Why Peer? William B. Norton Chief Strategy Officer, IIX Executive Director, Dr. Peering

Transcription

1 Why eer? William. Norton Chief Strategy Officer, IIX Executive Director, Dr. eering

2 link: 50 Exposures

3 50 Fishing trips

4 Jenny Lake

5 Swim with the fishes

6

7 Whyeer? 7

8 eeringsavesmoney /mbps eering vs ransit Example Costofeering = 2500 / mo ransit rice = 5 / Mbps / mo eeringreakeveno int = 2500 / 5 = 500Mbp Cost of eering eering reak Even oint Unit eering Cost = rice of ransit eering isk ransit rice Effective eering andwidth ransit rice 5/Mbps Effective eering ange Source: he Internet eering laybook: Ch. 5 he usiness Case for eering #mbps 8

9 raditional eering IX C D A E F Fixed Cost Circuits IX G H I raditional eering outer CapEx Colocation Fees Deployment/Install Fees aperwork for each IX Weeks or Months to turn up IX J K L

10 ethering (aka emote eering) emote eering VLAN(s) delivered to the router IX IX C D A emote eering rovider Equipment emote eering rovider IX E F G H I emote eering No outer CapEx No Colocation Fees No Deployment/Install Fees aperwork eduction for IX Near instant turn up IX J K L

11 Customer outer ethering (aka emote eering) emote eering rovider! No physical presence required! VLAN Service Model LINX VLAN AMS-IX VLAN DE-CIX VLAN Single physical port delivered to customer router 10Gbps emote eering Service With potential many VLANs (one per exchange point) delivered to the customer router emote eering VLAN(s) delivered to the router A emote eering rovider Equipment emote eering rovider emote eering No outer CapEx No Colocation Fees No Deployment/Install Fees aperwork eduction for IX Near instant turn up Customer outer LINX VLAN AMS-IX VLAN DE-CIX VLAN Single physical port delivered to customer router 10Gbps emote eering Service With potential many VLANs (one per exchange point) delivered to the customer router IX IX IX IX C D E F G H I J K L

12 raditional eering vs. emote eering /Mbps eering -Colocation -Equipment -ransport = emote eering raditional eering emote eering vs. Internet ransit ransit #Mbps

13 One ethering Use Case CapExfor4 EuropeanOs OpExfor4 EuropeanOs Circuit*Costs*for networkof4 EuropeanO radi&onal* eering 1.1Mone67me (275K/O) emote eering VLAN(s) delivered to the router A emote eering emote eering rovider No outer CapEx No Colocation Fees No Deployment/Install 6K/month Fees aperwork acrossmls eduction for IX Near instant turn up emote*eering emote eering rovider Equipment 15K/month 0 6K/month 0 cloudto4os IX IX IX IX C D E F G H I J K Source: Chapter 14, he Internet eering laybook L

14 ethering opens up eering to a broader set of networks.

15 When does it make sense to have a physical router presence at the IX?! When does ethering make sense?

16 raffic Distribution: lend Internet ransit! Internet eering! ethering (aka emote eering)! Optimal raffic Distribution lend CDN! aid eering! Caching

17 Whyeer? 1)eeringSavesMoney 17

18 Whyeer? 2)eeringImproveserformance 18

19 eeringimproveserformance 3x#sta'c#object#download#'me,#elkom,#South#Africa# Stac&object&download&me,&Ooredoo,&Qatar& Source:GrzegorzJanoszka, Ispeeringreallyfaster?Letthedataspeakforitself, EFSplit,Croa7a 19

20 Whyeer? 3)eeringMakesMoney 20

21 3)eeringMakesMoney ISschargeonameteredbasis eeringtendstoreducelatencyandpacketloss LatencyslowstheCsessionestablishment&datatransfer acketlosscausesdatatransferratetodividebytwo acketlossandlatencyslowsthetransitbillingmeter eeringenablesthetransitbillingmetertospinfaster herefore,eeringmakesissmoremoney

22 4)eeringImprovesSecurity 22

23 4)eeringImprovesMentalHealth 23

24 4)eeringImprovesMentalHealth Face6to6facediscussions arebe]erthan 24

25 5)eeringImprovesSecurity 25

26 5)eeringImprovesSecurity 1)eeringImmunefromsideeffectsofDDoS 2)eeringeduces A]ackSurface 3)eeringSpeedsimetoecovery 26

27 Onthe CommodityInternet A C D E F raffictraverses poten7allymany*networks* beforereachingitsdes7na7on G intermingled

28 Alltrafficinthe CommodityInternet isintermingled C D E A Whichworksfinewhen thereisplentyofinterconnec7on andwidth,networkshaveplentyof Memory,CU,etc.Aggrega7onEfficiencyaregreat. F G Worksfineun7l

29 utwhenthere areddosa]acks C D E A X F anywherealongthetransitpath, acketloss,latency, poorperformance. esult:dos:a!gunabletoestablishasecurechannel. G

30 DDoSScale 30

31 OrSpotEvents C D E A X F anywherealongthetransitpath, G acketloss,latency, poorperformance. esult:dos:a!gunabletoestablishasecurechannel. Note: NotjustDDOS SpotEvents(MSUpdate,Oprahinterview,etc.) eeringbypass

32 1)eeringypassesthe CommodityInternet C D E A X F Important.raffic.is.eered. G 1)ypeering,peeredtrafficisimmune fromthesideaffectsofddos, eeringimprovessecurity IX

33 CommodityInternethas manypointsofvulnerability Networkscanbehijacked C D E A Interconnectscanbe tapped,mirrored, redirected,captured F G Novisibilitytoupstreamissues MaybeinprotectedIDCor Onthetopofatelephonepole G eeringbypass

34 2)eeringeducesthe networkvulnerability Networkscanbehijacked C D E A Interconnectscanbe tapped,mirrored, redirected,captured F G Forthesubsetofpeeredtraffic. Hardenedbuilding e]ervisibility,peersshouldno7cedisrup7on. eeringimprovessecurity IX

35 3)eeringImproves ecoveryime Networkscanbehijacked C D E A Interconnectscanbe tapped,mirrored, redirected,captured F G rac7calma]er peersexchange ContactInfo,NOC# s,networkmaps, Escala7onprocedures,cellphone# s Youmettheperson!fasterresolu7on7mes. IX

36 eeringimprovessecurity 1. Internetransitinterminglestraffic VulnerabletoDDOSsideeffect eeringbypassesthe wildwildwestcommodityinternet 2. Internetransitmorepointsofvulnerability Interconnectsandnetworksalongthepath eeringinvolvesfewernetworkelementsbetweencontent andeyeballs 3. Securityresponseisfasterwithpeers UpstreamNOCswon ttakeyourcall What are some counter arguments?

37 Q&A hank you for your time!! Comments Welcome!!

38 Why eer? 1. eering Saves Money 2. eering Improves erformance 3. eering Increases evenue 4. eering Improves Mental Health 5. eering Improves Security