Live data from Hacker News

UCLA, Cisco and more join forces to replace TCP/IP

networkworld.com

11–20 of 86 posts

Re: UCLA, Cisco and more join forces to replace TCP/IP

#11
post #5

I wonder if it's just my naiveté however it sounds like this is more likely to produce an X400 than an SMTP. The vision seems pretty grand and all encompassing wholesale replacement of the entire networking stack, rather than small and easy to implement iterative approach. It seems that the biggest thing the TCP/IP folks got 'wrong' was the 32 bit address space, and even that small change is taking forever to be depl…

But it's a great way to sell more stuff.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#13

So if I've understood this correctly, NDN works be giving each piece of content a unique address, instead of stopping at the host? Basically baking a URI into the low-level protocols?

Yes, and the contents can be cached by the routers, so to get a piece of a video you don't need a connection all the way to the source of that video but only to the nearest router that caches it.

That may make sense for content that has few sources and many users, like video (although I think CDN's mostly already solve this problem).

I don't think it makes much sense for interactive data and hence I don't think it's a good basis for implementing all networking protocols.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#14
One of the earliest attempts to replace the the TCP/IP model (or rather the lower layers of the ISO-OSI model) was the Asynchronous Transfer Mode (ATM). Despite being a well-intentioned idea, it failed to see real world usage because of the complexity.

Along the way many developments happened. People learned to live and work with IPv4. Even IPv6 hasn't picked up despite solving some important problems. So when it comes to updating the core networking infrastructure, I don't think TCP/IP is replaceable. It just works very well now -- you can have real time chats, high throughput data lines, has time-tested code libraries, there's vast amounts of knowledge so you can build apps fast and all that.

As I understand, what this 'Named Data Networking' technology is proposing is to replace IP addressing scheme with Names. I'm not sure if the whole internet backbone infrastructure would change it's networking strategy now.

TCP/IP addressing format is very structured and that's its strength. IMHO that's actually how communication should take place; not with names that can have high-variation in format.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#15
post #5

I wonder if it's just my naiveté however it sounds like this is more likely to produce an X400 than an SMTP. The vision seems pretty grand and all encompassing wholesale replacement of the entire networking stack, rather than small and easy to implement iterative approach. It seems that the biggest thing the TCP/IP folks got 'wrong' was the 32 bit address space, and even that small change is taking forever to be depl…

The "forever to be deployed" part is a crucial observation. Perhaps research into how to get the Internet community to adopt new protocols is more relevant than the protocols themselves. In other words: how can we speed up the adoption of IPv6?

Re: UCLA, Cisco and more join forces to replace TCP/IP

#16
post #10

In NDN, all data is signed by data producers and verified by the consumers, and the data name provides essential context for security. Centralizing the concept of security in the network's architecture will create an intractable problem. Certain parties will still want to impose their desire to be able to eavesdrop on the data. Therefore, there cannot be any real security in such centralized design for security. The…

I'm wondering how the proposed security model differs from current practices. What you've quoted doesn't seem different. After all, on the web today, data producers send a certificate which the client "verifies". At least the long list of "CA" names in my browser purports to be "verified" by an "authority".

Maybe the point you're making is exemplified by the news item concerning a security breach that was detected after going on for 13 years. (http://cybertinel.com/wp-content/uploads/2014/09/HARKONNEN-O...)

The part that got my attention was the criminals having fooled users into revealing passwords using certificates purchased from CAs (at a total cost of $150,000).

That seems to mean the current CA system is broken. It's not a big surprise that a centralized security concept is in NDN--Verisign is one of its main supporters.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#17
post #9

> more secure If something is already secure, how can you make it moreso ? What they mean is "less insecure".

Something can be secure enough that the computational power required to break it is probably not available to various actors up to and perhaps including nation-states (e.g. RSA), yet still well short of the "requires more energy to compute than is available in the visible universe" benchmark (e.g. AES, probably). Yet both could still be regarded as "secure".

Re: UCLA, Cisco and more join forces to replace TCP/IP

#18
post #14

One of the earliest attempts to replace the the TCP/IP model (or rather the lower layers of the ISO-OSI model) was the Asynchronous Transfer Mode (ATM). Despite being a well-intentioned idea, it failed to see real world usage because of the complexity. Along the way many developments happened. People learned to live and work with IPv4. Even IPv6 hasn't picked up despite solving some important problems. So when it com…

That is not right, that ATM failed to see real world usage.

ATM was the backbone of the German infrastructure run mainly by German Telekom for years. It provided a very good service especially for telephony (ISDN). Germany basically had the best telephony network in the world.

But the problem is, that IP does not fit with the 55ms time slot in ATM. That is the why all the backbones are replaced with the so-called Next Generation Networks (NGN), which basically is pure IP traffic and everything will be on top of IP, not anymore in parallel to IP. That basically means, moving to VoIP in the backbone and consequently also for the consumer end.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#19
post #9

> more secure If something is already secure, how can you make it moreso ? What they mean is "less insecure".

Something can be secure enough that the computational power required to break it is probably not available to various actors up to and perhaps including nation-states (e.g. RSA), yet still well short of the "requires more energy to compute than is available in the visible universe" benchmark (e.g. AES, probably). Yet both could still be regarded as "secure".

Also, protection against different kinds of attacks. For example, we can consider SHA3 more secure than SHA2, because it's not vulnerable length extension attack. Likewise, a system which protects against passive attacks is secure against passive attacks, but the system which protects against passive and active attacks is more secure than it.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#20
post #5

I wonder if it's just my naiveté however it sounds like this is more likely to produce an X400 than an SMTP. The vision seems pretty grand and all encompassing wholesale replacement of the entire networking stack, rather than small and easy to implement iterative approach. It seems that the biggest thing the TCP/IP folks got 'wrong' was the 32 bit address space, and even that small change is taking forever to be depl…

> It seems that the biggest thing the TCP/IP folks got 'wrong' was the 32 bit address space, and even that small change is taking forever to be deployed.

i guess you are alluding to ipv6 here. and imho, ipv6 provides quite a large number of changes from vanilla ipv4. it is not just a much larger address space...

Post reply on HN