Re: [dtn-security] Newbie seeking some security related advice

"Graham Keellings (Leonix Solutions Pte Ltd)" <Graham@LeonixSolutions.com> Tue, 09 June 2009 05:58 UTC

Received: from sky.fastbighost.net (sky.fastbighost.net [76.76.22.153]) by maillists.intel-research.net (8.13.8/8.13.8) with ESMTP id n595w3nJ018811 for <dtn-security@maillists.intel-research.net>; Mon, 8 Jun 2009 22:58:04 -0700
Received: from dyn98-b60-access.superdsl.com.sg ([202.73.60.98] helo=[192.9.200.138]) by sky.fastbighost.net with esmtpa (Exim 4.69) (envelope-from <Graham@LeonixSolutions.com>) id 1MDuDe-0000aS-JQ; Tue, 09 Jun 2009 01:49:59 -0400
Message-ID: <4A2DF7FD.5020104@LeonixSolutions.com>
Date: Tue, 09 Jun 2009 13:49:49 +0800
From: "Graham Keellings (Leonix Solutions Pte Ltd)" <Graham@LeonixSolutions.com>
Organization: Leonix Solutions Pte Ltd
User-Agent: Thunderbird 2.0.0.21 (X11/20090409)
MIME-Version: 1.0
To: redi@bbn.com
References: <89E48AE60E64EF4E8EB32B0B7EC74920A1B0F5@EVS-EC1-NODE2.surrey.ac.uk> <4A12195A.6000207@LeonixSolutions.com> <3A5AA67A8B120B48825BFFCF5443856137E0B06196@NDJSSCC03.ndc.nasa.gov> <4A1DD73F.50000@bbn.com> <023601c9df2a$694fd5b0$3bef8110$@com>
In-Reply-To: <023601c9df2a$694fd5b0$3bef8110$@com>
Content-Type: multipart/mixed; boundary="------------010300070906010207070007"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - sky.fastbighost.net
X-AntiAbuse: Original Domain - maillists.intel-research.net
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - LeonixSolutions.com
X-Source:
X-Source-Args:
X-Source-Dir:
Cc: dtn-security@maillists.intel-research.net
Subject: Re: [dtn-security] Newbie seeking some security related advice
X-BeenThere: dtn-security@maillists.intel-research.net
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: DTN Security Discussion <dtn-security.maillists.intel-research.net>
List-Unsubscribe: <http://maillists.intel-research.net/mailman/listinfo/dtn-security>, <mailto:dtn-security-request@maillists.intel-research.net?subject=unsubscribe>
List-Archive: <http://maillists.intel-research.net/pipermail/dtn-security>
List-Post: <mailto:dtn-security@maillists.intel-research.net>
List-Help: <mailto:dtn-security-request@maillists.intel-research.net?subject=help>
List-Subscribe: <http://maillists.intel-research.net/mailman/listinfo/dtn-security>, <mailto:dtn-security-request@maillists.intel-research.net?subject=subscribe>
X-List-Received-Date: Tue, 09 Jun 2009 05:58:05 -0000

Jason Redi wrote:
> Minor comment to Armando's email:
>
>   
>> -----Original Message-----
>> From: dtn-security-bounces@maillists.intel-research.net [mailto:dtn-
>> security-bounces@maillists.intel-research.net] On Behalf Of Armando
>> Caro
>> Sent: Wednesday, May 27, 2009 8:14 PM
>> To: Ivancic, William D. (GRC-RHN0)
>> Cc: dtn-security@maillists.intel-research.net
>> Subject: Re: [dtn-security] Newbie seeking some security related advice
>>
>> Ivancic, William D. (GRC-RHN0) wrote:
>>     
>>> I believe DARPA is using DTN for voice networks but I believe the
>>>       
>> disruption is expected to be very quick fades and the like or perhaps
>> that voice simply will not make sense at certain times.
>>
>> I believe you are referring to the work that BBN is doing for the DARPA
>> WNaN program. For this program, we run IP over DTN and use VoIP without
>> modifications to the VoIP application. We are using the BPA as a
>> forwarding engine that works in both connected and disconnected
>> scenarios. VoIP traffic (and other delay sensitive traffic) are only
>> routed/forwarded to destinations that are currently connected, since
>> VoIP doesn't make sense for disconnected destinations. If a node
>> receives VoIP traffic for a disconnected destination, the traffic is
>> dropped.
>>     
>
> As Armando describes, we are currently using streaming voice over BP.
> Individual packets contain 20-100ms of voice, so sending those individual
> buffers in an individual disrupted fashion would not make a whole lot of
> sense.  
> Note that we are also working on providing voice-snippets of 1-10s
>   
Wow! That surely *is* delay tolerant (if not disruption tolerant). You 
have to wait until you have collected 10 seconds of voice at the sender 
before transmitting. That guarantees a lag of over 9 seconds at the 
receiver, or 18+ seconds to get a reply to a question.

I think that I need to rethink :-)   Or,  at least, we can say that such 
delay might be acceptable in some scenarios, but not in others. Nasa 
might have no choice, given the lag inherent in very long range 
transmissions, but I doubt that DARPA can accept multi-seconds delays in 
combat scenarios.

I am looking at a "real time" voice network, where it has been strongly 
"suggested" that I use DTN, but I am thinking that all that it will 
bring to my particular use case is that I don't have to worry about 
"link lost" for a short time bringing down the call.  My personal feel 
is that DTN is not the right tool for the job for a mainly voice based 
short range system where speed of reply is of the essence. I don't see 
that the benefits justify it, but then I don't get to make the decision 
(and if I recommend against it, I probably don't get the contract. Sigh)

Thank you very much for taking he time to reply and for helping me to 
clarify my thoughts.

With best wishes,

Graham


> that could be sent in a disrupted fashion over the network.  But ultimately
> that's just data like any other bundle.  The only real "work" there is in
> the application, not the BP.   
>
> The key point is that voice can either be streaming as little snippets or
> buffered as a big blob.  If it is a big blob, it's just another bundle.  If
> it is streaming, then one needs to make sure you have a BPA/router that adds
> only a minimal amount of additional overhead to the forwarding process.  (as
> Armando says below)
>  
>   
>> One important take-away from this work... the motivation of DTN is to
>> support delay/disrupted scenarios and apps that can operate in that
>> regime, but it is possible to implement a DTN stack that can also deal
>> with time-sensitive traffic.
>>
>> Armando
>> _______________________________________________
>> dtn-security mailing list
>> dtn-security@maillists.intel-research.net
>> http://maillists.intel-research.net/mailman/listinfo/dtn-security
>>     
>
>
> _______________________________________________
> dtn-security mailing list
> dtn-security@maillists.intel-research.net
> http://maillists.intel-research.net/mailman/listinfo/dtn-security
>
>   


-- 
Technical Director
Leonix Solutions (Pte) Ltd
18 Boon Lay Way
#09-95 TradeHub 21
Singapore 609966
Telephone:+65 6316 9968
Fax: +65 6316 9208