A presentation for VINX-NOG 2022 by Warren Finch on the topics of IPv6, RPKI and tools in Viet Nam.

1. 1
An update on IPv6, RPKI and Tools

2. 2
2
Agenda
• What's APNIC Labs seeing in Vietnam?
– IPv6
– DNSSEC
– RPKI
– QUIC
• New features in the tools from APNIC Information Products
– NetOX
– DASH
– REx

3. 3
3
What’s APNIC Labs seeing in Vietnam?
• APNIC Labs uses paid advertising (placed by Google) to
measure end-user behaviour
– Uses undisplayed pixel fetches (we call them 1x1 invisible pixels)
– Tests DNS, IP and Transport behaviour fetching these assets
– Includes IPv6, DNSSEC, RPKI & QUIC tests at this time
• This is not a measurement of mbps or kbps
– It is a random sample of users, through HTML/browser/ads in games
– We don’t control placement numbers to the ISP
• We think it’s a reasonable approximation to usercount

4. 4
IPV6

5. 5
5
IPv6: It’s taking off!
Approx. 10%
increase for IPv6
Capability since
October 2021
Which is continuing
at pace.
Well done!
https://stats.labs.apnic.net/ipv6/VN

6. 6
…But there’s still a way to go
https://stats.labs.apnic.net/ipv6/XU

7. 7
7
Vietnam now 2nd rank in S.E. Asia
https://stats.labs.apnic.net/ipv6/XU

8. 8
8
All the heavy lifting …

9. 9
9
AS7552 is deploying faster than national rate!
https://stats.labs.apnic.net/ipv6/AS7552?c=VN

10. 10
10
Here’s the local leaderboard

11. 11
11
AS131429 is deploying faster than national rate!
https://stats.labs.apnic.net/ipv6/AS131429?c=VN

12. 12
DNSSEC

13. 13
Regionally. Vietnam ranks 9th in DNSSEC
https://stats.labs.apnic.net/dnssec/XU

14. 14
14
Same method, the leaderboard for DNSSEC

15. 15
15
By scale, the story is a bit mixed…

16. 16
RPKI

17. 17
It’s a happier story in RPKI: 4th in region!
https://stats.labs.apnic.net/rpki/XU

18. 18
… And the table of ASNs
https://stats.labs.apnic.net/rpki/XU

19. 19
QUIC

20. 20
20
QUIC is still very “experimental”
• Initial connect to a web service made over TLS/443 in TCP
– “hint” is sent back: ”we could use QUIC for this”
– Client can elect to use QUIC for subsequent fetches
• Whats the benefits?
– 1 RTT response possible: so faster initial web service
– Path MTU “busting” design: less fragmentation, drop
– “Session” model –it copes with address mobility/agility
mobile/wifi/fibre from same device
– Secure

21. 21
Vietnam in 9th place in S.E. Asia
https://stats.labs.apnic.net/quic/XU

22. 22
Watch this space
• Low levels of uptake by ASN
– Mostly this requires browser
upgrade in clients, it isn’t about
infrastructure ISPs deploy really
• Except if you do ISP supplied OS
upgrades/OTA
– Enabled by CDNs like Cloudflare

23. 23
NEW FEATURES IN THE TOOLS FROM
APNIC INFORMATION PRODUCTS

24. 24
NETOX HTTPS://NETOX.APNIC.NET

25. 25
25
New Look and Feel, and comparison mode
Select from routing,
delegation, history,
whois, geo-location
tools
Compare up to 6 ASN
or IP prefixes side-by-
side
Worldwide, resource
data from
RIPESTAT
No login required!

26. 26
REX HTTPS://REX.APNIC.NET

27. 27
27
New Look and Feel, charting improvements
Comparison mode,
select regions,
economies to show in
a single chart
Can download data or
chart views for offline
use
APNIC Region data
No login required!

28. 28
28
New Look and Feel, charting improvements
Comparison mode,
select regions,
economies to show in
a single chart
Can download data or
chart views for offline
use
APNIC Region data
No login required!
Coming Soon: Worldwide Data

29. 29
DASH HTTPS://DASH.APNIC.NET

30. 30
30
New: Routing inconsistency report
Compares BGP to
RPKI (ROA) and IRR
(route object)
APNIC Region data
APNIC Login required.

31. 31
31
New: Suspicous traffic now has alerts
You specify the ASN,
prefix, conditions
We send you email
notifications when
events trigger.
We’re working on SMS
and Slack integration
APNIC Login required

32. 32
32
New: Routing inconsistency report
Compares BGP to
RPKI (ROA) and IRR
(route object)
APNIC Region data
APNIC Login required.
Coming soon: alerts!

33. 33
33
New: Routing inconsistency report
Compares BGP to
RPKI (ROA) and IRR
(route object)
APNIC Region data
APNIC Login required.
Would you like access?
Talk to VNNIC 
(we’d love to see if we can extend
service to NIR members)

34. 34
Questions?