Re: [alto] Potential privacy issue in draft-deng-alto-p2p-ext-01?

"Reinaldo Penno (repenno)" <repenno@cisco.com> Sat, 28 June 2014 11:55 UTC

Return-Path: <repenno@cisco.com>
X-Original-To: alto@ietfa.amsl.com
Delivered-To: alto@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03F611A0192 for <alto@ietfa.amsl.com>; Sat, 28 Jun 2014 04:55:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.152
X-Spam-Level:
X-Spam-Status: No, score=-15.152 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id StPZKMhnIwIZ for <alto@ietfa.amsl.com>; Sat, 28 Jun 2014 04:55:10 -0700 (PDT)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DD501A01A7 for <alto@ietf.org>; Sat, 28 Jun 2014 04:55:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4211; q=dns/txt; s=iport; t=1403956510; x=1405166110; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=bWBIMORchNLywf52H8FXnbnIIA/hVXXYWhWgDVddWcE=; b=dUppBSpRV7emf8AwLSaPEwqZARDqArh1kbR829zr/3kopZgL7sDZU1Hr oAfch6FBI5e8eg2OdKIomqED71n0TraMQG90pNazptlwX92bSo9cBjfGd Ly9z77zo6gKQKydJxX/8SQ+spX8NDkVdKw5KoP8YdrYfiD2UjJxvcVCha s=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av4IAGqsrlOtJV2a/2dsb2JhbABZgw1SUweqUwEBAQEBAQUBbQGRQodAAYEHFnWEAwEBAQQBAQFrFwQCAQgRBAEBAQodBycLFAkIAgQBEgiIOggFxRAXhWSIPxEBHzgGgyeBFgWKDYw5kgUBhgyDQnYBAX85
X-IronPort-AV: E=Sophos;i="5.01,567,1400025600"; d="scan'208";a="336324957"
Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-3.cisco.com with ESMTP; 28 Jun 2014 11:55:09 +0000
Received: from xhc-aln-x06.cisco.com (xhc-aln-x06.cisco.com [173.36.12.80]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id s5SBt9wG007586 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sat, 28 Jun 2014 11:55:09 GMT
Received: from xmb-rcd-x04.cisco.com ([169.254.8.131]) by xhc-aln-x06.cisco.com ([173.36.12.80]) with mapi id 14.03.0123.003; Sat, 28 Jun 2014 06:55:08 -0500
From: "Reinaldo Penno (repenno)" <repenno@cisco.com>
To: "Songhaibin (A)" <haibin.song@huawei.com>, "Vijay K. Gurbani" <vkg@bell-labs.com>, "alto@ietf.org" <alto@ietf.org>
Thread-Topic: [alto] Potential privacy issue in draft-deng-alto-p2p-ext-01?
Thread-Index: AQHPkiz+UneLYxSpbEKUwFBAz6/OR5uFFfgAgAFIfwCAAAw/Rw==
Date: Sat, 28 Jun 2014 11:55:08 +0000
Message-ID: <45A697A8FFD7CF48BCF2BE7E106F06040BE434A6@xmb-rcd-x04.cisco.com>
References: <53ADA961.80206@bell-labs.com> <CFD2F7F5.CAD0%repenno@cisco.com>, <E33E01DFD5BEA24B9F3F18671078951F65117498@nkgeml501-mbs.china.huawei.com>
In-Reply-To: <E33E01DFD5BEA24B9F3F18671078951F65117498@nkgeml501-mbs.china.huawei.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.21.65.130]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/alto/3aCw2Cal_UrmAS7GJoqTGDYON8U
Subject: Re: [alto] Potential privacy issue in draft-deng-alto-p2p-ext-01?
X-BeenThere: alto@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Application-Layer Traffic Optimization \(alto\) WG mailing list" <alto.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/alto>, <mailto:alto-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/alto/>
List-Post: <mailto:alto@ietf.org>
List-Help: <mailto:alto-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/alto>, <mailto:alto-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 28 Jun 2014 11:55:12 -0000

I'm not talking about on-demand "available" bandwidth, 

It is the bandwidth configured in the application. It is a configured value. Just take a look at any utorrent client.

A utorrent client will never use more than that amount of bandwidth, no matter your provisioned bandwidth.


________________________________________
From: Songhaibin (A) [haibin.song@huawei.com]
Sent: Friday, June 27, 2014 11:09 PM
To: Reinaldo Penno (repenno); Vijay K. Gurbani; alto@ietf.org
Subject: RE: [alto] Potential privacy issue in draft-deng-alto-p2p-ext-01?

Hi Reinaldo,

Thank you and I think you raised a very good question. I totally agree that available bandwidth is more useful than provisioned bandwidth. But available bandwidth is rather dynamic, and it is very hard to measure it and provide the real-time status to ALTO clients.

With providing provisioned bandwidth, it can be seen with a high probability a client can select a "better" peer. It is better than random IMO. But if there is an easy method to rank the available bandwidth of a peer list, I will be very interested.

BR,
-Haibin

> -----Original Message-----
> From: alto [mailto:alto-bounces@ietf.org] On Behalf Of Reinaldo Penno
> (repenno)
> Sent: Saturday, June 28, 2014 1:33 AM
> To: Vijay K. Gurbani; alto@ietf.org
> Subject: Re: [alto] Potential privacy issue in draft-deng-alto-p2p-ext-01?
>
> Another point is how¹s the provisioned access bandwidth really help decide
> which peers are better. Today most P2P software allow caps to be put for
> upload/download and people use it. Some come with a default based on the %
> of the detect access speed. So, saying a user has 1Gb/s does not really mean
> you will get better performance when connecting to him(er). I mean, it would
> more inline with better than random to get the actual bandwidth allowed.
>
>
> On 6/27/14, 10:26 AM, "Vijay K. Gurbani" <vkg@bell-labs.com> wrote:
>
> >[Still as individual.]
> >
> >On 06/26/2014 05:10 AM, Songhaibin (A) wrote:
> >> Sebastian gave an idea that we can use relative numbers to indicate
> >> the endpoint's provisioned bandwidth instead of access type, which is
> >> similar to what we have used to indicate the cost in the alto
> >> protocol.
> >
> >The difference, of course, being that the ISP in some manner consented
> >to having a normalized value of cost to be distributed in order to
> >allow for better than random selections to improve network performance.
> >
> >In the case under discussion, the issue is does the subscriber consent
> >to having their provisioned bandwidth be part of ALTO calculations?
> >
> >Remember, if the WG decides to go ahead and use provisioned bandwidth
> >anyway, it could always do so.  But then we'd better be prepared to
> >deal with the eventuality on when (and if) the IESG challenges us on
> >this privacy leak.  If that happens, we'd better have a good response.
> >
> >Perhaps a midway could be to see if we can use the provisioned
> >bandwidth for a set of (anonymous) subscribers instead of singleton
> subscribers.
> >That way, the larger herd provides some modicum of anonymity to an
> >individual subscriber who is part of the herd.
> >
> >Cheers,
> >
> >- vijay
> >--
> >Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
> >1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60563 (USA)
> >Email: vkg@{bell-labs.com,acm.org} / vijay.gurbani@alcatel-lucent.com
> >Web: http://ect.bell-labs.com/who/vkg/  | Calendar: http://goo.gl/x3Ogq
> >
> >_______________________________________________
> >alto mailing list
> >alto@ietf.org
> >https://www.ietf.org/mailman/listinfo/alto
>
> _______________________________________________
> alto mailing list
> alto@ietf.org
> https://www.ietf.org/mailman/listinfo/alto