You are on page 1of 141

From black holes to wireless networking

daloRADIUS and cracking a hole in the hotspot Liran Tal 2013

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Whats ahead

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Topics
Wireless ISPs and Hotspots RADIUS and How It Works Open Source A journey through open source, from need to product

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

The Story

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2006
5 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

HTML5
Twitter

2006

Android

Apps Store iPhone UX Designer Responsive Web

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

First REAL job at a Hi-Tech startup

* Image source: capecoral.net

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Which Hi-Tech startup?

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Why REAL startup?

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Why REAL startup?

10

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Why REAL startup?

11

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

10Levels participated, as an integrator, for big WISP project in Freetown, Sierra Leone led by Netcom

12

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

10Levels participated, as an integrator, Mail Server for big WISP project Networking in Freetown, Sierra Leone led by Netcom

13

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Wireless ISP

10Levels participated, as an integrator, for big WISP project in Freetown, Sierra Leone led by Netcom

* Image source: makeuseof.com

14

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

10Levels participated, as an integrator, for big WISP project in Freetown, Sierra Leone led by Netcom

* Image source: makeuseof.com

15

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

10Levels participated, as an integrator, for big WISP project in Freetown, Sierra Leone led by Netcom

* Image source: makeuseof.com

16

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

10Levels participated, as an integrator, for big WISP project in Freetown, Sierra Leone led by Netcom

* Image source: makeuseof.com

17

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

10Levels participated, as an integrator, for big WISP project in Freetown, Sierra Leone led by Netcom

* Image source: makeuseof.com

18

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Users report network issues

* Image source: arstechnica.com

19

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Local CTO calls Netcom (integrator)

* Image source: omnitechsupport.com

20

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Netcom contact person calls 10Levels

* Image source: findandconvert.com

21

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2 weeks later Im in Sierra Leone Doing network sniffing with my best friend ethereal

* Image source: shutterstock.com

22

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Freetowns air port...

* Image source: sean mendis

23

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Freetowns air port... and thats after the upgrade

* Image source: sean mendis

24

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Freetowns air port... From my camera

* Image source: sean mendis

25

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

* Image source: www.screenhog.com

26

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Company has an idea

* Image source: www.screenhog.com

27

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

or actually

* Image source: www.screenhog.com

28

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

an IDEA!

* Image source: www.screenhog.com

29

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Lets do WISP, on Linux

* Image source: http://www.ossramblings.com/

30

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

How do you pull a WISP?

* Image source: www.screenhog.com

31

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Access Points and Backhaul for infrastructure

* Image source: fibernova.com, http://img1.mlstatic.com/

32

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Network equipment, routers, switches

* Image source: crn.com

33

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

You do want to make money, right? Billing.

* Image source: http://www.citrusdb.org/, http://www.freeside.biz/

34

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

E-mail services

* Image source: www.screenhog.com

35

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Remote access servers

* Image source: www.screenhog.com

36

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Remote access servers


often referred to as or

NAS Network Access Server

RAS Remote Access Server

* Image source: www.screenhog.com

37

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Authentication

The worlds most popular RADIUS server

* Image source: www.screenhog.com

38

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Authentication

RADIUS
The worlds most popular RADIUS server

* Image source: www.screenhog.com

39

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Authentication

* Image source: www.screenhog.com

40

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Authentication

Not really
* Image source: www.screenhog.com

41

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

RADIUS Remote Access Dial-In User System

42

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

RADIUS Remote Access Dial-In User System

Authentication who is this user? Is that really him? Authorization what is this user allowed to do? Accounting what did the user do?

43

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

How does it work?

* Image source: h3c.com

44

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Remember how to connect to your ISP?

* Image source: exetel.com.au

45

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Remember how to connect to your ISP?

* Image source: exetel.com.au

46

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

RADIUS attributes apply a user policy

47

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

How do we manage users?

48

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

How do we manage users? Provisioning

49

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

How do we manage users? Provisioning


Create users Configure user profiles Bandwidth limits Login times Account expiration Simultaneous Logins
Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

50

daloRADIUS,
The rise of

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
52 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
web management platform for freeRADIUS deployments?

53

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
dialup admin = bundles with FreeRADIUS

54

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
no other worthy open source project to tackle this problem

55

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
the endeavor begins

56

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
the endeavor begins lets scratch that itch!

57

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
hardest part of every new software project?

58

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
choosing a name

59

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
daloRADIUS

60

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
daloRADIUS whats in a name?

61

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
daloRADIUS whats in a name? Daloya my wifes last name

62

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
daloRADIUS whats in a name? Daloya my wifes last name Now she is famous!

63

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

2007
daloRADIUS whats in a name? Daloya my wifes last name Now she is famous!

64

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
daloRADIUS is an advanced RADIUS web management application aimed at managing hotspots and generalpurpose ISP deployments. It features user management, graphical reporting, accounting, a billing engine and integrates with GoogleMaps for geo-locating.
65 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
every decent project needs a logo

66

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
every decent project needs a logo

67

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
my first major open source web venture

68

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
my first major open source web venture pioneer project

69

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
my first major open source web venture pioneer project great adoption potential

70

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
my first major open source web venture pioneer project great adoption potential amazing community feedback

71

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
mission #1

72

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
SourceForge project page

73

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
SourceForge project page code hosting

74

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
SourceForge project page code hosting collaboration

75

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
open source yields some food-wise benefits

76

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
I bet my friend I can hit lower than 1000 ranking on SourceForge

77

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

78

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
That reminds me! @andel7 you still owe me a meal!

79

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
Back To The Future

80

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
Back To The Future

81

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

open source project analysis

82

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
mostly written in PHP well established, mature codebase maintained by one developer decreasing Y-O-Y commits

83

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

84

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

105K
lines of code has had 2,061 commits made by 6 contributors
85 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

26
person years based on COCOMO model
86

$1.4M
estimated cost for $55k average salary

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
more on project growth

87

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
more on project growth

88

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

> 150K
downloads
89 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
who is using it?

90

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
who is using it? exotic people

91

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
who is using it? exotic people really

92

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

Papua New Guinea

93

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

Ecuador

94

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

Iceland

95

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
who is behind those downloads?

96

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
ISPs, Hotspots, Education

97

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
ISPs, Hotspots, Education partial list:

98

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
ISPs, Hotspots and Education

SiPalto
99 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
ISPs, Hotspots and Education
* these companies have been on the mailing list at some point

100 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
I even published a user guide book

101 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

102 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

>100
copies sold since December 2012
103 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

~250
pages step by step instructions

daloRADIUS
none of this would have been possible without

104 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
none of this would have been possible without an amazing community of users

105 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
none of this would have been possible without an amazing community of users an amazing community of developers

106 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

107 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
Evgeniy Kozhuhovskiy introducing multi-lingual support

108 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS
multi-lingual proves promising as project grows

109 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

daloRADIUS

110 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Hotspots
The origins of

- Yoda

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

From black holes to wireless networking

* Image source: http://www.space.com/

112 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

From black holes to wireless networking

* Image source: http://www.space.com/

113 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

John OSullivan, astronomer, electrical engineer.

* Image source: http://www.techweekeurope.co.uk/

114 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

John OSullivan, astronomer, electrical engineer.


Australian mate Work in the area of radio waves and Fourier transforms (eh?) Hunter of black holes, in hope of improving his radio telescope

* Image source: http://www.techweekeurope.co.uk/

115 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Wireless Fidelity

Moving packets in the air since the 90s


* Image source: http://rlab.lse.ac.uk/

116 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Wireless Fidelity
802.11b (11Mbps) 802.11g (54Mbps) 802.11n (120Mbps)

Moving packets in the air since the 90s


* Image source: http://rlab.lse.ac.uk/

117 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Hotspots = Wireless Access Points for Internet connectivity

* Image source: http://www.techweekeurope.co.uk/

118 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Hotspots

Coffee shops Institutions Airports

* Image source: http://www.techweekeurope.co.uk/

119 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Captive Portals

Redirect all HTTP traffic to a web page User agrees to terms of service or pay online for Internet access

* Image source: www.screenhog.com

120 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Hotspots

Doesnt mean free Doesnt mean secure

* Image source: http://www.techweekeurope.co.uk/

121 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Captive Portals
The gateway for Internet access

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Captive Portals Internet access

Not always free Airports Hotels

* Image source: www.screenhog.com

123 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Captive Portals Internet access

Restricted access only to staff

* Image source: www.screenhog.com

124 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Captive Portals Internet access

Need SSH access but only HTTP is allowed?

* Image source: www.screenhog.com

125 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Captive Portals Internet access

Internet makes people happy

* Image source: www.screenhog.com

126 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

* Image source: www.screenhog.com

127 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Happiness is free wi-fi

* Image source: www.screenhog.com

128 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals

VPNs ICMP traffic tunneling MAC piggy-back

* Image source: www.screenhog.com

129 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals

Most probably all of these are not an option

VPNs ICMP traffic tunneling MAC piggy-back

* Image source: www.screenhog.com

130 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work

* Image source: www.screenhog.com

131 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work

DNS

* Image source: www.screenhog.com

132 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work

DNS Huh??

* Image source: www.screenhog.com

133 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work

DNS Tunneling

* Image source: www.screenhog.com

134 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work

DNS is mandatory to resolve hostnames DNS is recursive -> delegate hostname resolution to a host you control

* Image source: www.screenhog.com

135 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work

* Image source: wikibooks.com

136 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work


Payload must be base32/base64 encoded 512 bytes for each DNS packet DNS uses UDP so it requires further handling

* Image source: www.screenhog.com

137 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals

* Image source: http://analogbit.com/

138 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Gaining Internet access through Captive portals that actually work, but not always
DNS redirection will prevent DNS tunneling from working Firewalling DNS activity

* Image source: www.screenhog.com

139 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Demo Time!

* Image source: www.screenhog.com

140 Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Thank you

Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

You might also like