[Ecn-sane] ECN usable with UDP paper

[Ecn-sane] ECN usable with UDP paper

[Bruno George Moraes]

[-- Attachment #1: Type: text/plain, Size: 833 bytes --]

https://csperkins.org/publications/2015/10/mcquistin2015ecn-udp.html

Using measurements from the author’s homes, their workplace, and cloud
servers in each of the nine EC2 regions worldwide, we test reachability of
2500 servers from the public NTP server pool, using ECT(0) and not-ECT
marked UDP packets. We show that an average of 98.97% of the NTP servers
that are reachable using not-ECT marked packets are also reachable using
ECT(0) marked UDP packets, and that 98% of network hops pass ECT(0) marked
packets without clearing the ECT bits. We compare reachability of the same
hosts using ECN with TCP, finding that 82.0% of those reachable with TCP
can successfully negotiate and use ECN. Our findings suggest that ECN is
broadly usable with UDP traffic, and that support for use of ECN with TCP
has increased.

[-- Attachment #2: Type: text/html, Size: 1177 bytes --]

Re: [Ecn-sane] ECN usable with UDP paper

[Dave Taht]

On Mon, Sep 24, 2018 at 11:18 AM Bruno George Moraes <brunogm0@gmail.com> wrote:
>
> https://csperkins.org/publications/2015/10/mcquistin2015ecn-udp.html
>
> Using measurements from the author’s homes, their workplace, and cloud servers in each of the nine EC2 regions worldwide, we test reachability of 2500 servers from the public NTP server pool, using ECT(0) and not-ECT marked UDP packets. We show that an average of 98.97% of the NTP servers that are reachable using not-ECT marked packets are also reachable using ECT(0) marked UDP packets, and that 98% of network hops pass ECT(0) marked packets without clearing the ECT bits. We compare reachability of the same hosts using ECN with TCP, finding that 82.0% of those reachable with TCP can successfully negotiate and use ECN. Our findings suggest that ECN is broadly usable with UDP traffic, and that support for use of ECN with TCP has increased.
> _______________________________________________
> Ecn-sane mailing list
> Ecn-sane@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/ecn-sane

Yep. So my follow-on questions are:

Would a NTP reflection attack be worse with ecn enabled?
Should ntp servers accept ect marked packets in the first place? If
so, what, if anything, should they do with a CE?


-- 

Dave Täht
CEO, TekLibre, LLC
http://www.teklibre.com
Tel: 1-669-226-2619