Internet̙-Plumbing - Revision history

Alex at 14:25, 6 April 2016

2016-04-06T14:25:46Z

Alex: /* Internet Governance */

2016-04-05T08:52:00Z

‎Internet Governance

Alex: /* ABSTRACTION */

2016-04-04T12:33:43Z

‎ABSTRACTION

Alex: /* Basics */

2016-04-04T12:33:19Z

‎Basics

Alex: /* Alternatives */

2016-04-04T12:32:49Z

‎Alternatives

Alex at 12:30, 4 April 2016

2016-04-04T12:30:50Z

Alex: Created page with "This HowTo has been copied from the wiki of the [https://wiki.techinc.nl/index.php/Technologia_Incognita hackerspace Technologia Incognita] (located in Amsterdam) =Internet P..."

2016-04-04T10:00:05Z

Created page with "This HowTo has been copied from the wiki of the [https://wiki.techinc.nl/index.php/Technologia_Incognita hackerspace Technologia Incognita] (located in Amsterdam) =Internet P..."

New page

This HowTo has been copied from the wiki of the [https://wiki.techinc.nl/index.php/Technologia_Incognita hackerspace Technologia Incognita] (located in Amsterdam)

=Internet Plumbing=

Internet Plumbing is a word-game with multiple layers of meaning (ha! a recursive pun ;-)

[[File:women role models in computing.jpg|right|300px]]

===Series of Tubes===

* https://en.wikipedia.org/wiki/Series_of_tubes
* http://www.salon.com/2012/05/28/tubes_what_the_internet_is_made_of/
* http://knowyourmeme.com/memes/series-of-tubes
* http://www.submarinecablemap.com/

===Ubiquitous and complicated as plumbing?===

* Internet as a utility
* just like "plumbing" (water & sewage), there is underlying "technology" to it, so complex, that no-one seems to grasp how all of it works
* 60% of the population of the planet does NOT have "teh Internets", and 30% does not have plumbing either (http://www.un.org/waterforlifedecade/sanitation.shtml)

==Acronyms!==

[[File:protocol stack hourglass 1.jpeg|200px|right]]

* TCP/IP
* IPv4, IPv6: Internet Protocol (IP) addresses
* NAT: Network Address Translation
* DNS: Domain Name System
* ASN: Autonomous System Number
** used for BGP routing (Border Gateway Protocol)
* IXP: Internet eXchange Point
* SMTP
* HTTP
* CDN

==Basics==

[[File:750px-Ipv4 address.svg.png|300px]]

[[File:500px-An_example_of_theoretical_DNS_recursion-nl.svg.png|500px]] [[File:Becha-Autonomous-system.png | 400px ]]

https://en.wikipedia.org/wiki/Border_Gateway_Protocol

[[File:More-dolls-fig2.jpg|200px]] [[File:Networking-fig3.jpg|200px]] [[File:Email-tmp3163.jpg|300px]]

Many many more resources: books, videos:
* [[Internet_Governance_and_hackers#How_does_the_Internet_work]]

Links:
* http://en.flossmanuals.net/bypassing-censorship/ch006_chapter-1-how/
* https://en.wikipedia.org/wiki/Internet_protocol_suite
* http://what-when-how.com/data-communications-and-networking/network-and-transport-layers-data-communications-and-networking/
* http://what-when-how.com/data-communications-and-networking/network-models-data-communications-and-networking/
* http://www.laneye.com/network/how-network-works/mac-address-and-ip-address-relationship.htm
* https://www.amplicon.com/building/networking-principles.cfm#ip
* DNS & CDNs: Internet plumbing: Think globally, route locally, Mar 16th 2011, http://www.economist.com/node/21016766/print

==Exercises==

[[User:Becha/InternetPlumbing/Exercises]]

==Videos==

* youtube hijack
* How IXP's work
* Net of Rights

==Security, Privacy, Avoiding Censorship==

* IPSec
* DNSSEC
* BGP security & plumbing:
** https://www.blackhat.com/docs/us-15/materials/us-15-Remes-Internet-Plumbing-For-Security-Professionals-The-State-Of-BGP-Security-wp.pdf
** https://www.youtube.com/watch?v=po_9p6XxK2E

* User Self-help:
** https://www.takebackthetech.net
** https://gendersec.tacticaltech.org/wiki/index.php/Manuals_with_a_gender_perspective
** http://hackingwithcare.in/by/ressources/
** https://gendersec.tacticaltech.org/wiki/index.php/Complete_manual
** http://en.flossmanuals.net/bypassing-censorship/ch007_chapter-2-censorship/

==Alternatives==

MeshNet: "Hackers and philosophers building an utopia together": http://becha.home.xs4all.nl/hackers-philosophers-utopian-network-dec-2012-becha.pdf

[[MeshNet#Education]]

[[File:tier0.png|right|200px]]

[[P2pbgpsec#Technical_view]]

November 2014: Nature will have the last word, on Future of Technology, RIPE69
https://wiki.techinc.nl/index.php/File:Nature-speaking-on-future_of_the_internet-RIPE69.pdf

UnCivilization: critical thinking about Internet & capitalism: https://lists.puscii.nl/wws/info/uncivilization

** [[Hackers_tribes#Internet_and_Capitalism]]
** [[Hackers_tribes#Internet.2C_Electrical_Energy_Efficiency.2C_Pollution]]
** [[Hackers_tribes#Against_Anthropocentrism]]

Playfull: Internet Simulator: https://github.com/nsec/the-internet

* Alternative Network Deployments: Taxonomy, characterization, technologies and architectures
https://www.ietf.org/id/draft-irtf-gaia-alternative-network-deployments-04.txt

* The Critical Engineering Manifesto: https://www.criticalengineering.org/

=Overview=

===Comparing OSI & TCP / IP layers===

Original borrowed from: https://en.wikipedia.org/wiki/OSI_model

{| class="wikitable" style="margin: 1em auto 1em auto;"
|-
| TCP / IP Model
! colspan="4" | OSI Model
|-
| Layer
| OSI Layer
! [[Protocol data unit]] (PDU)
! style="width:30em;" | Function
! Examples
|-
! rowspan="2" | Application
| style="background:#d8ec9b;" | 7. [[Application layer|Application]]
| style="background:#d8ec9c;" rowspan="3" | [[Data (computing)|Data]]
| style="background:#d8ec9c;" | High-level [[API]]s, including resource sharing, remote file access, [[directory service]]s and [[virtual terminal]]s
| [[Transport Layer Security|TLS]], [[FTP]], [[HTTP]], [[HTTPS]], [[SMTP]], [[Secure Shell|SSH]], [[Telnet]], BGP!
|-
| style="background:#d8ec9b;" | 6. [[Presentation layer|Presentation]]
| style="background:#d8ec9b;" | Translation of data between a networking service and an application; including [[character encoding]], [[data compression]] and [[Encryption|encryption/decryption]]
| [[CSS]], [[GIF]], [[HTML]], [[XML]], [[JSON]]
|-
! rowspan="2" | Transport
| style="background:#d8ec9b;" | 5. [[Session layer|Session]]
| style="background:#d8ec9b;" | Managing communication [[Session (computer science)|sessions]], i.e. continuous exchange of information in the form of multiple back-and-forth transmissions between two nodes
| [[Remote Procedure Call|RPC]], [[DECnet|SCP]], [[Network File System|NFS]], [[Password authentication protocol|PAP]],
|-
| style="background:#e7ed9c;" | 4. [[Transport layer|Transport]]
| style="background:#e7ed9c;" | [[Packet segmentation|Segment]] (TCP) / [[Datagram]] (UDP)
| style="background:#e7ed9c;" | Reliable transmission of data segments between points on a network, including [[Packet segmentation|segmentation]], [[Acknowledgement (data networks)|acknowledgement]] and [[multiplexing]]
| [[NetBIOS Frames protocol|NBF]], [[Transmission Control Protocol|TCP]], [[User Datagram Protocol|UDP]]
|-
| Network / Internet
| style="background:#eddc9c;" | 3. [[Network layer|Network]]
| style="background:#eddc9c;" | [[Network packet|Packet]]
| style="background:#eddc9c;" | Structuring and managing a multi-node network, including [[Address space|addressing]], [[routing]] and [[Network traffic control|traffic control]]
| [[AppleTalk]], [[Internet Control Message Protocol|ICMP]], [[IPsec]], [[IPv4]], [[IPv6]]
|-
! rowspan="2" | Link layer
| style="background:#e9c189;" | 2. [[Data link layer|Data link]]
| style="background:#e9c189;" | [[Frame (networking)|Frame]]
| style="background:#e9c189;" | Reliable transmission of data frames between two nodes connected by a physical layer
| [[IEEE 802.2]], [[L2TP]], [[LLDP]], [[Media access control|MAC]], [[Point-to-Point Protocol|PPP]], [[Asynchronous Transfer Mode|ATM]], [[Multiprotocol Label Switching|MPLS]]
|-
| style="background:#e9988a;" | 1. [[Physical layer|Physical]]
| style="background:#e9988a;" | [[Bit]]
| style="background:#e9988a;" | Transmission and reception of raw bit streams over a physical medium
| [[DOCSIS]], [[DSL]], [[Ethernet physical layer]], [[ISDN]], [[USB]]
|}


Cross-layer functions:

* ARP is used to translate IPv4 addresses (OSI layer 3) into Ethernet MAC addresses (OSI layer 2).
* Domain Name Service is an Application Layer service which is used to look up the IP address of a given domain name. Once a reply is received from the DNS server, it is then possible to form a Layer 3 connection to the third-party host.
* etc

==Layers as an allegory==

[[File:Osi-layers-ti-shirt-download.jpeg|200px]] [[File:Evi nemeth.jpg|300px]] [[File:The art of engineering.png|right|200px]]

Left: OSI Model T-shirt enhanced to include an 8th and 9th layer as defined by Evi Nemeth: https://en.wikipedia.org/wiki/Evi_Nemeth // https://www.isc.org/product/isc-9-layer-osi-model-cotton-t-shirt/

(TODO: add ISC reference to Evi's wikipedia page!!)

Right: back of the T-shirt from the IETF75 in Stockholm, 2005

==ABSTRACTION==

[[File:Osi-deployment-layers.png|right|300px]]

Explaining complex concepts using layers is a useful abstraction.

Goal here is to illustrate layers by practical examples, and point out '''owners, developers, dangers, mitigations & alternatives.'''

This is not exactly technically correct, for the detail oriented people!

{|class="wikitable sortable"
|-
| Number
| Layer name
| Example
| Practically
| Owner
| Developed by
| Vulnerabilities / Dangers
| Mitigation / Securing
| Alternatives
|
|-
|9
| Organisation / Political
| (Internet) Governance
|
| technical community, civil society, governments
| IGF (Internet Governance Forum), UN, ITU, IETF, ICANN,
|
| awareness, take part!
| someone will build a new *net, AlterNet :-)
|-
|8
| Individual / Financial
| Operating System (OS) + choice of software
| Linux, FreeBSD, Minix...; iOS, Android, Windows...
| User!
| programmers & developers: FLOSS community; Apple, Google,Micro$oft
| backdoors, surveillance, spying on users; lock-in; monopoly;
| community participation; unionization of programmers; see articles here [yy]
| knowledge, self-empowerment, solidarity
|
|-
! rowspan="3" | 7
! rowspan="3" | Application
| 7.3 -> VoIP
| skype
|
|
|
|
|-
|7.2 -> SMTP
| email
|
|
|
|
|
|-
| 7.1 HTTP: web, WWW
| web sites! LoLCats!
| individuals, on their own servers! blogs (blogspot?), mainstream media, hosting companies; CDNs (Akamai, Amazon...); corporations: Google, Facebook, Twitter... YouTube..
| W3c, IETF
| censorship; silos; walled gardens; commercialization, consumerism;
| technically: httpS, SSL, TLS; Tor; politically: activism, digital human rights; associations of users;
| torrent! p2p! alternative social media!
|-
|6
| Presentation
| HTML, CSS, JSON
|
|
|
|
|
|
|
|-
|5
| Session
| BGP (actually layer 7...)
| routing: exchanging AS reachability info via gossip: based on trust & peering agreements! physical routers by routers: Cisco/Juniper (commercial monopolists ;-)
| Large ISPs; Tier1 / Tier2 ; IXPs!! RIRs give out AS numbers
| "routing-wg" @ RIPE; *NOGs! (nano, nlnog, grnog; peering forums; Euro-IX); IETF; Open-Source community ; hackers
| "route hijacks", government regulation & takeover (killer switch), hierarchies;
| technically: BGPsec, IRR, RPKI; politically: influencing governance
| p2p protocols, Betman [xx]; MPLS, SDN; Tor?!
|
|-
|4
| Transport
| UDP -> e.g. DNS (see above!)
| www.belastingdiest.nl
| User; Registrar, Registry, ccTLD, gTLD, ICANN, US government!
| DNS OARC, IETF, root-nameserver operators, ICANN, IGF/UN/ITU
| "balkanisation", US hegemony; internationalization; censorship;
| technically: DNSSEC, DANE ; Tor; politically: participating in governance
| Alternative trees; blockchain (namecoin); etc
|
|-
|3
| Network
| Internet / IP
| ifconfig; IPv4, NAT, 10.10.10.10, IPv6
| no-one: IP addresses are "leased"! (PI,PA,LIR,RIR,IANA,IETF)
| RIR PDP, IANA, IETF
| hierarchy, run-out, incompatibility, market forces; surveillance
| IPSec
| Blockchain? GSM? Radio?
|
|-
|2
| Data-link
|
| MAC addresses, Ethernet device drivers, WiFi drivers
| licensed to users
| Broadcom, Realtech, INTEL..
| patents, closed source, Intellectual Property Laws
| open source SW, open HW
| ?!
|-
! rowspan="2" | 1
! rowspan="2" | Physical
| Network connections
| Ethernet cables, WiFi antennas, fibers, satellites, satellite dishes, base-stations, under-sea cables ; POTS (old-fashioned phones -> BBS, dialup)
| Individuals communities, ISP, "carriers", corporations, governments,
| Hackers commercial companies, governments
| "ownership" models; hierarchy of server-client model; pollution & distraction of Earth; surveillance
| commoning; shared infrastructure; development of sustainable technologies (?!), recycling; awareness & activism
|Community WiFi, Project Loon, Drones
|
|-
|HW - end user equipment
|Computer, tablet, phone...
|User
|Commercial companies: Apple, Siemens, Samsung...
|Un-ethical manufacturing, security backdoors, pollution caused by e-waste disposal,
|Hard:
|Open HW movement; fair-phone; DIY, Repair Cafes, fair-trade...
|
|-
|}

==Participate, take action, join==

=Next topics=

===Internet Governance===

See this lecture : [[Internet_Governance_Digital_Culture#Internet_Governance]]

[[Internet_Governance_and_hackers]]

===Traceroute Much?===

* Terminal: CLI command
** http://www.thegeekstuff.com/2012/05/traceroute-examples/
* web interface: traceroute.org
* Massive traceroute tool: RIPE Atlas
* OpenIPmap - visualization tool & crowdsourcing platform for IP addresses of infrastructure routers
* https://cira.ca/blog/dot-ca-labs/traceroute-protect-your-dns
* How Asymmetric is the Internet? A Study to Reinforce the use of Traceroute, Wouter de Vries and José Jair Santanna, University Twente https://ripe69.ripe.net/presentations/14-UT_DACS_RIPE_HATI_20141031.pdf https://ripe69.ripe.net/archives/video/163
* GitHub repo with lots of Viz tools:
* smoketrace: http://oss.oetiker.ch/smokeping/index.en.html
* NLNOG RING
* https://www.nanog.org/resources/tutorials with videos!
** https://www.nanog.org/meetings/47/presentations/Sunday/RAS_Traceroute_N47_Sun.pdf
** https://www.nanog.org/sites/default/files/tues.tutorial.steenberg.traceroute.42.pdf
** https://www.nanog.org/sites/default/files/traceroute-2014.pdf
** https://www.nanog.org/sites/default/files/tuesday_steenbergen_troublshootingtraceroute_62.49.pdf

At the end of the tutorial, you should watch this video and spot all the places where he is completely WRONG: https://www.youtube.com/watch?v=SXmv8quf_xM

← Older revision		Revision as of 14:25, 6 April 2016
Line 322:		Line 322:

	At the end of the tutorial, you should watch this video and spot all the places where he is completely WRONG: https://www.youtube.com/watch?v=SXmv8quf_xM		At the end of the tutorial, you should watch this video and spot all the places where he is completely WRONG: https://www.youtube.com/watch?v=SXmv8quf_xM
		+
		+	[[Category:How_To]]

← Older revision		Revision as of 08:52, 5 April 2016
Line 302:		Line 302:

	=Next topics=		=Next topics=
−
−	~~===Internet Governance===~~
−
−	~~See this lecture : [[Internet_Governance_Digital_Culture#Internet_Governance]]~~
−
−	~~[[Internet_Governance_and_hackers]]~~

	===Traceroute Much?===		===Traceroute Much?===

← Older revision		Revision as of 12:33, 4 April 2016
Line 157:		Line 157:

	==ABSTRACTION==		==ABSTRACTION==
−
−	~~[[File:Osi-deployment-layers.png\|right\|300px]]~~

	Explaining complex concepts using layers is a useful abstraction.		Explaining complex concepts using layers is a useful abstraction.

← Older revision		Revision as of 12:33, 4 April 2016
Line 47:		Line 47:

	[[File:More-dolls-fig2.jpg\|200px]] [[File:Networking-fig3.jpg\|200px]] [[File:Email-tmp3163.jpg\|300px]]		[[File:More-dolls-fig2.jpg\|200px]] [[File:Networking-fig3.jpg\|200px]] [[File:Email-tmp3163.jpg\|300px]]
−
−	~~Many many more resources: books, videos:~~
−	* [[Internet_Governance_and_hackers#How_does_the_Internet_work]]

	Links:		Links:

@@ Line 84: / Line 84: @@
 MeshNet: "Hackers and philosophers building an utopia together": http://becha.home.xs4all.nl/hackers-philosophers-utopian-network-dec-2012-becha.pdf
 November 2014: Nature will have the last word, on Future of Technology, RIPE69
@@ Line 95: / Line 89: @@
 UnCivilization: critical thinking about Internet & capitalism: https://lists.puscii.nl/wws/info/uncivilization
 Playfull: Internet Simulator: https://github.com/nsec/the-internet

@@ Line 1: / Line 1: @@
 This HowTo has been copied from the wiki of the [https://wiki.techinc.nl/index.php/Technologia_Incognita hackerspace Technologia Incognita] (located in Amsterdam)
 =Internet Plumbing=
@@ Line 57: / Line 59: @@
 * https://www.amplicon.com/building/networking-principles.cfm#ip
 * DNS & CDNs: Internet plumbing: Think globally, route locally, Mar 16th 2011, http://www.economist.com/node/21016766/print
 ==Videos==
@@ Line 170: / Line 168: @@
 * Domain Name Service is an Application Layer service which is used to look up the IP address of a given domain name. Once a reply is received from the DNS server, it is then possible to form a Layer 3 connection to the third-party host.
 * etc
 ==ABSTRACTION==