Live data from Hacker News

The journey of an internet packet: Exploring networks with traceroute

sebastianmarines.com

101–110 of 116 posts

Re: The journey of an internet packet: Exploring networks with traceroute

#101
post #36

This is a significantly better technical presentation on how traceroute works[0]; for example, unlike the illustrations in the linked article, traceroute does not necessarily take a symmetrical return path; the return path is hidden from the client -- the client only sees the forward path. [0] https://archive.nanog.org/sites/default/files/traceroute-201...

Traceroute doesn't even show you a path. It shows you a bunch of devices that happened to have a packet when its TTL expired. Every item listed in traceroute's output is a different packet and can take a different path towards the destination. On a different subject, why are people writing blogs about topics that are in the "literature" already?

Hey! What literature would you recommend for learning more about this stuff (routing, firewalls, etc)?

I'm learning as I'm going and my goal is to come up with a way to build secure/beyondcorp/zerotrust-style networks using only existing tools and established tech, unless absolutely necessary.

Tools I'm using include wireguard, iptables, nftables, nginx, ping, traceroute, and nmap.

Which articles, books, authors, or repos must I read and which concepts must I understand?

Trying to find real knowledge about this stuff online is a nightmare!

Re: The journey of an internet packet: Exploring networks with traceroute

#102

Earlier quoted context omitted.

this article is informative but misleading. i do the testing at a big ISP (your packets go over us for at least something). we test traceroute. we complain to vendors when traceroute doesn't work right. we do investigate weird traceroutes.

> your packets go over us for at least something I'm in South East Asia -- are you sure?

I think he meant “us” as ISPs in general.

Re: The journey of an internet packet: Exploring networks with traceroute

#103
Back in the day, all I wanted is to be able to do like Natalya Simyonova in Goldeneye, in the train. I recall during the late 90s there was a (Windows?) programme I knew that did this, based on traceroute/tracert I would suppose. Just a small memory to share here, maybe others had it too :)

Re: The journey of an internet packet: Exploring networks with traceroute

#104

Earlier quoted context omitted.

So it hits the Internet once between Akamai and Google I guess?

I mean, KIND OF, if you squint. From the trace, Akamai and Google have a direct peering link (hop 6 looks like an Akamai edge/peering router -- Akamai owns Linode so that makes sense -- and hop 7 is a Google peering router). For it to be hitting "the Internet" you'd expect to see hops on a Tier 1 carrier like AT&T, Lumen, etc. and/or an ISP like Comcast, Spectrum, etc.

It's still the internet, tier 1 carriers aren't special, they're just big.

Re: The journey of an internet packet: Exploring networks with traceroute

#105

Earlier quoted context omitted.

When everything's happy and packets are flowing as they should, there's absolutely nothing wrong with living at whatever layer of abstraction you wish. But when something is broken, troubleshooting is a different animal. When people make assumptions based on their abstractions, they can waste a lot of time chasing a problem that can't exist, because the abstraction hides several more layers of complexity. Their menta…

Sounds like fun :) You should write up a blog post where you had to debug some weird gnarly issues. A lot of us higher up the tech stack are pretty far removed from the signals level issues you're talking about but would love to hear about a low level debug session!

I would love to read such a blog post as well!

Re: The journey of an internet packet: Exploring networks with traceroute

#106
Trace route has such a nice promise of untangling the internet into its constituent parts. We used it last year in an installation where we physicalised the internet as marble run. You would create a packet for any website, and the visit all the hops one-by-one across their various locations[1].

[1]: https://youtu.be/9uIs0sh4iYU

Re: The journey of an internet packet: Exploring networks with traceroute

#107

Traceroute doesn't see 90% of the machines your packet passes through. When your packet leaves a router at some-pop-some-port-wherever, that fiber isn't usually the same piece of glass that plugs into the next hop. There's a whole chain of amplifiers and possibly multiplexers that handle it between here and there. Some of those provide reliable transport service, giving you the illusion of a fiber that never breaks,…

The OSI model exists for a reason. You don't think about the life of the electrons going through your processors when you code. Traceroute is a view at a certain level of abstraction. It also doesn't tell you if your packet was delivered using ethernet, wifi or a token ring. It just doesn't matter.

OSI was supposed to be a competitor to IP and Ethernet. That's the reason it exists.

Re: The journey of an internet packet: Exploring networks with traceroute

#108
post #25
post #8

It always amazes me in-depth HN gets on pretty much any subject, yet the most basic cursory network page gets massive response Is there simply a total lack of understanding of how networks work in the tech community?

Wait until DNS comes up again. I don't know how many DevOps, SRE, Senior Architects, etc. that I've worked with that just don't understand how names are resolved. There's a wide array of specialists that don't understand general fundamentals.

Personally, I understand the fundamentals until they all change and DNS has had a lot of outgrowths relating to encryption, Email spam prevention, IPv6, etc that have made things a lot muddier for me over time.

Re: The journey of an internet packet: Exploring networks with traceroute

#109
post #85

Traceroute doesn't see 90% of the machines your packet passes through. When your packet leaves a router at some-pop-some-port-wherever, that fiber isn't usually the same piece of glass that plugs into the next hop. There's a whole chain of amplifiers and possibly multiplexers that handle it between here and there. Some of those provide reliable transport service, giving you the illusion of a fiber that never breaks,…

The smart man knows all of these things exist. The wise man understands when these things matter. DWDM protected waves, MPLS, etc, are all out of scope when someone does a traceroute, finds their traffic is going to Europe asks me about it, and then I see a local upstream has picked up Cogent as a transit provider, and Cogent is preferring their customer routes over routes from their Tier 1 settlement free peers. But…

You don't know how many times I've seen people claim that they had two redundant connections, when those connections clearly rode the same conduit across a bridge not half a mile down the road. No, I don't care what your traceroute says, the backhoe knows otherwise.

Re: The journey of an internet packet: Exploring networks with traceroute

#110
post #22

Earlier quoted context omitted.

nothing from that machine, but the way the ttls work, it doesn’t affect the responses from routers along the way. Same if the destination doesn’t exist at all.

Totally untrue. Network admins will often disable traceroute responses because security. Edit: the less someone knows about your internal topology the better. Security through obscurity does work.

I was answering a question about what happens if it is disabled on the destination machine. The destination machine has no say over any other device along the route.
Post reply on HN