Live data from Hacker News

UCLA, Cisco and more join forces to replace TCP/IP

networkworld.com

71–80 of 86 posts

Re: UCLA, Cisco and more join forces to replace TCP/IP

#71
post #66

I believe what they're proposing is largely the same, if not identical, to Content-Centric Networking from Xerox PARC. The central idea is: Instead of asking one particular server for some content, just ask for the content by name. Since the content may come from any handy server, it is up to the receiver to validate it is really the content he requested. Nothing about this implies the evil "centralized security mode…

Yes, the CCNx was the first implementation of NDN and the NDNx they currently using is fork of it.

AFAIK Parc is still receiving some part of the NSF funding to continue working on CCNx.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#72
post #29

I hope keeping it all patent free / disarmament patent style is a requirement for participation.

I note that patents/"Intellectual Property" wasn't mentioned in the article at all. I suspect, based on the participants mostly being corporations, that the whole thing will be covered by patents. I think TCP/IP as non-patented, slipped by the major corporations. A protocol anyone can implement, and where the "client" and "server" are pretty hard to tell apart, is disadvantageous to market encumbents, and to surveill…

> The protocol to replace TCP/IP will be patent encumbered

If it will be patent encumbered, it will have zero changes of adoption.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#73
post #63
post #50

Earlier quoted context omitted.

> It should mostly concern only network and systems administrators and systems software developers and be largely transparent to end users. I'm no network engineer, but as I understand it, to support IPv6, companies need to replace their switches. I think it's fair to say that there are literally millions of switches that need replacing. We are talking billions of dollars in total investments. I really don't see how…

>companies need to replace their switches. Actually, most Switches are just fine and don't need replacing. IPv6 is a Layer 3 Protocol, most "Normal" Switches operate on Layer 2 (The Ethernet Level, which stays the same and (in the best case) does neither know nor care what goes on in Layers above). These can stay and most wouldn't even need to be reconfigured. As for Layer 3 Switches (The ones that do some amount of…

The most hardship, from experience, comes from the apps, especially the home-grown ones.

Let me back this up with an anecdote from experience in dual-stacking the websites at my employer (a curious reader might notice that cisco.com, download.cisco.com, software.cisco.com, tools.cisco.com, cisco-apps.cisco.com are all dualstack. The last one is interesting because it hosts the ordering portal, with IPv6 being a transport for a non-trivial portion of the hardware orders).

While the main cisco.com was dualstack since v6 launch, the rest of the properties required more work, because there's bazillion different apps there, so were launched just a ~year ago.

And yet despite all the testing, once we've gone live post-testing, we realized there was one bug that slipped through. The name of the error quite especially ironic and the bug, while in a somewhat infrequently used portion, was very visible for IPv6-enabled users.

http://www.gossamer-threads.com/lists/nsp/ipv6/47796 for the full externally visible recount of the matter.

Back then the % of IPv6 users which was accessing the erroring function was low enough that we did not roll back the entire set of changes, and just had the fix developed and deployed, and the whole scenario was relatively painless. (Besides for some semi-friendly beat-up during IPv6 workgroup in RIPE meeting, where this error showed vividly since we had an IPV6-only pilot WiFi SSID along with the usual dualstack)

If the same story were to happen with 50% of IPv6 adoption ? That would hurt way way more.

The moral:

If you're a big shop - start auditing your apps now even if you do not think you need it until 3 years from now. If you're not sure - there's bazillion resources and people available to help, but for free and for money.

If you're a small shop and don't have any apps - RTFM, assess, and JustDoIt(tm), in a staged manner, of course, all disclaimers apply, etc. - the sooner you get a (small) chance to make your mistakes while doing the first steps with IPv6, the cheaper those mistakes will be. Of course best to avoid them, but.

Ok, I'm officially off my "IPv6 soapbox" on this thread, hopefully these were useful to some folks. ;-)

Re: UCLA, Cisco and more join forces to replace TCP/IP

#74
post #63
post #50

Earlier quoted context omitted.

> It should mostly concern only network and systems administrators and systems software developers and be largely transparent to end users. I'm no network engineer, but as I understand it, to support IPv6, companies need to replace their switches. I think it's fair to say that there are literally millions of switches that need replacing. We are talking billions of dollars in total investments. I really don't see how…

>companies need to replace their switches. Actually, most Switches are just fine and don't need replacing. IPv6 is a Layer 3 Protocol, most "Normal" Switches operate on Layer 2 (The Ethernet Level, which stays the same and (in the best case) does neither know nor care what goes on in Layers above). These can stay and most wouldn't even need to be reconfigured. As for Layer 3 Switches (The ones that do some amount of…

> > companies need to replace their switches.

> Actually, most Switches are just fine and don't need replacing. IPv6 is a Layer 3 Protocol, most "Normal" Switches operate on Layer 2 (The Ethernet Level, which stays the same and (in the best case) does neither know nor care what goes on in Layers above).

But these can't do routing, I assume. I think I may have misspoke, and said "switches" when I should have said "routers".

If routers from the last 10 years all support IPv6, that's probably a part of the reason that IPv6 access to Google in the US is 10% IPv6.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#75
post #2

Maybe it's just my nature to be guarded about grand visions, but does this idea really have a good chance of succeeding? Will it displace TCP/IP given the extent of IP deployment around the world? No doubt there are people here who are network experts who can give a more learned review than I can after quickly reading the overview on the website. I have a lot to learn about the subject...

The NDN was designed based on today's most common Internet use cases. If you think about it, most of the time we are requesting content from specific place, but we don't really care where the server is located, what address it has etc, all we care about is the content and whether it comes from intended (trusted) source.

Assuming that the same name always references the same data, gives an edges, because now routers are aware of the data so they now have ability to cache the content locally and when someone else requests the same thing they can just forward what they have without having to ask uplink about it.

It gives an edge in certain use cases. Probably the biggest ones would be YouTube, Netflix etc. There is a lot of effort on TCP/IP network to provide great experience for the user, through CDN, any cast routing, and other tricks, with NDN you already have network that is very friendly and makes CDN unnecessary as long as you design your protocol in such way that you utilize network's properties. Another nice advantage is on lossy networks like wireless ones. For example when you requesting content which goes through many hops if there if the response was dropped, thanks to caching it can be resend from the same point it was dropped without having to go back to the source. This might also help in such network when the consumer is on the move. NDN also has some nice properties, if for example certain name is set up in such way that can be shared by multiple parties, then it is possible to implement a chat without need of any server, which is quite cool.

Given these benefits the NDN is a two edged sword though, while it makes content publishing to many people simple it makes certain tasks harder. For example implementing something like ssh over it might be a bit difficult. In fact anything that benefits from pushing data/request (simple example from one of the project - controlling lighting infrastructure) will be complex. It is still possible to implement but it is harder to do than in TCP/IP.

As for adaptation, it is hard to say. It definitively won't be easy. The protocol is not a drop in replacement for TCP/IP everything needs to be reinvented again. You can possibly convert existing applications to work with it, and in fact it should be possible to carry TCP/IP over NDN but then you're losing all of the nice properties of the protocol. Some things would work better, for example stripping TCP/IP and having HTTP protocol implemented on top of NDN. Some people already created NDNHTTP gateway.

On the other hand it could be extremely beneficial with specific use cases we are somewhat struggling with, like multicasting of video. One strong point of it is that the protocol can be implemented on top of TCP/IP, and in fact that's how NDN testbed is (or at least was when I was there) implemented currently. The adaptation goal is to have a network built on top of TCP/IP and as it grows and is big enough eventually the TCP/IP layer below will collapse and NDN will take its place. That's of course assuming the NDN will handle all of our needs that will make TCP/IP unnecessary, otherwise it'll be just an overlay network. They also try to avoid other mistakes of IPv6 and concentrating on making it attractive not just technically but also from a business perspective. That's why they are also partnering with vendors.

Source: I actually was involved in NDN between 2010 and 2012. And know people mentioned in the article in person. One of my projects was video streaming over NDN.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#76
post #10

In NDN, all data is signed by data producers and verified by the consumers, and the data name provides essential context for security. Centralizing the concept of security in the network's architecture will create an intractable problem. Certain parties will still want to impose their desire to be able to eavesdrop on the data. Therefore, there cannot be any real security in such centralized design for security. The…

No, the protocol does not impose central authority for data signing, it is up to the application to do this.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#77
post #36

Umm.. how about let's NOT replace TCP/IP with anything because it's may be the only well-designed thing on the Internet that actually works? If you want an impossible super-hero project to work on, try replacing HTTP instead - at least you'd actually be solving a problem.

The people who are involved in NDN had also huge part in making the current TCP/IP work.

For example Van Jacobson, whom started the idea and made huge contributions, one of them was implementing congestion control in TCP/IP. Some people don't know but in early 90s the Internet actually collapsed under the traffic and was practically unusable until his fix.

Lixia Zhang for example was working on TCP/IP since 1981 she was responsible for Resource ReSerVation Protocol (RSVP), which is implemented by almost every major router vendor today for Internet resource management and traffic control applications.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#78
post #27

Earlier quoted context omitted.

That is absolutely true but the main driver behind the replacement is the increased address space. None of the other changes seems to have been a driver at all. So as far as the consumers go IPv4 is 'good enough' and if and when IPv6 will finally take over it will remain the de-facto world wide networking protocol used to power the internet for a very very long time. Cisco attempting to drive a wedge between IPv4 and…

I don't know that they're trying to drive a wedge between IPv4 and IPv6. I would think that even NDN's supporters see it as a very long-term, post-IPv6 development. I am surprised however to see Cisco supporting this. It's one thing to have some academic networking specialists writing papers about NDN, but for a major corporation to devote resources to a 10+ year development project with an unproven architectural bas…

Cisco was involved with it since at least of 2012. They actually wrote software in the protocol as well. It was for video conference if I recall correctly.

Re: UCLA, Cisco and more join forces to replace TCP/IP

#79
post #75
post #2

Maybe it's just my nature to be guarded about grand visions, but does this idea really have a good chance of succeeding? Will it displace TCP/IP given the extent of IP deployment around the world? No doubt there are people here who are network experts who can give a more learned review than I can after quickly reading the overview on the website. I have a lot to learn about the subject...

The NDN was designed based on today's most common Internet use cases. If you think about it, most of the time we are requesting content from specific place, but we don't really care where the server is located, what address it has etc, all we care about is the content and whether it comes from intended (trusted) source. Assuming that the same name always references the same data, gives an edges, because now routers a…

Most of the time we do care about (not!) exposing information to third parties. This even applies to generally lower-importance scenarios such as watching YouTube and Netflix videos.

ISPs are of special importance, because the exposures can be concentrated. We make use of end-to-end encryption with specific servers in order to reduce the information that ISPs (and others) acquire. How will we hide interest data from ISPs in an NPN world?

Re: UCLA, Cisco and more join forces to replace TCP/IP

#80
post #71
post #66

I believe what they're proposing is largely the same, if not identical, to Content-Centric Networking from Xerox PARC. The central idea is: Instead of asking one particular server for some content, just ask for the content by name. Since the content may come from any handy server, it is up to the receiver to validate it is really the content he requested. Nothing about this implies the evil "centralized security mode…

Yes, the CCNx was the first implementation of NDN and the NDNx they currently using is fork of it. AFAIK Parc is still receiving some part of the NSF funding to continue working on CCNx.

The ideas are related, but the codebase is now separate: http://named-data.net/2014/08/25/first-public-release-ndn-fo...
Post reply on HN