Issue Date:

Revision:

APNIC Update 2014 IDNOG 1

WITA LAKSONO

[31 May 2014]

[4]

Overview

APNIC’s Vision: “A global, open, stable, and secure Internet that serves the entire Asia Pacific community”

2

Serving APNIC Members

Supporting Internet development in the Asia Pacific region

Collaborating with the Internet community

3

APNIC’s Mission

•  Function as the RIR for the Asia Pacific, in the service of the community of Members and others

•  Provide Internet registry services to the highest possible standards of trust, neutrality, and accuracy

•  Provide information, training, and supporting services to assist the community in building and managing the Internet

•  Support critical Internet infrastructure to assist in creating and maintaining a robust Internet environment

•  Provide leadership and advocacy in support of its vision and the community

•  Facilitate regional Internet development as needed throughout the APNIC community

4

Serving APNIC Members •  IPv6 statistics •  IPv4

–  Last /8 statistics –  Market transfer statistics

•  ASN statistics •  Membership growth •  Services update

–  Whois –  MyAPNIC updates

“Function as the RIR for the Asia Pacific, in the service of the community of Members and others”

“Provide Internet registry services to the highest possible standards of trust, neutrality, and accuracy”

5

Cumulative IPv6 Delegations (/32s)

0

5000

10000

15000

20000

25000

30000

35000

40000

45000

50000

2009 2010 2011 2012 2013

Date

Num

ber o

f /32

s

6

IPv6 Delegations by Year

0

100

200

300

400

500

600

700

2009 2010 2011 2012 2013

Date

Num

ber o

f del

egat

ions

7

IPv4 Last /8 Delegations

0

20

40

60

80

100

120

140

160

180

200

Apr

-11

May

-11

Jun-

11

Jul-1

1 A

ug-1

1 S

ep-1

1 O

ct-1

1 N

ov-1

1 D

ec-1

1 Ja

n-12

Fe

b-12

M

ar-1

2 A

pr-1

2 M

ay-1

2 Ju

n-12

Ju

l-12

Aug

-12

Sep

-12

Oct

-12

Nov

-12

Dec

-12

Jan-

13

Feb-

13

Mar

-13

Apr

-13

May

-13

Jun-

13

Jul-1

3 A

ug-1

3 S

ep-1

3 O

ct-1

3 N

ov-1

3 D

ec-1

3 Ja

n-14

Fe

b-14

M

ar-1

4 A

pr-1

4 M

ay-1

4

Date

Del

egat

ions

8

As at 31 May 2014

IPv4 Market Transfers

0

2

4

6

8

10

12

14

16

18

20 N

ov-1

0 D

ec-1

0 Ja

n-11

Fe

b-11

M

ar-1

1 A

pr-1

1 M

ay-1

1 Ju

n-11

Ju

l-11

Aug

-11

Sep

-11

Oct

-11

Nov

-11

Dec

-11

Jan-

12

Feb-

12

Mar

-12

Apr

-12

May

-12

Jun-

12

Jul-1

2 A

ug-1

2 S

ep-1

2 O

ct-1

2 N

ov-1

2 D

ec-1

2 Ja

n-13

Fe

b-13

M

ar-1

3 A

pr-1

3 M

ay-1

3 Ju

n-13

Ju

l-13

Aug

-13

Sep

-13

Oct

-13

Nov

-13

Dec

-13

Jan-

14

Feb-

14

Mar

-14

Apr

-14

May

-14

Inter-RIR

Transfers

Date

Num

ber o

f tra

nsfe

rs

9

As at 31 May 2014

Cumulative ASN Delegations

0.00

1,000.00

2,000.00

3,000.00

4,000.00

5,000.00

6,000.00

7,000.00

8,000.00

9,000.00

10,000.00

2009 2010 2011 2012 2013

4-byte

2-byte

Date

Del

egat

ions

10

Membership Growth

0

500

1000

1500

2000

2500

3000

3500

4000

4500

1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013

XL

VL

L

M

S

VS

AS

Date

Mem

bers

11

Whois Updates

12

New features •  ‘geoloc’ and language

attributes •  ‘whowas’ functionality

RDAP •  WEIRDS •  Pilot service

available •  Contribution to

RIPE whois server

MyAPNIC Improvements

13

Referral application

Bulk feature for IRT added

Interface improvements

https://myapnic.net http://www.apnic.net/myapnic

Supporting Internet Development in the Asia Pacific Region

•  Policy development

•  IPv6 support

•  Training

•  APNIC Events

•  Infrastructure capacity building

•  Information Society Innovation Fund (ISIF Asia)

“Provide information, training, and supporting services to assist the community in building and managing the Internet”

“Support critical Internet infrastructure to assist in creating and maintaining a robust Internet environment”

“Facilitate regional Internet development as needed throughout the APNIC community”

14

Policy Implementations

•  prop-108: Suggested changes to the APNIC Policy Development Process

•  prop-107: AS Number transfer policy proposal

•  prop-109: Allocate 1.0.0.0/24 and 1.1.1.0/24 to APNIC Labs as Research Prefixes

•  prop-105: Distribution of returned IPv4 address (Modification of prop-088)

15

IPv6 Support

16

www.apnic.net/ipv6

• ASEAN ICT SMEs Conference, Hanoi •  IPv6 Event by ISOC HK, Hong Kong •  ICANN 49, IPv6 Roundtable, Singapore • Global IPv6 and Next Generation Summit 2014,

Beijing • APEC TEL 49

Outreach

• Asia Pacific IPv6 Task Force • APNIC continues to provide Secretariat services • Met at APNIC 36 and APRICOT 2014/APNIC 37

APIPv6TF

• White paper published • www.apnic.net/ipv6-decision-makers

IPv6 for Decision Makers

Training

•  Continuing focus on IPv6 deployment IPv6

•  Extensive exercises in virtual and physical training labs

Hands-on

•  Every Wednesday is IPv6 day; 179 hours training provided

eLearning

17

APNIC Events •  APNIC 36: Xi’an, China

–  Total on-site delegates: 251 –  Total remote participants: 409

•  APRICOT 2014/APNIC 37: Petaling Jaya, Malaysia –  Total on-site delegates: 466 –  Total remote participants: 262

•  NEW: APNIC Regional Meetings (ARM) –  Free one-day events –  ARM 1 with MyNOG 3 in Kuala

Lumpur on 29 November 2013 –  ARM 2 - in conjunction with

Internet20PH on 4 April 2014 in Manila

–  ARM 3 – with bdNOG on 24 May in Dhaka

18

Infrastructure Capacity Building

19

Provided training and equipment to help establish

the Vanuatu IXP

Helped establish an I-Root server instance in Port Vila,

Vanuatu

IXP Workshop held in Bangkok, Thailand -

working towards establishing the country’s

first IXP

APNIC supported the establishment of bdNOG,

BTNOG and IDNOG, new network operators groups in Bangladesh, Bhutan and Indonesia

ISIF and Seed Alliance

20

• Small grants and awards • AUD 1.3m over 3 years (IDRC, Canada) • So far, AUD 1.2m to 38 projects in 17 economies • 2014 Call for Grants: 11 projects selected for implementation

in 2014 • 2014 ISIF Asia Awards: 93 applications received; 34 passed

pre-screening

ISIF Asia

•  Joint project of ISIF (APNIC), Frida (LACNIC), FIRE (AFRINIC)

• AUD 1.5m over 3 years (Sida, Sweden)

Seed Alliance

Collaborating with the Internet Community

•  APNIC Labs

•  Strategic Engagement

•  Internet cooperation

“Provide leadership and advocacy in support of APNIC’s vision and the community”

21

APNIC Labs •  Measurement activities

–  IPv6 readiness by economy and ISP; IPv6 performance

–  Repurposed IPv6 measurement for DNSSEC validation by economy and ISP

–  Tracking growth of routing table in IPv4 and IPv6

–  RPKI use across the Internet

•  Long-term investigation exercise into evolving nature of dark traffic in both IPv4 and IPv6

•  Internet number resource reporting and analysis

labs.apnic.net blabs.apnic.net

22

Strategic Engagement

23

•  NOGs, NIR OPMs, I*, CERTs, ISOC Chapters, PACINET, PICISOC, PTC, PITA

Technical community

•  APEC-TEL 47 and 48, ITU WTPF, APT, WSIS+10, ITU Connect Asia Pacific Summit, ITU Telecom World 2013, APEC TEL 49, NETmundial

Governmental

•  National IGFs (Nethui, auIGF), APrIGF •  Bali IGF - significant support given for

fundraising and logistics IGF

APNIC Resource Certification Service

Internet Routing Security

•  Routing security is essential to integrity of Internet –  Need to Improve security of inter-domain routing

•  Who has the authority to advertise what information into the routing system ?

•  The majority of network relationships are based on system of mutual trust –  Each party trusts that routes used to transmit information are safe

•  The trust model is increasingly open to potential abuse and attack

25

About RPKI

•  An architecture to support improved security of Internet routing using PKI infrastructure

•  A robust security framework for verifying the association between resource holders and their Internet resources –  “cryptographically verifiable attestations” for IP address delegation

and their use

•  This architecture is called Resource Public Key Infrastructure (RPKI)

26

Resource Delegation Hierarchy IANA

AFRINIC RIPE NCC ARIN APNIC LACNIC

NIR1 NIR2

ISP ISP ISP ISP

ISP ISP ISP

About RPKI •  “Trustable authority” mirrors the administrative resource

allocation hierarchy with certificates that match current resource delegations

•  A resource holder operating a sub-delegation registry (e.g. an LIR) may use an RPKI system to generate certificates that correspond to these delegations –  grant a unique "right-of-use" for the associated set of IP resources

28

About RPKI

•  These certificates are called resource certificates and they conform to X.509 PKIX standards

•  RPKI is not used to validate attestations of an individual's identity or that individual's role, but as a means to validate that person’s authority to use IP address resources

•  An RPKI resource certificate is required to enable a resource holder to issue “Route Origination Authorizations” (ROAs)

29

What is a ROA ?

•  It is a digital object that contains a list of address prefixes and one AS number

•  It is an authority created by a prefix holder to authorizes an AS number to originate one or more specific route advertisements

•  It does not contain any routing policy information, nor does it convey whether or not the AS holder has even consented to actually announce the prefix(es) into the routing system

APNIC’s RPKI Service

•  Enhancement to the RIR Registry –  Offers verifiable proof of resources holdings

•  Resource certification is an opt-in service –  Resource holders choose to request a certificate and provide their

public key to be certified

•  APNIC has integrated RPKI management service into MyAPNIC for APNIC Member use

31

What You Need To Know

•  You are encouraged to experiment, test, play and develop –  Eg, you can create your ROAs

•  RPKI standards are still being developed, and the operating environment for RPKI use is still fragile

•  It's ready for testing and prototyping. It's probably not ready for production use just yet

•  Please tell us what you find but don’t rely on it in your network yet

APNIC Survey 2014 •  11 June - 11 July 2014

•  Opportunity to provide input on APNIC’s performance, development, and future direction

•  Contributes to APNIC’s future planning processes

•  Run by an impartial, independent research organization

•  Confidentiality of respondents guaranteed

•  Focus Group Report available

33

survey.apnic.net #apnicsurvey2014

You’re Invited! •  APNIC 38: Brisbane, Australia, 9-19 Sep 2014

•  APRICOT 2015: Fukuoka, Japan, 24 Feb-6 Mar 2015

34

THANK YOU www.facebook.com/APNIC

www.twitter.com/apnic

www.youtube.com/apnicmultimedia

www.flickr.com/apnic

www.weibo.com/APNICrir