Master Course Computer Networks IN2097 - TUM

More documents

Recommendations

Info

Middlebox Functionality according to RFC 3234 Layer Transparency Purpose Operation State Reason for Introduction: Address depletion NAT 3+4 Transparent Functional Processing Stateful Other examples: NAT44 with ALG Reason for Introduction: Security Firewall 3+4 Transparent Functional Routing Stateful Other examples: Deep Packet Inspection, Anonymizer, Tunnel Endpoint Reason for Introduction: Performance Web-Cache 7 both both Processing Stateless Other examples: Proxy Network IN2097 - Master Security, Course WS 2008/09, Computer Chapter Networks, 9 WS 2012/2013 32
Middlebox behavior not standardized q� Just like NAT (as one middlebox example) q� Many possibilities to implement practically the same functionality §� e.g. address translation §� But many ways of allocating new mappings q� Idea: If exact behavior is understood and if can be expressed, coping with middleboxes becomes easier q� Model for formalizing and describing middlebox behavior §� Measure behavior and create model §� Model holds properties of the middlebox §� Traversal solutions based on model Network IN2097 - Master Security, Course WS 2008/09, Computer Chapter Networks, 9 WS 2012/2013 33
Page 1 and 2: Chair for Network Architectures and
Page 3 and 4: Agenda q� Skype as one example fo
Page 6 and 7: „Join“ process q� Tasks perfo
Page 8 and 9: Hole Punching in Skype http://www.h
Page 10 and 11: Recap: Problem q� More and more d
Page 12 and 13: Large Scale NAT (LSN) q� Facts §
Page 14 and 15: Example - Vodafone LTE network q�
Page 16 and 17: NAT 444 Network IN2097 - Master Sec
Page 18 and 19: NAT 464 Network IN2097 - Master Sec
Page 20 and 21: Dual Stack Lite Network IN2097 - Ma
Page 22 and 23: Network Address Translation today q
Page 24 and 25: Chair for Network Architectures and
Page 26 and 27: Some Reasons for today’s architec
Page 28 and 29: Netalyzr (ICSI, Berkeley) q� Netw
Page 30 and 31: Middleboxes often address practical
Page 34 and 35: NAT Analyzer - Measuring NAT and MB
Page 36 and 37: NAT Analyzer q� Connectivity test
Page 38 and 39: NAT Analyzer- Results (Central Euro
Page 40 and 41: NAT Binding Results - Recap q� NA
Page 42 and 43: Connection dependent binding (2) 27
Page 44 and 45: Approach: Information Model q� De
Page 46 and 47: Stateful Element (2) q� State is
Page 48 and 49: Translation and Modification q� F
Page 50 and 51: Middlebox Instance (cont) Network I
Page 52 and 53: UDP Hole Punching Example q� init
Page 54 and 55: Step 2) Prevent State from being cl
Page 56 and 57: Assessment q� Future application

Master Course Computer Networks IN2097 - TUM

Create successful ePaper yourself

Delete template?

Save as template?