APNIC Update for NZNOG 2015

APNIC PowerPoint Template

APNIC UpdateNZNOG 2015Rotorua29 Jan 2015[3 December 2014][1]Issue Date:Revision:APNICs missionA global, open, stable, and secure Internet that serves the entire Asia Pacific community2APNIC in 2014

3ServingCollaboratingSupportingReflects APNICs vision of a global, open, stable and secure Internet that serves the entire Asia Pacific community:

Serving APNIC MembersSupporting Internet development in the AP regionCollaborating with the Internet community

3APNIC Membership4As at 31 DecemberThe total membership figure for 2013 is 4,051. As at 31 December 2014, we now have a total of 4,618 Members, an increase of 12.27% from 2013.

4Total NIR members5As at 31 DecemberIPv4 Delegations6By poolBy sizeBy Member2014 monthly delegationSince the advent of the recovered pool, there has been a marked increase in IPv4 requests. The majority interestingly still by existing Members (17%), with slightly more new Members (23%), which is to be expected. 42% of requests have come from the recovered pool and 58% from the last /8 pool. Unsurprisingly, the majority of the v4 delegations are /22s, which is the maximum allowed by the policy.6IPv4 Transfers7Using listing servicePre-approval usage2014 monthly transferIPv4 Transfers remain steady as well, however, we are starting to see some transfers from ARIN to NIR members. 51% of Members are utilising the listing service. 70% of pre-approvals remaining indicates we still have many Members who are looking for sources to transfer from780 million and counting

http://www.potaroo.net/tools/ipv4IPv6 Delegations9By delegation typeBy sizeBy request typeIn 2014Total delegations as of Dec 2014Since Jan 2014, the delegation rate for IPv6 has been quite stable, and we can see that the majority of delegations have been a /32 (65%) which is the default allocation size for providers, followed by /48s which is the default assignment size for end-sites. Most came from normal allocations, instead of one-click.9IPv6 Routing Table10http://www.potaroo.net/v6/as2.0

IPv6 traffic at Google

https://www.google.com/intl/en/ipv6/statistics.htmlASN Assignments12By type4-byte return rate1213Service ImprovementsNew VOIP systemMyAPNICServices RoadmapROAdriveSecurityNew Member welcome callsThis slide shows the summary of service improvements we made in 2014.New VOIP system We implemented a new VOIP system which has improved the quality of voice and reduced the average wait time as calls are now placed into queues and directed to the next available helpdesk staffNew member welcome calls When a new member joins APNIC, we give them a courtesy call to confirm their application is complete and assist them to register for MyAPNIC. We use this opportunity to make them aware of their obligation to keep their Whois registration up to date and assist them with any questions they may have about the resources delegated to their account.Security 2-factor authentication coming soon.Time-based One-time Password Algorithm (TOTP) is an algorithm that computes a one-time password from a shared secret key and the current time. It has been adopted as Internet Engineering Task Force standard RFC 6238,[1] is the cornerstone of Initiative For Open Authentication (OATH) and is used in a number of two factor authentication systems.

ROA sessions To promote the adoption of RPKI we hold ROA sessions in events we attend to explain what is RPKI, what are its advantages and then assist members to create their ROA on the spot. We are also giving away ROA shirts to members to participate.MyAPNIC We have made improvements in MyAPNIC including simplified Whois object templates so you only need to enter mandatory attributes by default now and can chose to use the optional attributes if needed. We have also implemented a new EC submission feature that members can use to give feedback directly to APNIC EC.13Services Roadmap14Instant Feedback SystemImprove Transfer InformationMaintainer Management in MyAPNICMyAPNIC 2-Factor AuthenticationMore New Training CoursesAdditional option to make paymentEasier Invalid Contact ReportingEasier Access to MyAPNICFaster Contact Updates4th Q 2014 1st Q 2015Whats already been implemented?Instant feedback system Feedback tab available in MyAPNIC Faster Contact updates admin-c, tech-c mnt-irt, geoloc, language, notify attributes for Member delegations (inetnums) can be updated by member from MyAPNIC, previously need to contact APNIC services staff to update

Whats to be implemented in this quarter? Easier access to MyAPNIC instead of username, email address can be use 2FC, this is an alternative to APNIC digital certificateMaintainer management easier to update whois using MyAPNIC for new members and those who dont have in depth knowledge about whoisRevamp of website info on resource transfers

14MyAPNIC Improvements

15Improved Contact tab includes new EC submission formAllows you to track your correspondenceInstant feedback for MyAPNIC

A new feature is the ability to contact the APNIC EC, and track that correspondence. This feature helps to bring the EC closer to our Members. At APNIC 38, for the first time we introduced a live MyAPNIC demo in the format of a short tutorial on various topics such as IPv4 transfers. General and specific feedback for MyAPNIC user experience152015 Fee schedule16The revised fee schedule aims to provide the greatest benefit to the majority of Members, with smaller and new Members receiving sizable discounts APNIC fee reduction for all Account Holders from 2015What are the changesIP resource application fee (AUD 1750) replaced by Sign-up fee (AUD 500)New Members receiving IP will start as tiered Members and not Associate MemberFormula bit factor increases from 1.30 to 1.308Membership reactivation fee reduced from AUD 2700 to AUD 1000

17APNIC in 2014

18ServingCollaboratingSupportingReflects APNICs vision of a global, open, stable and secure Internet that serves the entire Asia Pacific community:

Serving APNIC MembersSupporting Internet development in the AP regionCollaborating with the Internet community

18APNIC Training in 2014

Courses

18 Classroom24 OnlineProfessionals

2,352 trainedVideo archives

63 videos177,993 viewsAs at 31 December1919Supporting Network Operator Groups20

PhNOG

As at 31 December20+ NOG meetings in 2014APNIC actively supports and engages with professional communities of network operators, including Network Operator Groups (NOGs), by providing financial and logistical support in addition to participating in various regional conferences.

NOGs are informal forums that bring together network operators, network engineers and the like to discuss matters relating to routing, network security, peering and interconnection and other operational issues. While the forums are generally structured around sharing relevant technical information, they also provide training and other capacity development opportunities to the region's operators.

APNIC has ongoing commitments to various regional NOGs, participating and sharing information on key technologies affecting the Internet, for example, IPv6 deployment, and building capacity where relevant.

20IPv6 Support in 201421

686 professionals trained

Presented at 24 industry events

Generated 26 pieces of IPv6 media coverage

Joint IPv6 workshops with ITU

Geoff HustonAs at 31 DecemberOutreach and training events in the region.21Security Outreach22

Participation in NOGs, CERTs and LEA events to educate and learn

Promoting emerging security initiatives among MembersTraining for Pacific LEAs held in AucklandAdli WahidCraig NgAs at 31 DecemberAppointed security specialist, Adli Wahid, who is working with different teams within APNIC as well as building relationship with potential and new partners that APNIC can leverage.

Build capability through training, providing content on security at APNIC and LEA training

Participation in NOGs, inter-governmental forums, CERTS etc

Highlighting relevant initiatives to Members to improve security such as IRT objects in whois, RPKI, and SAVE (BCP 38)22APNIC Events23

Regional meetings to expand participation opportunities

Expanded and improved online conference experience at APRICOT 2014

Expanded community meetings at APNIC 38: APTLD, Pacific Workshop, ISOC

New HD cameras for APNIC 38 web stream

Trialled remote stenography

APNIC 38ARM 3ARM 2APRICOT 2015ARM 4ARM 5ARM 6Conference and regional meetings to provide forums for interested stakeholders to discuss networking issues and trends, gather for the Policy SIG, network, and learn. APNIC Regional Meetings serve as a teaser to the main APNIC Conference. Three held so far, fourth to be held later this year.

We also made improvements on APRICOT and APNIC conferences. We expanded social media and online coverage at APRICOT 2014. In APNIC 38 Brisbane, we expanded the community meetings that now include APTLD, Pacific Workshop, and ISOC meetings. This is in addition to the existing support for APIX and APCERT meetings.

HD quality YouTube Live webcast is used for the first time at APNIC 38. We also trialled remote stenography, to improve efficiency and cost effectiveness of our conferences live captioning service. 23Policy Development24

PDP central to APNIC activitiesGauging consensus is critical24APNIC in 2014

25ServingCollaboratingSupporting25Global Outreach26

IPv6 advocacy and CGN education

Coordination with RIRs and Internet organizations

Engaging with government agencies and LEAs in training and skills development

Supporting IANA Stewardship Transition

Explaining the RIR modelIGF, NETmundial etc

As at 31 December26Internet GovernanceInternet governance is the development and application of shared principles, norms, rules, decision-making procedures, and programs that shape the evolution and use of the Internet.How is the Internet built and run, and under what rules?How to maximise benefits and minimise risks?Who is involved and how?Very broad: infrastructure, application, securityAnd by the way: How are critical resources managed?Eg Names, numbers, protocolsICANN and IANA

27IANA Stewardship Transition 201428IANA Stewardship Transition by Sep 2015Oct 2013Montevideo statement signedJan 2014EC endorsed statementMar 2014NTIA announces intention to transfer IANA functionsJul 2014ICG LaunchedSep Nov 2014Community consultations @ all 5 RIRsJune 2014NRO Response to ICANN AccountabilityFeb 2014Community consultation @ APRICOT 2014May 2014NRO Response to transition process & principlesDec 2014CRISP Team launched28IANA Stewardship Transition 201529IANA Stewardship Transition by Sep 201515 Jan 2015CRISP TeamProposal submittedDraft proposal13 March 201530 Sep 2015IANA Contract closedSubmission to NTIA31 July 2015Review deadline15 May 2015Final Review17 July 2015Final proposal19 June 201529TakeawaysIssue Date:Revision:Routing SecurityRPKI = Resource Public Key InfrastructureROA = Route Object Authorisation

http://www.apnic.net/roa

31

80 million and counting

http://www.potaroo.net/tools/ipv4Private addresses and NATInternet10.0.0.202

202.12.29.32 NAT?Extn 202

Phone Network

02 6262 9898PABX3310.0.0.202

Carrier Grade NAT (CGN)ISPCGN

10.255.255.255 10.0.0.1 ?34NAT Overload

Shin Miyakawa, NTT, 2011CGN Challenges

361TB per 1K subs per month!Cable Television Laboratories, Inc. 2012

192.168.0.1192.168.0.10NATIt gets worseInternet202.12.29.32 CGN

10.1.255.255 10.0.0.1

10.2.0.1 ???37Double NAT everywhere?InternetCGN!!!

NAT

Things38Please, No!The Killer Application for IPv6?Its the Internet.

Finally: Youre Invited!

http://www.apnic.net/meetings 40

40Thank [email protected]