Some Thoughtsabout

Vulnerabilities & Resilienceof the

Internet Today

Daniel KarrenbergChief Scientist, RIPE NCC

Daniel Karrenberg, July 2012

Who is talking: Daniel Karrenberg• 1980s: helped build Internet in Europe

– GUUG, EUUG, EUnet, Ebone, IXes, RIPE, ...• 1990s: helped build RIPE NCC

– 1st CEO: 1992-2000• 2000s: Chief Scientist & Public Service

– Trustee of the Internet Society, IETF, ...• 2010s: Chief Scientist

– Interests: Internet measurements, stability, trust & identity in the Internet, ...

2

La perfection est enfin atteinte, non pas lorsqu'il n'y a plus rien à ajouter, mais lorsqu'il n'y a plus rien à enlever.

Antoine de Saint Exupéry

Le Conseil a souligné que l'indépendance de l'UE à l'égard des approvisionnements externes constituait la clé de voûte de son action. ...Certains pays dépendent d'un fournisseur unique, ce qui les rend vulnérables aux interruptions d'approvisionnement.

And now for something completely different ...

Several layers down ...

In fact down to DNS, since this is an AFNIC event.

Daniel Karrenberg, July 2012

DNS Root Name Server Locations

22

Daniel Karrenberg, July 2012

k.root-servers.net: Locations

23

The computing scientist's main challenge is not to get confused by the complexities of his own making.

       E. W. Dijkstra

25

RIPE Atlas Probes

13

Daniel Karrenberg, July 2012

k-root: Instance ID

26

Daniel Karrenberg, July 2012

k-root: Instance ID

27

Daniel Karrenberg, July 2012

k-root: Serial Numbers

28

And you believe inserting more stateful elements into the network will make things easier, more resilient and safer ?

        Unnamed Network Architect

The cheapest, fastest, and most reliable components are those that aren't there.

        Gordon Bell

Questions?