Estimate direct users based on dirreq responses.

Estimate relay users by country based on responses to directory
requests to reduce the overall effect of binning and to make relay and
bridge user estimates more comparable.

Implements #18203.
This commit is contained in:
Karsten Loesing 2020-03-25 17:27:14 +01:00
parent da604d9c11
commit 3fcbcf84c9
3 changed files with 60 additions and 29 deletions

View File

@ -7,6 +7,9 @@
- Extract directory authority bytes per day in the bwhist module.
- Rewrite insert_bwhist in SQL to improve performance of the bwhist
module.
- Estimate relay users by country based on responses to directory
requests to reduce the overall effect of binning and to make
relay and bridge user estimates more comparable.
* Minor changes
- Make Jetty host configurable.

View File

@ -104,20 +104,22 @@ public class Main {
long dirreqStatsEndMillis = descriptor.getDirreqStatsEndMillis();
long dirreqStatsIntervalLengthMillis =
descriptor.getDirreqStatsIntervalLength() * 1000L;
SortedMap<String, Integer> responses = descriptor.getDirreqV3Resp();
SortedMap<String, Integer> requests = descriptor.getDirreqV3Reqs();
BandwidthHistory dirreqWriteHistory =
descriptor.getDirreqWriteHistory();
parseRelayDirreqV3Reqs(fingerprint, publishedMillis,
dirreqStatsEndMillis, dirreqStatsIntervalLengthMillis, requests);
parseRelayDirreqV3Resp(fingerprint, publishedMillis, dirreqStatsEndMillis,
dirreqStatsIntervalLengthMillis, responses, requests);
parseRelayDirreqWriteHistory(fingerprint, publishedMillis,
dirreqWriteHistory);
}
private static void parseRelayDirreqV3Reqs(String fingerprint,
private static void parseRelayDirreqV3Resp(String fingerprint,
long publishedMillis, long dirreqStatsEndMillis,
long dirreqStatsIntervalLengthMillis,
SortedMap<String, Integer> responses,
SortedMap<String, Integer> requests) throws SQLException {
if (requests == null
if (responses == null
|| publishedMillis - dirreqStatsEndMillis > ONE_WEEK_MILLIS
|| dirreqStatsIntervalLengthMillis != ONE_DAY_MILLIS) {
/* Cut off all observations that are one week older than
@ -129,25 +131,43 @@ public class Main {
- dirreqStatsIntervalLengthMillis;
long utcBreakMillis = (dirreqStatsEndMillis / ONE_DAY_MILLIS)
* ONE_DAY_MILLIS;
for (int i = 0; i < 2; i++) {
long fromMillis = i == 0 ? statsStartMillis
: utcBreakMillis;
long toMillis = i == 0 ? utcBreakMillis : dirreqStatsEndMillis;
if (fromMillis >= toMillis) {
continue;
double resp = ((double) responses.get("ok")) - 4.0;
if (resp > 0.0) {
for (int i = 0; i < 2; i++) {
long fromMillis = i == 0 ? statsStartMillis : utcBreakMillis;
long toMillis = i == 0 ? utcBreakMillis : dirreqStatsEndMillis;
if (fromMillis >= toMillis) {
continue;
}
double intervalFraction = ((double) (toMillis - fromMillis))
/ ((double) dirreqStatsIntervalLengthMillis);
double total = 0L;
SortedMap<String, Double> requestsCopy = new TreeMap<>();
if (null != requests) {
for (Map.Entry<String, Integer> e : requests.entrySet()) {
if (e.getValue() < 4.0) {
continue;
}
double frequency = ((double) e.getValue()) - 4.0;
requestsCopy.put(e.getKey(), frequency);
total += frequency;
}
}
/* If we're not told any requests, or at least none of them are greater
* than 4, put in a default that we'll attribute all responses to. */
if (requestsCopy.isEmpty()) {
requestsCopy.put("??", 4.0);
total = 4.0;
}
for (Map.Entry<String, Double> e : requestsCopy.entrySet()) {
String country = e.getKey();
double val = resp * intervalFraction * e.getValue() / total;
database.insertIntoImported(fingerprint, "relay", "responses",
country, "", "", fromMillis, toMillis, val);
}
database.insertIntoImported(fingerprint, "relay", "responses", "", "",
"", fromMillis, toMillis, resp * intervalFraction);
}
double intervalFraction = ((double) (toMillis - fromMillis))
/ ((double) dirreqStatsIntervalLengthMillis);
double sum = 0L;
for (Map.Entry<String, Integer> e : requests.entrySet()) {
String country = e.getKey();
double reqs = ((double) e.getValue()) - 4.0;
sum += reqs;
database.insertIntoImported(fingerprint, "relay", "responses", country,
"", "", fromMillis, toMillis, reqs * intervalFraction);
}
database.insertIntoImported(fingerprint, "relay", "responses", "", "",
"", fromMillis, toMillis, sum * intervalFraction);
}
}

View File

@ -85,13 +85,21 @@ As above, refer to the <a href="https://gitweb.torproject.org/torspec.git/tree/d
<p>Parse the <code>"dirreq-write-history"</code> line containing written bytes spent on answering directory requests. If the contained statistics end time is more than 1 week older than the descriptor publication time in the <code>"published"</code> line, skip this line to avoid including statistics in the aggregation that have very likely been reported in earlier descriptors and processed before. If a statistics interval spans more than 1 UTC date, split observations to the covered UTC dates by assuming a linear distribution of observations.</p>
<p>Parse the <code>"dirreq-stats-end"</code> and <code>"dirreq-v3-reqs"</code> lines containing directory-request statistics.
<p>Parse the <code>"dirreq-stats-end"</code>, <code>"dirreq-v3-resp"</code>, and <code>"dirreq-v3-reqs"</code> lines containing directory-request statistics.
If the statistics end time in the <code>"dirreq-stats-end"</code> line is more than 1 week older than the descriptor publication time in the <code>"published"</code> line, skip these directory request statistics for the same reason as given above: to avoid including statistics in the aggregation that have very likely been reported in earlier descriptors and processed before.
Also skip statistics with an interval length other than 1 day.
Parse successful requests by country from the <code>"dirreq-v3-reqs"</code> line. From each number, subtract <code>4</code> to undo the binning operation that has been applied by the relay. Discard the resulting number if it's zero or negative.
Parse successful requests from the <code>"ok"</code> part of the <code>"dirreq-v3-resp"</code> line, subtract <code>4</code> to undo the binning operation that has been applied by the relay, and discard the resulting number if it's zero or negative.
Parse successful requests by country from the <code>"dirreq-v3-reqs"</code> line, subtract <code>4</code> from each number to undo the binning operation that has been applied by the relay, and discard the resulting number if it's zero or negative.
Split observations to the covered UTC dates by assuming a linear distribution of observations.</p>
<h4>Step 3: Estimate fraction of reported directory-request statistics</h4>
<h4>Step 3: Approximate directory requests by country</h4>
<p>Relays report directory request numbers in two places: as a total number (<code>"dirreq-v3-resp"</code> line) and as numbers broken down by country (<code>"dirreq-v3-reqs"</code> line).
Rather than using numbers broken down by country directly we multiply total requests with the fraction of requests from a given country.
This has two reasons: it reduces the overall effect of binning, and it makes relay and bridge user estimates more comparable.
If a relay for some reason only reports total requests and not requests by country, we attribute all requests to "??" which stands for Unknown Country.</p>
<h4>Step 4: Estimate fraction of reported directory-request statistics</h4>
<p>The next step after parsing descriptors is to estimate the fraction of reported directory-request statistics on a given day.
This fraction will be used in the next step to extrapolate observed request numbers to expected network totals.
@ -117,7 +125,7 @@ frac = -----------------------------
h(H) * n(N)
</pre>
<h4>Step 4: Compute estimated relay users per country</h4>
<h4>Step 5: Compute estimated relay users per country</h4>
<p>With the estimated fraction of reported directory-request statistics from the previous step it is now possible to compute estimates for relay users.
Similar to the previous step, the same approach described here also applies to estimating bridge users by country, transport, or IP version as described further down below.</p>
@ -132,7 +140,7 @@ This approach also works with <var>r(R)</var> being the sum of requests from <em
<p>A client that is connected 24/7 makes about 15 requests per day, but not all clients are connected 24/7, so we picked the number 10 for the average client. We simply divide directory requests by 10 and consider the result as the number of users. Another way of looking at it, is that we assume that each request represents a client that stays online for one tenth of a day, so 2 hours and 24 minutes.</p>
<p>Skip dates where <var>frac</var> is smaller than 10% and hence too low for a robust estimate. Also skip dates where <var>frac</var> is greater than 110%, which would indicate an issue in the previous step. We picked 110% as upper bound, not 100%, because there can be relays reporting statistics that temporarily didn't make it into the consensus, and we accept up to 10% of those additional statistics. However, there needs to be some upper bound to exclude obvious outliers with fractions of 120%, 150%, or even 200%.</p>
<h4>Step 5: Compute ranges of expected clients per day to detect potential censorship events</h4>
<h4>Step 6: Compute ranges of expected clients per day to detect potential censorship events</h4>
<p>As last step in reproducing relay user numbers, compute ranges of expected clients per day to detect potential censorship events.
For further details on the detection method, refer to the technical report titled <a href="https://research.torproject.org/techreports/detector-2011-09-09.pdf">"An anomaly-based censorship-detection system for Tor"</a>.
@ -220,12 +228,12 @@ This allows us to combine unique IP address sets by country and by transport and
<h4>Step 4: Estimate fraction of reported directory-request statistics</h4>
<p>The step for estimating the fraction of reported directory-request statistics is pretty much the same for bridges and for relays.
This is why we refer to Step 3 of the <a href="#relay-users">Relay users</a> description for this estimation.</p>
This is why we refer to Step 4 of the <a href="#relay-users">Relay users</a> description for this estimation.</p>
<h4>Step 5: Compute estimated bridge users per country, transport, or IP version</h4>
<p>Similar to the previous step, this step is equivalent for bridge users and relay users.
We therefore refer to Step 4 of the <a href="#relay-users">Relay users</a> description for transforming directory request numbers to user numbers.</p>
We therefore refer to Step 5 of the <a href="#relay-users">Relay users</a> description for transforming directory request numbers to user numbers.</p>
</div>