APNIC44 Briefing

1. APNIC44 Briefing
Kenny Huang, Ph.D.
Executive Council Member, APNIC
Board, Mind Extension
huangksh@gmail.com
Sep 2017
黃勝雄博士
Asia Pacific Network Information Centre

2. Tuesday, 12 September
2Asia Pacific Network Information Centre

3. Technical Operations
• SDN-based security mechanism on the 100G TANet (Ying-Chief Chang)
• Up in the Sky (Jonathan Brewer)
• Simulating the network dynamics of shared satellite channels (Ulrich
Speidel)
• Being open : how Facebook got its edge (Matt Jansen, Facebook)
• Vardah and routing aftermath (Anurag Bhatia, HE)
• Rapid detection of BGP anomalies (Bahaa AI-Musawi)
• In defence of NATs (Geoff Huston, APNIC)
3Asia Pacific Network Information Centre

4. Cooperation SIG
• Theme: Trans-Border Cooperation on Cyber Security
• Cross-border nature of Internet requires cooperation to be a critical
component of cyber security. This session aims to bring out different
perspectives to the nature of Cooperation between states on
cybersecurity as an essential part to combat cross-border
cybercrime and to reduce the risks of cyber war. Bilateral
cybersecurity agreements between nations can help build that
cooperation. The ultimate goal, however should be to achieve multi-
lateral consensus and arrive at global agreement on issues of cyber
security
• Taiwan ⾏政院資安處周智⽲科⾧
• Current Conditions and Challenges of The Cybersecurity in
Taiwan
4Asia Pacific Network Information Centre

5. Discussion with IPv6 CE Vendors
• The major issue is the lack of support even for older transition
mechanism (DS-Lite, lw4o6), and even newer ones (464XLAT, MAP
T/E), by the majority of CE vendors. Some of them provide it "on-
demand" for big customers, but small and medium ISPs don't have
that purchasing capability, creating a big issue for deployment.
• This BoF will discuss these issues with a few (4-5) representatives of
major well-known CE vendors, try to understand the reasons behind
the lack of support, and try to agree how to move on.
5Asia Pacific Network Information Centre

6. Wednesday, 13 September
6Asia Pacific Network Information Centre

7. Network Operations – IPv6
• IPv6 in the Telco Cloud (Sunny Yeung)
• IPv6將是網路未來主流，Telstra 公司分享未來僅使⽤ IPv6 網路(single-
stack)如何滿⾜網路服務需求
• Measuring Ipv6 using Ad-Based Measurement (Geoff Huston)
• 使⽤Google 廣告量測連線主機 IPv6 /IPv4 統計
• Best Current Operational Practice for Operations: IPv6-Prefix
assignment for End-Customers
• 如何以最佳實務分配終端⽤⼾ IPv6-Prefix
7Asia Pacific Network Information Centre

8. APNIC Services
• Transition to a single RPKI trust anchor (Tom Harrison)
• Internet Health Indicator (George Kuo)
• Global IRR and RPKI problem statement (George Michaelson)
• APNIC Whois upgrade update (Annalize Mulingbayan)
• Improving whois contact review and update tool (Wita Laksono)
• Geolocation Information update (Vivek Nigam)
• Registering delegations and sub-delegations: APNIC membership
agreement and policy reivew (Craig Ng)
8Asia Pacific Network Information Centre

9. Technical Operations III
• Beyond Mirai : The new age of MDDoS attack (Avishay Zawoznik)
• 介紹 DDoS 攻擊並以範例展⽰攻擊NOC/SOC情境
• Blockchain : The future of the Internet (Muhammad Moinur Rahman)
• 區塊鏈介紹
• Global IPv6 Deployment Survey (Jordi Palet)
• 介紹全球 IPv6 發展現況調查
9Asia Pacific Network Information Centre

10. DNS Key Signing Key Rollover (Geoff Huston, Edward Lewis)
• In October 2017, ICANN is planning to roll, or change, the “top” pair of
cryptographic keys used in the DNSSEC protocol, commonly known as the Root
Zone KSK (Key Signing Key). This will be the first time the KSK has been changed
since it was initially generated in 2010.
• Changing the key involves generating a new cryptographic key pair and
distributing the new public component to all DNSSEC-validating resolvers globally.
This will be a significant change as every Internet query using DNSSEC depends on
the root zone KSK to validate the destination.
• Network operators using DNSSEC-validating resolvers must update their systems
with the new KSK to help ensure trouble-free Internet access for users. This
session will explore the KSK rollover in detail and provide guidance to network
operators about the changes they will need to make to their systems.
10Asia Pacific Network Information Centre

11. 11
Source : JPRS
Asia Pacific Network Information Centre

12. Policy SIG
• prop-116-v004: - Prohibit to transfer IPv4 addresses in the final /8
block
• prop-118-v001: - No need policy in APNIC region
• prop-119-v001: - Temporary transfers
• prop-120-v001: - Final /8 pool exhaustion plan
• prop-121-v001: - Updating “Initial IPv6 allocation” policy
• prop-122-v001: - Updating “Subsequent IPv6 allocation” policy
12Asia Pacific Network Information Centre

13. Selected Policy Proposals Review
• Prop-119-v001 Temporary transfers
• 允許網路位址持有者可將IP位址暫時提供給其他機構使⽤，資源使⽤期
間其他機構擔任代管者保管此位址資源。⼀但不在需要此IP位址，持有
者可回收IP位址資源
• 反對意⾒：無此需求
• ⽀持意⾒：位址無法移轉，造成網路資源浪費
• Prop-118: No need policy in APNIC region
• IPv4移轉之接收者無需展⽰未來IPv4位址需求，簡化IPv4移轉政策流程, 減
少APNIC⾏政成本
• ⽀持意⾒: 簡化移轉成本，活化IPv4位址資源再利⽤。歐洲RIPE不需要位
址接收者展⽰未來IPv4擴充需求
• 反對意⾒: 如果不變動現有位址政策，阻礙IPv4流通再利⽤。
• 其他問題：是否此IP區塊可在其他ISP重新廣播
13Asia Pacific Network Information Centre

14. • Address Supporting Organization Review
• Introduce ASO review report and recommendation
• 包含 Policy Council
• IPv6 Readiness Measurement
• 各項 IPv6 量測⽅法與量測技術、量測結果
• 亞洲⼤學講座教授曾憲雄主持
14Asia Pacific Network Information Centre

15. Thursday, 14 September
15Asia Pacific Network Information Centre

16. AMM
• Secretariat Report
• Treasurer Report
• EC Report
• Policy SIG Report
• NIR SIG Report
• NRO EC Report
• Cooperation SIG Report
• IPv6 Readiness Measurement Report
16Asia Pacific Network Information Centre

17. Why Participate ?
• APNIC : the 1st institutionalized Internet Governance entity in AP
• Bottom up policy development process
• Best practice of Internet governance model
• Making Internet policy for Asia Pacific region
• Sharping the future of the Internet
• Networking with Internet pioneers, innovators
• Fathers of Internet, Internet hall of fame, Internet guru ..etc
• New comers friendly culture
•Taiwan!! Of course
17Asia Pacific Network Information Centre