Yarrp'ing the Internet: Randomized High-Speed Active Topology Discovery

Abstract

Obtaining a "snapshot" of the Internet topology remains an elusive task. Existing active topology discovery techniques and systems require significant probing time -- time during which the underlying network may experience transient dynamics. This work considers how active probing can gather the Internet topology in minutes rather than days. Conventional approaches to active topology mapping face two primary speed and scale impediments: i) per-trace state maintenance; and ii) a low-degree of parallelism. Based on this observation, we develop Yarrp (Yelling at Random Routers Progressively), a new traceroute technique designed for high-rate, Internet-scale probing. Yarrp is stateless, reconstituting all necessary information from ICMP replies as they arrive asynchronously. To avoid overloading routers or links with probe traffic, Yarrp randomly permutes an input IP x TTL space. We run Yarrp at 100Kpps, a rate at which the paths to all /24's on the IPv4 Internet can be mapped in approximately one hour from a single vantage point. We compare Yarrp against existing systems, and present examples of topological dynamics exposed via the high sampling rates Yarrp enables.

Cited by in corpus (5)

• In the IP of the Beholder: Strategies for Active IPv6 Topology Discovery
• Rusty Clusters? Dusting an IPv6 Research Foundation
• Zeroing in on Port 0 Traffic in the Wild
• A Detailed Measurement View on IPv6 Scanners and Their Adaption to BGP Signals
• Scanning the IPv6 Internet Using Subnet-Router Anycast Probing