AFRINIC 29: APNIC Update
•
1 j'aime•392 vues
Strategic Engagement Director Pablo Hinojosa gives an update on APNIC's activities and new service initiatives at AFRINIC 29 in Hammamet, Tunisia from 26 to 30 November 2018.
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à AFRINIC 29: APNIC Update
Similaire à AFRINIC 29: APNIC Update (20)
Plus de APNIC
Plus de APNIC (20)
Dernier
Dernier (20)
AFRINIC 29: APNIC Update
- 1. 1 APNIC Update Pablo Hinojosa Afrinic 29, Hammamet, Tunisia 30 November, 2018
- 2. 2 “A global, open, stable and secure Internet that serves the entire Asia Pacific community”
- 3. Activities 3 Serving APNIC Members Supporting Regional Internet Development Cooperating with the Global Internet Community
- 4. Activities 4 Serving APNIC Members Supporting Regional Internet Development Cooperating with the Global Internet Community
- 5. Membership 0 2000 4000 6000 8000 10000 12000 14000 16000 18000 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 Members NIR members Projection As at 31 Oct 5
- 6. IPv6 Delegations As at 31 Oct 0 200 400 600 800 1000 1200 1400 1600 1800 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 East Asia Oceania South East Asia South Asia Projection
- 7. IPv4 Delegations As at 31 Oct 0 500 1000 1500 2000 2500 3000 3500 4000 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 East Asia Oceania South East Asia South Asia Projection
- 8. IPv4 Transfers As at 31 Oct 0 50 100 150 200 250 300 350 400 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 Projection Between RIR Regions Within APNIC Region
- 9. ASN Delegations As at 31 Oct 0 100 200 300 400 500 600 700 800 900 1000 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 East Asia Oceania South East Asia South Asia Projection
- 10. Resource Holdings 10 % of Members holding… ASN 76% IPv4 96% IPv6 61% As at 31 Oct ASN + IPv4 + IPv6 IPv4 + IPv6 ASN + IPv4 ASNIPv4 IPv6
- 11. Resource Certification 11 apnic.net/rpki Measure 1/1/2018 Current Growth Members with certs 13.0% 14.4% 1.4% Members with ROAs 7.4% 9.0% 1.6% IPv4 under ROAs 3.3% 5.0% 1.7% IPv6 under ROAs 0.9% 5.85% 4.95%
- 12. MyAPNIC 12 • Performance improvements • Under development 2018 • Contact update tools • Contact validation workflow • Annual review reminders • Authentication • SSO – coming soon • Deprecation of certificates? • Demonstrated at APNIC 46 apnic.net/myapnic
- 13. Training & TA 13 TA- Indonesia 2018 Face-to-face training Economies Trainees 54 27 1,686 Community Trainers 11 eLearning sessions Trainees 57 316 Training videos Views 129 54,501 Technical Assistance 4 Training, Lao PDR training.apnic.net
- 14. 14 • Relaunched August 2018 • Virtual labs • New partner courses • Free public access ⎯ SSO via APNIC Login ⎯ Enrolled: 1,206 ⎯ Certified: 888 • Coming soon ⎯ PDP course ⎯ IPv6 Protocol Architecture ⎯ New security courses ⎯ More virtual labs academy.apnic.net
- 15. Product Management! • A new approach to developing APNIC systems and services ⎯ Registry products, Information products ⎯ MyAPNIC, Academy, Internet Directory… • Defines a process of developing and improving APNIC products, including: ⎯ Idea/problem validation ⎯ Solution validation ⎯ MVP ⎯ Build/launch/operate ⎯ Repeat (and eventually retire) • Thanks to all who helped at APNIC 46!
- 16. Internal infrastructure • Systems development ⎯ Server config management upgraded (Puppet) ⎯ Server patch management improved (Pulp) ⎯ Upgrade of hardware security module for RPKI is underway • Network consolidation and improvement ⎯ Multilateral BGP peering with Megaport in Brisbane and Sydney ⎯ Direct peering with Google for service deployment testing ⎯ Peering with AARNET for additional transit ⎯ 203.119.42.0/23 returned to the IPv4 recovered pool 16
- 17. apnic.net/survey • Every 2 years since 1999 • 10th survey completed Sep 2018 • Regional focus groups, interviews and online survey • Major input into APNIC board planning processes • Independent, anonymous • Currently conducted by Survey Matters, Australia • Two major returns • Performance survey • Future priorities and expectations • Thanks to all who responded!
- 18. 7% 9% 15% 11% 41% 45% 36% 35% 2016 2018 Very poor Poor BelowAverage Neutral Above average Good Excellent Quality of Services 91% 12% 10% 16% 10% 35% 39% 35% 39% 201 6 201 8 Very poor Poor BelowAverage Neutral Above average Good Excellent Value of Membership 88% 8% 8% 14% 10% 40% 43% 37% 38% 201 6 201 8 Very poor Poor BelowAverage Neutral Above average Good Excellent Value of Services 91% 7% 13% 15% 11% 41% 43% 36% 31% 2016 2018 Very poor Poor BelowAverage Neutral Above average Good Excellent Overall experience 85% OVERALL SATISFACTION
- 19. Consistent with focus group feedback, network security is the number one challenge facing the community in 2018 Q9. Thinking about your Internet-related services, products or activities, what are the MAIN operational challenges facing your organisation? East Asia Oceania SE Asia South Asia LDEs Developin g Develope d Network security 28% 34% 22% 26% 28% 25% 31% Scarcity of IPv4 addresses 13% 9% 14% 14% 11% 13% 12% Cost of network operations 10% 14% 17% 11% 13% 13% 11% Hiring and / or keeping skilled employees 12% 12% 13% 10% 8% 11% 16% Deployment of IPv6 9% 8% 8% 17% 16% 10% 7% Management of bandwidth and network capacity 9% 9% 9% 8% 7% 9% 8% Keeping up with the pace of technology changes 10% 5% 7% 6% 5% 9% 4% Regulatory requirements involving the Internet 4% 6% 4% 3% 4% 4% 5% Benchmarking and understanding best practice in network operations 4% 2% 3% 3% 3% 4% 3% Access to reliable and credible Internet industry data 3% 1% 4% 3% 4% 2% 2% Other 0% 1% 0% 0% 0% 0% 1% 3% 3% 4% 7% 8% 11% 12% 12% 13% 27% Other Benchmarking and understanding best practice in network… Access to reliable and credible Internet industry data Regulatory requirements involvingthe Internet Keepingup with the pace of technology changes Management of bandwidth and network capacity Deployment of IPv6 Cost of network operations Hiring and /or keeping skilled employees Scarcity of IPv4 addresses Network security HIGHEST RATING CHALLENGES
- 20. NETWORK SECURITY 64% 61% 47% 45% 38% 32% 29% 28% 23% 22% Phishing, spam, malware, ransomware DDoS attacks Intrusion and other breaches Staff lack awareness of security issues Blacklisting of IP addresses Routing security Lack of application security Inadequate security policies No cyber security focus from… Lack of security for IoT applications Q10. Thinking about network security, what are the MAIN challenges facing your organisation? Significantly higher / lower than total 20 30% 35% 39% 41% 53% 59% 64% Establish an APNIC-CERT for information sharing Encourage CERT development and information… Engage with Governments in the region about the… Integrate more security content in APNIC… Share security insights on the APNIC Blog and… Collaborate with technical security organisations… Specific security training courses Q11. How might APNIC best assist you or others with network security challenges?
- 21. 49% 38% 34% 33% 21% 21% 19% Deploying IPv6 Cost of buying IPv4 addresses Cost & complexity of NATs IPv4 transfer policies Working with brokers selling /leasingIPv4… It is not an issue “Health” of IPv4 addresses being transferred Q13. Thinking about the scarcity of IPv4 addresses, what are the MAIN challenges facing your organisation? Q14. Thinking about the scarcity of IPv4 addresses, which, if any, of the following IPv4 activities do you think APNIC should undertake? 3% 5% 25% 39% 52% 54% 57% Other Take noaction Purchase addresses for distribution Share informationand best practice on… Provide incentives for the return of address… Monitoring andreporting usage Reclaiming/recovering unused address space IPv4 SCARCITY
- 22. apnic.net/survey • APNIC Board (EC) produces public response • Notes key points • Identifies short and mid-term priorities • Directs Secretariat to implement • APNIC annual planning cycle • Activity plan and budget for 2019 • Strategic planning cycle • Next 4-year plan is 2020-2023 • 2020 survey will provide mid-term input APNIC Survey – Next steps
- 23. Activities 23 Serving APNIC Members Supporting Regional Internet Development Cooperating with the Global Internet Community
- 24. Policy 24 APNIC 45 Policy SIG apnic.net/policy Policy discussion at APNIC 46 Did not reach consensus and returned to mailing list for further discussion: • prop-118: No need policy in APNIC region • prop-124: Clarification on IPv6 Sub-Assignments • prop-126: PDP Update Reached consensus in Policy SIG and AMM • prop-125: Validation of "abuse-mailbox" and other IRT emails Policy engagement • Updated web content • Webinars and presentations at six NOGs/OPMs • Translation of summaries and outcomes • Newcomers’ mock Policy SIG • Policy blog post series coming soon APNIC 46 Policy SIG
- 25. Community 25 • NOGs: Participated in 17 regional NOGs • Root servers: F at PNG IXP; F in FJ relocated to IXP; K at TPIX underway • MoUs: Cloudflare, CAICT, ISOC MANRS • IXPs: Work in VN, MM, PNG, MN, including IXP-DB, APIX, Peering Asia • Sponsorships: 6 regional events, plus 17 NOGs (to date) • R&E outreach: first training at APAN; and with GEANT and MYREN; connecting with AARNET BhutanNOG, June 2018
- 26. Security 26 • 36 security training workshops including LEA and CERT sessions • 15 security eLearning sessions held • 16 other security engagements including FIRST, APAN 45 and 46, PITA, APECTEL, APISC, ACSC, PacSON, Honeynet Conference • FIRST TC events at APRICOT 2018 and APNIC 46 ⎯ Adli Wahid @ FIRST Board • APNIC Community Honeynet Project promotion at APNIC46 and MNSEC • New security pages on website • 61 security blog posts apnic.net/security Adli Wahid
- 27. Pacific CERT Development 27 CERT establishment workshop, PNG CERT Vanuatu launch • Supporting new CERTs ⎯ CERT Tonga, 2016 ⎯ CERT-PNG, Jan 2018 ⎯ Vanuatu CERT, Jun 2018 • Three regional workshops in TO, NC (APNIC 46) and PNG • Coordination with APCERT, CERT-Australia, Tonga CERT, FIRST, ITU and others • Assisted by AUD 200K funding via APNIC Foundation
- 28. Data Services 28 • Data / Information services • BoFs at APNIC 45 and 46 • Improved stats service launching in Q3 • Internet Directory • Network Security product under development • Testing at APNIC 46 stats.apnic.net
- 29. IPv6 29 apnic.net/ipv6 • Training: 17 face-to-face, 515 trainees • eLearning: 12 sessions, 82 trainees • World IPv6 Day, 6/6/2018: blog series, social media, Member emails • Joint APNIC/ITU IPv6 Infrastructure Security Workshops in TH; IPv6 direct country assistance in BN • 6 presentations at regional events • 29 deployment success stories • 52 blog posts in 2018 IPv6 training in Beijing, June 2018
- 30. IPv6 Growth 2018 30 50% 61% 7.5% 18% Members holding IPv6 addresses IPv6 capability in APNIC region
- 31. blog.apnic.net 31 Average: 40,275 / month Top 5: BGP, DNS, Measurement, Security, RPKI Economies covered: 23 Views Guest BlogPosts 130 As at 31 Oct 0 10,000 20,000 30,000 40,000 50,000 Jan Feb Mar Apr May Jun Jul Aug Sep Oct Views to date Economies
- 32. Conferences 32 APRICOT 2018 APNIC 45 APNIC 46 APRICOT 2017 APRICOT 2018 APNIC 46 Delegates 752 305 Economies 64 46 APNIC Member orgs 247 92 Remote participants • Adobe Connect • YouTube 71 1,589 views 196 1,533 views Fellowships • Gender • Economies • Type 64 24 F, 40 M 16 50 P / 6 Y / 7 R conference.apnic.net APRICOT 2018
- 33. APNIC Foundation 33 • Mission: To build the APNIC Development Program • Effectively, the ‘fundraising arm’ of APNIC • Two staff seconded from APNIC: Duncan Macintosh, Sylvia Cadena • Three Board members appointed: Edward Tian (CN); Sharad Sanghi (IN); Sylvia Sumarlin (ID) • First AGM and board meeting held in May 2018; Sylvia Sumarlin elected Board Chair • Over AUD 1.3M in funding commitments in first 18 months of operation apnic.foundation ‘To have a global, open, stable and secure Internet that is affordable and accessible to the entire Asia Pacific community’
- 34. Information Society Innovation Fund Grants and Awards • 2018 Call for Grant Proposals and Award nominations completed • 236 nominations, 122 in new Gender Empowerment and Innovation category • USD 210k for 8 grants and 2 awards: ⎯ Network Operations Research (APNIC) ⎯ Cybersecurity (APNIC) ⎯ Community Networks (ISOC) ⎯ Gender Empowerment and Innovation (IDRC) WSIS Champion • ISIF Asia recognized as a WSIS Champion in the International and Regional Cooperation category • Sylvia Cadena participated in the Champions ceremony in Mar 2018 34 Ten years: 2008 to 2018
- 35. Activities 35 Serving APNIC Members Supporting Regional Internet Development Cooperating with the Global Internet Community
- 36. APNIC Labs 36 • 12 presentations at IETF, OARC, RIRs, NOGs • 19 research blog posts • Topics: ⎯ DNSSEC KSK rollover ⎯ IPv6, Extension Headers and IPv6 Fragmentation ⎯ QUIC and BBR ⎯ DNS research with ICANN DNSSEC and NSEC caching ⎯ Open resolver collaboration with Cloudflare ⎯ DNS ATR ⎯ ITHI DNSGeoff Huston Global IPv6 capability
- 37. Global Engagement 37 • ICANN: SSAC; ASO Review; CCWG- Accountability; IANA Services Review Committee; KSK rollover • IETF, PAM • APT: PP18; PRF • ASEAN • ITU: IPv6 Workshop; DCA; Plenipot • GCCS and GFCE • APECTEL • IG Events: APrIGF, NPIGF, NPSIG, PTC, WSIS, PITA, APIGA, APrIGF, INSIG ⎯ Sylvia Cadena on IGF MAG ⎯ IGF 2018, France APrIGF, Aug 2018
- 38. RIR Collaboration 38 Geoff Huston at ARIN 39 • APNIC is Chair of NRO EC in 2018 • ASO Review consultations • NRO coordination: ECG, RSCG, CCG, finance, HR, legal • Participation at all RIR meetings in 2018 (to date) • Staff exchange (ARIN x1, RIPE NCC x3) • Seed Alliance with AFRINIC and LACNIC Joint meeting between AFRINIC Board and APNIC EC at AIS’17 AFRINIC Staff Exchange – Karen and Simon Staff exchange at the RIPE NCC
- 40. 40 Thanks!