Re: [alto] Potential privacy issue in draft-deng-alto-p2p-ext-01?

"Y. Richard Yang" <yry@cs.yale.edu> Tue, 01 July 2014 12:03 UTC

Return-Path: <yang.r.yang@gmail.com>
X-Original-To: alto@ietfa.amsl.com
Delivered-To: alto@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43FC01A019A for <alto@ietfa.amsl.com>; Tue, 1 Jul 2014 05:03:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.977
X-Spam-Level:
X-Spam-Status: No, score=-0.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 39tGz1rbl841 for <alto@ietfa.amsl.com>; Tue, 1 Jul 2014 05:03:25 -0700 (PDT)
Received: from mail-ve0-x232.google.com (mail-ve0-x232.google.com [IPv6:2607:f8b0:400c:c01::232]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18A8F1A0180 for <alto@ietf.org>; Tue, 1 Jul 2014 05:03:25 -0700 (PDT)
Received: by mail-ve0-f178.google.com with SMTP id oy12so9494068veb.37 for <alto@ietf.org>; Tue, 01 Jul 2014 05:03:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=Vw2h7RmRjRzNt0ALyOwmNCio7FW0ExMKWf8AGHfSo8w=; b=updc+Tzcdnv4YGFr4ySNI5uJ4vBCyxsTEgoHDPRj+QHEAqVapvBU30KjpDExKjNsCD rQnmP8RJjIQuTZHlffS5UJu5DUHFeAnxj60ltaY9LnSWcjK9hH7IAPp74v9gkoIKVYOA vA3Wv5SKl86RV9Kvc8wk6ZfnHX8rSZqrO4g8x0mOfHIxRdUgt1M3gW3BuudGgbwd7UeY 6Yw1cRM8iIZ0hIJVEiPLR4A3n3/tBcOr6Ga1D3x1GCQj9H8UoIV7HdOiwuotxq7Nmkf7 5oWGt7a+2/uJE4/az83CBZphazGz/ly/TuY8DAyqRIF2Tf285RZiWMiVbUz7UeHVzUDN Qywg==
MIME-Version: 1.0
X-Received: by 10.52.121.52 with SMTP id lh20mr31991933vdb.11.1404216204150; Tue, 01 Jul 2014 05:03:24 -0700 (PDT)
Sender: yang.r.yang@gmail.com
Received: by 10.58.173.102 with HTTP; Tue, 1 Jul 2014 05:03:24 -0700 (PDT)
In-Reply-To: <00b701cf940a$cb5edf90$621c9eb0$@com>
References: <53ADA961.80206@bell-labs.com> <CFD2F7F5.CAD0%repenno@cisco.com> <E33E01DFD5BEA24B9F3F18671078951F65117498@nkgeml501-mbs.china.huawei.com> <45A697A8FFD7CF48BCF2BE7E106F06040BE434A6@xmb-rcd-x04.cisco.com> <00b701cf940a$cb5edf90$621c9eb0$@com>
Date: Tue, 01 Jul 2014 08:03:24 -0400
X-Google-Sender-Auth: feOFSr8vRoabG0IuCzb_0bcLVus
Message-ID: <CANUuoLoF9DWYRYcuh88HGhHmqRLd2q1E+ExypwvO6ayHNt1XMQ@mail.gmail.com>
From: "Y. Richard Yang" <yry@cs.yale.edu>
To: 邓灵莉/Lingli Deng <denglingli@chinamobile.com>
Content-Type: multipart/alternative; boundary="089e0122f0cc09501804fd209045"
Archived-At: http://mailarchive.ietf.org/arch/msg/alto/piSeiJgVI3dltnWYrXJ3_cEq3h4
Cc: IETF ALTO <alto@ietf.org>
Subject: Re: [alto] Potential privacy issue in draft-deng-alto-p2p-ext-01?
X-BeenThere: alto@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Application-Layer Traffic Optimization \(alto\) WG mailing list" <alto.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/alto>, <mailto:alto-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/alto/>
List-Post: <mailto:alto@ietf.org>
List-Help: <mailto:alto-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/alto>, <mailto:alto-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Jul 2014 12:03:27 -0000

On Sun, Jun 29, 2014 at 10:27 PM, 邓灵莉/Lingli Deng <
denglingli@chinamobile.com> wrote:

>
>
> > -----Original Message-----
> > From: alto [mailto:alto-bounces@ietf.org] On Behalf Of Reinaldo Penno
> > (repenno)
> > Sent: Saturday, June 28, 2014 7:55 PM
> > To: Songhaibin (A); Vijay K. Gurbani; alto@ietf.org
> > Subject: Re: [alto] Potential privacy issue in
> draft-deng-alto-p2p-ext-01?
> >
> > I'm not talking about on-demand "available" bandwidth,
> >
> > It is the bandwidth configured in the application. It is a configured
> value. Just
> > take a look at any utorrent client.
> [邓灵莉/Lingli Deng] I am a little bit confused here. If the cap is
> configured in the app, then why would the app's tracker bother to query a
> ALTO server for this value?
> It seems to me that ALTO should be providing more general information that
> would assist a group of applications, rather than a single one. Make sense?
>
>
It makes sense to me. The draft should make it clear that it is configured
cap by the network, which is an upper bound, and can be lowered by others.
As an example use case, suppose ALTO provides the bound. Then a utorrent+
may configure the cap to be, say 60%, of the network cap.

Richard


> > A utorrent client will never use more than that amount of bandwidth, no
> > matter your provisioned bandwidth.
> >
> > ________________________________________
> > From: Songhaibin (A) [haibin.song@huawei.com]
> > Sent: Friday, June 27, 2014 11:09 PM
> > To: Reinaldo Penno (repenno); Vijay K. Gurbani; alto@ietf.org
> > Subject: RE: [alto] Potential privacy issue in
> draft-deng-alto-p2p-ext-01?
> >
> > Hi Reinaldo,
> >
> > Thank you and I think you raised a very good question. I totally agree
> that
> > available bandwidth is more useful than provisioned bandwidth. But
> available
> > bandwidth is rather dynamic, and it is very hard to measure it and
> provide the
> > real-time status to ALTO clients.
> >
> > With providing provisioned bandwidth, it can be seen with a high
> probability a
> > client can select a "better" peer. It is better than random IMO. But if
> there is
> > an easy method to rank the available bandwidth of a peer list, I will be
> very
> > interested.
> >
> > BR,
> > -Haibin
> >
> > > -----Original Message-----
> > > From: alto [mailto:alto-bounces@ietf.org] On Behalf Of Reinaldo Penno
> > > (repenno)
> > > Sent: Saturday, June 28, 2014 1:33 AM
> > > To: Vijay K. Gurbani; alto@ietf.org
> > > Subject: Re: [alto] Potential privacy issue in
> draft-deng-alto-p2p-ext-01?
> > >
> > > Another point is how¹s the provisioned access bandwidth really help
> decide
> > > which peers are better. Today most P2P software allow caps to be put
> for
> > > upload/download and people use it. Some come with a default based on
> the %
> > > of the detect access speed. So, saying a user has 1Gb/s does not
> really mean
> > > you will get better performance when connecting to him(er). I mean, it
> would
> > > more inline with better than random to get the actual bandwidth
> allowed.
> > >
> > >
> > > On 6/27/14, 10:26 AM, "Vijay K. Gurbani" <vkg@bell-labs.com> wrote:
> > >
> > > >[Still as individual.]
> > > >
> > > >On 06/26/2014 05:10 AM, Songhaibin (A) wrote:
> > > >> Sebastian gave an idea that we can use relative numbers to indicate
> > > >> the endpoint's provisioned bandwidth instead of access type, which
> is
> > > >> similar to what we have used to indicate the cost in the alto
> > > >> protocol.
> > > >
> > > >The difference, of course, being that the ISP in some manner consented
> > > >to having a normalized value of cost to be distributed in order to
> > > >allow for better than random selections to improve network
> performance.
> > > >
> > > >In the case under discussion, the issue is does the subscriber consent
> > > >to having their provisioned bandwidth be part of ALTO calculations?
> > > >
> > > >Remember, if the WG decides to go ahead and use provisioned bandwidth
> > > >anyway, it could always do so.  But then we'd better be prepared to
> > > >deal with the eventuality on when (and if) the IESG challenges us on
> > > >this privacy leak.  If that happens, we'd better have a good response.
> > > >
> > > >Perhaps a midway could be to see if we can use the provisioned
> > > >bandwidth for a set of (anonymous) subscribers instead of singleton
> > > subscribers.
> > > >That way, the larger herd provides some modicum of anonymity to an
> > > >individual subscriber who is part of the herd.
> > > >
> > > >Cheers,
> > > >
> > > >- vijay
> > > >--
> > > >Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
> > > >1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60563 (USA)
> > > >Email: vkg@{bell-labs.com,acm.org} / vijay.gurbani@alcatel-lucent.com
> > > >Web: http://ect.bell-labs.com/who/vkg/  | Calendar:
> http://goo.gl/x3Ogq
>