HLOC: Hints-based geolocation leveraging multiple measurement frameworks

Geographically locating an IP address is of interest for many purposes. There are two major ways to obtain the location of an IP address: querying commercial databases or conducting latency measurements. For structural Internet nodes, such as routers, commercial databases are limited by low accuracy, while current measurement-based approaches overwhelm users with setup overhead and scalability issues. In this work we present our system HLOC, aiming to combine the ease of database use with the accuracy of latency measurements. We evaluate HLOC on a comprehensive router data set of 1.4M IPv4 and 183k IPv6 routers. HLOC first extracts location hints from rDNS names, and then conducts multi-tier latency measurements. Configuration complexity is minimized by using publicly available large-scale measurement frameworks such as RIPE Atlas. Using this measurement, we can confirm or disprove the location hints found in domain names. We publicly release HLOC's ready-to-use source code, enabling researchers to easily increase geolocation accuracy with minimum overhead.

[1]  Eric Wustrow,et al.  ZMap: Fast Internet-wide Scanning and Its Security Applications , 2013, USENIX Security Symposium.

[2]  Emin Gün Sirer,et al.  Octant: A Comprehensive Framework for the Geolocalization of Internet Hosts , 2007, NSDI.

[3]  Nick Feamster,et al.  Characterizing and Avoiding Routing Detours Through Surveillance States , 2016, ArXiv.

[4]  Steve Uhlig,et al.  IP geolocation databases: unreliable? , 2011, CCRV.

[5]  Lakshminarayanan Subramanian,et al.  An investigation of geographic mapping techniques for internet hosts , 2001, SIGCOMM.

[6]  Georg Carle,et al.  Towards an Ecosystem for Reproducible Research in Computer Networking , 2017, Reproducibility@SIGCOMM.

[7]  Helen J. Wang,et al.  Mining the Web and the Internet for Accurate IP Address Geolocations , 2009, IEEE INFOCOM 2009.

[8]  Hiroshi Esaki,et al.  Inferring POP-Level ISP Topology through End-to-End Delay Measurement , 2009, PAM.

[9]  Ramesh Govindan,et al.  Mapping the expansion of Google's serving infrastructure , 2013, Internet Measurement Conference.

[10]  Elizabeth M. Belding-Royer,et al.  A Study of MVNO Data Paths and Performance , 2016, PAM.

[11]  Aleksandar Kuzmanovic,et al.  Towards Street-Level Client-Independent IP Geolocation , 2011, NSDI.

[12]  Georg Carle,et al.  Scanning the IPv6 Internet: Towards a Comprehensive Hitlist , 2016, TMA.

[13]  A. Boudrioua Optical Waveguide Theory , 2010 .

[14]  Dana S. Richards,et al.  Statistical Geolocation of Internet Hosts , 2009, 2009 Proceedings of 18th International Conference on Computer Communications and Networks.

[15]  Kimberly C. Claffy,et al.  DRoP: DNS-based router positioning , 2014, CCRV.

[16]  Serge Fdida,et al.  Investigating the Imprecision of IP Block-Based Geolocation , 2007, PAM.

[17]  Paul Barford,et al.  What's in a name?: decoding router interface names , 2013, HotPlanet '13.

[18]  Mark Allman,et al.  Ethical considerations in network measurement papers , 2016, Commun. ACM.

[19]  John S. Heidemann,et al.  Towards geolocation of millions of IP addresses , 2012, IMC '12.

[20]  Robert Beverly,et al.  Measuring and Characterizing IPv6 Router Availability , 2015, PAM.

[21]  Steve Uhlig,et al.  Open Connect Everywhere: A Glimpse at the Internet Ecosystem through the Lens of the Netflix CDN , 2016, CCRV.

[22]  Georg Carle,et al.  Analyzing Locality of Mobile Messaging Traffic using the MATAdOR Framework , 2016, PAM.

[23]  Randy Bush,et al.  Quantifying Interference between Measurements on the RIPE Atlas Platform , 2015, Internet Measurement Conference.

[24]  Ratul Mahajan,et al.  Measuring ISP topologies with Rocketfuel , 2004, IEEE/ACM Transactions on Networking.

[25]  David Wetherall,et al.  Towards IP geolocation using delay and topology measurements , 2006, IMC '06.

[26]  Ming Zhang,et al.  How DNS Misnaming Distorts Internet Topology Mapping , 2006, USENIX Annual Technical Conference, General Track.

[27]  Serge Fdida,et al.  Constraint-Based Geolocation of Internet Hosts , 2004, IEEE/ACM Transactions on Networking.