Welcome to IXmaps! You may be interested in...
- #1 How Data Travels Across the Internet
- #2 Exploring the IXmaps Traceroute Collection
- #3 Revealing NSA Internet Surveillance
- #4 Boomerang Routing
- #5 Canadian Network Sovereignty
- #6 Where Your Own Data Goes
- #7 Who Carries Your Data
- #8 Privacy Transparency of Internet Service Providers (ISPs) and Carriers
- #9 Public Internet Exchange Points (IXPs)
- #10 Volunteer Contributors
#1 How Data Travels Across the Internet
As your data is carried across the internet between you and a website, or other target destination, routing devices direct it to the next router along the path in a series of "hops." You can discover these routers and the hops between them using traceroute software. IXmaps collects traceroute data generated by contributors from around the globe, locates the routers geographically and then maps the routes to show how data actually travels. If you go to the Explore page, you will see the path followed by the most recent traceroute contribution. Hover your mouse over a dot to see more about that router, and click on the < and > arrows to hop your way along the path. Click on a line (i.e. hop) to see more details about that traceroute as a whole. You can use the various search features there to explore the over one hundred thousand routes that volunteers have contributed.
#2 Exploring the IXmaps Traceroute Collection
There are many ways to explore the IXmaps database. The easiest way is to use the Quick Search buttons in the lower right side of the Explore page. For example, you can map all of the 50 most recent traceroutes by clicking the "Last 50 submitted" button, and then the "Map All" button near the top. Similarly, other buttons enable you to map traceroutes from your ISP, traceroutes from your city, 'boomerang' routes (see below), etc. To learn more about searching and mapping traceroutes, view the How to Search IXmaps video.
#3 Revealing NSA Internet Surveillance
This is traceroute #1859. TR1859 shows the route taken by data travelling from a home computer in Toronto to the San Francisco Art Institute's website. Along this route, we see that the data passes through a known NSA mass surveillance operation at AT&T's internet switching facility in San Francisco. All traffic passing through this site is copied to NSA computers for inspection and storage. The NSA is strongly suspected of having installed similar spy rooms in 15-20 other cities across the United States, including Los Angeles, New York and Chicago. You can see the 18 U.S. cities we estimate as most likely to contain NSA splitter operations, shown as , by turning on the 'NSA layer' via the Layers popup of the Explore page. For more on NSA interception activities, see our NSA surveillance page.
#4 Boomerang Routing
This is traceroute #3381. TR3381 shows data packets travelling from a home computer in Toronto to a local news and entertainment website. Along this route, we see that data packets that begin and end in their travels in Toronto pass through Chicago and New York, two cities most strongly suspected NSA surveillance. We call this type of internet traffic "boomerang routing" - traffic that is routed through the US even when both origin and destination are within Canada. The reasons for boomerang routing are complex - the result of many technical, economic and policy choices made principally by private corporations. Over 25% of the intra-Canadian routes in the IXmaps database follow a boomerang path. To view other boomerang routes, click on the "Boomerangs" button in the Quick Search area of the Explore page. To view other boomerang routes that start and end in Toronto, modify the search created by the "Boomerangs" Quick Search button, replacing Country|CA with City|Toronto in the search parameters.
#5 Canadian Network Sovereignty
The prevalence of "boomerang routes" raises the issue of Canadian network sovereignty, since Canadians' data leaving the country loses its legal and constitutional protections. Further, when passing through routers in the US, data becomes subject to US jurisdiction and is at risk of NSA mass surveillance. This is especially concerning in cases when Canadians are communicating with their governments’ websites. The image shown here is only a sample of the more than 1000 boomerang routes in the database involving Canadians communicating with the federal government (Search term: Does|Contain|Destination Hostname|.gc.ca - i.e. Government of Canada). This highlights the fact that Canada does not control key aspects of internet infrastructure vital for the economic, political, cultural and social security of the nation and unnecessarily deprives Canadians of protection under the Charter of Rights and Freedoms.
#6 Where Your Own Data Goes
Interested in where your own data travels across the internet and who has access to it along the way? You first need to generate traceroutes from your own location. Go to the Contribute page, then download, install and run the IXmaps Client application. You’ll need to provide a name (or pseudonym) so you can find your personal routes later. You can generate traceroutes in batches to a variety of pre-selected target sites, or to individual hostnames (like URLs) of your choosing (e.g. cbc.ca). The more routes you contribute, the richer your options and the more valuable you make the database for others.
#7 Who Carries Your Data
When connecting to a website, it is rare that your local internet service provider (ISP) will carry your data all the way to its destination. Much more typical is that your ISP hands your data over to another network carrier, which in turn passes it on yet to another carrier before reaching its destination. It is not uncommon for half a dozen carriers to be involved behind the scenes. A handful of very large global networking companies, few of which are recognized household names, carry most of the world's long distance internet traffic. You can see who is carrying your data in the Carrier table on the right side of the Explore page. The more prominent carriers (handling Canadians’ data) appear with distinctive colours, which correspond to the colours of the routers (dots) and hops (lines) in the map. You can click on carrier names with dashed underlining to find out more about them.
#8 Privacy Transparency of Internet Service Providers (ISPs) and Carriers
All the carriers that help connect you to your internet destinations are in possession of your data, at least briefly, and have a responsibility to protect your privacy. However we have recent evidence suggesting some may be even secretly provide government agencies access to your data. It is very hard for an average user to tell how well these carriers respect privacy. To help make ISP privacy policies more visible, the IXmaps project has produced a series of Privacy Transparency reports that assess what ISPs say about how they protect user privacy, rating them in 10 categories and awarding stars where deserved. You can find further details by clicking on carrier names with dashed underlining in the Carrier table or going to the Transparency page for the full Keeping Users in the Know or in the Dark reports.
#9 Public Internet Exchange Points (IXPs)
One of the principal ways of keeping internet routing closer to home and avoid boomerang routing, is for carriers to exchange traffic at local internet exchange points (IXPs). This helps avoid unnecessary loss of legal and constitutional protections, and can also improve bandwidth while reducing internet transit costs and delays (i.e. lower latency), bringing economic as well as privacy benefits. With the assistance of the Canadian Internet Registration Authority (CIRA), Canada now has 7 not-for-profit IXPs spanning the country. Each are shown as an by turning on the Public Internet Exchange Point (IXP) - Canada layer, via the Layers popup of the Explore page.
#10 Volunteer Contributors
The IXmaps database relies on crowdsourcing for its collection of traceroutes. We appreciate the over 600 volunteer contributors who have generated traceroutes to 3951 different web destinations. Shown here are the top 10 contributors. We aim to develop a collection of traceroutes that represents well the diversity of internet users and their web destination interests (initially focussing on Canada). We invite you add to our collection by going to the Contribute page and downloading our traceroute generation software.