Download to read offline
Uploaded byAPNIC
APNIC Update: MyIX/MyNOG 2017
The APNIC update outlines the organization's efforts in promoting a stable and secure internet across the Asia Pacific region. It includes statistics on IPv6 and IPv4 delegations, training programs, and technical assistance initiatives, as well as mentions of key regional collaborations and events. Additionally, it highlights membership growth and ongoing projects related to internet resource management and security.
![SANOG Update by GZ Kabir [APRICOT 2015]](https://cdn.slidesharecdn.com/ss_thumbnails/nogupdatesanogupdate1425449791-150304182657-conversion-gate01-thumbnail.jpg?width=640&height=640&fit=bounds)
APNIC Update: MyIX/MyNOG 2017
- 1. 1 APNIC Update Sanjaya 26 October2017 MYNOG
- 2. APNIC 2 A global, open, stableand secure Internet that serves the entire Asia Pacific community
- 3. Activities 3 Serving APNIC Members SupportingRegional Internet Development Cooperating with the Global Internet Community
- 4. Membership 0 2000 4000 6000 8000 10000 12000 14000 16000 1998 1999 20002001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 Members NIR members Projection 4 As at 30 Sep
- 5. IPv6 Delegations 0 200 400 600 800 1000 1200 1400 1600 1800 2000 2007 20082009 2010 2011 2012 2013 2014 2015 2016 2017 East Asia Oceania South East Asia South Asia Projection 5 As at 30 Sep
- 6. IPv4 Delegations 0 500 1000 1500 2000 2500 3000 3500 4000 2007 20082009 2010 2011 2012 2013 2014 2015 2016 2017 East Asia Oceania South East Asia South Asia Projection 6 As at 30 Sep
- 7. IPv4 Transfers 0 50 100 150 200 250 300 2007 20082009 2010 2011 2012 2013 2014 2015 2016 2017 Projection Between RIR Regions Within APNIC Region 7 As at 30 Sep
- 8. Total IPv4 Transferred 0 2000000 4000000 6000000 8000000 10000000 20072008 2009 2010 2011 2012 2013 2014 2015 2016 2017 Projection Between RIR Regions Within APNIC Region 8 As at 30 Sep
- 9. ASN Delegations 9 0 100 200 300 400 500 600 700 800 900 1000 2007 20082009 2010 2011 2012 2013 2014 2015 2016 2017 East Asia Oceania South East Asia South Asia Projection As at 30 Sep
- 10. Resource Holdings 10 ASN+IPv4+IPv6 IPv4 only IPv4+ IPv6 ASN+IPv4 IPv6only ASN only ASN+IPv6 % of Members Holding ASN 74% IPv4 96% IPv6 55% As at 30 Sep
- 11. Whois and Whowas 11 •Whois - “organization object” - 56% of Members updated - Introduction of ‘last modifed’ attribute to replace ‘changed’ attribute apnic.net/whois • Whowas - Improved interface - RDAP spec @ IETF 99 apnic.net/whowas 478 whois qps 0.00 10.00 20.00 30.00 40.00 50.00 60.00 70.00 80.00 90.00 100.00 AF AP AS AU BD BN BT CK CN CX FJ FM GU HK ID IN IO JP KH KI KP KR LA LK MH MM MN MO MP MV MY NC NF NP NR NU NZ PF PG PH PK PW SB SG TH TK TL TO TV TW VN VU WF WS % organization updates per economy
- 12.
- 13. RPKI 13 • RPKI uptime99.9995% • 21 qps ROAs 2017 ROA-enabled Members 797 Numbers of ROAs created 722 Number of IPv4 addresses under ROAs (/32s) 15,473,736 Number of IPv6 addresses under ROAs (/56s) 3,124,861,952 % allocated space under ROAs (IPv4) 1.79% % allocated space under ROAs (IPv6) 0.36% • RIRs move to “all resources” Trust Anchor (2017) • “Ready to ROA” PH, BT, CK, CN, ID, KH, NP, MN
- 14. APNIC Online 14 • MyAPNIC •Support for Organization object • apnic.net • Wordpress inhouse • New IPv6 pages • Better program design • apnic.foundation • New CMS and content refresh
- 15. Activities 15 Serving APNIC Members SupportingRegional Internet Development Cooperating with the Global Internet Community
- 16. Training and TA 16 TA-Indonesia Updated Courses: IRM, IRR, Network Security, MPLS, SDN, NFV 2017 Face-to-face training Locations Trainees 52 23 1,763 Community Trainers Courses Locations 11 14 6 eLearning sessions Trainees 109 552 Training YouTube videos Views 115 519,191 Technical Assistance (TA) 10 Network Security workshop, Hong Kong Training, Laos training.apnic.net
- 17. apnic.academy 17 • Launched April2017 (Moodle) • Free public access • ‘Introduction to CyberSecurity’ ‘Internet Resource Management’ • Registered: 1,506 • Enrolled: 1,506 • Certified: 279 • Coming: • IPv4/IPv6 Routing • More Security/CERTs
- 18. Community 18 • NOGs: 18presentations, Member consults, tech support, sponsorship • Root servers: J-root installed in NP • Sponsorship of “aggressive NSEC caching” in BIND • RIPE Atlas • Anchors in MM, MN, AU, NP, ID, VN • 270+ probes distributed • MoUs • Sri Lanka CERT|CC, ISC; • KISA, APIA, Netnod • 48 fellowships for APNIC 44 PacNOG 30, FJ
- 19. Security 19 • 21 NOGand CERT events • APSIG 2017, APrIGF 2017, ASEAN, KISA, CNCERT, INTERPOL SG • Tonga CERT.to: Support and training • CERT support in the Pacific • FIRST • MoU signed • Workshops at APRICOT 2017 and APNIC 44 • Adli Wahid re-elected to Board • 36 blog posts • New team member: Jamie Gillespie apnic.net/security Adli Wahid
- 20. IPv6 20 • Training: 15face-to-face with 457 trainees • eLearning: 20 sessions with 117 trainees • 8 presentations at regional events • World IPv6 Day: 6 June 2017 • Joint APNIC/ITU IPv6 Infrastructure Security Workshops in TH and BT • New IPv6 web pages, case studies • 62 blog posts apnic.net/ipv6 APNIC/ITU IPv6 Workshop 2017, Bangkok
- 21. IPv6 growth 21 50% 56% 7.5%17% 1 Jan 2017 1 Oct 2017 Members holding IPv6 addresses IPv6 capability in APNIC region
- 22. About Malaysia 31,164,177 people 21,378,625users 69% penetration 240 ASes 296.34B GDP IPv4 171 in BGP 6,663,936 addresses 0.21 per head 90% visible IPv6 64 in BGP 545,464 M addresses 17,502 per head 21% visible 18% capability
- 23.
- 24. Malaysia IPv6 Capability 0 5 10 15 20 252011-10 2012-01 2012-04 2012-07 2012-10 2013-01 2013-04 2013-07 2013-10 2014-01 2014-04 2014-07 2014-10 2015-01 2015-04 2015-07 2015-10 2016-01 2016-04 2016-07 2016-10 2017-01 2017-04 2017-07 2017-10 %IPv6Capable MY
- 25. Top 10 IPv6Capable ASN AS Name IPv6 Capable IPv6 Preferred # Samples AS132688 UM-AS-AP University of Malaya 33.24% 31.21% 2262 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 27.95% 25.96% 2893285 AS24314 UPSI-AS-AP University Pendidikan Sultan Idris 25.23% 24.55% 440 AS4818 DIGIIX-AP DiGi Telecommunications Sdn. Bhd. 16.65% 16.50% 635801 AS38044 GITN-NETWORK GITN-NETWORK 10.86% 10.45% 8869 AS9930 TTNET-MY TIME dotCom Berhad 7.42% 7.32% 156976 AS45960 YTLCOMMS-AS-AP YTL COMMUNICATIONS SDN BHD 7.03% 6.95% 103453 AS17564 GITN-PCN-AS-AP GITN (M) Sdn. Bhd. 6.62% 5.32% 3250 AS9534 MAXIS-AS1-AP Binariang Berhad 5.45% 5.23% 813029 AS38322 WEBE-MY-AS-AP WEBE DIGITAL SDN. BHD. 4.02% 3.99% 63594
- 26. labs.apnic.net 26 • 21 articleson Blabs and APNIC blogs • 17 presentations at industry events IETF, PTC, OARC, RIRs, NOGs • Current research topics • DNSSEC KSK rollover • IPv6 and large MTU settings • Latent QUIC capability • Dynamic behaviour of BBR • Geoff Huston serves on ICANN SSAC Geoff Huston IPv6 capability in the Asia Pacific
- 27. blog.apnic.net 27 Average: 32k permonth Top 5: IPv6, Security, Training, NOGs, IXP Total: 203 authors to date Economies covered: 32 Views Guest Bloggers 99 As at 30 Sep 0 10,000 20,000 30,000 40,000 50,000 60,000 Jan Feb Mar Apr May Jun Jul Aug Sep APNIC Blog views 2017
- 28. Activities 28 Serving APNIC Members SupportingRegional Internet Development Cooperating with the Global Internet Community
- 29. Global Engagement 29 10th APTPolicy and Regulation Forum • FIRST events • APT PRF • GSMA MWC • ITU-WTDC prep process • GFCE • IPv6 at APEC TEL 55, with LACNIC • DNSSEC KSK Rollover, with ICANN • APrIGF, APSIG, PKSIG, PacIGF, NPIGF, IGFA • APASA launch with ICANN, ISOC (AP hubs) and DotAsia
- 30. RIR Collaboration 30 Geoff Hustonat ARIN 39 • RDAP batch extension proposal • DNSSEC KSK rollover with RIRs • Seed Alliance with AFRINIC and LACNIC • ASO review • World IPv6 Launch 5th anniversary • Joint APNIC-AFRINIC Boards meeting at AFRINIC 26 / AIS’17 • NRO CGs: engineering, registry, comms, finance, HR, legal • Participation at all RIR meetings in 2017
- 31.
- 32. Later… 32 APRICOT 2019 Daejeon, Republicof Korea 18 to 28 February 2019 APNIC 46 Noumea, New Caledonia 6 to 13 September 2018
- 33.
- 34.
Editor's Notes
- #4 As usual, this presentation is structured around three areas of activity… Serving Members Supporting regional internet development Cooperating globally where we can
- #5 Total direct membership for 2016 was 5,994. Current membership is 6,414, or around 6.5% growth from 2016. There are currently 7,413 NIR members. Combined membership is 13,827.
- #6 Total delegations so far in 2017 – 1005; current trend is slightly lower than 2016 The majority of delegations have been a /32 (71%) which is the default allocation size for providers, followed by /48s which is the default assignment size for end-sites. Most came from normal allocations, instead of one-click.
- #7 Again, current trend is lower for IPv4 allocations There’s a waiting list for recycled addresses ---- Delegations so far for 2017 – 1,743
- #8 Given the scarcity of IPv4, it’s no surprise that IPv4 transfers remain frequent; 155 transfers within the region; 50 between the regions to date. Most transfers are still within the APNIC region
- #9 Amount of addresses transferred to date is trending lower than last year Transfers can take place between APNIC and both the ARIN and RIPE regions Almost all the transfers between regions have the address space coming into the APNIC region rather than leaving it.
- #10 ASN delegations are forecast to be slightly down on 2016 Assignments in 2017 so far 640
- #11 We’re also tracking the number of Members holding different types of resources This chart shows that across the members, 75% hold ASNs, 96% IPv4, and 55% IPv6 It’s great to see the IPv6 number continue to grow.
- #12 Whois is a critical service of course. The upgrade to v4 is now complete acoss the master server and query nodes. This included RDAP support which APNIC developed and contributed to the RIPE codebase Recently introduced ‘last modified’ attribute to replace ‘changed’ attribute to accurately reflect when an object was last changed. Use of ‘changed’ attribute will be deprecated in the near future. We’re continuing to develop our whowas service – historical whois We developed a proposed RDAP extension to support these historical query results, and the draft specification was presented at IETF 99 We’re continuing to develop the prototype user interface and the current focus is on making it more mobile friendly
- #13 Whois is a critical service of course. The upgrade to v4 is now complete acoss the master server and query nodes. This included RDAP support which APNIC developed and contributed to the RIPE codebase We’re continuing to develop our whowas service – historical whois We developed a proposed RDAP extension to support these historical query results, and the draft specification was presented at IETF 99 We’re continuing to develop the prototype user interface and the current focus is on making it more mobile friendly
- #14 The main news in Routing Security which you may have seen was a July announcement from the NRO that all RIRs will move from a RPKI Trust Anchor that reflects their own holdings to one that reflects all holdings This improvement will provide a better way to allow resources that are covered under RPKI to be transferred from one RIR to another APNIC is working on this project now and will be completed on 27 September. There is a blog post with more detail on this project on the APNIC Blog, I encourage you to read it if you are interested to learn more – it is called “Transitioning to a single trust anchor” APNIC encourages all Members to certify resources, and will continue to promote routing security While the numbers are still small, the good news is that growth is promising with IPv4 ROA adoption rates doubling from the 2016 figure (0.9%) It is quick and easy to create ROAs and certify your resources – if it is something your organization has not yet done, please talk to one of the helpful APNIC hostmasters here at the conference – they will gladly help you do so
- #15 APNIC’s online services are continually being improved for a better user experience New functions to MyAPNIC: Easier management of whois updates and billing, reverse DNS Integration of route and ROA management features. The new route management functions have become one of the most popular features on MyAPNIC New IPv6 pages centralise APNIC’s IPv6 information, deployment resources, case studies, and statistics in the one place for easy navigation The refreshed program design for the conference website continues to evolve and be refined – we hope you find it easier to use, especially on mobiles, than the old one
- #16 Moving on to regional development now
- #17 New community trainers from Fiji and the Philippines bring the number of community trainers to 11. If you’re interested in becoming a community trainer, get in touch with APNIC training staff who can tell you more Training team has been providing Technical Assistance in PNG to help with the new IXP among other projects Currently recruiting for a Training Services Manager following the departure of one of our long-serving employees
- #18 The APNIC Academy launched earlier this year – self paced online learning Curriculum is in its infancy right now but a lot more to come Great response so far and we welcome your feedback as always
- #19 APNIC is proud to support NOGs - we have sent technical speakers, systems support, and sponsorship to NOGs to help them to do their work. We supported a J-root instance in Kathmandu. As you would have heard during Geoff Huston’s keynote address, APNIC is sponsoring development work in BIND, ISC’s open source DNS software, to help reduce the load on root servers. We hope this will have a global benefit, not just a regional one.
- #20 The successful establishment of Tonga’s CERT.to has sparked interest from other Pacific Island states on developing their own security response capabilities. We are now working with other Pacific economies to help them develop CERTs, funded by a grant to the APNIC Foundation by the Australian Government. We also signed an MoU with FIRST to formalise the relationship there – bringing the security community into the APNIC community at conferences and events around the region, sharing security training curriculum Jamie Gillespie joins us from Google and AusCERT
- #21 IPv6 promotion and education has been another focus area in 2017 – another area that Members asked for in the APNIC survey On the training front - joint training with the ITU in Thailand and Bhutan Technical Assistance work with PLDT in the Philippines to help on their IPv6 plans 5th anniversary of World IPv6 Launch Day. APNIC celebrated with a week of IPv6 stories on the APNIC blog, social media promotion, video and encouraging Members to get an IPv6 allocation
- #22 I’m pleased to say that APNIC’s ongoing work to build awareness and encourage IPv6 training and deployment in the region is paying off It has been a long haul, but IPv6 momentum is real If your organisation hasn’t received an allocation of IPv6 addresses yet, it is an easy process to get an allocation via MyAPNIC with one click And if you have an allocation, now’s the time to plan your deployment if you’re not already underway with planning and testing.
- #23 This is a mature Internet economy with reasonably high penetration of service. A good number of ASN are active in IPv6 (less than half the visible active ASN, but still a good number) and overall capability is above current worldwide scale (which is 16%)
- #25 Malaysia is now sitting on around 18% which is above worlds scale. This is a significant deployment success story in the region.
- #28 Total views to date in 2017 = 287k - are 53% higher for 2017 than the same period a year ago. Our aim is to continue increasing the posts from the community. If you have an interesting story to share, please contact us
- #29 Finally let’s look at global cooperation activities
- #30 We continue to work cooperatively around the world, in a lot of different ways. There has been increased demand for Internet governance capacity-building initiatives in the region – launch of the Asia Pacific Alliance for Schools and Academies of Internet Governance (APASA) at the start of 2017. In line with APNIC’s Bylaws, we work with governments, encouraging them to do the right thing, such as to focus on building Internet skills and capacity, for a stable and secure global Internet. We continue to advocate the importance of IPv6 to the future of the Internet at many global forums, including IGF, ITU, APEC and others. We continue to promote the value of the multistakeholder model to ensure everyone can have their say in the development of the Internet And of course we’re always working with the other RIRs and the I* organizations to ensure smooth technical coordination.
- #31 Working closely with our RIR peers around the world is vital for sharing of knowledge, best practices in RIR operations, and coordinating important technical advances.
- #32 Workshops: 19-23 Feb Conference: 25-28 Feb
- #34 Hopefully this report has given you a good snapshot of the year that was, but to stay in touch with what’s happening at APNIC and within the community, visit the blog or any one of APNIC’s social media accounts to learn more
- #35 Thanks very much for your time and attention!