A First Look Into Distributed VPNs

RING

Ookla reported that average Internet speeds in American homes grew 20x in the last 10 years, from 8 Mbps in2010 to 180 Mbps in 2021, and a similar growing trend isobservable worldwide [8]. Recent studies suggest that the added cost for faster Internet speeds — e.g., $50 monthly to boost from 200 to 300 Mbps with Comcast Xfinity — is not worth to most residential users, which consume only 5% of their available bandwidth. Several systemswere launched which allow users to monetize such spare bandwidth, e.g., distributed proxy or VPN (Virtual Private Network) services.

While such systems are attracting a considerable number of users, both as clients (buyers) and providers (sellers), little to nothing is known about such bandwidth marketplaces. We have identified distributed VPN (dVPNs) as the most concrete examples of such marketplaces because, in essence, a dVPN is a system which allows users to sell their spare bandwidth. The contribution of this work is an investigation of the dVPN ecosystem. We run active and passive measurements to characterize their footprint and performance.

The analysis of up to six months of dVPNs data shows that the three major dVPNs (Mysterium, Sentinel, Tachyon ) compose together a fast-growing network footprint of thousands of nodes (sellers) located all over the world. These nodes offer download speeds comparable with ProtonVPN, a popular centralized VPN. Location-wise, the US is the most attractive market, with the majority of the traffic being destined to services located in the US.


Resources

RING: The first multi-vendors bandwidth marketplace

Poster

Yunming Xiao, Matteo Varvello, Aleksandar Kuzmanovic (2021). A First Look Into Distributed VPNs. In IMC’21. [Poster PDF]

Publications

1. Yunming Xiao, Matteo Varvello, Aleksandar Kuzmanovic (2022). Monetizing Spare Bandwidth: the Case of Distributed VPNs. To appear in SIGMETRICS’22.

Avatar
Yunming Xiao
Research Fellow

I am broadly interested in computer networks and systems. My current research focuses on enhancing the security, privacy, and reliability of Internet infrastructure and services.