Slashdot Mirror


DARPA Aims to Redo the Internet Protocol

Xaleth Nuada writes "The Defense Advanced Research Projects Agency's (DARPA) is looking to redo the entire Internet Protocol. With the DoD increasingly adopting network-centric warfare the shortcomings in the current IP have become resoundingly clear. Everything works fine for static hardwired networks. But not for dynamic wireless ones. The benefits for your average geek? How about REAL wireless networking? Easier network set-up? Increased wireless security protocol? Increased reliability in sending information?" Don't forget massive incompatibility and upgrade hassles. :)

119 of 389 comments (clear)

  1. DODgy by name and nature ? by Space+cowboy · · Score: 5, Interesting

    Given the scale of the re-work proposals (replacing the Von-Nuemann architecture...), I'd be surprised if there wasn't some effort made to embed snooping and tracing into all packets transmitted. This *is* the DoD after all!

    On the other hand, given how slowly IPv6 is making its way into the wider world, we probably don't have too much to worry about for the time being!

    Simon

    --
    Physicists get Hadrons!
    1. Re:DODgy by name and nature ? by Anonymous Coward · · Score: 5, Funny

      You're right. It's a good thing they weren't involved in setting up our current system.

      Seriously, if they are going to rework it they better do something about the SPAM.

    2. Re:DODgy by name and nature ? by spreadthememe · · Score: 5, Insightful

      It seems more likely that DARPA would create a protocol free from built-in snooping for fear that such a feature could be used by the enemy.

      While governments in general are guided by the will-to-power, militaries (at least the US military) are fairly well driven by readiness and victory. It doesn't seem likely that they would create such a vulnerable technology.

    3. Re:DODgy by name and nature ? by Dr.+Bent · · Score: 4, Insightful

      I'd be surprised if there wasn't some effort made to embed snooping and tracing into all packets transmitted.

      If the purpose of this redesign is to better allow the armed forces to communicate on the battlefield, I highly doubt that they will embed snooping and tracing into the protocol. The military takes great pains to ensure that thier communications are kept secure, and having a secret backdoor in their entire communication system (no matter who controls it) is not something they would tolerate.

    4. Re:DODgy by name and nature ? by Tassach · · Score: 4, Insightful
      Wow, a relevant first post

      It is in the DoD's self interest to make a communications protocol be as resilient and secure as humanly possible. Secure and reliable communications are the cornerstone of the modern military. A built-in insecurity in a comm system can and will be exploited by an adversary just as readily (if not more so) as an unintentional one.

      --
      Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
    5. Re:DODgy by name and nature ? by beacher · · Score: 5, Funny

      Heh.. the article is titled "DARPA Takes aim at IT Sacred Cows"... Love it. They rewriting the stack so that India can't connect? Is this the answer to outsourcing?

    6. Re:DODgy by name and nature ? by Attaturk · · Score: 2, Insightful

      If the purpose of this redesign is to better allow the armed forces to communicate on the battlefield, I highly doubt that they will embed snooping and tracing into the protocol. The military takes great pains to ensure that thier communications are kept secure, and having a secret backdoor in their entire communication system (no matter who controls it) is not something they would tolerate.

      Well, no but you don't need to put in backdoors to retain ultimate control of a network. Would you want the world to be forced to use a network that is authoritatively maintained by the Pentagon? I'm not American for one thing (nor's the 'Net btw) and therefore I particularly wouldn't like to host my websites on Don Rumsfeld's network nor even a global network that his boys designed to his spec.;-) I'd end up trusting it about as much as I trust him and there's no prizes for guessing how much that is.

      Think GPS. It's publicly and commercially available but the moment that shit starts going down, resolution for 'public' customers is throttled and the world is suddenly forced to remember that the USAF has the keys.

    7. Re:DODgy by name and nature ? by The+One+and+Only · · Score: 2, Insightful

      The military is, but DARPA is, among other things, the birthplace of Total Information Awareness. I wouldn't trust DARPA.

      --
      In Repressive Burma, it's not just your connection that dies. slashdot.org/comments.pl?sid=314547&cid=20819199
    8. Re:DODgy by name and nature ? by Dravik · · Score: 5, Insightful

      I'd like to point out that the internet your using right now came from DARPA doing the same thing in the 70's. If you don't want an internet that runs on protocols initially devised by the US military then you better unplug now.

      --
      The purpose of language is communication, If the idea is clear the grammar ain't important
    9. Re:DODgy by name and nature ? by gowen · · Score: 3, Insightful

      Funded by the US military != devised by the US military. Most of the present protocols were designed by guys who wouldn't know which end of an M16 was the dangerous one.

      --
      Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
    10. Re:DODgy by name and nature ? by ave19 · · Score: 5, Insightful

      I think you might be wandering into tin-foil-hat land here.

      They're talking about creating a networking standard we could all use to build our own networks. The specs will be open, like AES. (Or, do you believe that AES has some backdoor that lets the US military decrypt your private bits?)

      I don't see any similiarity with GPS. That's a military controlled network of hardware, on which, we civilians are allowed to tag along. It's not public or commercial in any way. Nobody had any illusions about that, well, except maybe you.

      -ave

      --
      ...or maybe not.
    11. Re:DODgy by name and nature ? by DarkSarin · · Score: 2, Insightful

      It's interesting that your not american, given your sig.

      As much as some people here who aren't american complain about us being involved in world matters (whether we should or shouldn't), I think that is just as important that they not muck in ours! If you want John Kerry as Prez, then come over here, become a citizen and VOTE! Elsewise, you are politely reminded that this is not your democracy, it is ours.

      I tend to agree that the US shouldn't be mucking around overseas for the most part, but I don't think a policy of Isolationism is a good idea either. I think the situation is much more complicated than any of us realize.

      --
      "We don't know what we are doing, but we are doing it very carefully,..." Wherry, R.J. Personnel Psychology (1995)
    12. Re:DODgy by name and nature ? by AshtangiMan · · Score: 3, Informative

      Its interesting to me that DoD is targeted in this way (ie, we can't trust DoD, DoD = Big Brother, etc). This is a little OT, but this is just wrong headedness. Replace DoD with perhaps CIA, or the administration, or the military industrial complex (which is the industry that feads of the DoD teat) and I'd agree. But DoD, and the services especially are the last place youd find the neo facist attitudes that lead to a big brother world. This is of course my opinion, but having worked in many areas of DoD, and with many high ranking soldiers, I was always pleased at how enlightened and compassionate these people are.

    13. Re:DODgy by name and nature ? by the_mad_poster · · Score: 2, Informative

      IP's job is not to know anything about the data it's transmitting. IP specifically disavows any knowledge of what it's carrying in fact, as it's ONLY concern is moving datagrams from one place to another.

      That's the beauty of an n-tier system of protocols. One protocol says "okay, I do this and nothing else - you want something else, it's your responsibility to do it, not mine". For example, IP doesn't care if a datagram gets lost. In fact, IP doesn't even require an ICMP message to go back in the event that, say the TTL hits zero (the gateway that notes the 0 TTL "may" send an ICMP message back noting that the datagram timed out). TCP, on the other hand, doesn't worry about how to transmit the data. But one thing it does is keeps track of the datagrams that are sent and resends them if they get lost or mangled on the wire.

      --
      Alito: A vote for Alito is a punch in the eye to put that bitch back in her place!
    14. Re:DODgy by name and nature ? by Deekin_Scalesinger · · Score: 2, Insightful

      The OSI seven layer model and the DoD four layer model (now I'm thinking about seven layer taco dips darn it) was one of the most interesting things I ever studied in terms of putting pieces together. The ability to have seperate layer handle different aspects from packing to acknowledgement to physical delivery at once made sense and gave me insight into how computer "stuff" is put together in a group effort. I first learned this seven or so years ago and still remember it fondly as the first area that advanced my knowledge of computers to a deeper level (and something I really enjoyed learning about). Anyone who is interested in computers at all should at least take a look at one of these models - IMHO, it is an example of how computer "stuff" needs to work together aside from being at times disparate, and working in conjunction to accomplish a task.

      --
      "As the intrepid kobold companion continues his journey, he begins to wonder... if priests raises dead, why anybody die?
    15. Re:DODgy by name and nature ? by schon · · Score: 3, Funny

      do you believe that AES has some backdoor that lets the US military decrypt your private bits?

      If it does, my wife will be pretty upset - she believes she's the only one with access to my private bits.

      If it's true, the US military better look out - never underestimate the power of a jealous woman with PMS.

  2. arf by Renraku · · Score: 5, Funny

    "Don't forget massive incompatibility and upgrade hassles."

    I read that as:

    "Don't forget about the sudden explosion of extended-temp jobs flooding the market as the Internet decides to change over..."

    --
    Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
  3. And I just... by Anonymous Coward · · Score: 5, Funny

    Upgraded to IPv6. Sigh.

    1. Re:And I just... by gstoddart · · Score: 2, Insightful

      While this is funny, it does raise the issue ...

      If DARPA tries to change the protocols and nobody listens to them the IPv4 infrastructure will remain just like it has. I don't exactly see much of a shift to IPv6

      Do you think that the rest of the world is going to adopt a new protocol because the US DoD tells them they should??

      --
      Lost at C:>. Found at C.
    2. Re:And I just... by hardburn · · Score: 3, Informative

      is the IP address still fixed-length?

      Yes, at 128-bits. Variable-width addresses would bog down routers, because now they have to parse the length out of the packet. With fixed-width addreesses, it's just an XOR and bit shift, or maybe an lookup in an array of bytes (depending on what the implementers did their work). 128-bits is absurdadly huge (on the order of the number of atoms in the universe), so nobody worries about running out.

      "there are sixteen trillion addys, but my entire workplace gets one - why?"

      IPv6 ISPs are required to give each customer an entire subnet to themselves (a /48, IIRC). That gives you 2**80 addresses to play with--several powers more than there are available IPv4 addresses.

      Is the god-awful port-numbering system still there?

      Ports are handled by higher-layer protocols, like TCP or UDP. Neither IPv4 or IPv6 have an concept of what a port is. I imagine, though, that a string-based port system would be too computationally expensive on high-traffic hosts and routers.

      --
      Not a typewriter
    3. Re:And I just... by buysse · · Score: 2, Insightful
      1. A large fixed-length address (128 bits) should be sufficient for a significant amount of time. You won't catch me saying that "it's all we'll ever need," but it supplies an extremely large number of addresses for each person on the planet.

      2. You have just described the Sun RPC portmapper, which has been shown to be a bad idea. You have just advertised what your host offers, and made it extremely difficult (with current firewalling techniques) to allow a given service from the outside, as it may be on any numeric port (assuming you're sane and use default-deny). Besides that, whose headache are you saving? Most users don't know what a port number is, nor do they need to. They run their web browser, put in the hostname, and it goes to the well-known port number for http. Why should I have to explain even a port name to my father?

      Besides, given ports are named with strings, on the client side. Check out /etc/services on a UNIX[-like] system, or the equivalent file on Windows (IIRC %SystemRoot%\etc\services or similar). Yes, they're fixed to a well-known port number, but there are good reasons for that.

      --
      -30-
    4. Re:And I just... by TheRaven64 · · Score: 2, Interesting
      Do you think that the rest of the world is going to adopt a new protocol because the US DoD tells them they should??

      Yes, actually. Very few modern conflicts are fought by a single country on a given side, and interoperability is the name of the game amongst allies. In a recent (well, last 10 years) conflict, Supply issues meant that one of the forces on our side ran very low on ammunition. Other allied armies stationed in the same place had a surplus, but because of incompatibilities they were of no use. Now scale that up to the command and control infrastructure. It's vitally important that you use the same protocols as you opponents, since good communication is key to any kind of modern strategy. If the US military starts to use this, then other NATO countries will as well. Once the military is using it, then the rest of the government will start to as well (after all, the government needs to give orders to the military). Next, the civil service and corporations which have to deal with the government. Finally, individuals who need to deal with the corporations or government.

      --
      I am TheRaven on Soylent News
    5. Re:And I just... by mwood · · Score: 2, Insightful

      The U.S. isn't rushing toward IPv6 because it wasn't ready in MS Windows yet. That will probably change when Longhorn comes out. Maybe even as soon as XP SP2.

  4. Protocol 7? by Anonymous Coward · · Score: 4, Funny

    They'd best be careful, or this "Protocol 7" will inadvertently cause data from dead people to leak to the Internet...

  5. Keeps me in work! by IAmTheDave · · Score: 5, Funny

    Don't forget massive incompatibility and upgrade hassles. :)

    Yeah man, but massive incompatability and upgrade hassles are what keep some of us employed! GO DARPA!

    --
    Excuse my speling.
    Making The Bar Project
    1. Re:Keeps me in work! by peragrin · · Score: 4, Funny

      Ahh I see you have your shiny MSCE out on the wall as well.

      You know there's this thing called linux that will make your life easier. :->. Instead of massive incompatibility and upgrade hassles, you get to spend hours compiling it your self, but it will work.

      tis a joke people get a life

      --
      i thought once I was found, but it was only a dream.
  6. Roll out date? by RevDobbs · · Score: 5, Funny

    And when will this new Internet Protocol be rolled out...

    shortly after IPv6 adoption?

    I don't see Satan reaching for his winter parka just yet...

    1. Re:Roll out date? by Tassach · · Score: 3, Insightful
      FYI, the Internet was created by DARPA. Better stop using it now, otherwise the evil military will get you, even if you're wearing your tin foil hat.

      --
      Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
    2. Re:Roll out date? by Misch · · Score: 2, Funny

      Satan is still in Buffalo. Considering it's about 25 F and snowing there, I'll bet he's reaching for his winter parka.

      --

      --You will rephrase your request for me to go to hell. Goto statements are not acceptable programming constructs
    3. Re:Roll out date? by bhp · · Score: 2, Interesting
      When the original internet was designed, federal laws placed all research funded by the government, including DoD, into the public domain. This let universities and businesses use and develop the internet source code free of charge. It was mainly the universities that popularized the new technology.

      Since then the laws have been changed to give intellectual property rights to the company that develops a new technology, even when funded by the government. This could be a roadblock to rolling out any new internet, since the public will not have access to the technologies, and business may have a hard time convincing potential customers to give up their perfectly good installed systems for a new one.

      Moreover, the DoD limited the speed with which the original internet was adopted by restricting it to non-commercial uses only. Adoption accelerated after Congress passed a law transfering the project to the NSF and explicitly allowed commercial use.

      So without intervention by congress, this new internet may never amount to more than another research project at DARPA.

    4. Re:Roll out date? by MarkedMan · · Score: 3, Informative

      I know this "Al Gore created the internet" joke was meant as a mindless throw-away, but it is so emblamatic of the dark side of our culture of elitist sarcsam that I'm going to waste Karma here by trying to correct it.

      A little searching would show you what really happened. There are many, many sources available, this one is from salon.com (http://dir.salon.com/tech/col/rose/2000/10/05/gor e_internet/index.html)
      Gore never claimed to have "invented" the Internet. What he said was: During my service in the United States Congress I took the initiative in creating the Internet. ...
      Several of the people who could claim to have "invented" the Internet, or key pieces of its protocols -- in particular, Vinton Cerf and Robert Kahn -- are out there on the Net today defending Gore, asserting that he was the politician in Washington who took the "initiative" to support the Net in its early days. ...
      It took social engineers as well as software engineers to build the Net. And that may be why the response to Gore's original statement was so savage: Not because his claim was a lie, but because it was a truth that a lot of people today are trying to forget or bury.

      The Internet didn't spring full-blown out of some scientists' heads, nor did it just grow, like some techno-Topsy powered by the mysterious magic of the marketplace. It emerged from the world of government-subsidized university research, and every step of the way along its passage from academic network to global information infrastructure was shepherded by the state. As the Net's parent, the government didn't do everything right; but it managed to nurture the network through its youth -- then get out of the way once it was mature enough to move out of its parents' digs and shack up with private industry.

      Libertarians and conservatives are uncomfortable admitting this. Their vision of Net history is a stirring saga of markets overwhelming states, technological imperatives vanquishing stifling bureaucracies and free information "routing around" government blockages. There's some truth in this vision -- but it's only part of the story. ...
      Libertarians typically believe that the government can't do anything right, and they prefer to forget or ignore the part government has played in the Net's triumph. Giving Gore credit means admitting the government's role; distorting and mocking his claims helps deny it.

  7. Other key benefits by Anonymous Coward · · Score: 3, Insightful

    Easier activity tracing, easier monitoring, easing censorship of "bad" websites, easier disabling of internet access to undesirables.

    1. Re:Other key benefits by LostCluster · · Score: 4, Insightful

      Easier activity tracing, easier monitoring, easing censorship of "bad" websites, easier disabling of internet access to undesirables.

      That gives as much as it takes. If it's harder to by anonymous online, then that also means it's going to be easier to locate and disable the access of spammers and pedophiles.

      Accountability tools are very good things when properly applied. The hard part is making sure they're not abused.

    2. Re:Other key benefits by HTH+NE1 · · Score: 3, Insightful

      easing censorship of "bad" websites

      "[W]e must absolutely have some mechanism for assigning network capabilities to different users...."

      Which is synonmous with "removing network capabilities from".

      They know they want to restrict certain classes of users from being able to produce services and restore the imbalance of controlled producers and restricted consumers.

      --
      Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
    3. Re:Other key benefits by micromoog · · Score: 2, Insightful

      You seem to be in favor of anonymity, then you tout "** AC's at -6 **" in your sig. Hypocrisy, perhaps?

  8. IPv6 by RAMMS+EIN · · Score: 2, Insightful

    A new Internet Protocol? Isn't that called IPv6? They put a lot more security features in that time; if they need more now, why didn't they get it right back then? And what should convince me that they will this time?

    Now, off to RTFA.

    --
    Please correct me if I got my facts wrong.
    1. Re:IPv6 by RAMMS+EIN · · Score: 2, Interesting

      ``Now, off to RTFA.''

      or so I thought, but TFAHBS (The Fine Article Has Been Slashdotted). Anyway, some more thougts:

      The claim seems to be that IP isn't suitable for mobile (ad hoc?) networks. But how can it not be? Basically, the fields that matter are the destination address and the length. I think that those are necessary and sufficient for communication. Source address could also come in handy if you want to hear if something went wrong. I don't see how this would be suitable for static networks but not dynamic ones. Or how it would be more vulnerable to cyberwarfare than an alternatives. I mean, it reveals the recipient (I think for some protocols you don't need to have a valid source address), but how else would you get the packet delivered?

      Now, if this were about deficiencies in TCP or the routing system as it is employed, I would agree there are some. But we needn't redo IP, I think.

      --
      Please correct me if I got my facts wrong.
  9. REAL Wireless Networking by wed128 · · Score: 2

    what does it mean by REAL Wireless networking? isn't 802.11 wireless? i'm confused...

    1. Re:REAL Wireless Networking by TykeClone · · Score: 2, Insightful

      Isn't 802.11 the "physical" layer of the network. IP is still carried over that.

      --
      A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
    2. Re:REAL Wireless Networking by cfradenburg · · Score: 2, Informative

      802.11 is a wireless add on to IP. What they are talking about here is a protocol that is built with wireless in mind, not an add on. Dynamically changing where you are connected comes to mind (the signal from this tower/satelite is stronger now) as well as tracking location. Before everyone put on their tinfoil hats keep in mind this is the military; they have a legitimate desire to know where their troops are. Which isn't to say that other branches of the government would use it for something different.

    3. Re:REAL Wireless Networking by LostCluster · · Score: 4, Informative

      It's time to go back to basic networking class...

      The OSI Networking Model is a 7-layer system that can be used interchangably, layers run on top of each other... for example, HTTP specifies that it use TCP which wraps around IP over any physical protocol. It doesn't care if you're using WiFi or a hardwired connection.

      So, what this is saying is that IPv4, and even IPv6 are protocols that were written with wires and not wireless in mind. There are tweaks that can be made to the next version of the Internet Protocol and maybe even TCP and UDP to make them work better when on wireless without giving too much up when used on a wired physical link. This is the process of figuring out what changes should be made for next time.

    4. Re:REAL Wireless Networking by Frennzy · · Score: 2, Interesting

      No, it's not a wireless add on to IP.

      802.11 is a signaling protocol, and it relates to layers 1 and 2 of the OSI model. IP exists at layer 3.

      As far as 'email' having assured delivery, why would you have to muck with the whole stack to do this? Just write a better email engine and client software.

      The beauty of the OSI model is that you can do whatever the heck you want at any given layer, without having to change the other layers. Each layer has a specific, defined, well known input/output method (template, if you will)...between that input and output you could transmogrify data any way you want....it doesn't matter...so long as you output it to the next layer in the expected manner.

      USE the OSI model to your advantage, Mr. Government Geek.

    5. Re:REAL Wireless Networking by pavon · · Score: 2, Informative

      Try seemlessly switching between access points, while maintaining a connection to another server. You can't because with IP you are assigned an address based on your upstream provider which can't float from network to network. If you are using an application protocol like HTTP you don't notice that much because you open a new connection everytime you request a page. But if you are using something like ftp or streaming video, you drop connection when switching access points and thus IP addresses.

      I can see a lot of military applications for a true wireless protocol. In fact most all of miltary applications I can think of would require it to work reliably.

  10. DARPA brought us the original by auburnate · · Score: 3, Insightful

    DARPA did help lay the foundations for the Internet. They may be in a good position to bring positive innovation to the IP protocol. Just as long as enough of us /.ers can see through any hidden embedded packet sniffing credit card stealing email reading we're watching you protocols, we should be GREAT.

  11. This could be really interesting by HullBreach · · Score: 5, Insightful

    Im a former Marine myself, and I fondly remember what a nightmare it was just trying to get everyone to have the same crypto loads for existing voice communications hardware. Im really curious as to how they propose to keep the network secure. On the other hand, the possible benifits are huge. Distributed sensor networks in particular could be revolutionized by this.

    --
    "Hand me the bullet-shooty-thing and a box of little hurts" -Overheard on a USMC Rifle range
  12. Transport layer protocol revamp? by Gunfighter · · Score: 2, Interesting

    Perhaps they can include, as a side project, a revamp of some of the transport layer protocols. How about something to replace SMTP with a protocol designed to help lessen the wide-spread proliferation of Spam? Perhaps we should all just switch to Jabber and get rid of that whole email thing.

    --
    -- Stu

    /. ID under 2,000. I feel old now.
    1. Re:Transport layer protocol revamp? by Anonymous Coward · · Score: 4, Insightful

      SMTP is not a transport-layer protocol. TCP and UDP are the most common transport-layer protocols that ride over IP - although many others exist.

      There are certainly some valid arguments for looking at other transport protocols (the lack of mobility features in TCP/UDP, for instance), but SMTP is not one of them since it's an application-layer protocol.

  13. Sounds like a good idea, but.... by Anonymous Coward · · Score: 5, Funny

    Let's just all pray the military dosn't call this SKYNET.

  14. YAY! by Roger+Keith+Barrett · · Score: 2, Insightful

    Yay! Sounds like a great idea... get the government involved with solving all the technical problems.

    Watch congress get involved! Watch how the project ends up championed by the "experts" at Microsoft (because they pay the dough and it's the only name the congressdrones know). Watch how the whole project ends up propritary and billg forces the government to pay $50 per node. Finally.. watch how the whole system ends up unreliable... so we end up with a system that is not free, expensive, and less reliable than before.

    Keep the government out of the center of it... let them contribute to the community like everyone else and MAYBE we will get something that works that everyone can use without selling their soul.

    --

    Why don't you embrace your slashbotness instead of living in a dreamworld?
  15. Oh no, my backward compatability! by blunte · · Score: 4, Funny
    Don't forget massive incompatibility and upgrade hassles. :)

    Yeah, heaven forbid we learn from our previous attempt and start fresh. We should aspire to do like Microsoft - maintain backward compatability above all other goals. Seems to work for them, right? It certainly makes things more secure...
    --
    .sigs are for post^Hers.
    1. Re:Oh no, my backward compatability! by lambent · · Score: 2, Insightful

      In the bygone halycon days of the internet, there was no problem in saying, "Okay, suckers, we're switching over at midnight, no ifs, ands, or buts. Anyone not adopting the new protocol will be screwed." (ie, the universal adoption of tcp/ip in 1982 and the debut of the dns system in 1983). That worked then because there weren't millions of people in every country depending of this thing for their livelihood. Alas, you can't do that anymore. Things will break. LOTS of things will break if you tried that now. Sure, it might be possible to coordinate an effort to completely switch everyone over (for the sake of argument; i don't actually believe this), but can we afford the days, weeks, or months of instability while everyone in the world tries to cope with ironing out the wrinkles introduced by a forced, non-compatible upgrade?

      And don't forget ... the whole point of the internet in the first place was to connect very many disparate networks, so that they could all communicate with each other even if they didn't use the same hardware or protocols. There must be a certain degree of compatibility in any replacement.

  16. Ad-hoc networking and IPv6 by Jugalator · · Score: 2, Interesting

    Well, one of the improvements IPv6 does is better support for ad-hoc networking. Are they saying we need something even better than what that?

    Or are they just talking about IPv6? IPv6 is just that -- Internet Protocol version 6.

    --
    Beware: In C++, your friends can see your privates!
  17. Article Text by Anonymous Coward · · Score: 4, Informative

    DARPA takes aim at IT sacred cows

    By Joab Jackson
    GCN Staff

    ANAHEIM, Calif.--Now that the Defense Department is embracing network-driven warfare, it is taking a hard look at radically improving, or discarding altogether, some fundamental computer and network architectures.

    Flaws in the basic building blocks of networking and computer science are hampering reliability, limiting flexibility and creating security vulnerabilities, program managers said this week at the Defense Advanced Research Projects Agency's DARPATech conference.

    Among the IT holy grails that DARPA wants to see revamped are the Internet Protocol, the seven-layer Open Systems Interconnection model--which defines how devices communicate on today's networks--and the von Neumann architecture, the basic design style underpinning almost all computers built today.

    Many military commanders have been slow to adapt IT for critical tasks because they sense the equipment is unreliable, said Col. Tim Gibson. He is a program manager for DARPA's Advanced Technology Office, which is leading efforts to radically redefine computer architecture.

    "You go to Wal-Mart and buy a telephone for less than $10 and you expect it to work," Gibson said. Yet people usually do not expect the same of their computers. "We don't expect computers to work, we expect them to have a problem."

    "If a commander expects a system to have a problem, then how could they rely upon it?" Gibson said.

    Gibson cast some of the blame on the packet-based nature of Internet Protocol, which was not designed for foolproof delivery of messages. The protocol cannot guarantee delivery of e-mail, for instance.

    "The packet network paradigm probably needs to change," Gibson said. "I'm not advocating throwing out the Internet Protocol completely, but we must absolutely have some mechanism for assigning network capabilities to different users and that capability has to scale to large numbers of devices automatically. The commander wants to be able to send a message and have it delivered, completely, accurately and on time."

    Another limitation with the IP approach is the inability to dynamically build networks. The military wants to quickly set up ad hoc networks.

    "Static networks are no good for tomorrow's battlefield, because everything will move around all the time," Gibson said. "What we need is dynamic scalability. Today's networks are stationary and have a static infrastructure that provides service to static end-nodes. Moving the node outside its standard service area requires reconfiguring something. Moving infrastructure always means reconfiguring something."

    As a result, DARPA wants to fund development of new protocols or enhancements to the existing IP that will allow nodes, such as computers, to automatically sign on to networks in their vicinity.

    Another aspects of the networking that DARPA wants to revise is the seven-layer OSI stack, long held as the basic foundation for building network protocols.

    The OSI model was not designed for wireless communications devices, said Reggie Brothers, a DARPA program manager.

    "The OSI model served us pretty well for the stable, predictable world of wireline communications," Brothers said. "Mobile networks are nothing like that. They are unpredictable and highly variable. We need to think of different layers of the stack to relate to one another directly, like a mesh, instead of one level up to the next."

    The increased complexity of the network stack would let nodes enter a network quickly and without human intervention, Brothers said.

    The von Neumann architecture will also come under scrutiny from DARPA.

    "It is time to ask the harder questions about the ways of computer architecture we've been using for the past 30 years. Is it time to scrap the von Neumann architecture?" asked Anup Gosh, program officer for the Advanced Technology Office.

    This architecture, which defines the basic essential parts of

  18. Hello DOD by IamGarageGuy+2 · · Score: 2, Insightful

    Can somebody try to tell these guys it's a little too late to put the genie back in the bottle. We can't change SMTP to stop spam and they want to change the whole TCP/IP thing. Good luck changing it in the next 30 years.

    --
    Stay tuned for new sig...
    1. Re:Hello DOD by Alan+Cox · · Score: 2, Insightful

      It does have "clueless" all over it, from the idea of reliable delivery (little hint - its provably mathematically impossible even with two way links) outwards. And the idea of non packet networks would be fun on a wireless link to say the least

      Ad-hoc secure networks are an intriguing little problem area and I can see them wanting those to work. You want instant communication between vehicles but you don't want anyone else joining in. Sounds a lot like the mesh-net stuff like locust already does really..

      Non von neumann machines are already big research areas, including quantum and analog computing of course.

      Unfortunately its hard to tell whether someone took good information and "moronized" it for mass consumption, or it was provided by the DOD in clue free format originally.

  19. TUNNELING! by mekkab · · Score: 2, Interesting

    stop complaining- it'll work on the old IP systems via tunneling. Was that really so hard?

    --
    In the future, I would want to not be isolated from my friends in the Space Station.
  20. Re:DARPA Aims to Redo.... by e9th · · Score: 5, Insightful

    Please, anything that's not encumbered by *anybody's* IP patents.

  21. I'm sure the adaptation will just breeze along by atomly · · Score: 3, Insightful

    just like it has for IPv6.

    People will only upgrade if it's absolutely painless or absolutely necessary, we should've learned this by now. I have friends that still use analog cell phones, just because it's easier not to switch.

    --
    -- atomly :: atomly(at)atomly(dot)com :: http://www.atomly.com/
    1. Re:I'm sure the adaptation will just breeze along by kcurtis · · Score: 3, Insightful

      But DARPA in this case probably cares less about non-military adoption than creating a working system for DoD.

      This is going to be designed primarily for military application, like the cruise missile or GPS. If it is easily adapted for civilian use, great (GPS). If not, well, that wasn't the point in the first place (cruise missiles).

  22. Reinventing networking will be harder this time by jdawson · · Score: 4, Insightful

    DARPA invented the Internet Protocol before, and within a few decades the technology was widely deployed. Unfortunately, this time around, things won't be so easy.

    Before, it was competing against a vacuum. Now, it's competing against ubiquitous IP. They may develop some cool stuff that works on a battlefield, but it will never get widespread usage, commoditization, and economy of scale that IP has. If they come up with new features that work great, somebody will find a way to get similar functionality built on top of good old IP.

    IP isn't perfect, but it's good enough that there's no way to displace it, given its free nature and level of entrenchment=.

    1. Re:Reinventing networking will be harder this time by Comatose51 · · Score: 2, Interesting

      The link is down (Slashdotted probably) so I haven't read the article. Nonetheless, does DARPA really want to displace IP for the entire Internet or just for their own purposes? If it's the latter, then it shouldn't be nearly as difficult. It is afterall the military. I imagine it would be easier to get soldiers to comply with the new standard.

      --
      EvilCON - Made Famous by /.
  23. Err.. by t0shstah · · Score: 5, Informative

    Gibson cast some of the blame on the packet-based nature of Internet Protocol, which was not designed for foolproof delivery of messages. The protocol cannot guarantee delivery of e-mail, for instance.

    Who is this guy really? Thats not what IP is for - foolproof delivery of packets is handled by connection-orientated protocols like TCP. Sure, it might not get the *right away*, but the flexibility of packet based routing is something that has made networks as reliable as they are today (despite the huge amount of moaning that people do about them).

    Mind you, as people have pointed out before, IPv6 has been waiting in the wings for a while now, and a military request for change might be the kind action needed to kick other people into gear.

    1. Re:Err.. by Roger+Keith+Barrett · · Score: 4, Interesting

      Obviously the writer of the article and Gibson don't understand how the system works at all... they're with the normal public thinking that e-mail is being transfered from place to place as some whole document and not understanding the basics of packets or anything in TCP/IP.

      I am not a network engineer... but I am pretty sure that if you wanted to assure the delivery of email you would do it at a HIGH level in the stack, not at the transport level. If they are talking about packets, it has already been done. I am not sure that the Gibson in the article really understands what he wants.

      It's pretty clear they've got the ideas and concepts all screwed up here.

      --

      Why don't you embrace your slashbotness instead of living in a dreamworld?
  24. Just data and security by leerpm · · Score: 3, Insightful

    Voice is data, video is data, they all run over IP and therefore can be considered data just like anything else.

    What we don't have is security built into IP. IPSec is a good beginning, but its more of an afterthought. Not nearly as good as what they could do if security were an integrated part of the native IP protocol.

  25. This doesn't sound good by HTH+NE1 · · Score: 4, Insightful

    we must absolutely have some mechanism for assigning network capabilities to different users

    Sorry, but the network capability of running a web server hasn't been assigned to you. You are blocked at the protocol layer.

    Sounds like they don't want the Internet to be a network of ends anymore and control who can do what with the network. Nice experiment, this unrestricted free speech on the Internet, but we've decided we don't want you to have that. Be consumers, not producers.

    --
    Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
    1. Re:This doesn't sound good by Dun+Malg · · Score: 3, Informative
      Sorry, but the network capability of running a web server hasn't been assigned to you. You are blocked at the protocol layer. Sounds like they don't want the Internet to be a network of ends anymore and control who can do what with the network. Nice experiment, this unrestricted free speech on the Internet, but we've decided we don't want you to have that. Be consumers, not producers.

      Sheesh, RTFA. They're talking about a new protocol layer for use by the military. Combat-deployed wireless networks aren't "the Internet".

      --
      If a job's not worth doing, it's not worth doing right.
  26. Ad-Hoc networking by juancn · · Score: 2, Insightful

    Actually, the article is misleading. They're looking into ad-hoc networks (Gnutella is a good example of a simple ad-hoc network).

    By definition, ad-hoc networks have a dynamic topology, and there has been lot's of research in that area in the last few years.

    You could implement an ad-hoc network on top of other technologies (ip is not the best one, though).

    Google for "adhoc networks" for more info.

  27. Re:Re-Inventing the Wheel? by LostCluster · · Score: 2, Insightful

    Can I hear someone say IPv6?

    Someone has not got enough to do....


    IPv6 can go join IPv5 in the scrap heap now... bring on IPv7!

  28. von Neumann architecture by SparafucileMan · · Score: 3, Insightful

    I'm not sure why the von Neumann architecture is such a security problem. I mean, the problem with computers not working isn't how they're built per se--turing machine, post machine, hell use cellular automata--it's that the mathematical theory says "it is impossible to write code (in general) that is guaranteed to be bug free". You could change the von Neumann archiecture, sure, but you could just as easily 'write an interpreter' (though with hardware) for the architecture. Either way, if you're writing code, you're going to have bugs.

    1. Re:von Neumann architecture by de+Selby · · Score: 4, Interesting

      "seconded. I don't see what is the problem with von Neumann architecture, and the article is pretty vague about that."

      The von Neumann archicture doesn't distinguish between instructions and data, allowing a program to modify another program or itself. (Think viruses/trojans.) But I think memory protection has patched this pretty well.

      It also has a memory bottleneck. Other models, such as Harvard, (http://en.wikipedia.org/wiki/Harvard_architecture ) try to fix these problems. (And I'm guessing that strict seperation of code and data might ease formal proof?)

      I don't know of any great solution to the problem of starving the processor with slow memory access etc. but I think this is where you would look for one...

  29. One of the projects that inspired this by Anonymous Coward · · Score: 2, Informative

    Defense Advanced Research Projects Agency (DARPA)
    Federal and Non-Profit Funding Opportunities

    http://www.fedgrants.gov/Applicants/DOD/DARPA/CM O/ BAA04-11/Grant.html

    * Broad Agency Announcement (BAA) 04-11 Control Plane;
    * Closing Date: 12 January 2005;
    * Full Proposals for First Selection: 09 March 2004;
    * POC: COL Tim Gibson, DARPA/ATO;
    * Funding: $1-6 Million depending on application
    * Program Objectives and Description: The Defense Advanced Research Projects Agency (DARPA) Advanced Technology Office (ATO) is soliciting proposals under this BAA for an Internet Control Plane protocol (hereafter called the Control Plane Program). The purpose of the Control Plane Program is improving end-to-end Transmission Control Protocol and Internet Protocol (TCP/IP) wide-area network performance between the Continental United States (CONUS) operating base and forward deployed tactical units. The technology the program seeks to develop is the ability of individual hosts (end-points) to learn essential characteristics about the network path between themselves and their transmission partners.
    * Eligibility: Unrestricted

  30. Going to something not packet. by DarkOx · · Score: 4, Interesting

    They blame the packet nature of the network for lots of the problems but I see not other perposal given. How on earth do you build a network as large as the internet based on a non-packet archetecture? I am studing computer science right now at school and haveing completed two telcom courses and nobody has ever discused a conection-oriented technology that or even a conection-oriented concept that could cope with a network as large as the internet with as many hosts. Do any of you in slashdot land have a clue how they might even start to go about doing this? The other posibility is its a new twist on a conectionless network but how on earht is that possible with out some sort of packet archetecture to send over it, otherwise you'd have no way to change path with conditions and changeing conditions are UNAVOIDABLE on any network I have ever seen.

    --
    Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    1. Re:Going to something not packet. by DarkOx · · Score: 2, Insightful

      No they did nothing of the sort, as soon as the network started getting very large, ie most people started to get phones and they wanted to be able to a call out side the local exchange with high frequency the invented technologies like PCM and the Time division multiplexing so they could packetize voice communications. Why did they do this because the Circut-switched network was becoming to costly to manage. The internet also has a nother reality, unlike most phone calls prior to packetizing most netusers want multiple concurent connections to hosts or many brief connections in rapid succession. Most pre-prepacket phone users never wanted to talk to more then one person at a time and only required call setup operations every few moments at most not hundreds of times in an instant loading some web page the pulls from many hosts or playing a video game and needing to update all clients.

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
  31. IPv7 by Valdrax · · Score: 4, Funny

    Yes, but the serious question is whether or not this so-called IPv7 will incorporate the Schumann resonance, tap into the collective unconsciousness of mankind, spontaneously create a little girl complete with family, and allow its creator to become some sort of god-like revenant.

    Maybe I'm just watching too much anime...

    --
    If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
    1. Re:IPv7 by Wyzard · · Score: 3, Interesting

      The scary thing is, the underlying concept there is actually plausible. Think about the similarity between human social connections and the connections between neurons in the brain. You're not aware of being part of a collective consciousness called humanity, but the individual cells in your head aren't aware of being part of a larger consciousness either.

      You have to wonder how many things we consider "miracles" or extreme luck could really be actions of a larger entity which can influence groups of people as effortlessly as you can flex your fingers.

  32. Just love.. by Creepy+Crawler · · Score: 2, Insightful

    All the US Govt haters. You know, they only DESIGNED the current internet for us. And they give out cool schwag like NSALinux and stuff.

    And USgovt.. Yeah, they at NASA hired ol' Mr. Becker to make our lan drivers ;-) What would you trust? NE2k driver by some random polynesian company, or somebody who works on the computers at NASA?

    Understand then decide.

    --
  33. Re:Reliability by Comatose51 · · Score: 4, Insightful

    TCP works poorly in a wireless environment because of the congestion control. When packets get lost, it assumes it's because of congestion and starts backing off, which slows down the connection even more. That's not always the case in wireless because packets can get lost due to interference and a number of other scenarios that do not exist for wired connections.

    --
    EvilCON - Made Famous by /.
  34. Replacing Von Neuman & OSI Model??? by temojen · · Score: 4, Interesting

    It sounds to me more like some general had a brief introduction to computing theory, but didn't relate it to any real current technology.

    The alternative to Von Neuman (Code and Data in the same memory) is to have code and data in seperate memory areas. This makes it very difficult to make computers where the code can change. Sure, there's no buffer overflows, but there's no security patches either. It might be fine for embedded devices, but I'll not have it on my desktop. The Page (or Segment) executable flag of more modern memory management units does the job fine, without all the hassle.

    The OSI model is already not used anywhere except to compare proposed network models to; it's way too complex.

    He talks about replacing packet switching so that messages are delivered on time & with certainty. Presumably he means some kind of virtual circuit switching, but he also talks a lot about constantly shifting ad-hoc networks. Circuit switchinfg & ad-hoc networks don't mix well. You have to know what the path is going to be before you can reserve it. It's probably better to just turn on the QoS and AH already implemented in IPv6.

    1. Re:Replacing Von Neuman & OSI Model??? by adya · · Score: 2, Insightful

      I completely agree. This general got fed some bad info, or his tech really sucks in networking. If you get rid of the layers in the stack, then you lose its dynamic ability. It sounds like he has some problems with their email or messaging system, and he wants to rewrite the entire IP protocol. I'd vote for rewriting SMTP, but there is nothing wrong with IP. I think the general just needs to get a systems guy who's a little knowledgable in whats out there today.

  35. Forced Changes. by nurb432 · · Score: 2, Interesting

    Hmmmm good way to obsolete most older technology and force people into 'upgrading' into more controllable ( read DRM ) systems ..

    --
    ---- Booth was a patriot ----
  36. Internet protocol by Vexware · · Score: 2, Insightful
    Don't forget massive incompatibility and upgrade hassles.

    As some would put it, "tl;dr" ("too long; didn't read"), but from what I have read, I understand that the DARPA intends to update the entire Internet protocol, mainly because its structure compromises the security of the Army's confidential information mainly on the battlefield. If the Internet's current structure is what may be posing the Army Forces problems, why don't they just update the protocol and use this updated, more secure protocol on a private network of their own, instead of risking causing chaos on the "Interweb"?

    --
    "Really, I'm not out to destroy Microsoft. That will just be a completely unintentional side effect" -- Linus Torval
  37. REAL Wireless Networking = ad hoc? by HugeFatty · · Score: 3, Informative

    They could mean ad hoc wireless networking. If they are looking for something that could help them communicate in the field, ad hoc wireless networking has great applications for them--basically, an ad hoc network does not have predefined hosts, access points, or what have you. Every node in the network communicates with the nodes around it (they could be a mixture of some wireless nodes and some wired nodes). There is no predefined leader, but the nodes themselves pick which nodes will act as temporary leaders to keep routing information, among other things. There are many different algorithms for determining these leaders, and the leaders can be changed if necessary due to nodes moving, entering an area, or leaving an area.

    More information can be found here (Google's html version here.)

    --


    I am clearly fatter than you.
  38. Do they have any real points? by bfree · · Score: 4, Insightful

    The article seems to have two different main points. Firstly that the entire networking model (7 layers) is inappropriate for "reliable" networks. Secondly they suggest that the entire model for building computers is wrong, and that somehow they need to use hardware to isloate programs.

    The issues they address in the first point were issues which I felt were meant to be addressed by IP6, has/will it fail? I always understood IP6 as being designed to (optionally) have secure connections, qos and an ip address structure to allow for floating nodes. Would IP6 not stand up to delivering messages in network time for the entire US military structure?

    The second issue seems simple to me, yes it will be much more reliable if you use a seperate computer for each task and allow them to communicate, but can you tolerate the lack of flexibility and is it even possible to do anything meaningful without adding lots of parts and weight (the more parts, the less reliable). I can imagine building a chip which actually contains 8 386s and 32M or ram split into 4M per 386, then have the disk controller map the device in an 8 way split so they can't touch each others data, a network chip could act as a switch to all the information, providing qos etc. buses to expansion could be mapped to cpus, but is it worth it or are you better off building two different but functionally identical systems so if one fails the other shouldn't? Also it's still one machine, as soon as you actually split it out into a meaningful number of machines weight, size and handling all become a problem. It would be lovely if you could sew tiny bluetooth enabled cpus w/mem into all the army gear and then they cluster together into a super cpu which reads the soldiers thumbprinted data device to figure out what to do, but would that actually require any sort of fundamental shift in how computers are made to achieve?

    To me this article simply states that they haven't managed to build a good enough network yet, and want some cash to do it, and that they haven't managed to build a reliable os/app combination to deal with their needs yet either! Just the talk of "One of the limitations inherent in this approach is that when an application malfunctions, it can affect other programs" made me think they need to look harder at their OS. I will be surprised if the end result isn't IP6 (perhaps a modified army version) but you never know! I wonder what OS they'll go with though?

    --

    Never underestimate the dark side of the Source

    1. Re:Do they have any real points? by Zathrus · · Score: 2, Interesting

      The issues they address in the first point were issues which I felt were meant to be addressed by IP6

      Doesn't mean that it does so, or does so in a way that DARPA feels is sufficient. In particular, there's no protocol-layer method to restrict access, which was explicitly mentioned in the article. I think some of the stuff they're asking for (on-time, guaranteed delivery over an inherently unreliable network) is impossible, but it may be that a complete change in the way that you look at the problem can help.

      Just the talk of "One of the limitations inherent in this approach is that when an application malfunctions, it can affect other programs" made me think they need to look harder at their OS.

      The OS isn't going to help. There is no OS on the planet that can solve the issues they're talking about. Even in a protected mode OS there are vulnerabilities between security levels and between processes. Buffer overflows, privledge exploits, etc. are a common problem amongst all OS's and architectures (and if your OS/architecture doesn't have the concept of buffers or privledges then it's too simplistic to actually use -- shoo). Even implementing hardware to prevent execution of non-executable code is insufficient, since all you do then is point at some executable code that can be exploited (e.g. -- buffer overflow to point at system(), and then execute your commands that way).

      What's the solution in either case? Hell if I know. That's the entire point of DARPA investigating this -- maybe there are solutions and we just need to spend some time working toward them. Certainly if you told someone in the 1950s about the Internet they'd think you were on crack, that no such thing could come about, but DARPA funded most of the original development there as well (and for largely the same purpose -- military comms).

    2. Re:Do they have any real points? by zenyu · · Score: 2, Interesting

      Even implementing hardware to prevent execution of non-executable code is insufficient, since all you do then is point at some executable code that can be exploited (e.g. -- buffer overflow to point at system(), and then execute your commands that way).

      You could create seperate data and return address stacks. You could write a very simple OS coupled with a very simple processor to create a much more hardened system. This might not be the highest performing OS. It would also have to be an RTOS to harden it against CPU hogging. But it's not impossible, it's just a question of whether leaving the greater software ecosystem is worth the cost in duplicated effort. For networking gear it might be.

      The article is pretty bad though, it sounds like they are just tossing around technical jargon, without knowing what the words mean.

  39. IP has no delivery guarantees for a reason by asr_man · · Score: 2, Interesting

    Gibson cast some of the blame on the packet-based nature of Internet Protocol, which was not designed for foolproof delivery of messages. The protocol cannot guarantee delivery of e-mail, for instance.

    ...The commander wants to be able to send a message and have it delivered, completely, accurately and on time."

    Uh, ever heard of the two armies problem?

  40. REDO THE INTERNET??? by Xiaotou · · Score: 2, Funny


    Does Al Gore know about this?

  41. Military != Law Enforcement by Tassach · · Score: 2, Insightful
    While killing spammers and pedophiles may be a good idea, that isn't the military's mission. That is the job for law enforcement. Even though both wear uniforms, carry guns, and have similar organizational structures, the military is VERY different than law enforcement in what it needs to do it's job, and who it's going up against.

    The military wants secure and reliable communications, period. From a military standpoint, it might be nice to monitor your adversaries, but not if it means that your adversaries can monitor you. Any intentional weakness in a communications protocol could be exploited by an enemy, making it unsuitable for military purposes. Since the military's opponents are other militaries, they have to assume that the enemy has the resources of an entire country behind it, and plan accordingly. Insecure comms makes the military's job harder. For the military, keeping YOUR comms secure is the first priority; monitoring or disrupting the other side's comms is a bonus.

    Law enforcement, on the other hand, is going up against individuals or small groups. The stakes are lower and the adversary has far fewer resources. Insecure comms makes their jobs easier, because they need to monitor the other side a whole lot more than they need to worry about having their communications monitored. Hell, virtually all police departments still use unencrypted radios, despite the fact that scanners have been available to the general public for 30+ years.

    --
    Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
  42. Clarifying by Anonymous Coward · · Score: 2, Insightful

    Just a few items that comes to mind:
    - The US military needs this for their own use, it does not have to be forced down over the rest of the spam-enjoying (right?) population.
    - Asymmetric warfare analysis shows that it is better for the US to fix bugs or information leaks or other holes in software rather than keeping them secret for possible later use. Ref. NSA and their SELinux effort for evidence.
    - the above also means that adding extra backdoors will likely backfire. The NSAKEY has the tin foil crowd in hysterics already.
    - Encapsulation means you can run IPv7 (to give it a name) over the ordinary IPv4 and then roll out for the rest of the net to use once everyone tires of spam and breakins.

    Also they wanted to do "something" with von Neuman architectures. Well, as anyone who has worked with DSPs I can assure you that alternatives are out there and in active everyday use, DSPs like for instance the Motorola DSP56300 that uses super-Harward architecture (one instrution and two data busses). Just why this is such a big deal I do not understand.

    Not that I would mind then looking at it; after all compilers (especially GCC) have problems in optimising bus allocation (should this array be on the X or Y bus?). Yeah I know some claim compilers surpass human assembly programmers. Strange ten that people like me are paid (well too!) for hand optimising assembly on DSPs.

  43. Re:Shouldn't we not reinvent the wheel? by j1m+5n0w · · Score: 2, Informative

    Don't forget existing ad-hoc routing protocols that work fine with IPV4 or IPV6, like

    dynamic source routing (dsr)
    destination sequenced distance vector (dsdv)
    temorally ordered routing (tora)
    ad-hoc on demand distance vector (dsdv)
    comparison paper

    Some of these are even used in reasonably large real world networks.

    -jim

  44. Protocols vs Spam by RAMMS+EIN · · Score: 2, Informative

    Actually, the cause of spam can largely be sought in faulty protocols. SMTP doesn't verify who you are, so spammers are very difficult to trace. If this were changed, I think there would be a lot fewer spammers.

    --
    Please correct me if I got my facts wrong.
  45. Redoing IP, not Internet by Ato · · Score: 3, Insightful

    Oh, the moaning, oh, the bitching.

    Has it occurred to anyone else that DoD might not be out to reform the Internet in any way? They are out to build a network model to serve their own needs, but they have no need to reform the rest of the world.

    Now, if they make this revolutionizing new network protocol/infrastructure public other people might want to adopt it because it's neat. But me being a hardened cynic, this will most likely only find use in privately owned networking ponds...Kinda like a certain version pf IP we all know of :)

  46. MOD PARENT DOWN by Imperator · · Score: 2, Funny

    It made me come dangerously close to reading the article.

    --

    Gates' Law: Every 18 months, the speed of software halves.
  47. Re:M16s by ka9dgx · · Score: 3, Interesting
    BOTH ends of the M-16 are dangerous... the wimp ass bullet can kill you... and it can blow up in your face if you don't extract a misloaded round properly.

    --Mike---

  48. How do they replace von Neumann? by bellings · · Score: 3, Interesting

    Flaws in the basic building blocks of networking and computer science... "It is time to ask the harder questions about the ways of computer architecture we've been using for the past 30 years. Is it time to scrap the von Neumann architecture?"

    This is the only interesting part of the article. I couldn't care less what they do with the OSI layers. As long as someone writes about it as well as Stevens wrote about TCP/IP, it'll take me a month of reading and programming to get under my belt. We all learned Pascal, then C++, then C++ again when the standard came out, then Java, and Lisp, and Smalltalk, and Perl, andd Python, and C#, and a half-dozen more languages as the need came up. Now, you have to learn a few new networking layers and protocols. No big deal -- you should be pretty damned familiar with learning different implementations of stuff you already understand.

    But, replacing the von Neumann architecture means changing just about everything I know. That's big. Everything is von Neumann. All the computational models, all the theory, all the basic underpinnings of what I know... it's all pretty much out the window once von Neumann goes. It's not just a dozen evenings at home with a book and reference implementation to relearn all of that stuff, either. It's relearning nearly all the Computer Science I know, and probably learning a whole bunch of new Maths to go with it.

    That's gonna hurt.

    --
    Slashdot is jumping the shark. I'm just driving the boat.
    1. Re:How do they replace von Neumann? by fikx · · Score: 2, Insightful

      From the quick blurb in the article where he talks about that, you could almost say we're already trying to do what he was talking about. He talked specifically about breaking from a generic hardware envirnment where the program runs to physically dividing applications. we do that now in software and hardware both. Think OS's and virtual machines for the software version, and there are hardware versions used in mainframes and other specialty setups. It might be time to jump whole sale away from the architecture since we spend a lot of our timte working around the problems he describes...

      --
      AB HOC POSSUM VIDERE DOMUM TUUM
  49. IP not Internet, stop freaking out! by RogerRamjet98 · · Score: 5, Insightful
    I think most of you are missing the point.

    DARPA and the military aren't interested in rebuilding the internet, they are interested in rebuilding IP.

    They want to rebuild IP because they have a need for a better system. They need secure, reliable, ad hoc networking so that battle groups can communicate with each other.

    These are private WANs. Not the Internet! The Military is not going to send real time battlefield data across the public internet, and real time battlefield data is what this thing is all about. The military launches and rents satellites for that sort of thing, they don't send it across uunet.

    When they create a WAN, they have to have some mechanism to talk. Right now it might be IP, but in the future they want it to be something else. Something better for THEM.

    The US Military couldn't care less if the rest of the world, or the internet itself, started to use whatever they come up with.

    As far as those attacking technical limitations, when they started working on the original internet I'm sure everyone was saying, "Fault tolerant distributed networking with dynamic routing? That's impossible, why are they bothering" The point of DARPA is to do science and advance the field beyond current knowledge.

    They may succeed, and they may fail. But they shouldn't just not try.

  50. Does this mean that Al Gore got it wrong.... by tiger99 · · Score: 2, Funny

    ...when he invented the internet?

  51. Post Von Neuman by ka9dgx · · Score: 4, Interesting
    Yet another post Von Neuman architecture is to have a computing fabric. Imagine a grid of 1024x1024 single bit processors, each with its on state table (program) and inputs from each of its neighbors, and its own previous state. With 32 bits of RAM per cell, you can look up the new state, and output it. A grid of this nature, operating at a conservative 1GHz, could do amazing amounts of computation. Computation would become IO bound for quite a few tasks that bog down even the fastest intel servers.

    Map the cells in the state tables to appear as conventional RAM to the host, and reprogramming becomes as easy as a memory write. Bad cell?, just route around it. The fact that it's all state driven allows you to build an automated rerouter almost trivially.

    post Von Neuman computers are going to be wicked fast, if they can build IO to keep up with them.

    --Mike--

  52. DARPA don't control it now.... by tiger99 · · Score: 2, Interesting
    ....because internet protocols are developed, documented and controlled via the RFC system which works very well and is open to anyone who wants to participate.

    They are of course fully entitled to invent as many protocols as they need for their own use, and it is probably a good thing, but unless it goes through the RFC process, it will never be accepted for general use by the public.

    This is really a big non-event.

  53. Heaven forbid by szquirrel · · Score: 2, Funny

    Don't forget massive incompatibility and upgrade hassles.

    Yeah, just like that PCI bus clusterfuck. What a nightmare that was. Was ISA really so bad that we all had to buy new motherboards and expansion cards? Oh wait, yes it was.

    Sometimes if you want to move forward you have to pick up your feet.

    --
    Never approach a vast undertaking with a half-vast plan.
  54. Ok, here goes by RAMMS+EIN · · Score: 3, Informative

    Now that I have read the article, I finally concluded it's full of shit. I'll break it down bit by bit:

    ``Among the IT holy grails that DARPA wants to see revamped are ... the seven-layer Open Systems Interconnection model''

    Well, they can't. It's just a model, an abstraction. It's not like networks are actually built by looking at the OSI model and carefully following it. It's more like you build your network infrastructure and protocols, and then the OSI model says that you can call your wires the physical layer, the software that does something with the network the application layer, etc.

    ``Many military commanders have been slow to adapt IT for critical tasks because they sense the equipment is unreliable''

    Well, that's their judgment, but what does it have to do with the Internet protocol?

    ``"We don't expect computers to work, we expect them to have a problem."''

    I guess many people do, but I don't. I buy my computer and expect it to work. If it doesn't, I'll return it and get a working one or my money back.

    ``Gibson cast some of the blame on the packet-based nature of Internet Protocol, which was not designed for foolproof delivery of messages. The protocol cannot guarantee delivery of e-mail, for instance.''

    Right he is. Reliability is in TCP, and this is why most application protocols build on TCP. The unrealiability of IP is there on purpose, so we don't have the overhead of TCP when it's not needed, and that if we come up with a better alternative to TCP, we can use that instead without having to throw away IP. Conversely, we can exchange IPv4 for IPv6 and implement TCP on top of that. It's called modular design, and generally considered a Good Thing.

    ``"The packet network paradigm probably needs to change," Gibson said. "I'm not advocating throwing out the Internet Protocol completely, but we must absolutely have some mechanism for assigning network capabilities to different users and that capability has to scale to large numbers of devices automatically. The commander wants to be able to send a message and have it delivered, completely, accurately and on time."''

    Ok, fine, so you need a real-time protocol. I can see how that wouldn't work with IP's best-effort (read: unreliable) delivery, without further guarantees. However, there is nothing in IP that says it _has_ to lose packets. If you find a way to guarantee timely delivery of packets (my bet is that you can't), then you can layer IP on top of that. Of course, you don't _have_ to use IP, but if you opt for a different protocol, that doesn't mean that I have to drop IP too.

    ``Another limitation with the IP approach is the inability to dynamically build networks. The military wants to quickly set up ad hoc networks.''

    I don't think that's true. Just like there is nothing in IP that _prevents_ guaranteed delivery, there is nothing in it that prevents building dynamic networks, either.

    ``"... Moving the node outside its standard service area requires reconfiguring something. ..."''

    Yes, necessarily. However, the implication seems to be that IP somehow cannot handle this. Again, there is nothing in IP to prevent this. You could simply broadcast a message to discover nearby access points, and attach to the one with the strongest signal. Periodically, or when the signal gets weak, you broadcast again.

    ``As a result, DARPA wants to fund development of new protocols or enhancements to the existing IP that will allow nodes, such as computers, to automatically sign on to networks in their vicinity.''

    Like ZeroConf? That would be a Good Thing. More power to them.

    ``The von Neumann architecture will also come under scrutiny from DARPA.''

    I won't comment on that. I don't know what exactly the Von Neumann architecture is, and besides it is off-topic in my discussion on network protocols.

    --
    Please correct me if I got my facts wrong.
  55. Re:Don't forget saying goodbye to privacy. by PhxBlue · · Score: 2, Insightful

    The purpose of protocols is to transmit information in an understandable manner. If you want privacy, either stop transmitting information or render it non-understandable (ie., encryption). It makes no sense to bitch about someone's effort to improve the state of the Internet.

    --
    !#@%*)anks for hanging up the phone, dear.
  56. umm.. IP doesn't necessairly mean INTERNET.. by Anonymous Coward · · Score: 2, Insightful

    Sure.. it's called the Internet Protocol.. but that doesn't mean it's gonna replace what we're using now..

    Anyone who thinks that the DOD will run drones with publicly available IP addressing schemes, has been spending a little too much time behind the ole peacepipe..

    This will probably use a propriatary signalling method.. special packet sizes with some form of encrytion built right into the protocol at layer 3.. if not layer 2..

    just because the DOD builds a new network.. doesn't mean we all get access to it.. it's no longer 1970 here folks.. the DOD doesn't need berkley anymore..

  57. Oops... I just learned something by ka9dgx · · Score: 2, Informative
    I was sure you where wrong about IP and ports... so I went and looked it up... and you're right.... the RFC defining Internet Protocol (IO) doesn't mention ports at all! It's when you get to UDP and TCP that ports come in to play.

    Thanks for the lesson.

    --Mike--

  58. Why haven't they redone SMTP yet? by eugene+ts+wong · · Score: 2, Interesting

    I don't understand why there seems to be such a problem. If Yahoo! & AOL worked together on this, then @ least all mail going between those 2 sites could be verified. Thus, if somebody sends a message from 1 of those 2 places to the other, then that means that that mail is really from somebody, even if it is a spammer. Any other mail pretending to be from there can be deleted.

    As this gains success, they could expand the efforts to include other companies.

    1. Re:Why haven't they redone SMTP yet? by eatdave13 · · Score: 2, Informative

      You can't make a TCP connection if you're spoofing your IP unless you've managed to take over a router or two, and then you're not really spoofing anymore, you're just hijacking an IP.

      --
      "Verbing weirds language." -- Calvin
  59. will companies adopt this? by Anonymous+Custard · · Score: 2, Insightful

    Most companies don't even use the full power of their current networks, installed in the late 90's or early 00's. Would they be willing to throw out all the old stuff to get the new stuff? I doubt it...most of them are still hurting from over spending in the first place.

  60. think Science, not engineering by fikx · · Score: 2, Informative

    The article makes sense if you think in terms of CS (computer science) instead of IT. The IP protocol is what he's talking about, and it has all the problems he describes (both version 4 and 6).
    From a consumer, there are some room for improvement (not just needed for military). Think of the headaches of wireless VOIP, mesh networking, p2p, etc. yes they all work, but there are workarounds due to the fixed node-to-node setup of IP. A lot of cool things could be made a lot easier by thinking outside the box a bit now that we've gained experince from the old model. there are tons of projects being thought up which have to tackle the IP nature of networks. If the low-level protocol handled a lot of it already, we could have those projects up and running and then some.
    I'd love a protocol that didn't rely on a centralized DB of addresses to allow stuff to talk. That's one of the first things IP demands. How about networks routing based on data the nodes provide? That's just one idea of a different type of network...

    --
    AB HOC POSSUM VIDERE DOMUM TUUM
  61. Sounds like some simple requirements by mveloso · · Score: 2, Interesting

    Sounds like the DoD has some simple requirements. I thought some of these were taken care of by ip6?

    The main requirement seems to be self-configuring mobile networks and services.

    I suppose nobody wants to renumber IP addresses every time a battleship moves from one theatre to another. Imagine having to move a whole division from one place to another, and having to reconfigure all the appropriate devices. What a nightmare. Plus, you wouldn't be able to find anything anymore.

    They could move to zeroconf/rendevous for their network service naming, which is a bit better than a static address/conf file.

    But they still have routing issues. Maybe they should adapt the cell network routing? Cell providers seem to have a better idea about how to dynamically route information to devices that change location often. Phones have a unique address which is tracked by the network...or at least it behaves that way.

    Then there's the security side. How do you authenticate/authorize someone when they try and join the network? You don't want to lose a laptop then have someone be able to watch your operation. Biometric stuff won't work so well, because they can always cut off a hand and use it without the user attached (ugh).

    Pretty interesting problems, really.

  62. What they're really trying to do by Anonymous Coward · · Score: 2, Insightful

    Consider a swarm of several thousand minimissiles, each with an assigned target. As some are shot down, the others negotiate in real time to shift targets so that highest priorities are met, including in response to new threats that emerge after the swarm was lost.

    Now -- try doing that with IPv4 or even IPv6 model, painstakingly assembling frames into packets and packets into messages ....

    The architecture issue is a whole nuther matter. Consider the use of neural nets to filter noise from information in shifting signals, as tracked by a matrix of thousands of sensors ....

    DARPA couldn't care less about your pr0n surfing, guys. The game is much bigger than that

  63. Military Applications by Anonymous Coward · · Score: 2, Informative

    First -

    For those with a short attention span (pretty much all of /.), back in June 2003 the DoD already mandated that IPv6 would become THE standard for DoD information systems (note; NOT the Internet). The DoD Global Information Grid will be IPv6 compliant by 2008 and all products procured by the DoD will be IPv6 compliant and will not support IPv4. This is a good thing for the DoD and could potentially be a good thing for the Internet because of the end-to-end security designed in IPv6. Tin foil hatters need not worry - the DoD does not listen in on your pr0n surfing packet traffic in IPv4 now, they certainly won't with IPv6 (it would indeed have to be a VERY slow analysis day at NSA, too).

    Second -

    The DoD has always recognized the need for fast and secure wireless communications in the battle space. The DoD needs have always boiled down to these basic requirements -

    Real time, on time, reliable, and secure.

    Note that TCP/IP does not always guarantee real time or on time but is reliable in delivery. Security? IPv4 was not really designed with security in mind - rather, the idea was to ensure that the information arrived intact to be reassembled.

    The real problem is the wireLESS systems that are stove-piped into the GIG. Battlefield bandwidth is still a problem with most field radios (SINCGARS and EPLRS) that transferring large amounts of data is a slow process on a battlefield that requires up to the minute information. This is the real reason that the USMTF and JVMF messages still exist in this day and age. Field radios were designed with vocomms in mind, not pumping large data formats across FH channels with limited bandwidth. Mind you, these radios must operate in extreme conditions on a battlefield, so an 802.11b/g card won't cut it in terms of broadcast power nor encryption standard with WEP.

    So, if your bandwidth is limited, you must either make the messages smaller and have less overhead, or make the OSI stack smaller and with less injected junk in the frame. Either way, the newer C4I systems are using more up-to-date formats and tools to get information to and from the battle commanders and the soldiers.

  64. Babbage by VoidEngineer · · Score: 2, Funny

    Flaws in the basic building blocks of networking and computer science... "It is time to ask the harder questions about the ways of computer architecture we've been using for the past 30 years. Is it time to scrap the von Neumann architecture?"

    Sigh... I guess it's back to building the Analytic Engine... Pass me the lathe, will ya...

  65. DARPA: means Research by sakshale · · Score: 4, Insightful

    Most people seem to miss the fact that the R in DARPA stands for Research. Research is not done by accepting the status quo. If ARPA had not invested in the original network research, who knows were we would be today!

    TCP/IP is not perfect for every use. If DARPA can find a better set of protocols to slide into layers three and four of the OSI model, more power to them.

    Internet protocol suite

    --
    For every problem there is a solution that is simple, obvious and wrong.
  66. Beware of the 2nd system syndrom by opos · · Score: 2, Interesting
    Fred Brooks told wonderful stories in the The Mythical Man Month about software development and one of the best was how second versions tended to have all the features that were missing from the first version to the point where the language or system's use was constrained by "too many verbs" (in a Mozart sence). Most 1st versions are nice 80% solutions, lean and mean.

    My dream is that a redesigned Internet Protocol will continue to be lean and mean, and not over-bloated with "if we only had this feature then we could do that".

  67. Clueless managers by mwood · · Score: 2, Interesting

    Where have these guys *been* for the last, oh, *fifty* years? One guy doesn't know that guaranteed delivery isn't IP's job because that belongs to another layer, and seems to be unaware that adaptive routing has been in the Internet for decades; another apparently never heard of the memory mapping and protection that's been standard in most computers longer than many of today's hotshot programmers have lived. DHCP and the built-in address initialization stuff in IPv6 (cribbed from earlier work in OSI, btw) are apparently unknown at DARPA.

    Did I miss something?

  68. Will not change the "Internet" by ciphertext · · Score: 2, Interesting

    Since this is a DoD project, its primary use will be for military networks. Perhaps there will be a trickle down to an "Internet 4" system through technology sharing. I don't see this changing the internet we currently use anytime soon. What it will change is how battlefield command systems and forward deployed units will communicate with each other. Establishing a network connection via traditional microwave, satellite, wired, and wireless (this is the key....wireless) will now exchange data using the DARPA protocol instead of IP.

    How nice would it be to have a soldier (or any other unit you wish to deem a "node" on your network) be able to "uplink" to the required military network (battlefield or otherwise) simply by broadcasting to the network. No need to configure a DHCP Server (in the case of dynamic allocation) to dish out an IP address...there is no more IP. I think that is what DARPA is attempting to achieve. They want the military to have a secure, easily scalable, and always available network infrastructure. How they plan to accomplish this...who knows, although it would probably be something similar to IPv6 where everything (network accessible device) has its own hardware created identifier. Perhaps like "DNA" for the hardware. Anyone own stock in Motorola? No? Perhaps it's time to buy some.

    --
    To know is to have knowledge....to understand is to be enlightened.
  69. Get rid of ports. by Peaker · · Score: 2, Interesting

    IPv4 and IPv6 have a slight ugliness people have come to take for granted. This could be fixed for IPv7.

    The concept of "ports". Ports are actually in-host entity identifiers, while the IP address itself is an in-network entity identifier.
    There should really be only one type of entity identifier, especially when it is 128-bit long.

    The idea is that the last few bits of an IP address would typically serve the function of a "port". This way, a DNS server could translate names to much more specific entities than full hosts. It would allow hosting multiple FTP servers on the same host, for example, without the clients having to connect to different ports. It would dissolve the need for the silly ad-hoc workarounds with virtual web hosts.

    This kind of addressing also allows much simplification of applications that would no longer need to use multiplexing over their connections. Instead, each application could allocate addressable "entities" and the multiplexing can be handled by the network layer.

    Finally, it would eliminate the need for the UDP protocol entirely, as in-host identifying becomes part of the network layer itself.

    TCP-layer becomes simpler as there is no need to handle in-host addressing as well.

    Lets eliminate ports, for a simpler network protocol :-)

  70. research initiatives by wdebruij · · Score: 2, Informative

    While the interview is light on details, there is more information available online.

    Don't forget how the system works. Darpa basically hands out money for research into areas it finds interesting. Coincidently, I've been involved for a short time in a research project dealing with exchanging present day IP (mostly the heavyweight gorilla listening to the name TCP) with smaller, more adaptable alternatives.

    Two projects in this field that I've heard of
    are

    the knowledge plane and
    application private networks

    The basic idea, AFAIK, is to do away with the one size fits all model of networking and replace it with a more adaptive lego-like stack. For this to work you need information on the state of the network in order to build your optimal dynamic stack. A possible source for this might be the discussed knowledge plane. Also, actual micro-protocols need to be created and some sort of decision making system must be in place (APnets). Shameless plug of my own work
    here.

    I don't know of other projects, but if Darpa has opened its wallet for this cause you can expect many other universities to have similar initiatives underway.