IPD: Detecting Traffic Ingress Points at ISPs
Classification / Keywords
Sponsor
Citation
In: ACM SIGCOMM : proceedings of the ACM SIGCOMM ... conference on SIGCOMM 2024 / (2024-08-04) , S. 778-793; 979-8-4007-0614-1
Collections
Detecting where traffic enters a network enhances network operation, but poses a complex measurement problem that requires analyzing a continuous traffic stream from all border routers - a challenging task for ISPs in the absence of a scalable approach. To enable ISPs to perform Ingress Point Detection (IPD), we propose an efficient approach that accurately identifies traffic ingress points at ISPs of any size using flow-level traffic traces. IPD identifies the specific router and interface through which a particular segment of the Internet address space enters a network. IPD splits the address space into fine-grained ranges to identify the specific router and interface through which segments of the address space enter the network. We have deployed IPD for six years at a major tier-1 ISP with an international network that handles multi-digit Tbit/s traffic levels, and our experience shows that IPD can accurately identify ingress points and scale to high traffic loads on a single commodity server. IPD enabled the ISP to improve network operations by identifying performance issues and realizing advanced traffic engineering practices.
@article{doi:10.17170/kobra-2024111111094, author ={Mehner, Stefan and Poese, Ingmar and Reelfs, Helge and Hohlfeld, Oliver}, title ={IPD: Detecting Traffic Ingress Points at ISPs}, keywords ={004 and Verkehrstechnik and Betriebserfahrung and Traffic Engineering}, copyright ={http://creativecommons.org/licenses/by/4.0/}, language ={en}, journal ={ACM SIGCOMM : proceedings of the ACM SIGCOMM ... conference on SIGCOMM}, year ={2024-08-04} }