It's over 9000: analyzing early QUIC deployments with the standardization on the horizon
It's over 9000: analyzing early QUIC deployments with the standardization on the horizon
复制标题
超过 9000：分析早期 QUIC 部署以及即将到来的标准化
DOI：
10.1145/3487552.3487826
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
G. Carle
中科院分区：
文献类型：
--
作者：
Johannes Zirngibl;Philippe Buschmann;Patrick Sattler;Benedikt Jaeger;J. Aulbach;G. Carle
经过近五年的时间和34个草案版本，新的面向连接的传输协议QUIC的标准化于2021年5月完成。它被设计为一种基本网络协议，由于多个网络堆栈层的功能组合而增加了复杂性，它有可能极大地影响互联网生态系统。然而，即使在其早期阶段，该议定书也吸引了包括大型供应商在内的各种缔约方。我们的研究表明，超过2.3M的IPv4和300k的IPv6地址支持Quic托管超过30M的域。使用我们新实现的状态Quic扫描器(QScanner)，我们能够成功扫描26个M个目标。我们表明，对于同一目标，TLS作为一个组成部分在QUIC和TLS over TCP堆栈之间进行了类似的配置。相比之下，我们识别了45个变化很大的传输参数配置，例如，性能相关参数的大小顺序不同。将这些配置与HTTP服务器标头值和相关联的域结合起来，可以看到Facebook和Google的两个大型边缘部署。因此，虽然已发现的Quic部署位于4667个自治系统中，但其中许多仍然由大型提供商运营。根据我们的经验，IETF Quic已经看到了主要由大型提供商推动的高级部署状态。我们认为，当前的部署状态以及现有实现和所见配置的多样性巩固了QUIC作为未来研究主题的重要性。在这项工作中，我们提供并评估了一个通用的工具集，以识别具有QUIC功能的主机及其属性。除了状态QScanner之外，我们还提出并分析了一个新实现的IPv4和IPv6 ZMap模块。我们将其与基于来自HTTP握手的HTTP替代服务标头值和新起草的HTTPS DNS资源记录的DNS扫描的其他检测方法进行比较。虽然每种方法都显示了独特的部署，但后者将允许轻量级扫描来检测具有Quic能力的目标，但它严重偏向Cloudflare。
After nearly five years and 34 draft versions, standardization of the new connection oriented transport protocol QUIC was finalized in May 2021. Designed as a fundamental network protocol with increased complexity due to the combination of functionality from multiple network stack layers, it has the potential to drastically influence the Internet ecosystem. Nevertheless, even in its early stages, the protocol attracted a variety of parties including large providers. Our study shows, that more than 2.3 M IPv4 and 300k IPv6 addresses support QUIC hosting more than 30 M domains. Using our newly implemented stateful QUIC scanner (QScanner) we are able to successfully scan 26 M targets. We show that TLS as an integral part is similarly configured between QUIC and TLS over TCP stacks for the same target. In comparison, we identify 45 widely varying transport parameter configurations, e.g., with differences in the order of magnitudes for performance relevant parameters. Combining these configurations with HTTP Server header values and associated domains reveals two large edge deployments from Facebook and Google. Thus, while found QUIC deployments are located in 4667 autonomous systems, numerous of these are again operated by large providers. In our experience, IETF QUIC already sees an advanced deployment status mainly driven by large providers. We argue that the current deployment state and diversity of existing implementations and seen configurations solidifies the importance of QUIC as a future research topic. In this work, we provide and evaluate a versatile tool set, to identify QUIC capable hosts and their properties. Besides the stateful QScanner we present and analyze a newly implemented IPv4 and IPv6 ZMap module. We compare it to additional detection methods based on HTTP Alternative Service Header values from HTTP handshakes and DNS scans of the newly drafted HTTPS DNS resource record. While each method reveals unique deployments the latter would allow lightweight scans to detect QUIC capable targets but is drastically biased towards Cloudflare.
DOI：
10.1145/2660267.2660308
发表时间：
2014-11
期刊：
Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security
影响因子：
--
作者：
M. Fischlin;Felix Günther
通讯作者：
M. Fischlin;Felix Günther
Hypergiants网外生命的七年
DOI：
10.1145/3452296.3472928
发表时间：
2021
期刊：
SIGCOMM '21: Proceedings of the 2021 ACM SIGCOMM 2021 Conference
影响因子：
--
作者：
Gigis, Petros;Calder, Matt;Manassakis, Lefteris;Nomikos, George;Kotronis, Vasileios;Dimitropoulos, Xenofontas;Katz-Bassett, Ethan;Smaragdakis, Georgios
通讯作者：
Smaragdakis, Georgios