View source for Internet̙-Plumbing

This HowTo has been copied from the wiki of the [https://wiki.techinc.nl/index.php/Technologia_Incognita hackerspace Technologia Incognita] (located in Amsterdam)

[[File:Hacking-feminism-screenshot.png|right|300px]]

=Internet Plumbing=

Internet Plumbing is a word-game with multiple layers of meaning (ha! a recursive pun ;-) 

[[File:women role models in computing.jpg|right|300px]]

===Series of Tubes===

* https://en.wikipedia.org/wiki/Series_of_tubes
* http://www.salon.com/2012/05/28/tubes_what_the_internet_is_made_of/
* http://knowyourmeme.com/memes/series-of-tubes
* http://www.submarinecablemap.com/ 

===Ubiquitous and complicated as plumbing?===

* Internet as a utility 
* just like "plumbing" (water & sewage), there is underlying "technology" to it, so complex, that no-one seems to grasp how all of it works 
* 60% of the population of the planet does NOT have "teh Internets", and 30% does not have plumbing either (http://www.un.org/waterforlifedecade/sanitation.shtml)


==Acronyms!==

[[File:protocol stack hourglass 1.jpeg|200px|right]]  

* TCP/IP
* IPv4, IPv6: Internet Protocol (IP) addresses
* NAT: Network Address Translation 
* DNS: Domain Name System 
* ASN: Autonomous System Number 
** used for BGP routing (Border Gateway Protocol) 
* IXP: Internet eXchange Point 
* SMTP
* HTTP 
* CDN 

==Basics==

[[File:750px-Ipv4 address.svg.png|300px]] 

[[File:500px-An_example_of_theoretical_DNS_recursion-nl.svg.png|500px]] [[File:Becha-Autonomous-system.png | 400px ]]

https://en.wikipedia.org/wiki/Border_Gateway_Protocol 

[[File:More-dolls-fig2.jpg|200px]] [[File:Networking-fig3.jpg|200px]] [[File:Email-tmp3163.jpg|300px]] 

Links:
* http://en.flossmanuals.net/bypassing-censorship/ch006_chapter-1-how/ 
* https://en.wikipedia.org/wiki/Internet_protocol_suite 
* http://what-when-how.com/data-communications-and-networking/network-and-transport-layers-data-communications-and-networking/
* http://what-when-how.com/data-communications-and-networking/network-models-data-communications-and-networking/
* http://www.laneye.com/network/how-network-works/mac-address-and-ip-address-relationship.htm
* https://www.amplicon.com/building/networking-principles.cfm#ip 
* DNS & CDNs: Internet plumbing: Think globally, route locally, Mar 16th 2011, http://www.economist.com/node/21016766/print

==Videos== 

* youtube hijack 
* How IXP's work
* Net of Rights 

==Security, Privacy, Avoiding Censorship==

* IPSec 
* DNSSEC
* BGP security & plumbing: 
** https://www.blackhat.com/docs/us-15/materials/us-15-Remes-Internet-Plumbing-For-Security-Professionals-The-State-Of-BGP-Security-wp.pdf 
** https://www.youtube.com/watch?v=po_9p6XxK2E

* User Self-help: 
** https://www.takebackthetech.net
** https://gendersec.tacticaltech.org/wiki/index.php/Manuals_with_a_gender_perspective 
** http://hackingwithcare.in/by/ressources/
** https://gendersec.tacticaltech.org/wiki/index.php/Complete_manual
** http://en.flossmanuals.net/bypassing-censorship/ch007_chapter-2-censorship/

==Alternatives==

MeshNet: "Hackers and philosophers building an utopia together": http://becha.home.xs4all.nl/hackers-philosophers-utopian-network-dec-2012-becha.pdf

November 2014: Nature will have the last word, on Future of Technology, RIPE69 
https://wiki.techinc.nl/index.php/File:Nature-speaking-on-future_of_the_internet-RIPE69.pdf 

UnCivilization: critical thinking about Internet & capitalism: https://lists.puscii.nl/wws/info/uncivilization 

Playfull: Internet Simulator: https://github.com/nsec/the-internet

* Alternative Network Deployments: Taxonomy, characterization, technologies and architectures
https://www.ietf.org/id/draft-irtf-gaia-alternative-network-deployments-04.txt

* The Critical Engineering Manifesto: https://www.criticalengineering.org/

=Overview=

===Comparing OSI & TCP / IP layers===

Original borrowed from: https://en.wikipedia.org/wiki/OSI_model 

{| class="wikitable" style="margin: 1em auto 1em auto;"
|-
| TCP / IP Model
! colspan="4" | OSI Model
|-
| Layer
| OSI Layer
! [[Protocol data unit]] (PDU)
! style="width:30em;" | Function
! Examples
|-
! rowspan="2" | Application
| style="background:#d8ec9b;" | 7.&nbsp;[[Application layer|Application]]
| style="background:#d8ec9c;" rowspan="3" | [[Data (computing)|Data]]
| style="background:#d8ec9c;" | <small>High-level [[API]]s, including resource sharing, remote file access, [[directory service]]s and [[virtual terminal]]s</small>
| [[Transport Layer Security|TLS]], [[FTP]], [[HTTP]], [[HTTPS]], [[SMTP]], [[Secure Shell|SSH]], [[Telnet]], BGP! 
|-
| style="background:#d8ec9b;" | 6.&nbsp;[[Presentation layer|Presentation]]
| style="background:#d8ec9b;" | <small>Translation of data between a networking service and an application; including [[character encoding]], [[data compression]] and [[Encryption|encryption/decryption]]</small>
| [[CSS]], [[GIF]], [[HTML]], [[XML]], [[JSON]]
|-
! rowspan="2" | Transport
| style="background:#d8ec9b;" | 5. [[Session layer|Session]]
| style="background:#d8ec9b;" | <small>Managing communication [[Session (computer science)|sessions]], i.e. continuous exchange of information in the form of multiple back-and-forth transmissions between two nodes</small>
| [[Remote Procedure Call|RPC]], [[DECnet|SCP]], [[Network File System|NFS]], [[Password authentication protocol|PAP]], 
|-
| style="background:#e7ed9c;" | 4. [[Transport layer|Transport]]
| style="background:#e7ed9c;" | [[Packet segmentation|Segment]] (TCP) / [[Datagram]] (UDP)
| style="background:#e7ed9c;" | <small>Reliable transmission of data segments between points on a network, including [[Packet segmentation|segmentation]], [[Acknowledgement (data networks)|acknowledgement]] and [[multiplexing]]</small>
| [[NetBIOS Frames protocol|NBF]], [[Transmission Control Protocol|TCP]], [[User Datagram Protocol|UDP]]
|-
| Network / <br> Internet 
| style="background:#eddc9c;" | 3. [[Network layer|Network]]
| style="background:#eddc9c;" | [[Network packet|Packet]]
| style="background:#eddc9c;" | <small>Structuring and managing a multi-node network, including [[Address space|addressing]], [[routing]] and [[Network traffic control|traffic control]]</small>
| [[AppleTalk]], [[Internet Control Message Protocol|ICMP]], [[IPsec]], [[IPv4]], [[IPv6]]
|-
! rowspan="2" | Link <br> layer
| style="background:#e9c189;" | 2. [[Data link layer|Data link]]
| style="background:#e9c189;" | [[Frame (networking)|Frame]]
| style="background:#e9c189;" | <small>Reliable transmission of data frames between two nodes connected by a physical layer</small>
| [[IEEE 802.2]], [[L2TP]], [[LLDP]], [[Media access control|MAC]], [[Point-to-Point Protocol|PPP]], [[Asynchronous Transfer Mode|ATM]], [[Multiprotocol Label Switching|MPLS]]
|-
| style="background:#e9988a;" | 1. [[Physical layer|Physical]]
| style="background:#e9988a;" | [[Bit]]
| style="background:#e9988a;" | <small>Transmission and reception of raw bit streams over a physical medium</small>
| [[DOCSIS]], [[DSL]], [[Ethernet physical layer]], [[ISDN]], [[USB]]
|}
<!----- {{Clear}} ------->

Cross-layer functions:

* ARP is used to translate IPv4 addresses (OSI layer 3) into Ethernet MAC addresses (OSI layer 2).
* Domain Name Service is an Application Layer service which is used to look up the IP address of a given domain name. Once a reply is received from the DNS server, it is then possible to form a Layer 3 connection to the third-party host.
* etc

==ABSTRACTION== 

Explaining complex concepts using layers is a useful abstraction. 

Goal here is to illustrate layers by practical examples,  and point out '''owners, developers, dangers, mitigations & alternatives.''' 

 This is not exactly technically correct, for the detail oriented people! 

{|class="wikitable sortable"
|-
| Number
| Layer name
| Example
| Practically  
| Owner
| Developed by
| Vulnerabilities / Dangers
| Mitigation / Securing 
| Alternatives
|
|-
|9
| Organisation / Political 
| (Internet) Governance 
| 
| technical community, civil society, governments 
| IGF (Internet Governance Forum), UN, ITU, IETF, ICANN,  
| 
| awareness, take part! 
| someone will build a new *net, AlterNet :-) 
|-
|8
| Individual / Financial 
| Operating System (OS) + choice of software 
| Linux, FreeBSD, Minix...; iOS, Android, Windows... 
| User! 
| programmers & developers: FLOSS community; <br> Apple, Google,Micro$oft  
| backdoors, surveillance, spying on users; lock-in; monopoly; 
| community participation; unionization of programmers; see articles here [yy] 
| knowledge, self-empowerment, solidarity 
|
|-
! rowspan="3" | 7 
! rowspan="3" | Application 
| 7.3 -> VoIP 
| skype 
|
|
|
|
|-
|7.2 -> SMTP 
| email  
|
|
|
|
|
|-
| 7.1  HTTP: web, WWW
| web sites! LoLCats! 
| individuals, on their own servers! <br> blogs (blogspot?), mainstream media, hosting companies; CDNs (Akamai, Amazon...); corporations: Google, Facebook, Twitter... YouTube.. 
| W3c, IETF 
| censorship; silos; walled gardens; commercialization, consumerism; 
| technically: httpS, SSL, TLS; Tor; <br> politically: activism, digital human rights; associations of users; 
| torrent! p2p! alternative social media! 
|-
|6
| Presentation 
| HTML, CSS, JSON 
|
|
|
|
|
|
|
|-
|5
| Session 
| BGP (actually layer 7...)  
| routing: exchanging AS reachability info via gossip: based on trust & peering agreements! <br> physical routers by routers: Cisco/Juniper (commercial monopolists ;-) 
| Large ISPs; Tier1 / Tier2 ; IXPs!!  RIRs give out AS numbers 
| "routing-wg" @ RIPE; *NOGs! (nano, nlnog, grnog; peering forums; Euro-IX); IETF; Open-Source community ; hackers 
| "route hijacks", government regulation & takeover (killer switch), hierarchies; 
| technically: BGPsec, IRR, RPKI; <br> politically: influencing governance 
| p2p protocols, Betman [xx]; MPLS, SDN; Tor?! 
|
|-
|4
| Transport 
| UDP -> e.g. DNS (see above!) 
| www.belastingdiest.nl 
| User; Registrar, Registry, ccTLD, gTLD, ICANN, US government! 
| DNS OARC, IETF, root-nameserver operators, ICANN, IGF/UN/ITU  
| "balkanisation", US hegemony; internationalization; censorship; 
| technically: DNSSEC, DANE ; Tor; <br> politically: participating in governance 
| Alternative trees; blockchain (namecoin); etc 
|
|-
|3
| Network 
| Internet / IP 
| ifconfig; IPv4, NAT, 10.10.10.10, IPv6
| no-one: IP addresses are "leased"! <br> (PI,PA,LIR,RIR,IANA,IETF)
| RIR PDP, IANA, IETF
| hierarchy, run-out, incompatibility, market forces; surveillance 
| IPSec 
| Blockchain? GSM? Radio? 
|
|-
|2
| Data-link
| 
| MAC addresses, Ethernet device drivers, WiFi drivers 
| licensed to users 
| Broadcom, Realtech, INTEL.. 
| patents, closed source, Intellectual Property Laws 
| open source SW, open HW 
| ?! 
|-
! rowspan="2" | 1
! rowspan="2" | Physical 
| Network connections
| Ethernet cables, WiFi antennas, fibers, satellites, satellite dishes, base-stations, under-sea cables  ; POTS (old-fashioned phones -> BBS, dialup) 
| Individuals <br> communities, ISP, "carriers", corporations, governments,  
| Hackers <br> commercial companies, governments 
| "ownership" models; hierarchy of server-client model; pollution & distraction of Earth; surveillance 
| commoning; shared infrastructure; development of sustainable technologies (?!), recycling; awareness & activism  
|Community WiFi, Project Loon, Drones
|
|-
|HW - end user equipment
|Computer, tablet, phone...  
|User 
|Commercial companies: Apple, Siemens, Samsung... 
|Un-ethical manufacturing, security backdoors, pollution caused by e-waste disposal, 
|Hard:
|Open HW movement; fair-phone; DIY, Repair Cafes, fair-trade... 
|
|-
|}

==Participate, take action, join==

=Next topics=

===Traceroute Much?===

* Terminal: CLI command 
** http://www.thegeekstuff.com/2012/05/traceroute-examples/ 
* web interface: traceroute.org 
* Massive traceroute tool: RIPE Atlas 
* OpenIPmap - visualization tool & crowdsourcing platform for IP addresses of infrastructure routers 
* https://cira.ca/blog/dot-ca-labs/traceroute-protect-your-dns
* How Asymmetric is the Internet? A Study to Reinforce the use of Traceroute, Wouter de Vries and José Jair Santanna, University Twente https://ripe69.ripe.net/presentations/14-UT_DACS_RIPE_HATI_20141031.pdf https://ripe69.ripe.net/archives/video/163
* GitHub repo with lots of Viz tools: 
* smoketrace: http://oss.oetiker.ch/smokeping/index.en.html
* NLNOG RING 
* https://www.nanog.org/resources/tutorials with videos! 
** https://www.nanog.org/meetings/47/presentations/Sunday/RAS_Traceroute_N47_Sun.pdf
** https://www.nanog.org/sites/default/files/tues.tutorial.steenberg.traceroute.42.pdf 
** https://www.nanog.org/sites/default/files/traceroute-2014.pdf
** https://www.nanog.org/sites/default/files/tuesday_steenbergen_troublshootingtraceroute_62.49.pdf 

At the end of the tutorial, you should watch this video and spot all the places where he is completely WRONG: https://www.youtube.com/watch?v=SXmv8quf_xM

[[Category:How_To]]