Passive Duplicate Address Detection (DAD) Sangho Shin Andrea Forte Henning Schulzrinne Columbia University
Motivation (1/2) AR (Access Router) AR Layer 3 (IP Layer) Handoff Layer 2 handoff Subnet change Layer 3 handoff New IP acquisition Session update
Motivation (2/2) Standard DHCP procedure (RFC2131) DHCP server DHCP DISCOVER DHCP OFFER DHCP REQUEST DHCP ACK Performs Duplicate Address Detection (DAD) - Send ICMP ECHO to the IP (Broadcast) Pick an unassigned IP Wait for the response for 1 second
Problems of the current DAD Long waiting time Long ICMP response time in congested wireless network ISC DHCP server – 1 sec 1 second waiting time is critical for real time services Unreliable Windows XP SP2 Firewall Block ICMP echo by default Most of the windows machines do not respond to ICMP echo Possible packet loss in wireless networks
Basic Concept Monitor traffic constantly Collect IP usage Update IP table V V V V No explicit DAD Request Response
Architecture (1/2) Address Usage Collector (AUC) DHCP server subnet router switch
Architecture (2/2) DHCP server AUC Relay Agent (RA) RA
Example 1 AUC DHCP server Router IP: MAC:AA-BB-CC Lease table ARP query Web server MAC:AA-BB-CC IPMACExpire AA-BB-CC100 IPMAC AA-BB-CC IP address collection
Example 2 AUC DHCP server Router IP: IP: MAC:DD-EE-FF Lease table Web server MAC:AA-BB-CC IPMACExpire AA-BB-CC100 IPMAC AA-BB-CC IP: MAC:DD-EE-FF ARP query DD-EE-FF100 Bad IP table IPMAC DD-EE-FF Malicious user detection
Example 3 AUC DHCP server Router IP: MAC: Lease table ARP query Web server Block Forward HTTP traffic MAC:AA-BB-CC IPMACExpire AA-BB-CC100 IPMAC AA-BB-CC IP: MAC:DD-EE-FF IP: MAC: DD-EE-FF AA-BB-CC100 Bad IP table IPMAC DD-EE-FF AA-BB-CC FORCE RENEW IP: IP collision detection
Experiments AUC Columbia CS network Columbia WLAN DHCP Server
Experimental results (1/4) Convergence time
Experimental results (2/4) DHCP server traffic load from AUC
Experimental results (3/4) AUC traffic load (ARP and broadcast)
Experimental results (4/4) CPU load of AUC
Conclusions It takes time to acquire an IP from DHCP server mostly because of DAD – 1 sec The current DAD does not work because of Windows XP SP2 Passive DAD performs DAD with no overhead Passive DAD detects IP address collision and illegally used IPs When a address collision is detected, Passive DAD resolves the duplicate IP problem by using DHCP Force Renew
Thank you!