State of RPKI in Cambodia and SEA, presentation by Shane Hermoso fo...

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

1
State of RPKI in Cambodia & SEA
KHNOG 4
Sheryl (Shane) Hermoso
APNIC

2
2
Agenda
• RPKI in a nutshell
• RPKI deployment status in South-East Asia
• RPKI deployment status in Cambodia
• Common ...

3
RPKI in a nutshell
RPKI
robust security framework for verifying the
association between resource holders and
their Inter...

4
Route Origin Authorization
What is contained in a ROA?
For example:
“ISP 4 permits AS65551 to originate a route for the ...

5
5
Route Origin Validation
Valid
The prefix (prefix length) and AS pair found in the database
Invalid
Prefix is found, bu...

6
6
ROA Coverage - Asia-Pacific
https://stats.labs.apnic.net/roa/XD

7
ROA Coverage - Asia-Pacific
South-East Asia ROA coverage has the second highest ROA
coverage (next to South Asia)

8
8
ROA Coverage – South-East Asia
https://stats.labs.apnic.net/roa/XU
https://stats.labs.apnic.net/roa/XU

9
ROA Coverage – South-East Asia
Similar to most economies in SEA, Cambodia is doing well at
66.4% (IPv4) and 87.5% (IPv6)...

10
10
ROA Coverage – PH
Community effort from APNIC & PhNOG to
increase ROA adoption
https://stats.labs.apnic.net/roa/PH

11
11
ROA Coverage – MM
https://stats.labs.apnic.net/roa/MM
Big growth since 2020

12
12
ROA Coverage – MY
https://stats.labs.apnic.net/roa/MY
Most IX now requires RPKI to join

13
13
ROA Coverage – LA
https://stats.labs.apnic.net/roa/LA

14
14
ROA Coverage – SG
Major operators & IX from SG has
ROA
https://stats.labs.apnic.net/roa/SG

15
15
ROA Coverage – VN
VNNIC actively helps members
to create ROA and promote RPKI
https://stats.labs.apnic.net/roa/VN

16
16
ROA Coverage – TH
https://stats.labs.apnic.net/roa/TH

17
17
ROA Coverage – TL
Small economy with 3 major operators
https://stats.labs.apnic.net/roa/TL

18
18
ROA Coverage – ID
IDNIC deployed RPKI in 2019
and allowed members to create
ROA in 2020.
https://stats.labs.apnic.ne...

19
19
ROA Coverage – BN
https://stats.labs.apnic.net/roa/BN

20
20
ROA Coverage – KH
Targeted RPKI/ROA tutorial this
year 2022
https://stats.labs.apnic.net/roa/KH
Requests from transi...

21
21
Top ASNs in the list …

22
22
… and those with no ROAs yet

23
Routing Incidents in Cambodia?
https://bgpstream.crosswork.cisco.com/event/298686 https://bgpstream.crosswork.cisco.com...

24
RPKI Invalids – Cambodia

25
25
RPKI Invalids – Cambodia
% invalid

26
26
Common Issue – Invalid AS & MaxLength
Prefix announced is not covered by ROA
https://rpki.cloudflare.com/?view=bgp&p...

27
27
Other Challenges
• Fixing Invalids
– Especially for large providers, when they change size of prefix announcements i...

28
28
RPKI/ROV Sessions @ APNIC
Facilitated by APNIC Retained Community Trainers (RCTs)
and target their local economies t...

29
Create ROAs
Hosted Model is where APNIC performs
the CA functions
Provisioning model is where
members operate a full RP...

30
Implement ROV – RTR Protocol
router bgp 131107
bgp rpki server tcp <validator-IP> port <323/8282/3323> refresh 120
Exam...

31
Drop Invalids
Many providers are already
dropping invalid routes
Are network operators in
Cambodia already doing this?
...

32
32
Conclusion
• Good progress with RPKI adaption driven locally
• More community effort needed as a collective goal to ...

33
Thanks! Questions?

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1061471 views
Storytelling For The Web: Integrate... by Chiara Aliotta 979505 views
Artificial Intelligence, Data and C... by OECD Directorate ... 919456 views
How to Leverage AI to Boost Employe... by SocialHRCamp 390372 views
2024 State of Marketing Report – by... by Marius Sescu 220814 views
Everything You Need To Know About C... by Expeed Software 237095 views

View on Slideshare

1 of 33 Ad

View on Slideshare

1 of 33 Ad