This document summarizes APNIC's activities and key metrics from 2018-2019. It highlights that:
1) APNIC membership and resources delegated, such as IPv4 addresses, IPv6 addresses, and autonomous system numbers, continued growing significantly in 2018-2019 according to projections.
2) Network security was identified as the top challenge by APNIC members based on a survey, with specific issues like phishing, spam, and DDoS attacks noted.
3) Scarcity of IPv4 addresses remains a major issue, with deploying IPv6 and the high costs of IPv4 addresses and NAT being the top challenges for members.
6. 6
IPv4 delegations
6
As at 30 Apr
0
500
1000
1500
2000
2500
3000
3500
4000
2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019
East Asia
Oceania
South East Asia
South Asia
Projection
IPv6 delegations
7
As at 30 Apr
0
200
400
600
800
1000
1200
1400
1600
1800
2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019
East Asia
Oceania
South East Asia
South Asia
Projection
IPv4 transfers
8
As at 30 Apr
0
50
100
150
200
250
300
350
400
2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019
Within APNIC Region
Between RIR Regions
Projection
ASN delegations
9
As at 30 Apr
0
200
400
600
800
1000
1200
2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019
East Asia
Oceania
South East Asia
South Asia
Projection
7. RPKI
7
apnic.net/rpki
Measure 31/12/2018 28/2/19 ∆
Members with certs 21.9% 22.4% 2%
Members with ROAs 11.3% 11.6% 2%
IPv4 under ROAs 6.1% 6.6% 8%
IPv6 under ROAs 5.6% 7.2% 22%
‘Validation Reconsidered’
• Reduce sensitivity to isolated or
transient errors
• Adopted as RFC 8360
Resource Tagged Attestation
• RPKI signing of any digital object
e.g. LOA for service provisioning
• OID request submitted to IANA
8. 8
• Relaunched August 2018
• Wordpress, SCORM, Virtual labs
• Free public access (2018)
Enrolled: 1,537
Certified: 1,042
• APNIC courses: APNIC PDP,
Introduction to IPv6, Routing Protocols,
DNS Concepts
• Coming: IPv6 Protocol Architecture,
Security, More labs
• Partners: MANRS, Network Forensics
and Analysis, IoT Security Challenges
apnic.academy
10. 10
• Purpose: To build the APNIC
Development Program
• The ‘fundraising arm’ of APNIC
• 10-year commitment from APNIC
• Board: Edward Tian (CN), Sharad
Sanghi (IN), Sylvia Sumarlin (ID),
Michael Malone (AU), Danish Lakhani
(PK)
• Over USD 1M in funding committed in
first 18 months of operation
apnic.foundation
‘To have a global, open,
stable and secure Internet
that is affordable and
accessible to the entire
Asia Pacific community’
11. Information Society Innovation Fund
Grants and Awards 2018
• 236 nominations, 122 in Gender
Empowerment and Innovation
• USD 210k for 8 grants and 2
awards:
Network Operations Research
(APNIC)
Cybersecurity (APNIC)
Community Networks (ISOC)
Gender Empowerment/Innovation
(IDRC)
WSIS Champion
• ISIF Asia recognized as a WSIS
Champion in the International and
Regional Cooperation category
11
Ten years: 2008 to 2018isif.asia
12. Pacific Developments
12
CERT establishment
workshop, PNG
CERT Vanuatu launch
• Supporting new CERTs
• CERT Tonga, 2016
• CERT-PNG, Jan 2018
• CERT-VU, Jun 2018
• Regional workshops
• Pacific LEA Training
• Major PNG training project
• 16 workshops (APEC)
• Assisted by AUD 800K+
funding via APNIC Foundation
13. apnic.net/survey
• Every 2 years since 1999
• 10th Survey completed Sep 2018
• Regional focus groups, interviews and online survey
• Major input into APNIC Board planning processes
• Independent, anonymous
• Currently conducted by Survey Matters, Australia
• Two major returns
• Performance survey
• Future priorities and expectations
• Thanks to all who responded!
14. 7%
9%
15%
11%
41%
45%
36%
35%
2016
2018
Very poor Poor Below Average Neutral Above average Good Excellent
Quality of Services 91%
12%
10%
16%
10%
35%
39%
35%
39%
201
6
201
8
Very poor Poor Below Average Neutral Above average Good Excellent
Value of Membership 88%
8%
8%
14%
10%
40%
43%
37%
38%
2016
2018
Very poor Poor Below Average Neutral Above average Good Excellent
Value of Services 91%
7%
13%
15%
11%
41%
43%
36%
31%
2016
2018
Very poor Poor Below Average Neutral Above average Good Excellent
Overall experience
85%
OVERALL SATISFACTION
15. Consistent with focus group
feedback, network security is the
number one challenge facing the
community in 2018
Q9. Thinking about your Internet-related services, products or activities, what are the MAIN
operational challenges facing your organisation?
East Asia Oceania SE Asia South Asia LDEs
Developin
g
Developed
Network security 28% 34% 22% 26% 28% 25% 31%
Scarcity of IPv4 addresses 13% 9% 14% 14% 11% 13% 12%
Cost of network operations 10% 14% 17% 11% 13% 13% 11%
Hiring and / or keeping skilled employees 12% 12% 13% 10% 8% 11% 16%
Deployment of IPv6 9% 8% 8% 17% 16% 10% 7%
Management of bandwidth and network capacity 9% 9% 9% 8% 7% 9% 8%
Keeping up with the pace of technology changes 10% 5% 7% 6% 5% 9% 4%
Regulatory requirements involving the Internet 4% 6% 4% 3% 4% 4% 5%
Benchmarking and understanding best practice in network
operations
4% 2% 3% 3% 3% 4% 3%
Access to reliable and credible Internet industry data 3% 1% 4% 3% 4% 2% 2%
Other 0% 1% 0% 0% 0% 0% 1%
3%
3%
4%
7%
8%
11%
12%
12%
13%
27%
Other
Benchmarking and understanding best practice in network…
Access to reliable and credible Internet industry data
Regulatory requirements involving the Internet
Keeping up with the pace of technology changes
Management of bandwidth and network capacity
Deployment of IPv6
Cost of network operations
Hiring and / or keeping skilled employees
Scarcity of IPv4 addresses
Network security
HIGHEST RATING CHALLENGES
16. NETWORK SECURITY
64%
61%
47%
45%
38%
32%
29%
28%
23%
22%
Phishing, spam, malware, ransomware
DDoS attacks
Intrusion and other breaches
Staff lack awareness of security issues
Blacklisting of IP addresses
Routing security
Lack of application security
Inadequate security policies
No cyber security focus from…
Lack of security for IoT applications
Q10. Thinking about network security, what are the MAIN challenges facing your organisation?
Significantly higher / lower than total
16
30%
35%
39%
41%
53%
59%
64%
Establish an APNIC-CERT for information sharing
Encourage CERT development and information…
Engage with Governments in the region about the…
Integrate more security content in APNIC…
Share security insights on the APNIC Blog and…
Collaborate with technical security organisations…
Specific security training courses
Q11. How might APNIC best assist you or others with network security challenges?
17. 49%
38%
34%
33%
21%
21%
19%
Deploying IPv6
Cost of buying IPv4 addresses
Cost & complexity of NATs
IPv4 transfer policies
Working with brokers selling / leasing IPv4…
It is not an issue
“Health” of IPv4 addresses being transferred
Q13. Thinking about the scarcity of IPv4 addresses, what are the MAIN challenges facing your organisation?
Q14. Thinking about the scarcity of IPv4 addresses, which, if any, of the
following IPv4 activities do you think APNIC should undertake?
3%
5%
25%
39%
52%
54%
57%
Other
Take no action
Purchase addresses for distribution
Share information and best practice on…
Provide incentives for the return of address…
Monitoring and reporting usage
Reclaiming/recovering unused address space
IPv4 SCARCITY
18. apnic.net/survey
• APNIC Survey 2018
• Survey report and EC public response
• Strategic Plan 2020-2023
• Facilitated process
• EC and staff workshops
• Strategic planning cycle
• 2020 planning underway
• 2020 Survey will provide mid-term input
APNIC Planning – Next steps
At the end of 2018, membership stood at 7,162. As at end April 2019, membership stood at 7,367 a growth of 2.8%.
NIR accounts stood at 8,875. combined membership is 16,242.