gliederung 1g* <( ( @'A'& &DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPgNJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1yTraffic Shaping Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1_exJbxV4B1ATCP rate controlHome~LT~Gliederung 1g*<( (@'+A' $Alter TCP receiver window on the flyHome~LT~Gliederung 2g* <( (@',A' $ $$ ACK pacingHome~LT~Gliederung 1g*<( (@'+A'  )Slow or spread out ACKs to control senderHome~LT~Gliederung 2g* <( (@',A' ) )Packeteer (middlebox) does thisHome~LT~Gliederung 1g*<( (@'+A' Yes, it can be a little scaryHome~LT~Gliederung 2g* <( (@',A'  %Can be implemented in end host stacksHome~LT~Gliederung 1g*<( (@'+A'% %DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0!DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPgMJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1qCaching Home~LT~Titelg* <( ( @'+'DrObSVDr&_exJ(Home~LT~Gliederung 1_exJixV4B1L TransparentHome~LT~Gliederung 1g* <( ( @'A'  $It is there, but users don't know itHome~LT~Gliederung 2g* <( (@'A' $ $ VoluntaryHome~LT~Gliederung 1g* <( ( @'A'  *It is there, but users must know to use itHome~LT~Gliederung 2g* <( (@'A' * *)Probably only buys a short amount of timeHome~LT~Gliederung 1g* <( ( @'A') )DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0#DrObSVDr& 3CG]#Home~LT~Notizen 3CG]cxV4B1NNetwork caches can cause some problems, particularly when it comes to troubleshooting connectivity problems. For example, I was experimenting with a transparent cache and one user was having a problem getting their Java applet based stock ticker program to work. Everything else seemed to work fine. We (including the vendor) could not track down the specific problem, but it was believed that an upcoming coming release of cache software would fix the problem. It is particuarly difficult to troubleshoot in cases like these where network staff would traditionallly be able to pull out packet analyzer tools. In this case, the session information looked completely normal. We had no view into the black box that was the cache to determine why or what was failing.Home~LT~Notizeng* <( (@'A'DrXXDrObuSVDr&TlStandardTlgg JHome~LT~GliederungDrPggJoeMVmRDrML8DrMD,DrObSVDr&_e! Home~LT~Titel_exV4B1yPrivate Peering Home~LT~Titelg* <( ( @'+'DrObzSVDr&_exJ(Home~LT~Gliederung 1_exJxV4B1&There is such a thing as a free lunch!Home~LT~Gliederung 1g* <( ( @'A'& &Well, OK not reallyHome~LT~Gliederung 1g* <( ( @'A'  Involves some routing complexityHome~LT~Gliederung 1g* <( ( @'A'  Startup cost might be highHome~LT~Gliederung 1g* <( ( @'A' )You may have a choice of transit providerHome~LT~Gliederung 1g* <( ( @'A') )%If you can get to an exchange, do so!Home~LT~Gliederung 1g* <( ( @'A'% %DrXXgg NHome~LT~GliederungDrPgJoeMTlDrMLdDrMD,DrMD,DrOb<SVDr&5 B0%DrObSVDr& 3CG]#Home~LT~Notizen 3CG]axV4B1LClick to add notesHome~LT~Notizen<( (@'DrXXDrObuSVDr&TlStandardTlgg NHome~LT~GliederungDrPguKJJoeMVmRDrML8DrMD,DrObSVDr&_ex! Home~LT~Titel_exxV4B1Private Peering Illustrated Home~LT~Titelg* <( ( @'+'DrObISVDr&l _IStandardl _I IHNAT5 HPNG  IHDRaM sBITO IDATxw\٥W)6bWDD@QQ%_5ĨAoKbLlIk FQDE# MTaco2;l;3~pvgfw<{ΙP(XO:9WBT8:2)/p_xNNRmBV E*`֖ Z.!!Ν;<{Ass3xsuu3fx5_!n;eQmTK-PRRrK.eee &[#F3&""DAI%?$W+J5VnԓdREnXLRlK}%׽|rQQQgB}}}oooooogggGG~PG]xƍb֬Y-z!_6|E .&Y… YѮU[2pNssٳgӧO755Qeaa1bĈ#G97022bX?^p(>?a„%K5J;@Fser>fxdUw{N|E㦁[ΝfϞL۷ooݺСCEGFFvQeAFH߮EB+.EEE/(W^{:w+**m۶y把]ݻ7 @UFsfrcxeU U_a+pѣG{z /r…zzz(??̙/^x|MLMMQm3 -wx-ea(3Ҕj#}͝;W L}RRRlmmZfaC6눝2֔uъ%+qڞDEr)Mbfd4СC3fhiiٹs 4V{BCCݻ׻wd;;;U&W8}dff{Z߳gF=vDRa( EQTk|zTZZ:q@UTTR[[{ɉ' FaW@-p 貯?O```ll,X(m۶x^{-33ؘt8ϬhE}G?pРA?޼y3X@%o@B`ÒYN۷uII!p~~~/^(//////++󭬬vjgg׽{w>_e"fg&ANYE{OUz&Εz= EQcƌ֭[aaݻw  wܜǏͭc^i=z1|Ç{yyuUh-sSԛ) =Ν;GQTHH@ׯD2_ijj}vzzzFFFnnnfffaarlllBQ/˗%%%%%%O>Ͽrh!Cٳ5R ɇ^ðl+2P브 jGXrYGؔꮲB9//ʕ+^^^շn(YYYm700ٳkJ 333(``]PWx&gnv092b1c%0|ʏXrӮDP-EEEc[ssyL6p@GGGVv:tPmm-EQrwwg-ڀIW %ByI.ܯdNr?d"7Ub~pٳg|M__ߤ$ұMt}u%<oСnquu511L0555زeÇ V^!՘dw(6AG@awܡ(j#FuС 200 ه~8k֬+Vl۶?߻wիW;wLEL0'@GI/_3fIG&&&[l8qYrrrBCCϟ?O3fm{Vq7cho G¤Fp@Tr#Qfs`3Q2h ҁpرcoܸѽ{+WӬF 'r'(y+3Sij;]W=brEKIpYe*!kii/++Сp8͛>>>uuu?Ç~(u+ la[< :: @ 6mÇ{M$+,!b P(֭H 믿ILL#-EQeeeO8W@gϞ/ٳgƌ#ɓ'}ijj}7Ikjj244400hlllW@e*++CBBΟ?oaa=n8H_444L> Rebb"+EEEAAA]ll& ,T\\loo޽^{t8O>֭[׮]>}v9W@޽߯_8GGGtiPd(رr̷e]t;??ʕ+HVN:EQĉIR19x`W@)Ǐ/++ IHH!wܡ(חt Ae˖)Sׇ?~\r ڭ[7ҁΝ(]l9"e˾;_/[tDTVVvܼJUex<Ʌ8*C رcqqAۗ0ڭa̙G544ܷo߻K:"LMMjkkΈ kMMx<{P4Ձ(z%6 `/v!&&f̘1#hݻ;88d+(,,tqq}^h/vҥKHVDiʽ{4S BˤdT.""wޑLV(+ܝ;wF9`WJN???~wT'U=V6lueXTnϞ=򋉉/u+HRROaaQ\t (ĉ@cdH2,\"Y2,Y3}vٵkW _>PQQvY+++(ѱ8--t,%KTTTPPPKKŋi|oM'>|ȈtDJxEĐE>Pzzѣg̘ܼ|rY#A"l ,!>m۶oO>!j\r.77W) jĖKFB{e^2Q))%%e v{[+ ]}}W##@e"""6lؠdisJ$' Y×$*M42\A#G BWWÇ OŽ|(##E\3իW'O|o6j(===oݺկ_?h&SSfuLLLM~N:1, {I@@{ @:"v9zp}(333333;v [n<8..{#P}>|ƍ}pJNNOqq#GƏd>8jԨ1c\t h7kkEDD|פ*eeeo޽{,Po͚5 8/**jʔ)HGv...={qğg[[[WWW&_'NlڴQ]䁢_GONLL ^o(y{;'O(8::t8$ݻwoر!CkDGGVp\/:ng6A˗&MJMM߽IG@ޑ#G>b=<<إK++߿ڵk=(ʪW^>$57Ą 8]"_Qَqqq_@_566F:={\lل ;us Qsٻwo~nܸѮIWt͛7'LPRRkggG:"6jii)...))y٫W\\\񲳳ۻwjkk=<<233gΜ~"_9gΜ׿U]]=nܸh p˗Guұpݻw VSSs~V_nٷoߤIg̘d@aΝ;Ki&V^-n|@|sijjZr HGmEYZZcΝxݘ _ ,Xj׭[(O=̊200Xt)EQc WSSijj@K _Qo/^XWWd}+Zŋcƌ9}tǎz-h+ ҥ[mm-éW٣GFqugg甔e6D I֠A(*,,d2uu//G멩...#6:u(f.VVVE3Y v3ftB:"-$+F8z&+#_B{ȑE={t,PYY)HAQhs]V__?22/MV-008ҁ0% g̘ann_:w\III׮]h갰x33G@'&躄[ұQZZLMM6---111o *++4++wE߾}#_@rJx<ڵkI{n>OQ˿V(*((~PQejjo׷[ZZR5t|bF13fٻw/p8 )))!O644(ʕ+LO?4rE__޶m,kÖ7nlذu̔)Sjjj m*44ܹsǏ7IGN8;466nݺuڴi#۹s&MT__tM6kۂG>|8==uC.]kkk߿ڵj~~~}‘#_Oeddt# ϟgM4̟?q…۶mS׏=JJJJMMMMM}DgԨQ+WѣS~@@@^^^>}ڻwҥK(rrrZtF?X|yRREQ۵kQUUSPPPPP ccccccKK`J _+W[^>ٳ/_lmELKK˓'O Ne}l K ˆo_>""tD2B0>>Çw?[Ʀcǎ&&&m=ŋb+ W;:eQccY:dhhgϞӧԫXܽ{Wh.|>= Ej֩ pႥett2w,*((Kݻw޽{.]Tuk!_`۷ow-66ՕtDPPPЯ_={kZ%''x{{_r @++p12lllHG"WNаhѢcǎ]$,YdP7lݺXmihh1cƱc ?uT2'OܡC~mѤ#`/+dee 4tDrvޝ5pT$+rK]ܜt,|X'-->"v;wO: v`ʛ7o@;@W<<<~Qh={ܹt B,eiiN: G: `;+vW퐯!_Cl|I IDAT `;+vW퐯!_Cl| `;+vW퐯!_Cl| >xbKBaYpu<*1*BV7BG3mH=lKI{ڒ9Gme^[qH|@:ji.$5{@ƃg2#pŠt-*Sjr륉LJ&+r}bKD6Uk{^kvvebgDb*m-YITn4K.R&'<bKhޣ֗hM$xEQ6$v*GQ +A'+ Ʉ땚RW$Vi U;1_(.9T;b#\* s3fW~՞%wTU2,A kBۿUrvP_l!Vjb&p̋ԑV_]:C_YS2zΣE XLKNUld*k MbWd-%8 [!Yu$kIW@׵wԿM# K\jnǰ.51Y[)vL֨d&Gx:W-|9 Ȃ `;+vW퐯!_Cl| `;{***˫occX9ONN=F}}}===CCCccc}}}###&&&VVV!!!j @+," JJJ^zU\\󲲲/^ Mbccm;`+1W[fͯW^1YʪC YSSB@ ------MMMMMMuuuUUU 555{V]w޽{x47HB@^aaaVVEQ|>{]tԩS׮];wܱcN:uƆW̳ݻ*..Ͽ~K<ѱgϞNNN!* m|Eu֭cǎ LaqqqRyO<)--+**zYnnnAAg?~,Je6166ݻw޽njoo启[KKKff7޽nݺ+W*Vj#TޥKrrrJKKQ8wrrrrrz7^ yyy=%1ُ?~;wܹ{nu,|@Ǐ߾}ƍTUUi>05inn~EQ o&xTǧw޾}[ዡӐHѣW}{zruuׯ_>}IErQQQE;v322"ellِTѣG...8po驪nWfiiLQT=| .`-+stt z֭kɓ'3gTeرw޽vڍ7޽{ʕ[nݺuK׈#*W!88t$ٳGZ 6̜9S_0`DWssk222ϟ?իSN:u(}}}OOO___ooo___CCCұ:7@D!'y{{ ٳggddDFFwީ Cccǎ ;v뗕z&&&;w>>EEEcǎꫯDeϞ=555s9qℙt%_paʕ?gHahE֮];o޼UV޽[__tD Wnݺ3gt%11*+ ,Xzޮ] )U7n\FFƘ1cJJJƏjժAp# 6$$$224&&f#]BB( /ǎ[TTD:(Ac:u611qҤI#BjzzzVJLL֭[rr[||<}UGGǔOOO`:fdd.ϚH W //lWW>}+jҹs縸 6}74F@FbbӧOHG /^tppHMMuss;y$/UVVN6-66ҒtD yyyeddL8իW'OOI^h@6m4}e˖EEE@͛ l"zX h@ Xxy<ޖ-[Ld-+,Yre''7n :_%1 ihh2eʶmی9xb|[$1lذЊ_}Q}}=؅'jԪ|VVV'N5j@:cccұ~O?mhhpuu=z  ]aaa@@@ff}\\ܠAHG566644`edd;>عsK:"VxWVVֈ#233 d+0777oN:jڴiͫ%yh@._SPPseSBšC"##MLLq]A|%::zeee ֤#v@ qKKKׯ_ffaG:"Zر#,,~…ǎÜMn BAݸqc̙555gϞ1cFuu5@*& WX. 7lذ}vFt8`ffoܾ}tP P9sDEEٳgƌ#E477q;w| , FLUUՄ ,,,N>dпB}MKK?~]]?eʔJAhW@5JJJӻtN:"P\}}q]]X@ܑ#G,XPYY٫W#G:@hG~~~'OMLL4i@-pCRRҊ+7|ٳgP GTnnիWSRR<==IG|ׯ_߹ssι]ptP*vssKMMӧ@p?~[Fǯ^tPJA%&&>}ŋvvv#B;wܚ5k(Zv_qq1_*++MkiiI:"P;+AOOoΝx񢛛ٳgI G@gӦMӧOoll\lYTT!@hѣGߺu灁+Vhnn&@=|re˖othΝ;ŭ_oܸ׷tP|hhh2e֭[>xbFE+V$%%988:utPĕ?~̙3aaa#MC322&L˷zkɒ%`Caaȑ#/]K:" =y͛ {\Aȇ5bĈ;w 0 55uРA#2D h+dɒK.999]~}СѤ ˗}|| |||._@:" F4+#===$$^paCCdB{EQǏ/++ MHH& aee}v##~ÇP;v _pcnjIG!_) .LMMիWFFÇIG #& WX. 7lذ}vB{z)STUUϯ#?=]MMM3gܸq#""HGl KKÇڵd#ߐ訪 &DEEYXX:ujƌ#AΚ?~ZZZ~ܹo߿tDH&$$t%))ߟtD.Wt٠Anܸ1cƌYf͜9tPWtσ{N:"`+:733;xoqmAC{[Ҽsrr<<<22tDӐӧO;ŋAAAϟԩ鈀п"KKK7o^]]݂ NZYYI:(Qht?\SS3gΜ'N 211}HG+ ͛w[[ӧO]rtP͐hD__ߧO%''ّ+ĉE? Faч@i_~%((rڴi#NB988\x1""B \2 礃-H{lڴi鍍˖-244$ph}} 6u9!!5))tPmi@x˗x-[|7yPFFh|xŤ#C ([nW(/7nӧOIZ?~̙3aaa#m|f͚s%%%&$$ #n[hQrrK|}}IZ (iѷn?~V\L:(6GܶyW4t,=0׹su 6|W#nCm:u'hJ+W&%%5O>!p>u y{{_xtyh@`G Wm8۠=qWm8+6ܻ>uL]4.uId<<OMթd`-_7K-*_~}(~4%h/b2guп9bP(d_yAM8}49@}wplu-)_v,Z{AL!-H:1֊k֗ڮ#uP鷥?%ӯ w启hf mV}rcF 6\WD۾vث_6oǣ)Ahe+V܅&  w~DoNk۸7#RdҚmTJH64%3-p=P KʼnỏD+]^~HtkYK_2zt"qEb AEP&U2'_sVeyW@!xl&Ū,6=jץC,IC?hU&.n#uBKJ/Y}ZqElڹHɓثm>ʔxn.Z"VdJ/wZ>M4MLii++0iF(SNW Z,+dW9Zq5_QO,*e>튇B9 Y(U5 ΰ bNUW!_A{0`+ A6\o^A#y1TR_R^W/W;+VDUhTEPM;*sUEn*)_ ۾e퍐^ԶU+Wo]|Y/Q^JE@[$P(-Kkb˅yn1,AV]rK UQ뷗gQ/W%B Hjc'r &^k۾[!(S/N[׾O}#9avVᏬ2u%5ANӾB[A}U uErL JCJJ%5bϭX/$tjSZ$]cmˠSm]o\뷂aخ5>ޝRRPnnޖ :zHy;eh['=^Mؼ ˡ6,.Mf})&mIurˡ۶v ye_Q!5C1ӳرbU~`DXf ںq+̐(bW8zߪVR6igOnG7sĬq nIDATG?oD֨>0VN48Iv@ B>7Rn(è_QJj!bGO*\1+l+ C[ VEl5% Gծc%!:~qM.g!ž Wh-Sj`bo 6dɪ/K4_'#zP}LTZFпhmUzXiRf[mmibUf7-_֗ɫ-Vbo*՘Ĭ@ 6yٖ ݡ}+boN0YA}-h4I{#PW/vBf֡=q7 C #|Clĉ _@{D+o |a<C +6h@ƃm8+6h@`G Aпl!_A{␯۠=ql|ġ؆'!寽X( {퐯!_Cl| `;+vWIڌǓse$i}Ҟb_de%-%8+YyWя] YTW@]~oVnӮzKV^RRb婈{L xcҶ**SKBmkN*;19auR2N C vaaUUp_*A ڮzUxP++Ě{nVbZj{$O 4$p= @]~~>њ Pw$Kf*f5w@04l( :Z|iNff{zJ#NnJWƑUYx݁4?Q?49֠puĬAb~>|DtJʑ@TpUN՞Gi]cE*W2 c ' ڙ!UYW.\^ "跥WٖqV_8zRu+Ϳr-^@=] `;dv_Cl| `;+vx!HGWVꟷuǝ@pSe=ј`<?r`;+vW@qh@:B3|AvW퐯!_@hOQ^%/{Q&f/H_lԗW}I|6|E[_y'ר^JV[պ+OE41ݐg Y0 `ۣ֭Ywe۱R>u)W0ֶm:E_ю ~9DJ,#S R0HP %I,5s=q2iͩ]>пhMӯn:uNwV#+@vVb~$VP߱Zb*WWV \tb"UWm%#aNg;Y;XrU8-GBYX|64SP=M0RORJ]ΰdi^W}R&J.TU<*>I̊իgCNֶ:0+ >k0l +vW w]|@"w5Dyb9&nB WRTFVw2 6{31<8 A:Mֳr6)N?֡d߳U i`KS8,+\%+'PUɢT+̌i ?G874A:Ec=bIF+&#M$HP@݅ +\EߧB39W8vp " g0*τpȅ\&w