如果巨炮只截取通往目标IP地址流量的子集,我们可以期待对于同一个流会出现序列化的注入,因为大部分概率化选择截取流(比如对连接4元组进行hash)的方式在第二次都会选择同一个流。
Does the GC have a load-balanced architecture?
巨炮有负载均衡系统吗?
We determined that the GC uses a separate flow cache for different source IP addresses, and that packets injected from different source IP addresses have distinct TTL side-channels. This finding suggests a load-balanced architecture similar to the GFW, where packets are routed to GC nodes based on source IP address. We then sent traffic alternating from four measurement IP addresses in an attempt to fill a 16,000 entry cache. This attempt did not manage to fill the cache, suggesting that the GC not only processed the different source IP addresses with different injection elements, but did so using different flow caches. As stated before, one of the four source IP addresses never received any injected replies.
25/26 首页 上一页 23 24 25 26 下一页 尾页
|