Sandvine CEO Says Internet Monitoring a Necessity
Khalid Baheyeldin writes in with a CBC interview with the CEO of Sandvine, Dave Caputo (bio here). Sandvine is the Waterloo, Ontario-based company that provides the technology that Comcast and other ISPs use to overrule Net neutrality by, for example, injecting RST packets to disrupt Bittorrent traffic. Caputo says, among other things, that Internet monitoring is a necessity. Some of the comments to the interview are more tech-savvy than the interviewee comes across.
And we can sell you just the product you need for that.
upon the advice of my lawyer, i have no sig at this time
http://redhatcat.blogspot.com/2007/09/beating-sandvine-with-linux-iptables.html [blogspot.com]
If you are running linux or a linux based router with iptables give this a try. My speeds returned to pre-sandvine levels.
"If you are using a Red Hat Linux derivative, such as Fedora Core or CentOS, then you will want to edit /etc/sysconfig/iptables. First, make a backup of this file. Next, open this file in your favorite text editor. Replace the current contents with this, substituting 6883 with your BitTorrent port number:
*filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
#Comcast BitTorrent seeding block workaround
-A INPUT -p tcp --dport 6883 --tcp-flags RST RST -j DROP
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#BitTorrent
-A INPUT -m state --state NEW -m tcp -p tcp --dport 6883 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 6883 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
Reload your iptables firewall with service iptables restart. You should now see a great improvement in your seeding.
If you are using Ubuntu or another non-Red Hat Linux derivative, then place the following in a file and execute that file as root.
#!/bin/sh
#Replace 6883 with you BT port
BT_PORT=6883
#Flush the filters
iptables -F
#Apply new filters
iptables -A INPUT -i lo -j ACCEPT
#Comcast BitTorrent seeding block workaround
iptables -A INPUT -p tcp --dport $BT_PORT --tcp-flags RST RST -j DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#BitTorrent
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport $BT_PORT -j ACCEPT
iptables -A INPUT -m state --state NEW -m udp -p udp --dport $BT_PORT -j ACCEPT
iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited
Your firewall is now configured and you should have great upload speed now. You will have to run this script every boot, by the way. One easy way is to call the script at the end of /etc/rc.local."
From TFA:
For every five megabits they sell you for $40, they buy a quarter of a megabit because they're planning on you not using your computer 24/7. They count on you being away at work or being asleep. They simply cannot provision that five megabits because that costs way more than what they're selling it to you for. They need people not using the internet for it to work at $40 a month. (Emphasis added)So let me get this straight--poor planning on their part somehow does constitute some form of emergency on my part?
If you haven't been down-modded lately, you aren't trying.
Sacred cows make the best hamburger.
As stated in the article is that the ISP's are selling you 1 megabyte while really buying you 1/4th of a Megabyte... Network monitoring is in other words necessary to ensure you in other words only use 1/4th of a Megabyte for every Megabyte you buy. It's right there in his argument!
Yes, Internet monitoring is a necessity.[1] No, injecting anything into someone who doesn't wish to have his stuff interfered with is not only not a necessity but quite frankly an outrage. Remember people, just because one thing is a necessity doesn't mean that something more must also be necessary. This is a slippery slope. To be honest I was expecting more logical integrity from Dave Caputo whom I've always respected and liked personally but who has apparently started to be blinded by his corporate agenda. What a shame, Dave. What a shame.
Karma: Positive (probably because of superiour intellect)
Let's hope that Caputo goes Kaput.
(sorry, someone had to say it!)
That sums it up. It's all of 'our' Internet, and its lucidness and capacity to re-adjust is part of its design. If you want a big-gulp download, you should get what you pay for-- subject to the randomness off aperiodic congestion, just like a freeway.
I'm guessing you weren't around or were kicking your siblings in the playpen when the Internet was designed. We believe in getting what we paid for, in a neutral, unbiased delivered fashion. All other attempts at control in our opinion, is not only illegal, but contradictory to the philosophy of egalitarian use, and in some corners, reason for revolting.
---- Teach Peace. It's Cheaper Than War.
Honestly, I'm SHOCKED!
If you want news from today, you have to come back tomorrow.
After all,it isn't but a single step to go from "We are doing RSTs to save our network!" to "We can use this technology to "guide" our customers to our services and to our affiliates and to "discourage" them from using our competitors and make even greater profits!".
Mark my words,the Internet will end up a bunch of "walled gardens" like in the days of AOL and Compuserve. The amount of bandwidth they give you for "non-affiliated" services will be so pathetic as to not matter. They will offer the few big boys like Google a free pass to keep them from fighting it while the rest can just starve. The days of a wild and free Internet are coming to a close IMHO. And the world will be a much worse place for it. After all I'm sure that each "garden" will have their own "free" news feed where only approved views will be heard and the corporate spin will always be considered gospel. But that is my 02c,YMMV
ACs don't waste your time replying, your posts are never seen by me.
Back in my day we had a honor system that basically said "don't sell 100 gallons of milk when you only have 20".
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
ISPs should never muck with a TCP stream. They're entitled to send ICMP messages. ICMP Destination Unreachable has codes for things like "(13) Communications Administratively Prohibited" and "(10) Destination host administratively prohibited". Then at least the user knows 1) that somebody along the route didn't like the packet, and 2) who to blame. There's a right way to do this, and sending an RST isn't it.
Client software may not pass all the ICMP info up to the user, but that could be fixed easily enough.
How about just telling the customers EXACTLY what they're paying for?
For $40 you get a guaranteed MINIMUM bandwidth of X with a potential to burst to Y.
If you want more, you pay for more.
Churn is an industry term for the percentage of your users will leave for somebody else and the percentage of their users that leave for you. Frequently these users are the same damn people swapping back and forth.
So despite gaining and losing lots of users, everyone's base stays roughly the same, like a churning ocean, but each one of those churners costs you $X every time they switch sides(freebies, paperwork, number portability, etc).
Apparently this is now the superlative of "discontinuing service", i.e. "you guys suck, I'm leaving for your competitor."
Il n'y a pas de Planet B.
Where is it written that it is all-you-can-eat?
All over ISPs' advertisements. Unless they've redefined the word "unlimited".
An Internet which is not neutral is less useful than an Internet that is. If web browsing is sped up at the expense of streaming video, that's going to hurt some people more than others. If streaming video is sped up at the expense of games, a whole other group is affected. Since people come up with new ways of using the Internet all the time, and we can't predict new uses, the best strategy is to give all packets equal measure.
Rather than throwing out Net Neutrality, it'd be more productive for ISPs to find business models that don't involve overcommitment, or at least make it less painful. Like some of the recent attempts to make P2P software favor nodes within the same ISP.
Not a typewriter
So you can't provide those fantastillion megabits per sec for 40 bucks. Ok, I can see that. How about ... I dunno... selling what you can sell?
The problem is, that a megabit still costs $300/mo or $700/mo. There's no way around that.You can get un-fucked-with bandwidth for that price, or you can live with the fact that your concentrated. You can't have it both ways.
The more you buy, the cheaper it gets, so you could order a T3 or something for like $5000/mo and then sell it to your neighbors for like $200/mo... (not including the cost of the routers).
I don't know about you, but I'm happy to have 3megs part of the day for $30/mo instead of my old ISDN line for $145/mo. Or maybe dialup? No thanks. I'll take the concentrated 3megs for $40.
It's just not realistic to expect to get more for your $40 than they get for their $300.
Imagine if you weren't allowed to use roads because a bus company complained about your driving 3 times. --skunkpussy
Is it a let down knowing that your day has passed?
Nerd rage is the funniest rage.
I'm trying to get old in dignity, you insensitive clod!
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Read your contract - the ISP may say unlimited; but the DON'T guarantee a bandwidth. All unlimited means is that they don't cut you off or charge you more if you exceed a certain data volume.
Let's get real here. If an ISP was really selling you a guaranteed dedicated bandwidth you would be paying a much higher price than you do now. Why do you think T1 is hundreds of dollars per month at 1.5 Mb/s? Because of the service guarantee, that is why.
Packet switching works economically because it is shared bandwidth relying on a statistical distribution of traffic on the network. During peak loads traffic will be slower than at off peak times unless the network is extremely over-provisioned.
There is another technology out there that gives a guaranteed bandwidth for every customer - which is rapidly being displaced because of its inefficiency - it is called circuit switched, and it is what the phone companies use to carry analog voice. Every call gets it's own dedicated bandwidth. All I can say is that you would not want an internet based on this network model. It is slow, inefficient and inflexible.
Now ISPs have a problem with users that run applications that present a high constant load because they don't fit the statistical model. High volume P2P is the primary offender right now. If people are using these sorts of applications when the network is heavily loaded it seems to me quite reasonable that traffic based on interactive applications (VOIP, video, HTTP) should receive priority. ANY good computing system should favor interactive applications over non-interactive applications. It is a basic system design principle.
Sorry to inform you, but to do this you need to monitor.
A lot of people whine that this breaks the idea of network neutrality. I disagree; network neutrality must not allow one type of communications stream or application to seriously degrade the performance or usability of all of the other applications. If that occurs you do not have a neutral network. You have a network that is dedicated to that one application. That is NOT what I as an end user want.
Of course a netadmin has to monitor traffic. How else to assure good service? But what information is necessary and how it should be used ought to be carefully governed by ethics. Unfortunately, these ethics are not well known, and frequently violated by the concept of "owner privilige" (often might makes right). Essentially ignoring any notion of customer rights and treating employees as serfs. Both have been known to rebel for cause.
It is the deplorable state of IT ethics that is the root cause of many of these controversial actions.
http://www.dslreports.com/shownews/Cogent-McBandwidth-Gets-Cheaper-95203/
$7/mbit (of course talking about decent volumes here with the cheapest provider and I guess with fiber already in the ground)
However that should give you a clue how much everyone is overcharging everywhere. The expensive part is the digging, but it is good (money earning) business to charge big money for small traffic volumes on lines that in reality could support far higher volumes. Not to mention how inefficent a big part of the industry is.
Atleast that is the only way I can explain how some countries are managing to supply such nice bandwidth to their citizens without getting economically ruined.
All packets MUST be treated equally. That is the first mistake. When an ISP says that they will deliver "unlimited" Internet to you, they must actually do this. "Unlimited" is not vague or ambiguous in the context in which they have used it. They must give me unlimited service, or a service without limitations, boundaries, restrictions, or controls. I did not come up with the unlimited part, they did.
I was sold a 6 Mb/s connection from Embarq, which means that with unlimited service I should be able to transfer 6Mb/s * 60 seconds * 60 minutes * 24 hours * 30 days, which is right around 2 TB of data transfer per month.
My neighbor was also sold this same package. We pay the same price. How can you determine which of our packets get priority? Can our packets be anything but equal?
This is why the "bandwidth hog" argument is so ludicrous. I cannot "hog" the bandwidth, nor can my neighbors. We all paid for a service, we all have equal rights to it.
This SHITHEAD just said it right here in plain English. Their business model is based on not actually delivering what they sold you. The "more" they don't deliver the more profitable they are. No wonder the ISP's have such an interest in figuring out the "problem". He is even more of an ass with his cavalier attitude about it. "Well that is just the way it has always been and it's okay". That attitude is why nobody trusts their ISP and these companies. It is so clearly greed that drives them.
What an ass. If you read between the lines here, he is basically saying that the fact ISP's are trying to figure out how to more effectively deny us the service we have been sold leads to greater business opportunities for his company. I'm shocked.
I hate to be somebody that just complains about a problem without offering solutions. Well the solution to this is very simple. Stop selling unlimited Internet. START being honest with your customers.
It does not take a rocket scientist to figure out that 10 homes in a neighborhood each with a 10 Mb/s connection require a 100 Mb/s pipe connected to all of them to deliver the bandwidth. Telling each one of them that they have unlimited use of those 10 Mb/s connections is a flat out lie. There is no way that could work without raising the price by 10 times.
If the reality is that there is only 20 Mb/s coming into the neighborhood then they should sell it with a 2 Mb/s floor and a 10 Mb/s ceiling. They will guarantee that you can at least get 2 Mb/s dedicated just for you, but be able to burst up to 10 Mb/s "depending on conditions". That would be honest at least. You would know that if your neighbors are not using the connection, you might be able to get some pretty good porn 5 times faster than normal, but the worst
That's MOBs for you, not "mobs". It is an ancient MUD game engine acronym which stands for "Mobile OBject". One of those archaic game lingo terms which still survives but the origins of which most of the young whipper-snappers do not have clue about.
Now about that lawn of mine ...