Uncovering IP Traffic Pattern in Saudi Arabia. Latency, Routes, Hop count,...

Transcription

1 1 Uncovering IP Traffic Pattern in Saudi Arabia Latency, Routes, Hop count,...

2 Authors 2 Luai E. Hasnawi, PhD Assistant Professor Taibah University Ahmad Showail, PhD Assistant Professor University of Prince Mugrin

3 Motivation 3 Cyber security Bandwidth eater applications Future technology 02

4 Research Objectives 4 Study the pattern and behavior of intra and inter IP traffic in Saudi Arabia Measure average packet loss in IP traffic in Saudi Arabia Measure average latency within and across the boarder of the kingdom Provide recommendation to improve the quality of service (QoS) as well as the quality of experience (QoE) for the existing IP network

5 RIPE Atlas 5 Available measurements Ping Traceroute DNS SSL HTTP NTP

6 Atlas Distribution in Saudi Arabia 6 Connected probes are distributed in 4 (out of 13) regions in Saudi Arabia Region 1 Almadinah Almunawwarah 3 Connected probes Region 2 Alriyadh 4 Connected Probes Region 3 Eastern Region 4 Connected Probes Region 4 Makkah mukarramah 1 Connected Probe

7 Measurements Setup Outline 7 Intra-Saudi Traffic Latency Tracing Packet Loss Latency in four other countries Latency in dense populated cities IPv6 Readiness Measurements Inter Saudi Traffic Latency Tracing Packet Loss Hop count in countries with IXP

8 Measurements Setup 1 8 Probe-to-probe RIY-1 There are 12 connected probes within Saudi Arabia. Probes are used to measure: Latency, Packet loss, and Hop count Fully Connected MED-2 RIY-2 RIY-3 MED-1 RIY-4 Ping JUB-1 JED-1 Traceroute DAM-1 DAM-3 DAM-2

9 Measurements Parameters 1 9 Ping Probe-to-Probe (Intra-Saudi) Number of Packets Packet Size Interval IP version Start at End at 4 32 bits 1,800 seconds (30 minutes) IPv4 July 21, :00 July 27, :55

10 Round Trip Time ( RTT ) 10 Probe-to-Probe (Intra-Saudi Arabia) MED MED RIY RIY RIY RIY JED DAM DAM DAM JUB MED MED RIY RIY RIY RIY JED DAM DAM DAM JUB ms 100 ms 200 ms 300 ms >300 ms

11 Measurements Parameters 1 11 Traceroute Probe-to-Probe (Intra-Saudi Arabia) Number of Packets Packet Size Interval IP version Start at End at 3 32 bits 43,200 seconds (12 hours) IPv4 July 22, :00 July 28, :00 Maximum hops 40 Timeout 4000 ( 1 hours)

12 Probe-to-Probe 12 Traceroute Remarks - 1 Some of the intra-saudi Arabian traffic was routed outside the country Jeddah ID Dammam ID Madinah ID Flags credited to

13 Probe-to-Probe 13 Traceroute Remarks - 2 Any ISP All traffic distained to a any probe that is connected to Zain-SA is always routed to Kuwait regardless of the ISP SA Flags credited to

14 Measurements Setup Outline 14 Intra-Saudi Traffic Latency Tracing Packet Loss Latency in four other countries Latency in dense populated cities IPv6 Readiness Measurements Inter Saudi Traffic Latency Tracing Packet Loss Hop count in countries with IXP

15 Measurements Setup 2 15 King Abdullah Uni. U. of Hail U. of Tokyo Uni. of Wollongong U. of Oxford U. of Ghana Uni. of Pittsburgh U. of Chile Probe-to-server We eliminated some of the duplicated probes and ended up with 8 connected probes within Saudi Arabia. Complete Tree Ping Traceroute MED-1 MED-2 RIY-1 RIY-2 RIY-3 JED-1 DAM-1 JUB-1

16 Servers Used Distribution United Kingdom 16 United States Japan University of Pittsburgh University of Oxford University of Tokyo Australia University of Ghana University of Hail Ghana University of Chile King Abdullah University of science and Technology University of Wollongong Saudi Arabia Chile Saudi Arabia

17 Measurement s Parameters 17 Ping Probe-to-Server Number of Packets Packet Size Interval IP version Start at End at 4 32 bits 1,800 seconds (30 minutes) IPv4 July 21, :00 July 27, :55

18 Round Trip Time ( RTT ) 18 Probe-to-Server Japan Saudi A. Saudi A. UK USA Chile Ghana Aust. MED MED RIY RIY , JED RIY DAM JUB ms 100 ms 200 ms 300 ms >300 ms

19 Measurements Parameters 19 Traceroute Probe-to-Server Number of Packets Packet Size Interval IP version Start at End at 3 32 bits 43,200 seconds (12 hours) IPv4 July 21, :15 July 27, :55 Maximum hops 40 Timeout 4000 ( 1 hours)

20 Min-Max Hop Count 20 The minimum and maximum hop count to reach the desired servers from Saudi probes United Kingdom University of Oxford United States University of Pittsburgh Japan University of Tokyo Australia University of Wollongong Ghana University of Ghana Saudi Arabia King Abdullah University of science and Technology Chili University of Chile Minimum No. of hops Maximum No. of hops Saudi Arabia University of Hail

21 Remark #1 (Hop Count) 21 The variance between minimum and maximum hop count for local IP traffic verses a cross ocean servers is not significant Australia University of Wollongong 10 Hops 25 Hops 12,700 Km Distance From Riyadh to Wollongong Saudi Arabia University of Hail 600 Km Distance From Riyadh to Hail 8 Hops 20 Hops

22 Remark #2 (Traffic Route) 22 IP traffic from Saudi Arabia to University of Ghana server travels to Europe and never passes an IXP. Ghana University of Ghana 7 hops 3 hops 2 hops 3 hops 5 hops 20 hops 8 hops 2 hops 3 hops 3 hops 16 hops Flags credited to

23 Remarks #3 (IXP) 23 Sample of IP traffic from Saudi Arabia that pass through IXPs. Japan University of Tokyo 7 hops 3 hops IXP 10 hops 21 hops 16 Australia University of Wollongong IXP 3 hops 7 hops 3 hops IXP 2 hops 5 hops hops Flags credited to

24 Remark #4 (Min-Max Hop Count) 24 Probes that resulted on minimum and maximum hop-count Ghana United Kingdom United Kingdom United States United States Japan Japan MED-2 Australia MED-1 Australia Saudi Arabia Saudi Arabia

25 25205 IPv6 Ready? 25 Only 1 probe in Saudi Arabia that is IPv6 ready IPv6 Probe ID ISP: STC

26 Unanswered Questions 26 Do we have high delay? 02 Population density vs delay 01 Is there a pattern? Would a local IXP reduce the hop count?

27 Measurements Setup Outline 27 Intra-Saudi Traffic Latency Tracing Packet Loss Latency in four other countries Latency in dense populated cities IPv6 Readiness Measurements Inter Saudi Traffic Latency Tracing Packet Loss Hop count in countries with IXP

28 Random RTT measurements 28 Local Latency in 4 counties that s been choses randomly ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms ID ms 5 mseconds

29 Delay in Dense Pullulated Cities 29 Local Latency in 4 high dense pullulated cities. Dhaka Manila Paris São Paulo 8 msec 7 msec 6 msec 5 msec 4 msec 3 msec 2 msec 1 msec 40 msec 35 msec 30 msec 25 msec 20 msec 15 msec 10 msec 5 msec 16 M 1.8 M 2.2 M 12 M Density: 114,300 Density: 110,000 Density: 54,415 Density: 20,495.3 per square mile per square mile per square mile per square mile 1 msecond 5 msecond

30 Measurements Setup Outline 30 Intra-Saudi Traffic Latency Tracing Packet Loss Latency in four other countries Latency in dense populated cities IPv6 Readiness Measurements Inter Saudi Traffic Latency Tracing Packet Loss Hop count in countries with IXP

31 Effect of IXPs on the Hop Count 31 Hop count between for traffic generated from Saudi Arabia, Bahrain and United Arab Emarat's to University of Wollongong and University of Tokyo hops

32 Probe.sa to Zain.sa vs 32 Probe.bh to Zain.bh Although Bahrain has IXP, IP traffic to a probe that is connected to Zain still routed to Kuwait. Any ISP SA Flags credited to

33 Major Findings 33 Average RTT Up to half a second delay across Kingdom severely affects real time applications Hop Count Traffic within Kingdom spans large hop count (up to 20 in the worst case) Traffic Route Traffic within the same city in Saudi is leaving the country!! IPv6 readiness Out of all connected probes in Kingdom, only one is using IPv6 L Packet Loss Packet loss was always 0% unless the destination is unreachable

34 34 Thank you Questions...?