Chapter 1: Introduction roadmap 1.1 What is the Internet? 1.2 Network edge end systems, access networks, links 1.3 Network core circuit switching, packet switching, network structure 1.5 Protocol layers, service models 1.6 Networks under attack: security Introduction 1-1 What’s the Internet: “nuts and bolts” view PC millions of connected computing devices: hosts = end systems wireless laptop running network smartphone apps communication links fiber, copper, wireless links radio, satellite wired links transmission rate = bandwidth routers: forward router packets (chunks of data) Mobile network Global ISP server Home network Regional ISP Institutional network Introduction 1-2 “Cool” internet appliances (Internet of Things, IOT) Internet gaming, chatting Tweet-a-watt: monitor energy use Computer in refrigerator Radio Frequency Identification (RFID) Internet phones Nest Thermostat Introduction 1-3 What’s the Internet: “nuts and bolts” view protocols control sending, Mobile network receiving of msgs e.g., TCP, IP, HTTP, Skype, Ethernet Internet: “network of networks” loosely hierarchical public Internet versus private intranet Global ISP Home network Regional ISP Institutional network Internet standards RFC: Request for comments IETF: Internet Engineering Task Force Introduction 1-4 What’s a protocol? human protocols: “what’s the time?” “I have a question” introductions … specific msgs sent … specific actions taken when msgs received, or other events network protocols: machines rather than humans all communication activity in Internet governed by protocols protocols define format, order of msgs sent and received among network entities, and actions taken on msg transmission, receipt Introduction 1-5 What’s a protocol? a human protocol and a computer network protocol: Hi TCP connection request Hi TCP connection response Got the time? Get http://www.awl.com/kurose-ross 2:00 <file> time Introduction 1-6 Chapter 1: roadmap 1.1 What is the Internet? 1.2 Network edge end systems, access networks, links 1.3 Network core circuit switching, packet switching, network structure 1.4 Delay, loss and throughput in packet-switched networks 1.5 Protocol layers, service models 1.6 Networks under attack: security 1.7 History Introduction 1-7 A closer look at network structure: network edge: applications and hosts access networks, physical media: wired, wireless communication links network core: interconnected routers network of networks Introduction 1-8 Access networks and physical media Q: How to connect end systems to edge router? residential access nets institutional access networks (school, company) mobile access networks Keep in mind: bandwidth (bits per second) of access network? shared or dedicated? Introduction 1-9 Residential access: point to point access Dialup via modem up to 56Kbps direct access to router (often less) Can’t surf and phone at same time: can’t be “always on” DSL: digital subscriber line < 2.5 Mbps upstream transmission rate (typically < 1 Mbps) < 24 Mbps downstream transmission rate (typically < 10 Mbps) Why asymmetric ? Why not 0 bps for upstream? Introduction 1-10 Access net: digital subscriber line (DSL) central office DSL splitter modem voice, data transmitted at different frequencies over dedicated line to central office telephone network DSLAM ISP DSL access multiplexer use existing telephone line to central office DSLAM data over DSL phone line goes to Internet voice over DSL phone line goes to telephone net Different ages of phone lines may have different capacities Your house may not have the new lines that support the top speed in ads Introduction 1-11 Access net: cable network cable headend … cable splitter modem V I D E O V I D E O V I D E O V I D E O V I D E O V I D E O D A T A D A T A C O N T R O L 1 2 3 4 5 6 7 8 9 Channels frequency division multiplexing: different channels transmitted in different frequency bands Introduction 1-12 Access net: home network wireless devices to/from headend or central office often combined in single box cable or DSL modem wireless access point (54 Mbps) router, firewall, NAT wired Ethernet (100 Mbps) Introduction 1-13 Physical Media Bit: propagates between transmitter/rcvr pairs physical link: what lies between transmitter & receiver guided media: Twisted Pair (TP) two insulated copper wires Category 5: 100 Mbps, 1 Gpbs Ethernet Category 6: 10Gbps Why twisted? signals propagate in solid media: copper, fiber, coax unguided media: signals propagate freely, e.g., radio Introduction 1-14 Physical Media: coax, fiber Coaxial cable: Fiber optic cable: conductors bidirectional baseband: pulses, each pulse a bit high-speed operation: two concentric copper single channel on cable legacy Ethernet broadband: multiple channels on cable HFC glass fiber carrying light 10’s-100’s Gps low error rate: immune to electromagnetic noise Why lights not go out? Introduction 1-15 From Google Image: Optical Fiber Cable Introduction 1-16 Physical media: radio signal carried in electromagnetic spectrum no physical “wire” bidirectional propagation environment effects: reflection obstruction by objects interference Radio link types: terrestrial microwave e.g. up to 45 Mbps channels LAN (e.g., Wifi) 11Mbps, 54 Mbps wide-area (e.g., cellular) 3G cellular: ~ 1 Mbps 4G (LTE): ~ 1 Gbps (??) satellite Kbps to 45Mbps channel (or multiple smaller channels) 280 msec end-end delay geosynchronous versus low altitude Introduction 1-17 From Google Image: Cellular Tower Microwave dishes Cell tower Introduction 1-18 Wireless Sensor Network Sensor nodes monitor nearby environment and send back sensed information Battlefield sensor network Sensor Mote Wild life sensor http://www.cotsjournalonline.com/article s/view/102158 http://www.eecs.berkeley.edu/IPRO/Summar y/Old.summaries/03abstracts/polastre.1.html Introduction 1-19 Wireless Ad Hoc Network Decentralized network No fixed network infrastructure, routers Mostly nodes are mobile Emergency ad hoc network Unmanned mini helicopter with wireless relay node Introduction 1-20 Harvard School’s Project: Kilobot (mimic a swarm of fish) http://www.eecs.harvard.edu/ssr/projects/progSA/kilobot.html Introduction 1-21 Chapter 1: roadmap 1.1 What is the Internet? 1.2 Network edge end systems, access networks, links 1.3 Network core circuit switching, packet switching, network structure 1.4 Delay, loss and throughput in packet-switched networks 1.5 Protocol layers, service models 1.6 Networks under attack: security 1.7 History Introduction 1-22 The Network Core mesh of interconnected routers the fundamental question: how is data transferred through net? circuit switching: dedicated circuit per call: telephone net packet-switching: data sent thru net in discrete “chunks” Introduction 1-23 Network Core: Circuit Switching network resources (e.g., bandwidth) divided into “pieces” pieces allocated to calls resource piece idle if dividing link bandwidth into “pieces” frequency division time division not used by owning call (no sharing) Introduction 1-24 Circuit Switching: FDM and TDM Example: FDM 4 users frequency TDM (GSM uses this) time frequency time TDMA: Time Division Multiplexing Access Introduction 1-25 Network Core: Packet Switching each end-end data stream divided into packets user A, B packets share network resources each packet uses full link bandwidth resources used as needed Bandwidth division into “pieces” Dedicated allocation Resource reservation C A B D Introduction 1-26 Network Core: Packet Switching resource contention: aggregate resource demand can exceed amount available congestion: packets queue, wait for link use store and forward: packets move one hop at a time Node receives complete packet before forwarding C A B D Introduction 1-27 Two key network-core functions routing: determines source- destination route taken by packets routing algorithms forwarding: move packets from router’s input to appropriate router output routing algorithm local forwarding table header value 0100 0101 0111 1001 output link 1 3 2 2 1 3 2 dest address in arriving packet’s header Network Layer 4-28 Packet switching versus circuit switching packet switching allows more users to use network! example: 1 Mb/s link each user: • • 100 kb/s when “active” active 10% of time 1 Mbps link circuit-switching: N users 10 users packet switching: with 35 users, probability > 10 active at same time is less than .0004 * Q: how did we get value 0.0004? Q: what happens if > 35 users ? * Check out the online interactive exercises for more examples Introduction 1-29 Packet switching versus circuit switching Is packet switching a “slam dunk winner?” Great for bursty data resource sharing simpler, no call setup Excessive congestion: packet delay and loss protocols needed for reliable data transfer, congestion control Q: How to provide circuit-like behavior? bandwidth guarantees needed for audio/video apps QoS – Quality of Service still an unsolved problem (chapter 7) Introduction 1-30 Internet structure: network of networks End systems connect to Internet via access ISPs (Internet Service Providers) Residential, company and university ISPs Access ISPs in turn must be interconnected. So that any two hosts can send packets to each other Resulting network of networks is very complex Evolution was driven by economics and national policies Let’s take a stepwise approach to describe current Internet structure Internet structure: network of networks Question: given millions of access ISPs, how to connect them together? access net access net access net access net access net access net access net access net access net access net access net access net access net access net access net access net Internet structure: network of networks Option: connect each access ISP to every other access ISP? access net access net access net access net access net access net access net connecting each access ISP to each other directly doesn’t scale: O(N2) connections. access net access net access net access net access net access net access net access net access net Internet structure: network of networks Option: connect each access ISP to a global transit ISP? Customer and provider ISPs have economic agreement. access net access net access net access net access net access net access net global ISP access net access net access net access net access net access net access net access net access net Internet structure: network of networks But if one global ISP is viable business, there will be competitors …. access net access net access net access net access net access net access net ISP A access net access net access net ISP B ISP C access net access net access net access net access net access net Internet structure: network of networks But if one global ISP is viable business, there will be competitors …. which must be interconnected Internet exchange point access net access net access net access net access net IXP access net ISP A IXP access net access net access net access net ISP B ISP C access net peering link access net access net access net access net access net Internet structure: network of networks … and regional networks may arise to connect access nets to ISPs access net access net access net access net access net IXP access net ISP A IXP access net access net access net access net ISP B ISP C access net access net regional net access net access net access net access net Internet structure: network of networks … and content provider networks (e.g., Google, Microsoft, Akamai ) may run their own network, to bring services, content close to end users access net access net access net access net access net IXP access net ISP A access net Content provider network IXP access net access net access net ISP B ISP B access net access net regional net access net access net access net access net Internet structure: network of networks Tier 1 ISP Tier 1 ISP IXP IXP Regional ISP access ISP access ISP Google access ISP access ISP IXP Regional ISP access ISP access ISP access ISP access ISP at center: small # of well-connected large networks “tier-1” commercial ISPs (e.g., Level 3, Sprint, AT&T, NTT), national & international coverage content provider network (e.g, Google): private network that connects its data centers to Internet, often bypassing tier-1, regional ISPs Introduction 1-39 Tier-1 ISP: e.g., Sprint POP: point-of-presence to/from backbone peering … … … … … to/from customers Introduction 1-40 “Real” Internet delays and routes What do “real” Internet delay & loss look like? Traceroute program: provides delay measurement from source to router along end-end Internet path towards destination. For all i: sends three packets that will reach router i on path towards destination router i will return packets to sender sender times interval between transmission and reply. 3 probes 3 probes 3 probes Introduction 1-41 “Real” Internet delays and routes traceroute: gaia.cs.umass.edu to www.eurecom.fr Three delay measurements from gaia.cs.umass.edu to cs-gw.cs.umass.edu 1 cs-gw (128.119.240.254) 1 ms 1 ms 2 ms 2 border1-rt-fa5-1-0.gw.umass.edu (128.119.3.145) 1 ms 1 ms 2 ms 3 cht-vbns.gw.umass.edu (128.119.3.130) 6 ms 5 ms 5 ms 4 jn1-at1-0-0-19.wor.vbns.net (204.147.132.129) 16 ms 11 ms 13 ms 5 jn1-so7-0-0-0.wae.vbns.net (204.147.136.136) 21 ms 18 ms 18 ms 6 abilene-vbns.abilene.ucaid.edu (198.32.11.9) 22 ms 18 ms 22 ms 7 nycm-wash.abilene.ucaid.edu (198.32.8.46) 22 ms 22 ms 22 ms trans-oceanic 8 62.40.103.253 (62.40.103.253) 104 ms 109 ms 106 ms link 9 de2-1.de1.de.geant.net (62.40.96.129) 109 ms 102 ms 104 ms 10 de.fr1.fr.geant.net (62.40.96.50) 113 ms 121 ms 114 ms 11 renater-gw.fr1.fr.geant.net (62.40.103.54) 112 ms 114 ms 112 ms 12 nio-n2.cssi.renater.fr (193.51.206.13) 111 ms 114 ms 116 ms 13 nice.cssi.renater.fr (195.220.98.102) 123 ms 125 ms 124 ms 14 r3t2-nice.cssi.renater.fr (195.220.98.110) 126 ms 126 ms 124 ms 15 eurecom-valbonne.r3t2.ft.net (193.48.50.54) 135 ms 128 ms 133 ms 16 194.214.211.25 (194.214.211.25) 126 ms 128 ms 126 ms 17 * * * * means no response (probe lost, router not replying) 18 * * * 19 fantasia.eurecom.fr (193.55.113.142) 132 ms 128 ms 136 ms Under Windows is “tracert” Introduction 1-42 Traceroute from My Home Computer (last year) Introduction 1-43 Traceroute from My Home Computer (another time) Introduction 1-44 Introduction 1-45 Online Traceroute Tools Because UCF campus network blocks all ICMP packets, you need an outside machine to try it. Try on http://tools.pingdom.com/ping/ Try from different countries from www.traceroute.org Check traceroute virtual path at: • http://traceroute.monitis.com/ and • http://www.yougetsignal.com/tools/visual-tracert/ Introduction 1-46 Chapter 1: roadmap 1.1 What is the Internet? 1.2 Network edge end systems, access networks, links 1.3 Network core circuit switching, packet switching, network structure 1.4 Delay, loss and throughput in packet-switched networks 1.5 Protocol layers, service models 1.6 Networks under attack: security 1.7 History Introduction 1-47 Protocol “Layers” Networks are complex! many “pieces”: hosts routers links of various media applications protocols hardware, software Question: Is there any hope of organizing structure of network? Or at least our discussion of networks? Introduction 1-48 Why layering? Dealing with complex systems: explicit structure allows identification, relationship of complex system’s pieces layered reference model for discussion modularization eases maintenance, updating of system change of implementation of layer’s service transparent to rest of system e.g., change in gate procedure doesn’t affect rest of system layering considered harmful? Duplicate functions Introduction 1-49 Internet protocol stack application: supporting network applications FTP, SMTP, STTP application transport: host-host data transfer TCP, UDP transport network: routing of datagrams from network source to destination IP, routing protocols link: data transfer between neighboring network elements link physical PPP, Ethernet physical: bits “on the wire” Introduction 1-50 ISO/OSI reference model presentation: allow applications to interpret meaning of data, e.g., encryption, compression, machinespecific conventions session: synchronization, checkpointing, recovery of data exchange Internet stack “missing” these layers! these services, if needed, must be implemented in application needed? application presentation session transport network link physical Introduction 1-51 source message segment Ht datagram Hn Ht frame Hl Hn Ht M M M M Encapsulation application transport network link physical Hl Hn Ht M link physical Hl Hn Ht M switch destination M Ht M Hn Ht Hl Hn Ht M M application transport network link physical Hn Ht Hl Hn Ht M M network link physical Hn Ht Hl Hn Ht M M router Introduction 1-52 Chapter 1: roadmap 1.1 What is the Internet? 1.2 Network edge end systems, access networks, links 1.3 Network core circuit switching, packet switching, network structure 1.4 Delay, loss and throughput in packet-switched networks 1.5 Protocol layers, service models 1.6 Networks under attack: security 1.7 History Introduction 1-53 Network Security attacks on Internet infrastructure: infecting/attacking hosts: malware, spyware, worms, unauthorized access (data stealing, user accounts) denial of service: deny access to resources (servers, link bandwidth) Internet not originally designed with (much) security in mind original vision: “a group of mutually trusting users attached to a transparent network” Internet protocol designers playing “catch-up” Security considerations in all layers! Introduction 1-54 What can bad guys do: malware? Spyware: Worm: infection by downloading infection by passively web page with spyware receiving object that gets itself executed records keystrokes, web sites visited, upload info self- replicating: propagates to collection site to other hosts, users Virus infection by receiving object (e.g., e-mail attachment), actively executing self-replicating: propagate itself to other hosts, users Sapphire Worm: aggregate scans/sec in first 5 minutes of outbreak (CAIDA, UWisc data) Introduction 1-55 Denial of service attacks attackers make resources (server, bandwidth) unavailable to legitimate traffic by overwhelming resource with bogus traffic 1. select target 2. break into hosts around the network (see malware) 3. send packets toward target from compromised hosts target Introduction 1-56 Sniff, modify, delete your packets Packet sniffing: broadcast media (shared Ethernet, wireless) promiscuous network interface reads/records all packets (e.g., including passwords!) passing by C A src:B dest:A payload B Ethereal software used for end-of-chapter labs is a (free) packet-sniffer more on modification, deletion later Introduction 1-57 Masquerade as you IP spoofing: send packet with false source address C A src:B dest:A payload B Introduction 1-58 Masquerade as you IP spoofing: send packet with false source address record-and-playback: sniff sensitive info (e.g., password), and use later password holder is that user from system point of view A C src:B dest:A user: B; password: foo B Introduction 1-59 Masquerade as you IP spoofing: send packet with false source address record-and-playback: sniff sensitive info (e.g., password), and use later password holder is that user from system point of view later ….. C A src:B dest:A user: B; password: foo B Introduction 1-60 Network Security more throughout this course chapter 8: focus on security cryptographic techniques Introduction 1-61 Chapter 1: roadmap 1.1 What is the Internet? 1.2 Network edge end systems, access networks, links 1.3 Network core circuit switching, packet switching, network structure 1.4 Delay, loss and throughput in packet-switched networks 1.5 Protocol layers, service models 1.6 Networks under attack: security 1.7 History Introduction 1-62 Chapter 1: roadmap 1.1 What is the Internet? 1.2 Network edge end systems, access networks, links 1.3 Network core circuit switching, packet switching, network structure 1.4 Delay, loss and throughput in packet-switched networks 1.5 Protocol layers, service models Added: cellular and mobile technologies 1.6 Networks under attack: security 1.7 History Introduction 1-63 Cellular and mobile technologies Overview of smart phone technologies Overview of IOS and Andriod operating systems Mobile protocols Mobile logical channel descriptions, registration procedures, encryptions standards Mobile identifiers, and Location-based Services Introduction 1-64 Introduction: Summary Covered a lot of material! Internet overview what’s a protocol? network edge, core, access network packet-switching versus circuit-switching Internet structure performance: loss, delay, throughput layering, service models security history You now have: context, overview, “feel” of networking more depth, detail to follow! Introduction 1-65