Sibyl: A Practical Internet Route Oracle

Network operators measure Internet routes to troubleshoot problems, and researchers measure routes to characterize the Internet. However, they still rely on decades-old tools like traceroute, BGP route collectors, and Looking Glasses, all of which permit only a single query about Internet routes--what is the path from here to there? This limited interface complicates answering queries about routes such as "find routes traversing the Level3/AT&T peering in Atlanta," to understand the scope of a reported problem there. This paper presents Sibyl, a system that takes rich queries that researchers and operators express as regular expressions, then issues and returns traceroutes that match even if it has never measured a matching path in the past. Sibyl achieves this goal in three steps. First, to maximize its coverage of Internet routing, Sibyl integrates together diverse sets of traceroute vantage points that provide complementary views, measuring from thousands of networks in total. Second, because users may not knowwhich measurements will traverse paths of interest, and because vantage point resource constraints keep Sibyl from tracing to all destinations from all sources, Sibyl uses historical measurements to predict which new ones are likely to match a query. Finally, based on these predictions, Sibyl optimizes across concurrent queries to decide which measurements to issue given resource constraints. We show that Sibyl provides researchers and operators with the routing information they need--in fact, it matches 76% of the queries that it could match if an oracle told it which measurements to issue.

[1]  Brice Augustin,et al.  IXPs: mapped? , 2009, IMC '09.

[2]  Ming Zhang,et al.  PlanetSeer: Internet Path Failure Monitoring and Characterization in Wide-Area Services , 2004, OSDI.

[3]  Srikanth Kandula,et al.  Can you hear me now?!: it must be BGP , 2007, CCRV.

[4]  Yao Zhao,et al.  Where the Sidewalk Ends: Extending theInternet AS Graph Using Traceroutesfrom P2P Users , 2009, IEEE Transactions on Computers.

[5]  Ming Zhang,et al.  Effective Diagnosis of Routing Disruptions from End Systems , 2008, NSDI.

[6]  Qiang Xu,et al.  An untold story of middleboxes in cellular networks , 2011, SIGCOMM 2011.

[7]  David Wetherall,et al.  Towards IP geolocation using delay and topology measurements , 2006, IMC '06.

[8]  Jie Gao,et al.  Moving beyond end-to-end path information to optimize CDN performance , 2009, IMC '09.

[9]  Brice Augustin,et al.  Failure Control in Multipath Route Tracing , 2009, IEEE INFOCOM 2009.

[10]  Ramesh Govindan,et al.  Quantifying violations of destination-based forwarding on the internet , 2012, IMC '12.

[11]  Chiara Orsini,et al.  BGPStream: A Software Framework for Live and Historical BGP Data Analysis , 2016, Internet Measurement Conference.

[12]  Ítalo S. Cunha,et al.  PoiRoot: investigating the root cause of interdomain path changes , 2013, SIGCOMM.

[13]  M. L. Fisher,et al.  An analysis of approximations for maximizing submodular set functions—I , 1978, Math. Program..

[14]  David Walker,et al.  Compiling Path Queries , 2016, NSDI.

[15]  Brice Augustin,et al.  Avoiding traceroute anomalies with Paris traceroute , 2006, IMC '06.

[16]  Ratul Mahajan,et al.  The causes of path inflation , 2003, SIGCOMM '03.

[17]  Vern Paxson,et al.  End-to-end routing behavior in the Internet , 1996, TNET.

[18]  Naomi Zigmond,et al.  Can You Hear Me Now? , 2009 .

[19]  V. Paxson End-to-end routing behavior in the internet , 2006, CCRV.

[20]  Changhyun Lee,et al.  Scalable and systematic Internet-wide path and delay estimation from existing measurements , 2011, Comput. Networks.

[21]  Ítalo S. Cunha,et al.  LIFEGUARD: practical repair of persistent route failures , 2012, SIGCOMM '12.

[22]  Vyas Sekar,et al.  Internet Outages, the Eyewitness Accounts: Analysis of the Outages Mailing List , 2015, PAM.

[23]  Vasileios Giotsas,et al.  AS relationships, customer cones, and validation , 2013, Internet Measurement Conference.

[24]  Ramesh Govindan,et al.  Are We One Hop Away from a Better Internet? , 2015, Internet Measurement Conference.

[25]  Nick Feamster,et al.  Peering at the Internet's Frontier: A First Look at ISP Interconnectivity in Africa , 2014, PAM.

[26]  Lixin Gao,et al.  CAM04-4: AS Path Inference by Exploiting Known AS Paths , 2006, IEEE Globecom 2006.

[27]  Ming Zhang,et al.  An untold story of middleboxes in cellular networks , 2011, SIGCOMM.

[28]  Margus Veanes Applications of Symbolic Finite Automata , 2013, CIAA.

[29]  Randy Bush,et al.  iSPY: Detecting IP Prefix Hijacking on My Own , 2008, IEEE/ACM Transactions on Networking.

[30]  kc claffy,et al.  Internet-Scale IPv4 Alias Resolution with MIDAR: System Architecture - Technical Report , 2011 .

[31]  Ratul Mahajan,et al.  Measuring ISP topologies with Rocketfuel , 2004, IEEE/ACM Transactions on Networking.

[32]  Ratul Mahajan,et al.  Colt ? ? ? ? ? ? ◦ DTAG ? ◦ • ◦ ? ? ? ? ! ◦ ? ? ? ◦ ◦ ? ? Eqip ? ? ? ? ? ? , 2003 .

[33]  Lixin Gao,et al.  Stable Internet routing without global coordination , 2000, SIGMETRICS '00.

[34]  Bogdan E. Popescu,et al.  PREDICTIVE LEARNING VIA RULE ENSEMBLES , 2008, 0811.1679.

[35]  Ramesh Govindan,et al.  Diagnosing Path Inflation of Mobile Client Traffic , 2014, PAM.

[36]  Lixia Zhang,et al.  Observing the evolution of internet as topology , 2007, SIGCOMM.

[37]  Yuval Shavitt,et al.  DIMES: let the internet measure itself , 2005, CCRV.

[38]  Lixin Gao,et al.  A measurement study on the impact of routing events on end-to-end internet path performance , 2006, SIGCOMM 2006.

[39]  Ming Zhang,et al.  Uncovering Performance Differences Among Backbone ISPs with Netdiff , 2008, NSDI.

[40]  Wolfgang Mühlbauer,et al.  In search for an appropriate granularity to model routing policies , 2007, SIGCOMM '07.

[41]  Shaddin Dughmi Submodular Functions: Extensions, Distributions, and Algorithms. A Survey , 2009, ArXiv.

[42]  Timur Friedman,et al.  TopHat: Supporting Experiments through Measurement Infrastructure Federation , 2010, TRIDENTCOM.

[43]  Walter Willinger,et al.  In search of the elusive ground truth: the internet's as-level connectivity structure , 2008, SIGMETRICS '08.

[44]  Yin Zhang,et al.  On AS-level path inference , 2005, SIGMETRICS '05.

[45]  Arun Venkataramani,et al.  iPlane: an information plane for distributed services , 2006, OSDI '06.

[46]  Robert Nowak,et al.  Internet tomography , 2002, IEEE Signal Process. Mag..

[47]  D. B. Becker,et al.  Can You Hear Me Now , 2017 .

[48]  Arun Venkataramani,et al.  A structural approach to latency prediction , 2006, IMC '06.

[49]  Marco Mellia,et al.  mPlane: an intelligent measurement plane for the internet , 2014, IEEE Communications Magazine.

[50]  Niklas Carlsson,et al.  Characterizing Large-Scale Routing Anomalies: A Case Study of the China Telecom Incident , 2013, PAM.

[51]  Jan Vondrák,et al.  Optimal approximation for the submodular welfare problem in the value oracle model , 2008, STOC.

[52]  Lixin Gao,et al.  A measurement study on the impact of routing events on end-to-end internet path performance , 2006, SIGCOMM.

[53]  Ratul Mahajan,et al.  Measuring ISP topologies with rocketfuel , 2002, SIGCOMM 2002.

[54]  Christophe Diot,et al.  On the correlation between route dynamics and routing loops , 2003, IMC '03.

[55]  Nick Feamster,et al.  Broadband internet performance , 2011, SIGCOMM 2011.

[56]  Emin Gün Sirer,et al.  Octant: A Comprehensive Framework for the Geolocalization of Internet Hosts , 2007, NSDI.

[57]  Arun Venkataramani,et al.  iPlane Nano: Path Prediction for Peer-to-Peer Applications , 2009, NSDI.

[58]  Lixia Zhang,et al.  Observing the evolution of internet as topology , 2007, SIGCOMM 2007.

[59]  Thomas E. Anderson,et al.  Reverse traceroute , 2010, NSDI.

[60]  Ítalo S. Cunha,et al.  Predicting and tracking internet path changes , 2011, SIGCOMM.

[61]  Donald F. Towsley,et al.  Network tomography on general topologies , 2002, SIGMETRICS '02.

[62]  kc claffy,et al.  Internet-Scale IPv4 Alias Resolution with MIDAR: System Architecture - Technical Report , 2011 .

[63]  PROCEssIng magazInE IEEE Signal Processing Magazine , 2004 .

[64]  Brice Augustin,et al.  Measuring Multipath Routing in the Internet , 2011, IEEE/ACM Transactions on Networking.

[65]  David Wetherall,et al.  Studying Black Holes in the Internet with Hubble , 2008, NSDI.

[66]  Yao Zhao,et al.  Where the Sidewalk Ends: Extending the Internet AS Graph Using Traceroutes from P2P Users , 2014, IEEE Trans. Computers.

[67]  Christophe Diot,et al.  Detection and analysis of routing loops in packet traces , 2002, IMW '02.

[68]  Nick Feamster,et al.  Broadband internet performance: a view from the gateway , 2011, SIGCOMM.

[69]  Antonio Pescapè,et al.  Don't trust traceroute (completely) , 2013, CoNEXT Student Workhop '13.

[70]  Ítalo S. Cunha,et al.  Investigating Interdomain Routing Policies in the Wild , 2015, Internet Measurement Conference.

[71]  Feng Qian,et al.  Cellular data network infrastructure characterization and implication on mobile content placement , 2011, PERV.

[72]  Emile Aben,et al.  On the Diversity of Interdomain Routing in Africa , 2015, PAM.

[73]  Renata Teixeira,et al.  Predicting and tracking internet path changes , 2011, SIGCOMM 2011.

[74]  Wolfgang Mühlbauer,et al.  In search for an appropriate granularity to model routing policies , 2007, SIGCOMM 2007.

[75]  Ramesh Govindan,et al.  The temporal and topological characteristics of BGP path changes , 2003, 11th IEEE International Conference on Network Protocols, 2003. Proceedings..

[76]  Balachander Krishnamurthy,et al.  A Measurement Experimentation Platform at the Internet's Edge , 2015, IEEE/ACM Transactions on Networking.

[77]  Abhijit Bose,et al.  Delayed Internet routing convergence , 2000, SIGCOMM.

[78]  Arun Venkataramani,et al.  Consensus Routing: The Internet as a Distributed System. (Best Paper) , 2008, NSDI.

[79]  Laurent Vanbever,et al.  Central Control Over Distributed Routing , 2015, Comput. Commun. Rev..