Are TCP extensions middlebox-proof?

Hesmans, Benjamin; Duchene, Fabien; Paasch, Christoph; Detal, Gregory; Bonaventure, Olivier

doi:10.1145/2535828.2535830

Cited by 46 publications

(49 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This paper was the main motivation for Multipath TCP incorporating various techniques to cope with middlebox interference. More specifically, Multipath TCP has been designed to cope with middleboxes that: The interactions between Multipath TCP and real deployed middleboxes are also analyzed in [HotMiddlebox13]; a particular scenario with the FTP Application Level Gateway running on a NAT is described.…”

Section: Multipath Tcp Proxiesmentioning

confidence: 99%

Use Cases and Operational Experience with Multipath TCP

Detal¹,

Bonaventure²,

Paasch³

2017

View full text Add to dashboard Cite

show abstract

Section: Multipath Tcp Proxiesmentioning

confidence: 99%

Use Cases and Operational Experience with Multipath TCP

Detal¹,

Bonaventure²,

Paasch³

2017

View full text Add to dashboard Cite

show abstract

“…For instance, in the case of sequence number translation that is SACK-naïve, performance suffers in proportion to loss rate [24]. For ECN, performance suffers when false congestion signals are inadvertently marked, experiencing dramatic performance impact if a congestion codepoint is added, or a TCP-layer congestion echo is added [6].…”

Section: Application Performancementioning

confidence: 99%

A middlebox-cooperative TCP for a non end-to-end internet

CravenRyan

BeverlyRobert

AllmanMark

2014

SIGCOMM Comput. Commun. Rev.

View full text Add to dashboard Cite

Understanding, measuring, and debugging IP networks, particularly across administrative domains, is challenging. One particularly daunting aspect of the challenge is the presence of transparent middleboxes-which are now common in today's Internet. In-path middleboxes that modify packet headers are typically transparent to a TCP, yet can impact end-to-end performance or cause blackholes. We develop TCP HICCUPS to reveal packet header manipulation to both endpoints of a TCP connection. HICCUPS permits endpoints to cooperate with currently opaque middleboxes without prior knowledge of their behavior. For example, with visibility into end-to-end behavior, a TCP can selectively enable or disable performance enhancing options. This cooperation enables protocol innovation by allowing new IP or TCP functionality (e.g., ECN, SACK, Multipath TCP, Tcpcrypt) to be deployed without fear of such functionality being misconstrued, modified, or blocked along a path. HICCUPS is incrementally deployable and introduces no new options. We implement and deploy TCP HICCUPS across thousands of disparate Internet paths, highlighting the breadth and scope of subtle and hard to detect middlebox behaviors encountered. We then show how path diagnostic capabilities provided by HICCUPS can benefit applications and the network.

show abstract

“…Indeed, it has been shown that middleboxes have a negative impact on the TCP protocol (and its extensions) evolution [5], [6]. Middleboxes may modify, filter, or drop packets that do not conform to expected behaviors.…”

Section: Introductionmentioning

confidence: 99%

“…Each new mechanism has to be certified as middlebox-proof [6], [7]. For those researchers, a summary of the potential middlebox network interferences would be a valuable asset as they could easily confront their new protocol with potential issues caused by middleboxes.…”

Section: Introductionmentioning

confidence: 99%

A First Look at the Prevalence and Persistence of Middleboxes in the Wild

Edeline

Donnet

2017

2017 29th International Teletraffic Congress (ITC 29)

View full text Add to dashboard Cite

Abstract-Recent years have seen an uprise in the development of middleboxes functionalities (CGNATs, proxies, accelerators, etc), participating so in the ossification of the Internet. In parallel, various solutions have been developed to detect or circumvent unwanted middleboxes interferences such as UDP-based middlebox-proof transports (Google's QUIC, PLUS), middleboxproof extensions to TCP (HICCUPS, TCPcrypt), and middlebox traversal mechanisms (STUN, ICE, PLUS) [1].All those solutions make the assumption of ubiquitous middleboxes. However, a view of their actual deployment in the wild, in IPv4 wired networks, is missing. In particular, knowing how autonomous systems (ASes) deploy middleboxes in terms of prevalence and persistence would provide additional relevant information to Internet topology models. In this paper, we aim at filling this gap. Based on a large-scale measurement campaign, we highlight different characteristics of middlebox deployment within ASes to elicit middleboxes profiles.

show abstract

Are TCP extensions middlebox-proof?

Cited by 46 publications

References 10 publications

Use Cases and Operational Experience with Multipath TCP

Use Cases and Operational Experience with Multipath TCP

A middlebox-cooperative TCP for a non end-to-end internet

A First Look at the Prevalence and Persistence of Middleboxes in the Wild

Contact Info

Product

Resources

About