Difference between revisions of "User:Becha/InternetPlumbing"
(→Step by step) |
|||
| Line 43: | Line 43: | ||
==Concepts== | ==Concepts== | ||
| − | * packets & packet switching | + | * packets & packet switching |
| + | * encapsulation | ||
* layered network model | * layered network model | ||
* (open) protocols & (open) standards | * (open) protocols & (open) standards | ||
| Line 50: | Line 51: | ||
* server/client architecture | * server/client architecture | ||
* cryptography | * cryptography | ||
| − | |||
==Step by step== | ==Step by step== | ||
| Line 78: | Line 78: | ||
** large providers and carriers create a "backbone" | ** large providers and carriers create a "backbone" | ||
| − | * | + | |
| + | * 21st century networking: CDN, SDN, MPLS, ... | ||
| Line 87: | Line 88: | ||
https://en.wikipedia.org/wiki/Border_Gateway_Protocol | https://en.wikipedia.org/wiki/Border_Gateway_Protocol | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
===Comparing OSI & TCP / IP layers=== | ===Comparing OSI & TCP / IP layers=== | ||
| Line 231: | Line 148: | ||
* Domain Name Service is an Application Layer service which is used to look up the IP address of a given domain name. Once a reply is received from the DNS server, it is then possible to form a Layer 3 connection to the third-party host. | * Domain Name Service is an Application Layer service which is used to look up the IP address of a given domain name. Once a reply is received from the DNS server, it is then possible to form a Layer 3 connection to the third-party host. | ||
* etc | * etc | ||
| + | |||
| + | |||
| + | [[File:More-dolls-fig2.jpg|200px]] [[File:Networking-fig3.jpg|200px]] [[File:Email-tmp3163.jpg|300px]] | ||
| + | |||
| + | ==Exercises== | ||
| + | |||
| + | [[User:Becha/InternetPlumbing/Exercises]] | ||
| + | |||
| + | ==Videos== | ||
| + | |||
| + | * youtube hijack | ||
| + | * How IXP's work | ||
| + | * Net of Rights | ||
| + | |||
| + | ==Resources== | ||
| + | |||
| + | Many many more resources: books, videos: | ||
| + | * [[Internet_Governance_and_hackers#How_does_the_Internet_work]] | ||
| + | |||
| + | Links: | ||
| + | * http://en.flossmanuals.net/bypassing-censorship/ch006_chapter-1-how/ | ||
| + | * https://en.wikipedia.org/wiki/Internet_protocol_suite | ||
| + | * http://what-when-how.com/data-communications-and-networking/network-and-transport-layers-data-communications-and-networking/ | ||
| + | * http://what-when-how.com/data-communications-and-networking/network-models-data-communications-and-networking/ | ||
| + | * http://www.laneye.com/network/how-network-works/mac-address-and-ip-address-relationship.htm | ||
| + | * https://www.amplicon.com/building/networking-principles.cfm#ip | ||
| + | * DNS & CDNs: Internet plumbing: Think globally, route locally, Mar 16th 2011, http://www.economist.com/node/21016766/print | ||
| + | |||
| + | ==Participate, take action, join== | ||
| + | |||
| + | ==Acronyms!== | ||
| + | |||
| + | |||
| + | * TCP/IP | ||
| + | * IPv4, IPv6: Internet Protocol (IP) addresses | ||
| + | * NAT: Network Address Translation | ||
| + | * DNS: Domain Name System | ||
| + | * ASN: Autonomous System Number | ||
| + | ** used for BGP routing (Border Gateway Protocol) | ||
| + | * IXP: Internet eXchange Point | ||
| + | * SMTP | ||
| + | * HTTP | ||
| + | * CDN | ||
| + | |||
| + | =Advanced topics= | ||
| + | |||
==Layers as an allegory== | ==Layers as an allegory== | ||
| Line 387: | Line 350: | ||
|} | |} | ||
| − | == | + | ==Security, Privacy, Avoiding Censorship== |
| + | |||
| + | * IPSec | ||
| + | * DNSSEC | ||
| + | * BGP security & plumbing: | ||
| + | ** https://www.blackhat.com/docs/us-15/materials/us-15-Remes-Internet-Plumbing-For-Security-Professionals-The-State-Of-BGP-Security-wp.pdf | ||
| + | ** https://www.youtube.com/watch?v=po_9p6XxK2E | ||
| + | |||
| + | * User Self-help: | ||
| + | ** https://www.takebackthetech.net | ||
| + | ** https://gendersec.tacticaltech.org/wiki/index.php/Manuals_with_a_gender_perspective | ||
| + | ** http://hackingwithcare.in/by/ressources/ | ||
| + | ** https://gendersec.tacticaltech.org/wiki/index.php/Complete_manual | ||
| + | ** http://en.flossmanuals.net/bypassing-censorship/ch007_chapter-2-censorship/ | ||
| + | |||
| + | ==Alternatives== | ||
| + | |||
| + | MeshNet: "Hackers and philosophers building an utopia together": http://becha.home.xs4all.nl/hackers-philosophers-utopian-network-dec-2012-becha.pdf | ||
| + | |||
| + | [[MeshNet#Education]] | ||
| + | |||
| + | [[File:tier0.png|right|200px]] | ||
| + | |||
| + | [[P2pbgpsec#Technical_view]] | ||
| + | |||
| + | November 2014: Nature will have the last word, on Future of Technology, RIPE69 | ||
| + | https://wiki.techinc.nl/index.php/File:Nature-speaking-on-future_of_the_internet-RIPE69.pdf | ||
| + | |||
| + | UnCivilization: critical thinking about Internet & capitalism: https://lists.puscii.nl/wws/info/uncivilization | ||
| + | |||
| + | ** [[Hackers_tribes#Internet_and_Capitalism]] | ||
| + | ** [[Hackers_tribes#Internet.2C_Electrical_Energy_Efficiency.2C_Pollution]] | ||
| + | ** [[Hackers_tribes#Against_Anthropocentrism]] | ||
| + | |||
| + | Playfull: Internet Simulator: https://github.com/nsec/the-internet | ||
| + | |||
| + | * Alternative Network Deployments: Taxonomy, characterization, technologies and architectures | ||
| + | https://www.ietf.org/id/draft-irtf-gaia-alternative-network-deployments-04.txt | ||
| + | |||
| + | * The Critical Engineering Manifesto: https://www.criticalengineering.org/ | ||
| + | |||
| + | |||
=Next topics= | =Next topics= | ||
Revision as of 21:22, 5 April 2016
Contents
Lectures at Hacking Feminism
Fist lecture:
- 6 April 2016, 8PM
- At LAG
- By Becha
- https://wiki.laglab.org/Hacking_Feminism
Internet Plumbing
Internet Plumbing is a word-game with multiple layers of meaning (ha! a recursive pun ;-)
Series of Tubes
- https://en.wikipedia.org/wiki/Series_of_tubes
- http://www.salon.com/2012/05/28/tubes_what_the_internet_is_made_of/
- http://knowyourmeme.com/memes/series-of-tubes
- http://www.submarinecablemap.com/
Ubiquitous and complicated as plumbing?
- Internet as a utility
- just like "plumbing" (water & sewage), there is underlying "technology" to it, so complex, that no-one seems to grasp how all of it works
- 60% of the population of the planet does NOT have "teh Internets", and 30% does not have plumbing either (http://www.un.org/waterforlifedecade/sanitation.shtml)
Women's role
- Women in history of computing, engineering, internet: https://wiki.techinc.nl/index.php/Ladies_Night/women_in_history_of_STEM
- Women who wrote about Internet: history, hacking, ethics, (hack)tivism, governance, economy, (anti)capitalism INSERT LINK!!!!
- Ladies_Night#Gender_gap_in_tech
- Ladies_Night#Increasing_the_gender_diversity
- Ladies_Night#Anti-capitalism
- Geek/cyber feminism: Ladies_Night#Feminism
Basics
Concepts
- packets & packet switching
- encapsulation
- layered network model
- (open) protocols & (open) standards
- end-to-end principle
- ports
- server/client architecture
- cryptography
Step by step
Internet is network of networks
- "Small network" -- computers "talking" to each other
- Local Area Network = LAN
- With cables (ethernet), or Wireless (WiFi)
- How do they find each other? MAC address (layer 2), ARP (MAC to IP address)
- Typical / mainstream home (or small office) network
- Private IP addresses
- NAT = Network Address Translation
- Home router is (usually) a gateway, firewall, and NAT box at the same time
- Connecting "to the Internet"
- usually through commercial ISP (Internet Service Provider): dial-up, fibre, ...
- "free Wifi"
- over mobile!
- alternatively: community-mesh-peer-to-peer
- ISPs connecting with each other
- direct peering: between more-less same size & same "importance" ISPs
- usually at IXP (Internet eXchange Point, e.g. Ams-IX, LINX...)
- "buying transit" from a "national Telco", usually
- large providers and carriers create a "backbone"
- 21st century networking: CDN, SDN, MPLS, ...
https://en.wikipedia.org/wiki/Border_Gateway_Protocol
Comparing OSI & TCP / IP layers
Original borrowed from: https://en.wikipedia.org/wiki/OSI_model
| TCP / IP Model | OSI Model | |||
|---|---|---|---|---|
| Layer | OSI Layer | Protocol data unit (PDU) | Function | Examples |
| Application | 7. Application | Data | High-level APIs, including resource sharing, remote file access, directory services and virtual terminals | TLS, FTP, HTTP, HTTPS, SMTP, SSH, Telnet, BGP! |
| 6. Presentation | Translation of data between a networking service and an application; including character encoding, data compression and encryption/decryption | CSS, GIF, HTML, XML, JSON | ||
| Transport | 5. Session | Managing communication sessions, i.e. continuous exchange of information in the form of multiple back-and-forth transmissions between two nodes | RPC, SCP, NFS, PAP, | |
| 4. Transport | Segment (TCP) / Datagram (UDP) | Reliable transmission of data segments between points on a network, including segmentation, acknowledgement and multiplexing | NBF, TCP, UDP | |
| Network / Internet |
3. Network | Packet | Structuring and managing a multi-node network, including addressing, routing and traffic control | AppleTalk, ICMP, IPsec, IPv4, IPv6 |
| Link layer |
2. Data link | Frame | Reliable transmission of data frames between two nodes connected by a physical layer | IEEE 802.2, L2TP, LLDP, MAC, PPP, ATM, MPLS |
| 1. Physical | Bit | Transmission and reception of raw bit streams over a physical medium | DOCSIS, DSL, Ethernet physical layer, ISDN, USB | |
Cross-layer functions:
- ARP is used to translate IPv4 addresses (OSI layer 3) into Ethernet MAC addresses (OSI layer 2).
- Domain Name Service is an Application Layer service which is used to look up the IP address of a given domain name. Once a reply is received from the DNS server, it is then possible to form a Layer 3 connection to the third-party host.
- etc
Exercises
User:Becha/InternetPlumbing/Exercises
Videos
- youtube hijack
- How IXP's work
- Net of Rights
Resources
Many many more resources: books, videos:
Links:
- http://en.flossmanuals.net/bypassing-censorship/ch006_chapter-1-how/
- https://en.wikipedia.org/wiki/Internet_protocol_suite
- http://what-when-how.com/data-communications-and-networking/network-and-transport-layers-data-communications-and-networking/
- http://what-when-how.com/data-communications-and-networking/network-models-data-communications-and-networking/
- http://www.laneye.com/network/how-network-works/mac-address-and-ip-address-relationship.htm
- https://www.amplicon.com/building/networking-principles.cfm#ip
- DNS & CDNs: Internet plumbing: Think globally, route locally, Mar 16th 2011, http://www.economist.com/node/21016766/print
Participate, take action, join
Acronyms!
- TCP/IP
- IPv4, IPv6: Internet Protocol (IP) addresses
- NAT: Network Address Translation
- DNS: Domain Name System
- ASN: Autonomous System Number
- used for BGP routing (Border Gateway Protocol)
- IXP: Internet eXchange Point
- SMTP
- HTTP
- CDN
Advanced topics
Layers as an allegory
Left: OSI Model T-shirt enhanced to include an 8th and 9th layer as defined by Evi Nemeth: https://en.wikipedia.org/wiki/Evi_Nemeth // https://www.isc.org/product/isc-9-layer-osi-model-cotton-t-shirt/
(TODO: add ISC reference to Evi's wikipedia page!!)
Right: back of the T-shirt from the IETF75 in Stockholm, 2005
ABSTRACTION
Explaining complex concepts using layers is a useful abstraction.
Goal here is to illustrate layers by practical examples, and point out owners, developers, dangers, mitigations & alternatives.
This is not exactly technically correct, for the detail oriented people!
| Number | Layer name | Example | Practically | Owner | Developed by | Vulnerabilities / Dangers | Mitigation / Securing | Alternatives | |
| 9 | Organisation / Political | (Internet) Governance | technical community, civil society, governments | IGF (Internet Governance Forum), UN, ITU, IETF, ICANN, | awareness, take part! | someone will build a new *net, AlterNet :-) | |||
| 8 | Individual / Financial | Operating System (OS) + choice of software | Linux, FreeBSD, Minix...; iOS, Android, Windows... | User! | programmers & developers: FLOSS community; Apple, Google,Micro$oft |
backdoors, surveillance, spying on users; lock-in; monopoly; | community participation; unionization of programmers; see articles here [yy] | knowledge, self-empowerment, solidarity | |
| 7 | Application | 7.3 -> VoIP | skype | ||||||
|---|---|---|---|---|---|---|---|---|---|
| 7.2 -> SMTP | |||||||||
| 7.1 HTTP: web, WWW | web sites! LoLCats! | individuals, on their own servers! blogs (blogspot?), mainstream media, hosting companies; CDNs (Akamai, Amazon...); corporations: Google, Facebook, Twitter... YouTube.. |
W3c, IETF | censorship; silos; walled gardens; commercialization, consumerism; | technically: httpS, SSL, TLS; Tor; politically: activism, digital human rights; associations of users; |
torrent! p2p! alternative social media! | |||
| 6 | Presentation | HTML, CSS, JSON | |||||||
| 5 | Session | BGP (actually layer 7...) | routing: exchanging AS reachability info via gossip: based on trust & peering agreements! physical routers by routers: Cisco/Juniper (commercial monopolists ;-) |
Large ISPs; Tier1 / Tier2 ; IXPs!! RIRs give out AS numbers | "routing-wg" @ RIPE; *NOGs! (nano, nlnog, grnog; peering forums; Euro-IX); IETF; Open-Source community ; hackers | "route hijacks", government regulation & takeover (killer switch), hierarchies; | technically: BGPsec, IRR, RPKI; politically: influencing governance |
p2p protocols, Betman [xx]; MPLS, SDN; Tor?! | |
| 4 | Transport | UDP -> e.g. DNS (see above!) | www.belastingdiest.nl | User; Registrar, Registry, ccTLD, gTLD, ICANN, US government! | DNS OARC, IETF, root-nameserver operators, ICANN, IGF/UN/ITU | "balkanisation", US hegemony; internationalization; censorship; | technically: DNSSEC, DANE ; Tor; politically: participating in governance |
Alternative trees; blockchain (namecoin); etc | |
| 3 | Network | Internet / IP | ifconfig; IPv4, NAT, 10.10.10.10, IPv6 | no-one: IP addresses are "leased"! (PI,PA,LIR,RIR,IANA,IETF) |
RIR PDP, IANA, IETF | hierarchy, run-out, incompatibility, market forces; surveillance | IPSec | Blockchain? GSM? Radio? | |
| 2 | Data-link | MAC addresses, Ethernet device drivers, WiFi drivers | licensed to users | Broadcom, Realtech, INTEL.. | patents, closed source, Intellectual Property Laws | open source SW, open HW | ?! | ||
| 1 | Physical | Network connections | Ethernet cables, WiFi antennas, fibers, satellites, satellite dishes, base-stations, under-sea cables ; POTS (old-fashioned phones -> BBS, dialup) | Individuals communities, ISP, "carriers", corporations, governments, |
Hackers commercial companies, governments |
"ownership" models; hierarchy of server-client model; pollution & distraction of Earth; surveillance | commoning; shared infrastructure; development of sustainable technologies (?!), recycling; awareness & activism | Community WiFi, Project Loon, Drones | |
| HW - end user equipment | Computer, tablet, phone... | User | Commercial companies: Apple, Siemens, Samsung... | Un-ethical manufacturing, security backdoors, pollution caused by e-waste disposal, | Hard: | Open HW movement; fair-phone; DIY, Repair Cafes, fair-trade... |
Security, Privacy, Avoiding Censorship
- IPSec
- DNSSEC
- BGP security & plumbing:
- User Self-help:
Alternatives
MeshNet: "Hackers and philosophers building an utopia together": http://becha.home.xs4all.nl/hackers-philosophers-utopian-network-dec-2012-becha.pdf
November 2014: Nature will have the last word, on Future of Technology, RIPE69 https://wiki.techinc.nl/index.php/File:Nature-speaking-on-future_of_the_internet-RIPE69.pdf
UnCivilization: critical thinking about Internet & capitalism: https://lists.puscii.nl/wws/info/uncivilization
Playfull: Internet Simulator: https://github.com/nsec/the-internet
- Alternative Network Deployments: Taxonomy, characterization, technologies and architectures
https://www.ietf.org/id/draft-irtf-gaia-alternative-network-deployments-04.txt
- The Critical Engineering Manifesto: https://www.criticalengineering.org/
Next topics
Internet Governance
See this lecture : Internet_Governance_Digital_Culture#Internet_Governance
Internet_Governance_and_hackers
Traceroute Much?
User:Becha/InternetPlumbing/Traceroute_Much
