Multicast After 9112001 NANOG 23 Marshall Eubanks tmemulticasttech

Multicast After 9/11/2001 NANOG 23 Marshall Eubanks tme@multicasttech. com Rich Mavrogeanes rmavro@Vbrick. com Prashant Rajvaidya prash@cs. ucsb. edu

Internet News “Melt-down” 9/11/2001 Web Site Performance 9: 00 AM to 10: 00 AM Site% Users able to access ABCNews. com 0% CNN. com 0% NYTimes. com 0% USAToday. com 18 % MSNBC. com 22 % (source: Keynote’s Business Performance / Interactive Week 9/17/2001)

Internet News Performance 9/11/2001 Of course, the “melt-down” was caused by the incredibl l Unicast Streaming web sites suffered similar problems, l By contrast, multicast performed well l – Large Increase in traffic – Roughly 1 Gigabit per second saved at peak – Over time, the multicast peering mesh degraded, but this was N

Eyewitness Accounts “We had a large plasma screen in the i. Labs {at Networld+Interop] intended to demonstrate high rate HDTV o “By this point, three things had happened. The crowds around the one display had grown so large as to constitu “Soon after, we had a good number of exhibitors come and ask how to get "the CNN viewer software". Jim Martin, <jrm@nortelnetworks. com> “More than 1, 000 copies of Stream. Player. II, our multicast MPEG viewer, were downloaded or handed out on di Rich Mavrogeanes <rmavro@vbrick. com>

Viewership Sudden increase in Multicast traffic of at least 1000 group members –Mostly viewing VBrick’s television broadcast –Measured Viewership > 830 –But each measured point could have many individual viewers since they multicast locally BANDWIDTH SAVED IN EXCESS OF 1 GIGABIT / SEC. VS UNICAST Crowds viewing the 9/11 multicasts at Networld+Interop

Multicast Activity at FIX-West / Mantra Purple is # of group members ^ 9/11 attack Note that extra traffic seems to be mostly US - also not all multicast traffic is visible to Mantra Attack traffic spurt was so rapid and unusual that we first thought it was a MSDP storm ! from http: //www. caida. org/tools/measurement/Mantra/session-mon. html

Multicast Receivers Week of 9/10 ^ 9/11 attack Two independent monitoring efforts on two coasts saw very similar audience bursts after the attacks

Multicast Receivers in September ^ 9/11 attack

Multicast Activity on 9/11 and after l Sudden increase in Mantra traffic of 1000 group members > – Most of these seem to be television viewers – Known TV viewership > 830 – Bandwidth saved approaches or exceeds 1 Gigabit / sec. l Performance as seen from MCT was good.

The Stability of Multicast l l l How did Multicast Connectivity behave under the attack? We (Multicast Technologies) monitor multicast connectivi There were no apparent problems on 9/11 However, there were problems starting on 9/13 when the b Our connectivity suffered from this.

Multicast Redundancy We (Multicast Technologies) have 3 connections into the l Of the 4642 MBGP prefixes advertised to us recently, 28% Number Routes Number Prefixes % 1 1280 28 % 2 2445 53 % 3 917 20 % l The Multicast Mesh Needs to be More Robust

Multicast As the Generators Ran Out… < 25 Broadway Failure ^Attack ^ Alternate Access through AUCS

Conclusions l Multicast Met a Real Need after the 9/11 attacks – Over 800 video users (at least) – ~ 1 Gigabit / sec of bandwidth saved (at least) l Multicast passed its baptism under fire – Availability when other sites were spotty at best l The Multicast mesh and peering need to be made more robust.