Some Thoughtsabout
Vulnerabilities & Resilienceof the
Internet Today
Daniel KarrenbergChief Scientist, RIPE NCC
Daniel Karrenberg, July 2012
Who is talking: Daniel Karrenberg• 1980s: helped build Internet in Europe
– GUUG, EUUG, EUnet, Ebone, IXes, RIPE, ...• 1990s: helped build RIPE NCC
– 1st CEO: 1992-2000• 2000s: Chief Scientist & Public Service
– Trustee of the Internet Society, IETF, ...• 2010s: Chief Scientist
– Interests: Internet measurements, stability, trust & identity in the Internet, ...
2
La perfection est enfin atteinte, non pas lorsqu'il n'y a plus rien à ajouter, mais lorsqu'il n'y a plus rien à enlever.
Antoine de Saint Exupéry
Le Conseil a souligné que l'indépendance de l'UE à l'égard des approvisionnements externes constituait la clé de voûte de son action. ...Certains pays dépendent d'un fournisseur unique, ce qui les rend vulnérables aux interruptions d'approvisionnement.
And now for something completely different ...
Several layers down ...
In fact down to DNS, since this is an AFNIC event.
Daniel Karrenberg, July 2012
DNS Root Name Server Locations
22
Daniel Karrenberg, July 2012
k.root-servers.net: Locations
23
The computing scientist's main challenge is not to get confused by the complexities of his own making.
E. W. Dijkstra
25
RIPE Atlas Probes
13
Daniel Karrenberg, July 2012
k-root: Instance ID
26
Daniel Karrenberg, July 2012
k-root: Instance ID
27
Daniel Karrenberg, July 2012
k-root: Serial Numbers
28
And you believe inserting more stateful elements into the network will make things easier, more resilient and safer ?
Unnamed Network Architect
The cheapest, fastest, and most reliable components are those that aren't there.
Gordon Bell
Questions?