Internet access denial by higher-tier ISPS: A NAT-based solution

Abstract

The Internet is an interconnection of Autonomous Systems (ASes) of which many are controlled by Internet Service Providers (ISPs). ASes use Border Gateway Protocol (BGP) to communicate routing information to each other. BGP does not allow a network to control how its traffic is routed. As a result, traffic belonging to a specific network can be intentionally dropped as it is routed by BGP through a malicious ISP; a behavior we define as Internet access denial. The impact of Internet access denial, especially when performed by higher-tier ISPs, can be severe. In this paper, Network Address Translation (NAT) is used as a solution to overcome the Internet access denial problem by hiding the traffic identity. The proposed solution is scalable to fit large networks, by using pools of IP addresses across several NAT routers. Under high network load, the performance degradation of introducing NAT on the end-toend delay and throughput is at most 0.2% and 0.3%, respectively.

Integrating Resilient Tier N+1 Networks with Distributed Non-Recursive Cloud Model for Cyber-Physical Applications

“…Where 𝝀𝝀 𝒏𝒏 𝒕𝒕 is the critical reliability hazard function needed for availability and faulttolerance. Presentation in (12) is the measure of Pod cluster Availability ψ (%) = 𝑼𝑼𝒑𝒑𝒕𝒕𝒊𝒊𝑼𝑼𝒆𝒆 𝑼𝑼𝒑𝒑𝒕𝒕𝒊𝒊𝑼𝑼𝒆𝒆+𝒂𝒂𝒅𝒅𝒅𝒅𝒏𝒏𝒕𝒕𝒊𝒊𝑼𝑼𝒆𝒆 (13) For pod cluster design, the NOC server availability is built on the reference NEC Express5800/ft (series servers) [55]. This provides 99.999% availability measured.…”

“…4. Interconnecting the network to complex NOC nodes while providing improved fault tolerance via its routing scheme is very desirable based on (13). Considering the issues established in Fig.…”