走向结构性交通转变？调查Apple的新中继网络
Towards a Tectonic Traffic Shift? Investigating Apple's New Relay Network
摘要：
苹果最近发布了iCloud Private Relay的第一个测试版，这是一项隐私保护服务，其承诺类似于VPN。该架构由两个层（入口和出口）组成，由不相交的提供商操作。该服务直接集成到苹果的操作系统中，因此为大量用户提供了低门槛。它似乎是建立了主要采用其相对温和的入门级价格。本文从网络的角度分析了iCloud Private Relay及其对互联网的影响和未来基于测量的研究。我们执行EDNS0客户端子网DNS查询以收集入口中继地址并找到1586个IPv4地址。补充RIPE Atlas DNS测量显示1575个IPv6地址。了解这些地址有助于被动检测通过中继网络通信的客户端。根据我们的扫描，从1月到4月，入口地址增长了20%。我们通过中继网络扫描的分析证实了苹果公司关于旋转出口地址的说法。然而，它揭示了入口和出口中继可以位于同一个自治系统中，从而共享类似的路由，潜在地允许流量相关。
英文摘要：
Apple recently published its first Beta of the iCloud Private Relay, a privacy protection service with promises resembling the ones of VPNs. The architecture consists of two layers (ingress and egress), operated by disjoint providers. The service is directly integrated into Apple's operating systems and therefore provides a low entry level barrier for a large user base. It seems to be set up for major adoption with its relatively moderate entry-level price. This paper analyzes the iCloud Private Relay from a network perspective and its effect on the Internet and future measurement-based research. We perform EDNS0 Client Subnet DNS queries to collect ingress relay addresses and find 1586 IPv4 addresses. Supplementary RIPE Atlas DNS measurements reveal 1575 IPv6 addresses. Knowledge about these addresses helps to passively detect clients communicating through the relay network. According to our scans, from January through April, ingress addresses grew by 20%. The analysis of our scans through the relay network verifies Apple's claim of rotating egress addresses. Nevertheless, it reveals that ingress and egress relays can be located in the same autonomous system, thus sharing similar routes, potentially allowing traffic correlation.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
