Know Your Network: Why every network operator should host a RIPE Atlas probe
0 likes25 views
The document discusses the importance of hosting a RIPE Atlas probe for network operators, emphasizing its role in enhancing network monitoring, troubleshooting, and performance optimization. It outlines the benefits of using RIPE Atlas's global active measurement platform, which provides valuable data on internet reachability through various measurement types. Additionally, it addresses security and privacy considerations, while encouraging participation and collaboration in improving local internet infrastructure.
Know Your Network: Why every network operator should host a RIPE Atlas probe
- 1. Why every network operator should host a RIPE Atlas probe Know Your Network Lia Hestina | MYNOG 11| Kuala Lumpur
- 2. Lia Hestina | MYNOG 11| Kuala Lumpur 11 Things Network Operators Do 2 Network Monitoring Network Infrastructure Management Security Management Configuration and Optimisation Capacity Planning Software Updates and Patch Management 8 to 11 Troubleshooting
- 3. Lia Hestina | MYNOG 11| Kuala Lumpur • No News Is Good News The Unknown 3 Your infrastructure System & Software Your People What’s Known Monitoring Tools Security Measures Threats/ Unpredictability What our competitor do Everchanging Technology Hijacks/ Natural Disaster Opportunity
- 4. Lia Hestina | MYNOG 11| Kuala Lumpur RIPE Atlas • RIPE Atlas is a global active measurements platform, funded by RIPE NCC members and sponsors • Goal: view Internet reachability • Probes hosted by volunteers, using a credits system • Data is publicly available • atlas.ripe.net • www.ripe.net/ripe-atlas/ 4
- 5. Lia Hestina | MYNOG 11| Kuala Lumpur • RIPE Atlas Measurement Types 5 PING TRACEROUTE DNS HTTP (anchors) SSL/TLS NTP GUI API CLI TOOL Accessible via
- 6. Lia Hestina | MYNOG 11| Kuala Lumpur 6 Run RIPE Atlas tests • More than 12,000 probes connected • More than 3,000 ASNs globally • 347 in South East Asia
- 7. Lia Hestina | MYNOG 11| Kuala Lumpur • High latency - impatient gamers • Gamers from different networks • Realtime application is unpredictable 7 Some Problems Mbappe • Online gaming company • Runs own LAN • Users from around the world
- 8. Lia Hestina | MYNOG 11| Kuala Lumpur 8 Issues Spotted! • Talk to your peers, ISP or anyone who can help improve RTT High latency Identified Lower latency after debugging
- 9. Lia Hestina | MYNOG 11| Kuala Lumpur Hooray Moments! 9 Improve Performance Shorter path is selected, better latency, reliability and security Service desk ❤ RIPE Atlas + GUI To validate findings Control and Flexibility Repeat tests as much as you need!
- 10. Lia Hestina | MYNOG 11| Kuala Lumpur 10 Traffic Volume Bandwidth WIFI Making your Coffee What it Isn’t
- 11. Lia Hestina | MYNOG 11| Kuala Lumpur Dare to Take a Risk? 11 Try it Wisely Is it NEW? Who uses the platform? Search for BAD reviews/BAD experiences online What do people say? What's the source? Trusted? Convinced?
- 12. Lia Hestina | MYNOG 11| Kuala Lumpur Security and Privacy 12 Trust Material (regular server address, keys) NO open Ports/initiate connection/ NAT is OK Doesn’t listen to local traffic/ No snooping Measurements No passive measurements Probes initiate SSH connections from probe to server Code of measurements publicly available Probes
- 13. A View Into Malaysia
- 14. Lia Hestina | MYNOG 11| Kuala Lumpur 14 Probes in South East Asia • Data from 20 May 2024 What about East Coast and other islands?
- 15. Lia Hestina | MYNOG 11| Kuala Lumpur 15 RIPE NCC Tools and Services Indonesia
- 16. Lia Hestina | MYNOG 11| Kuala Lumpur Let’s Cover These Networks in South East Asia Prototype Tool RIPE Atlas network coverage
- 17. Lia Hestina | MYNOG 11| Kuala Lumpur 17 Malaysia Prototype Tool IXP Country Jedi Did my Paths Go Out of the Country? AS140344 AS142412 • Data from 01 Jan 2024 Indonesia
- 18. Lia Hestina | MYNOG 11| Kuala Lumpur 18 Atlas Latency World Map World Latency to AS4788 TM TECHNOLOGY SERVICES SDN. BHD MinRTT Prototype Tool Latency within 50ms
- 19. Lia Hestina | MYNOG 11| Kuala Lumpur 19 RIPE Atlas probes ProbeID 62827 Singapore Let’s zoom in Prototype Tool Are these networks with higher latency important to you? RIPE Atlas Probe Neighbourhood Probe Neighbourhoods
- 20. Lia Hestina | MYNOG 11| Kuala Lumpur 20 RIPE Atlas probes ProbeID 55282 AS21351 Reunion Let’s zoom in Why is AS4788 Seen in Reunion in Africa? Prototype Tool https://bgp.he.net/AS37002
- 21. Which DNS Root Instances answer to the query from probes in Malaysia (f, e, m & d)
- 22. Lia Hestina | MYNOG 11| Kuala Lumpur 22 MRTT Measurements to f-root in Malaysia (4) Which f-root respond to the query? RTT map result DNS Root Instances • 4 f-root in Malaysia: - 2 in Kuala Lumpur - 2 in Johor Baru • MRTT 0-50ms • 18 probes got answers from f-root in Kuala Lumpur, and 4 from Singapore • None from Johor Baru
- 23. Lia Hestina | MYNOG 11| Kuala Lumpur 23 MRTT Measurements to e-root in Malaysia (4) Which e-root responds to the query? 2 2 RTT Map Result DNS Root Instances • 4 e-root in Malaysia - 2 in Kuala Lumpur - 2 in Johor Baru • MRTT 0-40ms • 26 probes received answers from e-root in Kuala Lumpur
- 24. Lia Hestina | MYNOG 11| Kuala Lumpur 24 MRTT Measurements to m-root in Malaysia (1) Which m-root responds to the query? RTT Map Result DNS Root Instances • 1 m-root in Kuala Lumpur • MRTT 0-150ms • 11 probes got an answer from m-root in Japan IX • 1 probe got an answer from Singapore
- 25. Lia Hestina | MYNOG 11| Kuala Lumpur 25 MRTT Measurements to d-root in Malaysia (3) Which d-root responds to the query? RTT Map Results DNS Root Instances • 3 d-root in Malaysia • MRTT 0-300ms • 12 probes got an answer from d-root London, UK
- 26. Lia Hestina | MYNOG 11| Kuala Lumpur Authoritative DNS (AuthDNS) • We’re seeking a partner to host AuthDNS in an interconnected location in Malaysia. • Reduced dependency on external DNS Services - Minimise exposure to potential disruptions from international events - Greater control over Internet infrastructure • Enhanced local Internet infrastructure - Hosting AuthDNS servers locally can improve the overall reliability and performance of DNS services for local users.
- 27. Lia Hestina | MYNOG 11| Kuala Lumpur Install SW Probes Now in These Platforms •Software packages that work like regular probes •Most installation instructions are available in 8 languages YouTube Video: Install the RIPE Atlas Software Probe How to: RIPE Atlas Software Probes
- 28. Lia Hestina | MYNOG 11| Kuala Lumpur Reasons to Love RIPE Atlas 28 Fair Use/ Non Monetary Global Coverage Regular third-party security review Non-profit organisationVolunteers: End Users Measurement results open to all By the community for the community 12,000 Probes Trusted Source Safe & Secure Open Data Community Driven
- 29. Lia Hestina | MYNOG 11| Kuala Lumpur What’s Next? Redeem This Voucher MYNOG11 29 Create a RIPE NCC Access ACCOUNT INSTALL RIPE Atlas strategically Start testing, MONITOR your network performance Did your probe disconnect? Reconnect it!
- 30. Lia Hestina | MYNOG 11| Kuala Lumpur RIPE Atlas Probe Hosts Supporters & Partners Developers & Github Contributors Sponsors Ambassadors Researchers Local Organisations & NOGs Thank you! • Within Asia Pacific (APAC) region we work closely with APNIC, ISOC, NSRC and many local ambassadors. • Interested in a webinar? • Contact: https://academy.apnic.net/en/ contact
- 32. Lia Hestina | MYNOG 11| Kuala Lumpur Use Cases 32 Detecting DNS root manipulation DNS vulnerability, configuration errors that can cause DDoS The Kazakhstan outage as seen from RIPE Atlas A distributed view of the Internet