Download to read offline
Uploaded byAPNIC
APNIC Update @ ARM, Mongolia
The document provides an update from APNIC on various aspects related to internet resources and development in Mongolia, including the rise in IPv6 traffic and statistics on IPv4 and IPv6 delegations. It highlights training efforts, technical assistance services, and collaboration with organizations to promote best practices in network operations and security outreach. Additionally, there are information on APNIC's initiatives, including resource distribution, security training, and upcoming events.
More Related Content
Similar to APNIC Update @ ARM, Mongolia
APNIC Update @ ARM, Mongolia
- 1. Issue Date: Revision: APNIC Update TuanNguyen 19 October 2015 Mongolia ARM 18 October 2015 1
- 2. IPv6 traffic ison the rise https://www.google.com/intl/en/ipv6/statistics.html#tab=ipv6-adoption&tab=ipv6-adoption
- 3. IPv6 Traffic inMN 3 https://www.google.com/intl/en/ipv6/statistics.html#tab=per-country-ipv6-adoption&tab=per-country-ipv6-adoption
- 4. Agenda • APNIC Update –Statistics – Training – APNIC Technical Assistance Service • Internet Resources • Internet Security – Security outreach – RPKI
- 5.
- 6. 6 APNIC’s Vision A global,open, stable, and secure Internet that serves the entire Asia Pacific community
- 7. How many IPv4addresses for Mongolia? 0 50 100 150 200 250 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 One /24 = 256 IPv4 addresses 7 Numberof/24 Year
- 8. How many IPv6delegations for Mongolia? 0 1 2 3 4 5 2010 2011 2012 2013 2014 2015 8 14 IPv6 delegations for MN
- 9. How many ASNsfor Mongolia? 0 1 2 3 4 5 6 7 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 4-byte 2-byte 41ASNs for MN
- 10.
- 11. 11 APNIC Training courses 11 IPv6Essentials IPv6 Deployment BGP Basics DNS Fundamentals Advanced BGP Network Security training.apnic.net/courses
- 12. APNIC Training in2015 62 face-to-face courses held in 25 locations 1,833 professionals trained face-to- face Video archives 79 videos 109,389 views 614 professionals trained via 117 eLearning sessions Received training contribution from nine organizations including: • World Bank • Japan International Cooperation Agency (JICA) • ITU 12
- 13. Technical Assistance Service TAS- Thailand TAS - Bangladesh Support for scalable and resilient networks, and best practices in network operations • Distribution and registration of resources • Supporting reverse DNS delegation • Managing whois and IRR • Resource Certification • IPv6 deployment • Internet infrastructure security • Supporting open & neutral IXP & root serverswww.apnic.net/tas 13 • Collaboration with external organizations such as NSRC, ITU etc. • ITU Country Direct Engineering Assistance on IPv6 in Mongolia with APNIC TAS support in July 2015
- 14. NOGs in 2015 BTNOG1 SANOG 24 Participated in 14 NOG events JANOG, HKNOG, PHNOG, bdNOG, LKNOG, MyNOG, SGNOC, IDNOG, AusNOG, NZNOG, SANOG, PACNOG • Technical and APNIC updates • Hostmaster consultations • Training sessions • Sponsorship and logistical support MyNOG 4 PHNOG 2015 14
- 15.
- 16. What can youget? 16 Need IPv4? A maximum of /22 of IPv4 addresses from final /8 and /22 from recovered pool Need IPv6? Members already with IPv4 might instantly qualify for an IPv6 address block Want an AS number? Your organization plans to multi-home
- 17. 0 20 40 60 80 100 120 140 2010 2011 20122013 2014 2015 Intra-RIR Inter-RIR Annual IPv4 Transfers Used Did not use Using listing service Used Remaining Pre-approval usage As at 30 Sep 2015 17
- 18.
- 19. 19 Many options availableto transition 19 4in6 6RD 6in4 6to4 DS- Lite ISATAP NAT64 Teredo NATPT MAP Native IPv6 preferred Many businesses will need to use transition mechanism
- 20. MyAPNIC Improvements • Two-factorauthentication using TOTP • Access all MyAPNIC services (corporate contact, voting, Resource Certification) Log in to MyAPNIC using your email address Maintainers managed as independent objects 20
- 21.
- 22. 22 Security Outreach Craig Ng Promotingsecurity initiatives and best practices in the APNIC community NOGs, CSIRTS and LEA events PK, CN, HK, KR, JP, PH SG, MY, ID, AU Collaboration with JICA and KISA to deliver regional CERT training Geoff Huston member of ICANN SSAC Adli Wahid member of FIRST Board Adli Wahid www.apnic.net/security
- 23. RPKI RPKI presentations to NOGsand conferences ‘Ready to ROA’ Campaign – hands-on sessions to help Members create ROAs Shirts, stickers, web content to promote campaign Regional RPKI adoption has more than doubled in past year - 0.82% to 2.5% and rising www.apnic.net/roa • 10 face-to-face and eLearning RPKI training courses delivered • Offline simulation of production system • Create and revoke ROAs, observe changes to routing state in lab 23
- 24. ROA in EasternAsia 0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100% CN HK JP KP KR MN TW No ROA ROA 24 3 ROA’s created in MN 9.6% of IPv4
- 25.
- 26. Helpdesk: here tohelp! 26 www.apnic.net/helpdesk Dinesh Bakthavatchalam, Internet Resource Analyst (Helpdesk) Zen Ng, Internet Resource Analyst (Helpdesk) Pubudu Jayasinghe, Internet Resource Analyst (Helpdesk) George Odagi, Internet Resource Analyst (Helpdesk) Tom Do, Senior Internet Resource Analyst (Helpdesk) Multilingual support in 8 languages Available 09:00-21:00 (UTC+10) email, skype, chat, phone, VoIP, fax Vivek Nigam, Member Services Manager
- 27. You’re Invited! APRICOT 2016,Auckland, New Zealand 15-26 February 2016 2016.apricot.net 27
- 28.
- 29.
Editor's Notes
- #2 Welcome to the APNIC regional meeting Thank you for your time to come here Hope you will get something out of the presentaions today Opportunity to network. Intro About Me
- #3 Google collects statistics on IPv6 adoption As you can see, IPv6 traffic is on the rise In particular, since 2013 IPv6 traffic has jumped from 1 to 9%
- #4 In the map view [GREEN] Regions where IPv6 is more widely deployed (the darker the green, the greater the deployment) and users experience infrequent issues connecting to IPv6-enabled websites. [ORANGE] Regions where IPv6 is more widely deployed but users still experience significant reliability or latency issues connecting to IPv6-enabled websites. [PINK] Regions where IPv6 is not widely deployed and users experience significant reliability or latency issues connecting to IPv6-enabled websites.
- #5 APNIC Update -Stats IPv4, IPv6, ASN -Training doing, what is available -TAS APNIC technical assistance service -Events – NOGs Internet Resources -Getting more resources, one-click, final address -Transfers -MyAPNIC new features Routing Security -Security outreach -ROA, PKI -ROA stats
- #7 About APNIC Regional internet registry in the asia pacific Ensure the fair distribution of internet resources in the asia pacific vision
- #8 2004 – 2015 in /24’s 58k addresses or 229 /24’s in 2010 13-29 or 3k-7k per year afterwards 38 members in MN 26.25 /22’s obtained out of 76 /22’s that can be obtained from APNIC
- #9 14 IPv6 delegations to MN By number of /32’s is too small (between 1-4) MN has 1 /48 IPv6 assignment, the rest are allocations. Allocation sizes are /32 Can apply for IPv6. Less than half the MN accounts have IPv6 Show IPv6 one-click in a later slide
- #10 Total there are 41 AS MN 4 x 4 byte remainder is 2-byte Aware – running out of 2-byte AS in APNIC pool
- #11 vizAS is a tool for exploring the interconnections between Ases ASN 45204: GEMNET-MN in the middle ASN 55805: MOBICOM-AS-MN IPv4 IPv6 view Can click on an AS for more info To get to this - link
- #12 Meetings, workshops, tutorials, youtube, elearning These are some of the courses that are available More info link – dates schedule
- #13 APNIC training aims to deliver vital skills to network operators across the entire region to help grow the Internet. eLearning webinars have changed slightly, reduced from 4 to 3 sessions each Wednesday from April 2015 Core APNIC topics are also being professionally recorded and edited for YouTube channel. Reviewing and updating existing materials. Introduced Juniper-based material and Juniper training lab Trained 1833 professionals by 62 face to face courses 614 elearning Video has received over 109k views [UPDATE] Hi Tuan, Lisa has computed up to Aug, so when I added up, the stats below should be close to current numbers as of end of SEP 2015: Face to face> Courses: 62 Numbers trained: 1833 locations: roughly 25 (not sure if it¹s country/city) eLearning> Sessions: 117 Numbers trained: 614 Video Archives: videos: 79 views: 109,389 Thanks, Shane
- #14 Note: slide has been updated by Miwa for MN specific TAS is a new initiative to support APNIC member’s efforts to deploy and maintain scalable and resilient networks and best practices in network operations Technical assistance is offered to network operators that need help to tackle projects such as IPv6 deployment. It intends to be provided on a cost recovery basis. APNIC Technical Assistance Service is developed around APNIC’s fundamental missions, Distributing and registration of resources etc. etc. etc. and also supporting deployment of open and neutral IXP and root servers. APNIC TAS also works closely with external parties such as NSRC (Network Startup Resource Centre) and ITU. In July 2015, APNIC TAS worked with ITU to deliver ITU’s Country Direct Engineering Assistance in Mongolia on IPv6 with Mongolia CRC’s great support. We delivered 3 days IPv6 infrastructure security workshop with Philip Smith’s contribution, then visited 4 organizations to have in depth IPv6 discussion on their networks.
- #15 These are the NOGs we have participated in this year Brings together network operators in a specific region, to encourage knowledge sharing, learning and co-operation, and provides a forum to discuss operational issues and technologies of interest. So far in 2015, we have supported and participated at: JANOG 35, Shizuoka, Japan 13-14 Jan SANOG 25, Kandy SriLanka 16-21 Jan NZNOG 2015, Rotorua New Zealand, 26-30 Jan THNOG, Bangkok, 9 March 2015 HKNOG 2015, Hong Kong, 17 April bdNOG 3, Dhaka, Bangladesh 18 May IDNOG 12 June PHNOG – 16 June PacNOG 17 – 13-17 July SANOG 26, 3-11 August MyNOG 5, 17-20 August SGNOG 4, 18-21 August AusNOG 2015, 27-28 August HKNOG 2, 14 September
- #17 103/8 65% left /22 103/8 /22 recovered pool IPv6 automatically qualify AS numbers if you plan to multihome What if you have already received the maximum total IPv4 and need more?
- #18 IPv4 Transfers remain steady as well, however, we are starting to see some transfers from ARIN to NIR members. 44% of Members are utilising the listing service in 2015. 79% of pre-approvals remaining indicates we still have many Members who are looking for sources to transfer from. As of 1 October transfers are now available with the RIPE NCC region.
- #19 /48 or /32
- #20 Try it out. Arth will provide a case study in the next presentation NAT64 popular for mobile providers Dual stack
- #21 Two-factor: Implemented as a response to Member feedback. Utilizes TOTP algorithm (Time-based One-time Password) Can be used instead of certificates but users may choose to continue using certificates Ease of use for access to MyAPNIC Can be used instead of certificates Sign in with email maintainer automation – so maintainers associated with your account will automatically be saved in MyAPNIC for all users of the account
- #23 Security specialist Adli Wahid, is working with different teams within APNIC as well as building relationship with potential and new partners that APNIC can leverage. Build capability through training, providing content on security at APNIC and LEA training Participation in NOGs, inter-governmental forums, etc. We take that knowledge and share it with Members to raise awareness Highlighting relevant initiatives to Members to improve security such as IRT objects in whois, RPKI, and SAVE (BCP 38)
- #24 One of things we are doing is RPKI ROA protect origin Address & AS number wrap in PKI Now up to 2.5% adoption Caveat, not quite ready for production networks. Test, don’t create rules to drop packets. May like to set up alerts, monitor
- #25 Mongolia – 3 ROA’s have been created which covers 9.6% of IPv4 No IPv6 ROA’s economy subregion enabled_count roa_count v4_total v4_roa v4_pct v6_total v6_roa v6_pct CN Eastern Asia 6 1 335473920 2048 0.00061048 325243111680 0 0 HK Eastern Asia 32 7 10979840 11264 0.102588016 3120580864 33554432 1.075262378 JP Eastern Asia 18 4 201233408 3072 0.001526585 157087207424 0 0 KP Eastern Asia 1 0 1024 0 0 0 0 0 KR Eastern Asia 1 0 112360192 0 0 88013275904 0 0 MN Eastern Asia 9 3 212736 20480 9.626955475 218104064 0 0 TW Eastern Asia 11 0 35215616 0 0 39543898368 0 0
- #26 As at June 2015 Country view has been removed from their site. If it were still up then MN would show up on the list Bangladesh IPv4- over 28% Mongolia 9.6%
- #28 Flyers and postcards at the back Fellowship program, you can apply and attend the meeting for free Flights and accommodation is covered
- #29 I will be here in the afternoon. I will be around in the afternoon for helpdesk, HMC, help creating ROA’s, t-shirts