Active Internet measurements face challenges when some measurements require many remote vantage points. In this paper, we propose a novel technique for measuring remote IPv6 networks via side channels in ICMP rate limiting, a required function for IPv6 nodes to limit the rate at which ICMP error messages are generated. This technique, iVantage, can to some extent use 1.1M remote routers distributed in 9.5k autonomous systems and 182 countries as our "vantage points". We apply iVantage to two different, but both challenging measurement tasks: 1) measuring the deployment of inbound source address validation (ISAV) and 2) measuring reachability between arbitrary Internet nodes. We accomplish these two tasks from only one local vantage point without controlling the targets or relying on other services within the target networks. Our large-scale ISAV measurements cover ~50% of all IPv6 autonomous systems and find ~79% of them are vulnerable to spoofing, which is the most large-scale measurement study of IPv6 ISAV to date. Our method for reachability measurements achieves over 80% precision and recall in our evaluation. Finally, we perform an Internet-wide measurement of the ICMP rate limiting implementations, present a detailed discussion on ICMP rate limiting, particularly the potential security and privacy risks in the mechanism of ICMP rate limiting, and provide possible mitigation measures. We make our code available to the community.

翻译：主动互联网测量面临挑战，因为某些测量任务需要大量远程观测点。本文提出一种新技术，通过IPv6节点为限制ICMP错误报文生成速率而必须实现的ICMP速率限制中的侧信道，来测量远程IPv6网络。该技术iVantage可在一定程度上利用分布在9500个自治系统和182个国家的110万个远程路由器作为我们的"观测点"。我们将iVantage应用于两项不同但均具挑战性的测量任务：1) 测量入站源地址验证的部署情况，2) 测量任意互联网节点间的可达性。我们仅从一个本地观测点完成这两项任务，无需控制目标节点或依赖目标网络内的其他服务。我们的ISAV大规模测量覆盖约50%的IPv6自治系统，发现其中约79%易受欺骗攻击，这是迄今为止最大规模的IPv6 ISAV测量研究。我们的可达性测量方法在评估中实现了超过80%的精确率和召回率。最后，我们对ICMP速率限制实现进行全互联网测量，详细讨论了ICMP速率限制机制（特别是其潜在的安全与隐私风险），并提出了可能的缓解措施。我们将代码开源供社区使用。