论文标题
向构造交通转移？调查苹果的新继电器网络
Towards a Tectonic Traffic Shift? Investigating Apple's New Relay Network
论文作者
论文摘要
苹果最近发布了其第一个Beta iCloud Private Relay，这是一种隐私保护服务，承诺与VPN相似。该体系结构由两层（入口和出口）组成，由脱节提供商运营。该服务直接集成到Apple的操作系统中，因此为大型用户群提供了较低的入门级障碍。它似乎以相对中等的入门级价格进行了重大收养。本文从网络的角度分析了iCloud私人继电器，及其对互联网和未来基于测量的研究的影响。我们执行EDNS0客户端子网DNS查询以收集入口继电器地址并找到1586 IPv4地址。补充成熟地图集DNS测量结果显示1575个IPv6地址。有关这些地址的知识有助于被动地检测通过继电器网络通信的客户。根据我们的扫描，从一月到四月，Ingress提出了20％。通过继电器网络对扫描的分析验证了苹果关于旋转出口地址的主张。然而，它揭示了入口和出口继电器可以位于同一自主系统中，从而共享相似的路线，从而有可能允许流量相关。
Apple recently published its first Beta of the iCloud Private Relay, a privacy protection service with promises resembling the ones of VPNs. The architecture consists of two layers (ingress and egress), operated by disjoint providers. The service is directly integrated into Apple's operating systems and therefore provides a low entry level barrier for a large user base. It seems to be set up for major adoption with its relatively moderate entry-level price. This paper analyzes the iCloud Private Relay from a network perspective and its effect on the Internet and future measurement-based research. We perform EDNS0 Client Subnet DNS queries to collect ingress relay addresses and find 1586 IPv4 addresses. Supplementary RIPE Atlas DNS measurements reveal 1575 IPv6 addresses. Knowledge about these addresses helps to passively detect clients communicating through the relay network. According to our scans, from January through April, ingress addresses grew by 20%. The analysis of our scans through the relay network verifies Apple's claim of rotating egress addresses. Nevertheless, it reveals that ingress and egress relays can be located in the same autonomous system, thus sharing similar routes, potentially allowing traffic correlation.
