APNIC Senior Internet Resource Analyst Wita Laksono gives an update on IPv6, RPKI and DNSSEC measurements, as well as update on APNIC information products, REx, DASH, and NetOX at the BKNIX Peering Forum 2023 in Bangkok, Thailand from 15 to 16 May 2023.

1. 1
APNIC Measurement
Wita Laksono
APNIC

2. 2
2
About measurements at APNIC
• Based in APNIC Labs: https://labs.apnic.net/
• Using random recruited HTML events in browsers through
google advertising placement
– Includes mobile devices, tablets, laptops and desktop computer systems
– In-game as well as web-page placement
– Adjustments made from World Bank population data to normalize
sample sets to users per economy as declared
• 15m+ samples per day
• Directly measures IPv6, DNSSEC, RTT
– Indirect measurement of underlying resolvers, protocols, systems,
BGP/RPKI

3. 3
3
IPv6 world view – World on 35%

4. 4
4
IPv6 world view – World on 35%
0.00%
10.00%
20.00%
30.00%
40.00%
50.00%
60.00%
70.00%
80.00%
90.00%
100.00%
2
0
1
4
-
0
1
-
0
1
2
0
1
5
-
0
1
-
0
1
2
0
1
6
-
0
1
-
0
1
2
0
1
7
-
0
1
-
0
1
2
0
1
8
-
0
1
-
0
1
2
0
1
9
-
0
1
-
0
1
2
0
2
0
-
0
1
-
0
1
2
0
2
1
-
0
1
-
0
1
2
0
2
2
-
0
1
-
0
1
2
0
2
3
-
0
1
-
0
1
%
IPv6
Capable
Date
The World
Americas
Asia
Oceania
Europe
Africa
Thailand
• World on 35%
• Asia on nearly 40%
• Thailand on nearly 50%

5. 5
5
State of the world: (APNIC economies in
colour)

6. 6
6
State of the world: (APNIC economies in
colour)

7. 7
7
IN, 36%
CN, 20%
US, 11%
BR, 6%
JP, 4%
MX, 4%
DE, 3%
FR, 3%
VN, 2%
GB, 2%
TH, 2%
SA, 2%
MY, 1%
TW, 1%
CA, 1%
AU, 1%
NL, 1%
BE, 1%
AE, 0%
GR, 0%
IL, 0%
Economy contribution to world IPv6
• 67% of world IPv6 by users from Asia-
Pacific:
• India and China continue to dominate
world IPv6 capability
• Japan (4%)
• Viet Nam, Thailand, Malaysia (1-2%)
• Taiwan (1%)

8. 8
8
IPv6 Asia-Pacific
0.00%
10.00%
20.00%
30.00%
40.00%
50.00%
60.00%
70.00%
80.00%
90.00%
100.00%
2
0
1
4
-
0
1
-
0
1
2
0
1
5
-
0
1
-
0
1
2
0
1
6
-
0
1
-
0
1
2
0
1
7
-
0
1
-
0
1
2
0
1
8
-
0
1
-
0
1
2
0
1
9
-
0
1
-
0
1
2
0
2
0
-
0
1
-
0
1
2
0
2
1
-
0
1
-
0
1
2
0
2
2
-
0
1
-
0
1
2
0
2
3
-
0
1
-
0
1
%
IPv6
Capable
Date
The World
South Asia
South East Asia
East Asia
Oceania
Melanesia
Micronesia
Polynesia
APNIC Economies

9. 9
9
IPv6 Asia-Pacific

10. 10
10
IPv6 South-East Asia
0.00%
10.00%
20.00%
30.00%
40.00%
50.00%
60.00%
70.00%
80.00%
90.00%
100.00%
2
0
1
4
-
0
1
-
0
1
2
0
1
5
-
0
1
-
0
1
2
0
1
6
-
0
1
-
0
1
2
0
1
7
-
0
1
-
0
1
2
0
1
8
-
0
1
-
0
1
2
0
1
9
-
0
1
-
0
1
2
0
2
0
-
0
1
-
0
1
2
0
2
1
-
0
1
-
0
1
2
0
2
2
-
0
1
-
0
1
2
0
2
3
-
0
1
-
0
1
%
IPv6
Capable
Date
Malaysia
Viet Nam
Thailand
Myanmar
Philippines
Indonesia
Singapore

11. 11
11
IPv6 Thailand
0.00%
10.00%
20.00%
30.00%
40.00%
50.00%
60.00%
70.00%
80.00%
90.00%
100.00%
2
0
1
4
-
0
1
-
0
1
2
0
1
5
-
0
1
-
0
1
2
0
1
6
-
0
1
-
0
1
2
0
1
7
-
0
1
-
0
1
2
0
1
8
-
0
1
-
0
1
2
0
1
9
-
0
1
-
0
1
2
0
2
0
-
0
1
-
0
1
2
0
2
1
-
0
1
-
0
1
2
0
2
2
-
0
1
-
0
1
2
0
2
3
-
0
1
-
0
1
%
IPv6
Capable
Date
Thailand
Advance
True Online
JasTel
AIS Fibre

12. 12
12
IPv6 Thailand
0.00%
10.00%
20.00%
30.00%
40.00%
50.00%
60.00%
70.00%
80.00%
90.00%
100.00%
2
0
1
4
-
0
1
-
0
1
2
0
1
5
-
0
1
-
0
1
2
0
1
6
-
0
1
-
0
1
2
0
1
7
-
0
1
-
0
1
2
0
1
8
-
0
1
-
0
1
2
0
1
9
-
0
1
-
0
1
2
0
2
0
-
0
1
-
0
1
2
0
2
1
-
0
1
-
0
1
2
0
2
2
-
0
1
-
0
1
2
0
2
3
-
0
1
-
0
1
%
IPv6
Capable
Date
Thailand
Advance
True Online
JasTel
AIS Fibre
• 4 ASN doing most of the ‘heavy
lifting’ in Thailand
Advance 94%
True Online 70%
AIS Fibre 67%
JasTel 65%

13. 13
13
Some other measurements from APNIC
Labs
• ROV/ROA
• DNSSEC
• Use of pDNS
• IPv6 Extension Headers
• (there are more. See https://stats.labs.apnic.net/)

14. 14
14
ROV/ROA: How much secure BGP is
there?
• https://stats.labs.apnic.net/rpki/TH
• https://stats.labs.apnic.net/roas/TH
• Shows per-economy AS coverage
for both RPKI production (ROA)
and use of Route Origin Validation
• Based on active measurement in
BGP as well as RPKI data
sampling

15. 15
15
DNSSEC: how much secure DNS is there?
https://stats.labs.apnic.net/dnssec/TH

16. 16
16
Public DNS services: who uses
intermediaries?
https://stats.labs.apnic.net/rvrs/TH

17. 17
17
IPv6 Extension Headers (EH): problems in
V6
• https://stats.labs.apnic.net/v6frag/TH
• Ongoing research into IPv6 packet fragmentation
• Do IPv6 Extension Headers (EH) cause packetloss?
• At the ends (Destination EH)
• In the path (hop-by-hop EH)

18. 18
18
Other tools from APNIC: DASH REX and
NetOX
• DASH: Diagnostics for AS Health
• REX: Resource Explorer
• NetOX Network Operators Toolbox

19. 19
19
DASH: Dashboard for AS Health
https://dash.apnic.net (APNIC login required)

20. 20
20
DASH: Dashboard for AS Health
• Bad traffic based on honeypot captures from
your ASN/prefixes
• Routing status combines BGP, IRR and
RPKI data to show inconsistencies
• Provides alerts mechanisms to notify you on
your choices of trigger events/conditions
https://dash.apnic.net (APNIC login required)

21. 21
21
REX: Resource Explorer
https://rex.apnic.net

22. 22
22
REX: Resource Explorer
• Summaries of delegation status from
the RIR delegation statistics files
(updated daily)
• IPv6 deployment tracks Labs data
• Provides data download
• Can select
regions/economies/ASN to chart
https://rex.apnic.net

23. 23
23
NetOX Network Operators Toolbox
https://netox.apnic.net

24. 24
24
NetOX Network Operators Toolbox
• APNIC “skin” over RIPEstat
• Faster delivery of RIPE sourced
data
• Clean, consistent GUI with
comparison features
• Debug Tools for your BGP visibility,
reputation, delegation history &c
https://netox.apnic.net

25. 25
25
APNIC 56
The conference brings together Internet
and networking expert, government
representatives, industry leaders, and
other interested parties from around the
world to learn, share ideas and
experience, network with peers, and
develop policies related to Internet
operations.
Everyone is invited!