APNIC Deputy Director General Sanjaya gives an update of APNIC's services and activities at the 2017 MyIX/MyNOG conference in Kuala Lumpur, Malaysia, on 26 October 2017.
11. Whois and Whowas
11
• Whois
- “organization object”
- 56% of Members updated
- Introduction of ‘last
modifed’ attribute to
replace ‘changed’ attribute
apnic.net/whois
• Whowas
- Improved interface
- RDAP spec @ IETF 99
apnic.net/whowas
478 whois qps
0.00
10.00
20.00
30.00
40.00
50.00
60.00
70.00
80.00
90.00
100.00
AF
AP
AS
AU
BD
BN
BT
CK
CN
CX
FJ
FM
GU
HK
ID
IN
IO
JP
KH
KI
KP
KR
LA
LK
MH
MM
MN
MO
MP
MV
MY
NC
NF
NP
NR
NU
NZ
PF
PG
PH
PK
PW
SB
SG
TH
TK
TL
TO
TV
TW
VN
VU
WF
WS
% organization updates per economy
13. RPKI
13
• RPKI uptime 99.9995%
• 21 qps
ROAs 2017
ROA-enabled Members 797
Numbers of ROAs created 722
Number of IPv4 addresses
under ROAs (/32s)
15,473,736
Number of IPv6 addresses
under ROAs (/56s)
3,124,861,952
% allocated space under
ROAs (IPv4)
1.79%
% allocated space under
ROAs (IPv6)
0.36%
• RIRs move to “all resources” Trust
Anchor (2017)
• “Ready to ROA”
PH, BT, CK, CN, ID, KH, NP, MN
14. APNIC Online
14
• MyAPNIC
• Support for Organization object
• apnic.net
• Wordpress inhouse
• New IPv6 pages
• Better program design
• apnic.foundation
• New CMS and content refresh
16. Training and TA
16
TA- Indonesia
Updated Courses: IRM, IRR, Network
Security, MPLS, SDN, NFV
2017
Face-to-face training
Locations
Trainees
52
23
1,763
Community Trainers
Courses
Locations
11
14
6
eLearning sessions
Trainees
109
552
Training YouTube videos
Views
115
519,191
Technical Assistance (TA) 10
Network Security workshop, Hong
Kong
Training, Laos training.apnic.net
17. apnic.academy
17
• Launched April 2017 (Moodle)
• Free public access
• ‘Introduction to CyberSecurity’
‘Internet Resource Management’
• Registered: 1,506
• Enrolled: 1,506
• Certified: 279
• Coming:
• IPv4/IPv6 Routing
• More Security/CERTs
18. Community
18
• NOGs: 18 presentations, Member
consults, tech support, sponsorship
• Root servers: J-root installed in NP
• Sponsorship of “aggressive
NSEC caching” in BIND
• RIPE Atlas
• Anchors in MM, MN, AU, NP, ID,
VN
• 270+ probes distributed
• MoUs
• Sri Lanka CERT|CC, ISC;
• KISA, APIA, Netnod
• 48 fellowships for APNIC 44
PacNOG 30, FJ
19. Security
19
• 21 NOG and CERT events
• APSIG 2017, APrIGF 2017, ASEAN,
KISA, CNCERT, INTERPOL SG
• Tonga CERT.to: Support and training
• CERT support in the Pacific
• FIRST
• MoU signed
• Workshops at APRICOT 2017 and
APNIC 44
• Adli Wahid re-elected to Board
• 36 blog posts
• New team member: Jamie Gillespie
apnic.net/security
Adli Wahid
20. IPv6
20
• Training: 15 face-to-face with 457
trainees
• eLearning: 20 sessions with 117
trainees
• 8 presentations at regional events
• World IPv6 Day: 6 June 2017
• Joint APNIC/ITU IPv6 Infrastructure
Security Workshops in TH and BT
• New IPv6 web pages, case studies
• 62 blog posts
apnic.net/ipv6
APNIC/ITU IPv6
Workshop 2017,
Bangkok
21. IPv6 growth
21
50% 56%
7.5% 17%
1 Jan 2017 1 Oct 2017
Members
holding IPv6
addresses
IPv6 capability
in APNIC region
22. About Malaysia
31,164,177 people
21,378,625 users
69% penetration
240 ASes
296.34B GDP
IPv4 171 in BGP
6,663,936 addresses
0.21 per head
90% visible
IPv6 64 in BGP
545,464 M addresses
17,502 per head
21% visible
18% capability
25. Top 10 IPv6 Capable
ASN AS Name IPv6
Capable
IPv6
Preferred
# Samples
AS132688 UM-AS-AP University of Malaya 33.24% 31.21% 2262
AS4788 TMNET-AS-AP TM Net, Internet Service Provider 27.95% 25.96% 2893285
AS24314 UPSI-AS-AP University Pendidikan Sultan Idris 25.23% 24.55% 440
AS4818 DIGIIX-AP DiGi Telecommunications Sdn. Bhd. 16.65% 16.50% 635801
AS38044 GITN-NETWORK GITN-NETWORK 10.86% 10.45% 8869
AS9930 TTNET-MY TIME dotCom Berhad 7.42% 7.32% 156976
AS45960 YTLCOMMS-AS-AP YTL COMMUNICATIONS SDN BHD 7.03% 6.95% 103453
AS17564 GITN-PCN-AS-AP GITN (M) Sdn. Bhd. 6.62% 5.32% 3250
AS9534 MAXIS-AS1-AP Binariang Berhad 5.45% 5.23% 813029
AS38322 WEBE-MY-AS-AP WEBE DIGITAL SDN. BHD. 4.02% 3.99% 63594
26. labs.apnic.net
26
• 21 articles on Blabs and APNIC blogs
• 17 presentations at industry events
IETF, PTC, OARC, RIRs, NOGs
• Current research topics
• DNSSEC KSK rollover
• IPv6 and large MTU settings
• Latent QUIC capability
• Dynamic behaviour of BBR
• Geoff Huston serves on ICANN SSAC
Geoff Huston
IPv6 capability
in the Asia
Pacific
27. blog.apnic.net
27
Average: 32k per month
Top 5: IPv6, Security, Training,
NOGs, IXP
Total: 203 authors to date
Economies covered: 32
Views
Guest
Bloggers
99
As at 30 Sep
0
10,000
20,000
30,000
40,000
50,000
60,000
Jan Feb Mar Apr May Jun Jul Aug Sep
APNIC Blog views 2017
29. Global Engagement
29
10th APT Policy and Regulation Forum
• FIRST events
• APT PRF
• GSMA MWC
• ITU-WTDC prep process
• GFCE
• IPv6 at APEC TEL 55, with LACNIC
• DNSSEC KSK Rollover, with ICANN
• APrIGF, APSIG, PKSIG, PacIGF,
NPIGF, IGFA
• APASA launch with ICANN, ISOC
(AP hubs) and DotAsia
30. RIR Collaboration
30
Geoff Huston at ARIN 39
• RDAP batch extension proposal
• DNSSEC KSK rollover with RIRs
• Seed Alliance with AFRINIC and LACNIC
• ASO review
• World IPv6 Launch 5th anniversary
• Joint APNIC-AFRINIC Boards meeting
at AFRINIC 26 / AIS’17
• NRO CGs: engineering, registry, comms,
finance, HR, legal
• Participation at all RIR meetings in 2017
As usual, this presentation is structured around three areas of activity…
Serving Members
Supporting regional internet development
Cooperating globally where we can
Total direct membership for 2016 was 5,994. Current membership is 6,414, or around 6.5% growth from 2016.
There are currently 7,413 NIR members. Combined membership is 13,827.
Total delegations so far in 2017 – 1005; current trend is slightly lower than 2016
The majority of delegations have been a /32 (71%) which is the default allocation size for providers, followed by /48s which is the default assignment size for end-sites. Most came from normal allocations, instead of one-click.
Again, current trend is lower for IPv4 allocations
There’s a waiting list for recycled addresses
----
Delegations so far for 2017 – 1,743
Given the scarcity of IPv4, it’s no surprise that IPv4 transfers remain frequent; 155 transfers within the region; 50 between the regions to date.
Most transfers are still within the APNIC region
Amount of addresses transferred to date is trending lower than last year
Transfers can take place between APNIC and both the ARIN and RIPE regions
Almost all the transfers between regions have the address space coming into the APNIC region rather than leaving it.
ASN delegations are forecast to be slightly down on 2016
Assignments in 2017 so far 640
We’re also tracking the number of Members holding different types of resources
This chart shows that across the members, 75% hold ASNs, 96% IPv4, and 55% IPv6
It’s great to see the IPv6 number continue to grow.
Whois is a critical service of course. The upgrade to v4 is now complete acoss the master server and query nodes.
This included RDAP support which APNIC developed and contributed to the RIPE codebase
Recently introduced ‘last modified’ attribute to replace ‘changed’ attribute to accurately reflect when an object was last changed. Use of ‘changed’ attribute will be deprecated in the near future.
We’re continuing to develop our whowas service – historical whois
We developed a proposed RDAP extension to support these historical query results, and the draft specification was presented at IETF 99
We’re continuing to develop the prototype user interface and the current focus is on making it more mobile friendly
Whois is a critical service of course. The upgrade to v4 is now complete acoss the master server and query nodes.
This included RDAP support which APNIC developed and contributed to the RIPE codebase
We’re continuing to develop our whowas service – historical whois
We developed a proposed RDAP extension to support these historical query results, and the draft specification was presented at IETF 99
We’re continuing to develop the prototype user interface and the current focus is on making it more mobile friendly
The main news in Routing Security which you may have seen was a July announcement from the NRO that all RIRs will move from a RPKI Trust Anchor that reflects their own holdings to one that reflects all holdings
This improvement will provide a better way to allow resources that are covered under RPKI to be transferred from one RIR to another
APNIC is working on this project now and will be completed on 27 September. There is a blog post with more detail on this project on the APNIC Blog, I encourage you to read it if you are interested to learn more – it is called “Transitioning to a single trust anchor”
APNIC encourages all Members to certify resources, and will continue to promote routing security
While the numbers are still small, the good news is that growth is promising with IPv4 ROA adoption rates doubling from the 2016 figure (0.9%)
It is quick and easy to create ROAs and certify your resources – if it is something your organization has not yet done, please talk to one of the helpful APNIC hostmasters here at the conference – they will gladly help you do so
APNIC’s online services are continually being improved for a better user experience
New functions to MyAPNIC:
Easier management of whois updates and billing, reverse DNS
Integration of route and ROA management features. The new route management functions have become one of the most popular features on MyAPNIC
New IPv6 pages centralise APNIC’s IPv6 information, deployment resources, case studies, and statistics in the one place for easy navigation
The refreshed program design for the conference website continues to evolve and be refined – we hope you find it easier to use, especially on mobiles, than the old one
Moving on to regional development now
New community trainers from Fiji and the Philippines bring the number of community trainers to 11.
If you’re interested in becoming a community trainer, get in touch with APNIC training staff who can tell you more
Training team has been providing Technical Assistance in PNG to help with the new IXP among other projects
Currently recruiting for a Training Services Manager following the departure of one of our long-serving employees
The APNIC Academy launched earlier this year – self paced online learning
Curriculum is in its infancy right now but a lot more to come
Great response so far and we welcome your feedback as always
APNIC is proud to support NOGs - we have sent technical speakers, systems support, and sponsorship to NOGs to help them to do their work.
We supported a J-root instance in Kathmandu. As you would have heard during Geoff Huston’s keynote address, APNIC is sponsoring development work in BIND, ISC’s open source DNS software, to help reduce the load on root servers. We hope this will have a global benefit, not just a regional one.
The successful establishment of Tonga’s CERT.to has sparked interest from other Pacific Island states on developing their own security response capabilities.
We are now working with other Pacific economies to help them develop CERTs, funded by a grant to the APNIC Foundation by the Australian Government.
We also signed an MoU with FIRST to formalise the relationship there – bringing the security community into the APNIC community at conferences and events around the region, sharing security training curriculum
Jamie Gillespie joins us from Google and AusCERT
IPv6 promotion and education has been another focus area in 2017 – another area that Members asked for in the APNIC survey
On the training front - joint training with the ITU in Thailand and Bhutan
Technical Assistance work with PLDT in the Philippines to help on their IPv6 plans
5th anniversary of World IPv6 Launch Day. APNIC celebrated with a week of IPv6 stories on the APNIC blog, social media promotion, video and encouraging Members to get an IPv6 allocation
I’m pleased to say that APNIC’s ongoing work to build awareness and encourage IPv6 training and deployment in the region is paying off
It has been a long haul, but IPv6 momentum is real
If your organisation hasn’t received an allocation of IPv6 addresses yet, it is an easy process to get an allocation via MyAPNIC with one click
And if you have an allocation, now’s the time to plan your deployment if you’re not already underway with planning and testing.
This is a mature Internet economy with reasonably high penetration of service. A good number of ASN are active in IPv6 (less than half the visible active ASN, but still a good number) and overall capability is above current worldwide scale (which is 16%)
Malaysia is now sitting on around 18% which is above worlds scale. This is a significant deployment success story in the region.
Total views to date in 2017 = 287k - are 53% higher for 2017 than the same period a year ago.
Our aim is to continue increasing the posts from the community. If you have an interesting story to share, please contact us
Finally let’s look at global cooperation activities
We continue to work cooperatively around the world, in a lot of different ways.
There has been increased demand for Internet governance capacity-building initiatives in the region – launch of the Asia Pacific Alliance for Schools and Academies of Internet Governance (APASA) at the start of 2017.
In line with APNIC’s Bylaws, we work with governments, encouraging them to do the right thing, such as to focus on building Internet skills and capacity, for a stable and secure global Internet.
We continue to advocate the importance of IPv6 to the future of the Internet at many global forums, including IGF, ITU, APEC and others.
We continue to promote the value of the multistakeholder model to ensure everyone can have their say in the development of the Internet
And of course we’re always working with the other RIRs and the I* organizations to ensure smooth technical coordination.
Working closely with our RIR peers around the world is vital for sharing of knowledge, best practices in RIR operations, and coordinating important technical advances.
Workshops: 19-23 Feb
Conference: 25-28 Feb
Hopefully this report has given you a good snapshot of the year that was, but to stay in touch with what’s happening at APNIC and within the community, visit the blog or any one of APNIC’s social media accounts to learn more