Slashdot Mirror


UC Irvine Cracks Down on P2P

grendel20 writes "After years of dialup, one thing I was looking forward to the most about college was the fast ethernet connection. Upon arriving at UCI though, I found my kazaa speeds to be way below subpar. Apparently, UCI has limited access for all P2P programs with this fine piece of hardware. Now what do I do?" Whether you agree with what UC Irvine is doing or not, I do applaud them for publicizing and being straightforward about it. Upstream entities can implement these sorts of controls without telling users, and it's tempting to do so because it will reduce the number of user complaints.

32 of 549 comments (clear)

  1. Cry like a baby by Anonymous Coward · · Score: 3, Funny

    That's what you can do.

    Sucks that the college is using it's bandwith for education, eh?

    1. Re:Cry like a baby by TheCarp · · Score: 3, Insightful

      Ok.... I will answer pretending that you go to the University I work for... The problem isn't YOU sucking down MP3s and movies. Its not even everyone else doing it. Its you SHARING them.

      You may notice that accessing someone elses PC on the network here goes pretty quick, but loading a web page is slow. You may try to ssh in from outside and find that slow.

      Why?

      Because inbound or internal bandwidth isn't a problem at all... its outbound. Its not the people AT the university using the network... its the people outside who are finding the stuff you are sharing and downloading it that are causing the vast majority of the bandwith usage.

      All in all the answer, which I hate to give, is that people at dorms need to stop with the offering to the world of files on p2p systems. The bandwith usage is too great and it does most certainly hinder other peoples use of the network.

      Your tutiton and that of your fellow students "pays" for the network (actually your tuition may pay for alot less than you think, the life blood of most Universities is the endowment, some schools could even run off it and not charge Tuition, Harvard being one example)

      Sharing MP3s with the world is essentially allocating resources to people not in the University community. Now I don't mean to say thats bad or there is no good in doing it, however, when it becomes the single largest use of bandwith and interferes with others use of resources... then something bad is certanly going on.

      Now here, rate limiting is defense of our network as the traffic caused by p2p filesharing is causing some of the routing equipment to run right up against its max capacity, and thats not a good way to be. If we try to throw more bandwith at it, we will just be more attractive to people downloading, and usage goes up to utilize the bandwith... rate limiting is the only scenario with a win there.

      So the next time you can access across the boarders of your own network with reasonable speed, be glad p2p is rate limited. And the next time you can downlaod something via a p2p, again be glad that it wasn't shut off completely.

      Bandwith is a limited resource... students need to learn to share it and use it wisely.

      -Steve

      --
      "I opened my eyes, and everything went dark again"
    2. Re:Cry like a baby by macdaddy · · Score: 3, Interesting
      Yes and no. The problem isn't just with users sharing files. It's also has a great deal to do with them downloading files. Not from a piracy/copyright standpoint but from bandwidth standpoint. P2P consume an ungodly amount of network bandwidth if left unchecked. I have yet to run across a P2P app that can limit the speed at which it downloads. I've yet to run across a run of the mill user that can set up QoS on their local desktop to limit how much their system consumes. P2P is a major problem. Frankly we universities don't give a damn if you download copyrighted material. We do give a damn when a handful of users collectively consume all availabe I1 resources, costing us big $$ in fatter pipes.

      How do I know all this? This is the job I do. I spent all of yesterday and this morning working on a Packeteer Packetshaper 4545. We don't block P2P. That's not the stance we felt we should take. We do however greatly limit the amount of bandwidth P2P applications can consume. We allot more to P2P after business hours. It's really interesting to watch response times plummet when I reboot the PS. For about 20 seconds, ping times climb to 800-1000ms. If I disable bandwidth shaping (which I did for about 10 minutes this summer to make a point during a meeting about the PS) P2P apps climb to the top and sufficate everything else. I can tell you that every regent's Unv in my state that is using a PS is severely limiting the amount of outbound bandwidth that's alloted to applications like P2P. Here at this Unv I give a average priority of 3 to all traffic classes that have known uses on campus. I set the default priorities to 2. I then raised the priority on HTTP and FTP to make them more responsive. I also gave a high priority to terminal emulators like SSH, telnet, and tn3270. Time sensitive applications like NTP and DNS were given a higher then average priority. I use garunteed partitions on different classes or groups of classes to kick start them or limit their consumption. It has worked extremely well for us.

      P2P is a major thorn in our collective sides when it comes to the network. I don't think it should be blocked. I don't think that at all. I've gone to great lengths to ensure that it isn't entirely blocked and that other applications have the resources they need. I do think it needs to be kept under control so it doesn't hurt everyone else, those few students that actually use their connections to research and learn. Users that try to get around our bandwidth shaping by setting up tunnels to their buddies cable modem, using NNTP, HTTP, or FTP simply aggravate us and push closer to charging per megabyte transferred. I hope that day never comes.

  2. So what's the problem? by Clue4All · · Score: 5, Interesting

    They're allowing your to pirate music, movies, and software. Most schools block all P2P programs and that's the end of the story. What could you possiblye be complaining about?

    --

    Is your browser retarded?
    1. Re:So what's the problem? by McCart42 · · Score: 5, Insightful

      It's not about "piracy" - it's about bandwidth being a limited resource, plain and simple. If they didn't use packetshaping, other services would be slowed down or made unusable. They've reached the limit of offcampus bandwidth. It's at a point where they're saying: "what do we cut" -- and P2P traffic is the first to be limited. It's the best solution, since it uses up 99% of the bandwidth to begin with anyway. What, would you rather slow down webpage requests to increase bandwidth?

      There is simply no way to allow for everyone using P2P and keep a usable network at the same time, without increasing costs. I've seen what happens when Napster overloaded our network, and after they applied packetshaping the usability was 100% better. And during off-peak times, Napster speeds went back up, so you could still do your downloading in the mornings.

      --
      "I may be quite wrong." - Socrates
    2. Re:So what's the problem? by cscx · · Score: 3, Insightful

      My school used to do this (not anymore, but its bound to be back). The packetshaping was done by user IP address -- when you surpassed a 24-hour limit, you started to have packet loss to the Internet (not campus servers).

      The statistic about 10% of the users using 90% of the bandwidth is correct. It's not fair to everyone else.

  3. Study by HuguesT · · Score: 3, Funny

    That's what you have to do now. It's For Your Own Good (tm).

  4. Device by siliconshock.com · · Score: 5, Informative

    Packetshaper Actual Device.

  5. Freedom versus usage by cadfael · · Score: 5, Insightful

    Sounds like UC Irvine is trying hard to balance the freedom of the Internet (they aren't stopping you from downloading via P2P) versus the needs of the academic campus (sorry, getting the latest rip of Brittney just isn't as important to academia as you think). Its a pretty nice solution without a moral judgement. As Michael points out, they are straightforward about it, and their arguments are cogent. Its a good solution to a real world problem.

    --
    -- The Hollow Man
    Non illegitimati carborundum
  6. Right on. by nougatmachine · · Score: 4, Interesting

    University of West Florida does just this-they have a firewall that completely blocks all P2P software ports. Kazaa, gnutella, whatever, it just doesn't work. I think I have the only solution - get Timbuktu installed on my home computer, remotely download files from my cable modem and then upload to my college box. Ta-da!

    1. Re:Right on. by El+Kevbo · · Score: 5, Funny

      You *are* aware that people from UWF (other than students) read Slashdot too, right? :)

      Kevin Guidry
      UWF ResNet Coordinator

  7. Says it all... by chill · · Score: 5, Insightful

    "In the past, about 2% of the residents would use over 90% of the available bandwidth causing slowdowns and poor performance for everyone." ...

    "We found that over 50% of the network traffic leaving the housing network headed out the Internet was from one single file sharing application. """ ...

    " 1. All network traffic to/from any UCI computer, web site or server is untouched. There are no controls and no need to shape this, as it is "educational" traffic. Further, as it does not go to or from the Internet, we don't have to pay for it. As long as it stays within the UCI network, we can take advantage of the high-speed connections and equipment we have on campus."

    My congratulations to UC Irvine. This sounds like an excellent solution.

    --
    Learning HOW to think is more important than learning WHAT to think.
  8. High Tuition sucks by Darth_brooks · · Score: 5, Funny

    Bandwidth costs. Irvine might not care whether or not you spend you nights looking for that bootleg edit of "a walk to remember" or the deleted scenes from "crossroads", they do care about that formerly phat T3. You pay for that bandwidth in tuition (As well as for the rest of the campus' utilities.)

    You complain about kazaa (with all of it's lovely spyware) being slow. The rest of campus was probably complaining about *everything else* being slow.

    Here's a tip: go to school to get an education. Or at least leave your dorm room once a month. Download speeds become irrele....er... not as important once you discover girls and beer.

    --
    There are some people that if they don't know, you can't tell 'em.
    1. Re:High Tuition sucks by ninewands · · Score: 4, Insightful

      I agree. I'm an admin at a large university and I've seen the damage P2P does to our network. It doesn't materially slow down on-campus commections because we have a fiber backbone. However, we have a limited bandwidth (big limit, but it's a limit) connection to the internet (I don't have access to our i2 connection, darnit).

      DURING BUSINESS HOURS (read, when the student body is supposed to be in class) some 40% of our BACKBONE bandwidth is taken up by P2P running between the dorms. Personally, I'd like to see all that traffic blocked at the layer 3 switches, but that will not happen in an academic environment.

      The net result is that if I connect to my Linux box at home to perform a security test on a Unix box at work (you're not testing unless you're attacking from an uinauthorized host), I have a terminal with a frame rate problem ... . I can literally type 6-10 keystrokes faster than the packets can get through the network. In addition, I occasionally have to download 3-4 isos (new Linux/FreeBSD/Solaris version). A year ago, before they moved the dorms to the new backbone, it was a piece of cake ... I could DL a 3 CD-image set for Solaris in about an hour. Now, it's an overnight job (if I'm lucky).

      In short, quitcherbitching ... there are people on campus who have a productive use for the bandwidth ... the fact that UCI is permitting ANY P2P is (in my mind) a very tolerant step. If I had my way, I'd block it all.

      (and yes, I am one of those terribly libertarian slashdotters, but the ownership of a resource implies the right to control it's use)

  9. Interesting... by TheOnlyCoolTim · · Score: 4, Interesting

    The number 1 point there seems an encouragement to set up an in-college P2P system...

    This would be a great feature for P2P developers to add - the ability to first search an internal network for your file before resorting to a search of the wider internet.

    Tim

    --
    Omnia vestra castrorum habetur nobis.
    1. Re:Interesting... by Psx29 · · Score: 4, Informative
      This would be a great feature for P2P developers to add - the ability to first search an internal network for your file before resorting to a search of the wider internet.

      The GPL-licensed gnucleus gnutella P2P client has a version specifically for this.

      From the site: "Gnucleus LAN - If your college blocks gnutella use this to create an internal network for you and your friends. General rule is if you can play network games over your school network, gnucleus will also work. This version can be run on the same computer as the internet version."

    2. Re:Interesting... by cheeserd00d · · Score: 3, Informative

      that's exactly what we do here at my school, rochester institute of technology...we used to have a direct connect hub over internet2 with other i2 schools but then it got to the point that us on the direct connect hub were using 90% of the i2 bandwidth.

      solution: blocked i2 traffic thereby keeping it all internal...there were already enough users from our school that it didn't make too much a difference, and the more people that heard about it the more that got on....now we have an insanely fast DC hub just on the internal network where you can find just about anything!

      --
      Two wrongs don't make a right, three lefts do!
  10. What he really meant by Frac · · Score: 5, Funny

    (Tongue in cheek of course) ;-P

    grendel20 writes "After years of using dialup (because I'm too cheap for cable/DSL), one thing I was looking forward to the most about college was not the girls, not the college experience, not the beer, and DEFINITELY not the higher level of education, but the saturating of the fast ethernet dorm connection by downloading things I'm too cheap to pay for. Upon arriving at UCI though, I found my freeloading movie/porn/software experience to be subpar. Apparently, UCI has limited access for all P2P programs with this fine piece of hardware. Now what do I do? Go out and not sit in front of my computer?!?!?!?!"

  11. What other schools and students have done (both go by DaHat · · Score: 5, Insightful

    At my school, Dakota State University in Madison South Dakota, every time unusually large amounts of traffic showed up on non standard ports, the school would throttle it down with their packet shaper. This was fine and dandy until students realized this and changed the port used to the one port that no school would throttle, that's right, our good friend 80.

    This has caused an even bigger problem because the school sees the dorms using obcene amounts of bandwidth on 80 and to control it they have limited the dorms to just 5 megabits. In theory that is fine, until you count 800 students in the dorms and there being 13 megabits of pipe for this school. The Packet Shaper has destroyed the ability of students to use the internet from their rooms as it causes huge latency, in the order of 4.7 seconds at most (that I've seen) and averaging around 2 seconds (yes, seconds). Normal programs can't handle such latency and send out more and more requests while thinking the earlier packets were lost. P2P programs on the other hand have no problem dealing with large latency.

    Speaking as a student who is suffering because of the P2P abuse of others, be good, if you use the P2P stuff don't leave it on and be responsible otherwise the school may crack down on the students harder then you ever thought was possible.

    P.S. To make this post I am connecting to the internet via an old dial up modem as it is faster then the connection in the dorms, my school was once rated as the 8th most wired college in the nation by Yahoo... oh how the mighty have fallen.

  12. Packet SHapers by Dark-One · · Score: 5, Interesting

    This is very widespread. I am the network admin at a small college, most places I talk to have a packetshaper in place to limit bandwidth. We bought ours this summer so we could reopen the P2P networks. Boy am I regetting this. We went from totaly blocked last year to slightly above dialup speeds this year and I have never heard the end of it. Usualy showing people the graph that shows our uplink at 97% 24hrs a day stops people from complaining but not always. What most students don't understand is that bandwidth is limited, very limited, and they are not the only ones using the network. When we have an outage I don't usualy hear from students first its from faculty who cant work on their research. I do applaud them for being so upfront about the bandwidth controls, but I would be interested to hear from their Admins as to how much this has helped their network. I know from my personal experance that it has prevented our network from just grinding to a halt.

  13. Well, at least you admit it.. by CBNobi · · Score: 3, Insightful

    After years of dialup, one thing I was looking forward to the most about college was the fast ethernet connection.

    Sorry, but tough. Just like what happened at USC, they have every damn right to do so.

    Perhaps you should start looking for other positive things about universities - like, maybe, a higher education?

  14. Resx (etc.) by Sgs-Cruz · · Score: 3, Interesting

    At McMaster U. (Hamilton, ON, CA) they use a program called ResX. Think of KaZaA (in fact, suspiciously EXACTLY like Kazaa...) except it only works on the LAN. Think DivX DVD-rips in 40 seconds, 5-meg MP3s in 3 seconds. Now that's tasty.

    McMaster actually paid a company to write a Kazaa-clone that would only work on the LAN. It was cheaper than bandwith-shaping the Internet pipe. However, I doubt all universities will do this.

    My recommendation to you is to find other P2P people and set up a Direct Connect hub or something similar. Make it only avaialbe to people within the university.

    Good luck!

    -cruz

    --

    Karma: pi (Mostly due to circular reasoning in posts).

  15. I wish my school had that... by fireboy1919 · · Score: 3, Insightful

    So there I am...up at 3AM trying to work on my homework, which involves doing research.

    Naturally, I'm looking at IEEE XPlore, which lets me see nearly the entire archive of IEEE papers in PDF format over the internet.

    So I start the download...and it goes at 5kb/sec. Its like I'm on a modem. Why? Because a few people in my dorm are wasting my time uploading music and software illegally.

    Later, I go out to my class and realize that I forgot to put my homework on my school account. So I start up an sftp session and start downloading it. But it goes at BYTES per second. Why? Because people in my dorm are wasting my time sharing music and software.

    Why don't you have some curtesy for your fellow students and stop wasting their time when you waste yours? The internet at school is not for your personal enjoyment; its so that you can be a better student.

    I left the dorms and got a house, and now I'm using cable modem in a neighborhood almost without students (which means without file-sharing). Even though the cable company has less total bandwidth than the school, latency is down and connection speeds are up compared to living in the dorm.

    --
    Mod me down and I will become more powerful than you can possibly imagine!
  16. Glory be by Frothy+Walrus · · Score: 3, Insightful

    Can you believe this shit? Complaining that they can't spooge Gnutella packets all over the network 24 hours a day. Meow meow.

    I have a box on a popular dorm network in Cambridge, MA. The net had become basically unusable because P2P file-sharing programs were chattering all the time. Even ssh connections to my machine were sluggish. Then the school decided to rate-limit the P2P traffic to 1Mbps. All problems vanished.

    Free ethernet is a good thing. If you're at a hip school you may even be able to run servers on your machines. Recognize a good thing when you've got it!@

  17. You have no right to fuck up my connection by browser_war_pow · · Score: 5, Interesting

    I don't use P2P, but the majority of the students at my university seem to. Our connection isn't worth a damn most of the time as a result. The method used to "block" P2P is to go after users who download XMB per time period. So I get a citation for downloading 5 Linux ISOs which are legitimate downloads especially since I am a CS major, but the assholes who download MP3s, DivXs, etc on a regular basis get a free ride. So far I am one of only handfull of people I know that has been given such a citation. And yes, it is the P2P users' fault and they should lose their connections for an entire semester. If it weren't for them, the university would never have had to implement such stupid regulations.

  18. So Buy Your Own Connection by mgbastard · · Score: 3, Funny

    You have several options for your right to steal! You can continue to use Kazaa or Gnutella: you just need to find somebody willing to proxy your connection across the internet who is willing to blow their bandwidth on your connection. Look into ssh port forwarding. Don't expect to actually find somebody more willing to do this than your university. You could find some OTHER variety of electronic theft protocol. There are several out there, far more advanced, and some even more time consuming than even the common Peer to Peer services. (Hard to believe!) But isn't gnutella fun!

    --
    Anyone seen my low uid? last seen 10 years ago while panning the #@$# out of Taco's 'web based discussion system'
  19. Re:No moral judgement? by Idarubicin · · Score: 5, Insightful
    Bravo for UC Irvine if they can avoid getting sued for what they're doing, but they are most certainly making a moral judgement.

    Er. Sued? UC Irvine is just enforcing the terms and conditions of their student internet use policy. I haven't seen it, but I'm sure they've got one, and I'm nearly positive it looks like the ones any other university has. They're not censoring anything; they're not blocking anything. They're just prioritizing.

    You want fast and cheap internet access? You accept their terms. You want to use university resources? Fine. Use them for academic purposes. Shocking. The administration will even wink and nod at some 'personal' use. Sensible. It means that people won't be trying nearly so hard to get around restrictions.

    Value judgement? Well, sort of. Some would call it setting priorities. The campus pipe is only so wide. Does first call on that bandwidth go to people who are reading journal articles, sharing experimental results, and--heaven forbid--learning? Or does it go to the guy in the room down the hall who's too lazy and too cheap to go out to rent a copy of The Matrix?

    In the majority of workplaces that I have experienced (and most have had an academic slant) as well as my university, network administrators have cared not one little bit about what I did with surplus bandwidth. As long as you don't screw things up for people doing real work--that's all that matters.

    --
    ~Idarubicin
  20. Why can't this be solved financially? by King_TJ · · Score: 3, Insightful

    Originally, colleges and universities had fast Internet connections because they were really the only users other than government and research labs. As the net got commercialized, everyone seemed to get used to the idea that those fast connections should stay there for *all* manner of usage by students, including arbitrarily hosting file servers.

    It seems to me that with cable modems and DSL typically only costing $40-50 per month - it's not that big of a deal to give each interested student their own such connection, and roll the cost into their tuition.

    Leave the University T1 or T3 for internal use only (faculty and actual classrooms), and of course, leave some sort of ftp type file service active - so students can submit legal files to it if they need to distribute something (like an open-source program they wrote themselves?).

    Any student who would whine and complain about this arangement is probably just hoping to run a high-speed server without ponying up the cash for the bandwidth - and that's not what college is all about.

  21. Re:I wonder if they'll get sued by anthony_dipierro · · Score: 3, Insightful

    Not *everything* on P2P is copyrighted materials.

    That didn't save napster.

  22. Re:What other schools and students have done (both by Kunta+Kinte · · Score: 3
    This has caused an even bigger problem because the school sees the dorms using obcene amounts of bandwidth on 80 and to control it they have limited the dorms to just 5 megabits.

    that was a mistake on your netadmin's part for two reasons

    (i) As someone else said, they could have still filtered traffic based on the protocol, or even class of protocol, it does not matter what port it's on. The packetshaper inspects the contents of the data portion of the TCP packet and determines the protocol from there. ( btw. the linux kernel has packet shaping code built in as well )

    (ii)While using the shaper we found an interesting problem. Throttling creates a shit load of traffic inself. When the packet is throttled TCP resets and timeouts increase, the more traffic you're throttling, the more 'protocol overhead' traffic you will see. That traffic alone is enough to bring a network to its knees. This is likely what you're seeing.

    Shaping can only do so much, the more you try to squeeze a large pipe using shaping, the more protocol traffic is generated, hence the more inefficent it gets.

    --
    Based on upvotes, Ageism is the only "-ism" Slashdotters care about and think isn't SJW
  23. Do what we used to do... by aquarian · · Score: 3, Insightful

    Instead of clogging everyone else's pipes, why don't you do what we all used to do, back in the stone age of the early 80s- walk down the hall, borrow a friend's LP or CD, and make a copy! We all had to tape them (yeah, I know barefoot through the snow, blah blah). You guys can rip and burn CDs in minutes.

    Go on, it'll do you some good. Get off your fat, geek asses. Make some friends, interact for real, and actually SHARE some music.

  24. We are looking at the same thing at U of A by Sycraft-fu · · Score: 3, Interesting

    We have 2 Packeteer 8500s now and are probably going to start using them soon. Instead of limiting P2P traffic to a specific amount, we'll probably just use the priority feature, P2P traffic will have a lower priority than all other traffic. So long as the links aren't full, the traffic will not be affected, but if the links start maxing, the Packeteers will start slowing P2P traffic, allowing the other traffic to continue at its normal pace.

    Personally, I think it's a really good solution, I don't think banning P2P outright is good since it DOES have legitimate uses and people will always work around a ban in some way or another BUT it can be a real strain at times.

    The priority feature the Packeteers offers is great because if it works as advertised (and it seems to) you don't have to be a jerk and set any real hard limits on anything, you can just set up a prioity scale so that the important stuff always gets what it needs.