Running Refraction Networking for Real
Running Refraction Networking for Real
复制标题
DOI：
10.2478/popets-2020-0075
复制
发表时间：
2020-08
影响因子：
--
通讯作者：
Benjamin VanderSloot;Sergey Frolov;Jack Wampler;Sze Chuen Tan;I. Simpson;Michalis Kallitsis;J. A. Halderman;N. Borisov;Eric Wustrow
中科院分区：
文献类型：
--
作者：
Benjamin VanderSloot;Sergey Frolov;Jack Wampler;Sze Chuen Tan;I. Simpson;Michalis Kallitsis;J. A. Halderman;N. Borisov;Eric Wustrow
摘要折射网络是一种下一代审查规避方法，它将代理功能定位在网络本身，在参与的ISP或其他网络运营商。经过多年的研发和短暂的试点，我们建立了世界上第一个折射网络系统的生产部署。我们的部署使用TapDance协议的高性能实现，并在流行的规避应用程序赛风中作为传输启用。它在中型ISP Merit Network的四个物理上行链路位置使用TapDance站，总带宽为140 Gbps。截至2019年底，我们的系统已在559，000个赛风安装中作为传输选项启用，每月为超过33，000名独立用户提供服务。本文报告了我们构建部署和第一年运行的经验。我们描述了我们如何克服工程挑战，提出详细的性能指标，并分析我们的系统如何响应动态审查行为。最后，我们回顾了从操作这个独特的工件中吸取的经验教训，并讨论了进一步扩展折射网络以满足审查用户需求的前景。
Abstract Refraction networking is a next-generation censorship circumvention approach that locates proxy functionality in the network itself, at participating ISPs or other network operators. Following years of research and development and a brief pilot, we established the world’s first production deployment of a Refraction Networking system. Our deployment uses a highperformance implementation of the TapDance protocol and is enabled as a transport in the popular circumvention app Psiphon. It uses TapDance stations at four physical uplink locations of a mid-sized ISP, Merit Network, with an aggregate bandwidth of 140 Gbps. By the end of 2019, our system was enabled as a transport option in 559,000 installations of Psiphon, and it served upwards of 33,000 unique users per month. This paper reports on our experience building the deployment and operating it for the first year. We describe how we overcame engineering challenges, present detailed performance metrics, and analyze how our system has responded to dynamic censor behavior. Finally, we review lessons learned from operating this unique artifact and discuss prospects for further scaling Refraction Networking to meet the needs of censored users.