VINX-NOG 2022: An update on IPv6, RPKI and tools

•Transferir como PPTX, PDF•

0 gostou•189 visualizações

APNIC

A presentation for VINX-NOG 2022 by Warren Finch on the topics of IPv6, RPKI and tools in Viet Nam.

Internet

2
2
Agenda
• What's APNIC Labs seeing in Vietnam?
– IPv6
– DNSSEC
– RPKI
– QUIC
• New features in the tools from APNIC Information Products
– NetOX
– DASH
– REx

3
3
What’s APNIC Labs seeing in Vietnam?
• APNIC Labs uses paid advertising (placed by Google) to
measure end-user behaviour
– Uses undisplayed pixel fetches (we call them 1x1 invisible pixels)
– Tests DNS, IP and Transport behaviour fetching these assets
– Includes IPv6, DNSSEC, RPKI & QUIC tests at this time
• This is not a measurement of mbps or kbps
– It is a random sample of users, through HTML/browser/ads in games
– We don’t control placement numbers to the ISP
• We think it’s a reasonable approximation to usercount

5
5
IPv6: It’s taking off!
Approx. 10%
increase for IPv6
Capability since
October 2021
Which is continuing
at pace.
Well done!
https://stats.labs.apnic.net/ipv6/VN

6
…But there’s still a way to go
https://stats.labs.apnic.net/ipv6/XU

7
7
Vietnam now 2nd rank in S.E. Asia
https://stats.labs.apnic.net/ipv6/XU

9
9
AS7552 is deploying faster than national rate!
https://stats.labs.apnic.net/ipv6/AS7552?c=VN

11
11
AS131429 is deploying faster than national rate!
https://stats.labs.apnic.net/ipv6/AS131429?c=VN

13
Regionally. Vietnam ranks 9th in DNSSEC
https://stats.labs.apnic.net/dnssec/XU

14
14
Same method, the leaderboard for DNSSEC

15
15
By scale, the story is a bit mixed…

17
It’s a happier story in RPKI: 4th in region!
https://stats.labs.apnic.net/rpki/XU

18
… And the table of ASNs
https://stats.labs.apnic.net/rpki/XU

20
20
QUIC is still very “experimental”
• Initial connect to a web service made over TLS/443 in TCP
– “hint” is sent back: ”we could use QUIC for this”
– Client can elect to use QUIC for subsequent fetches
• Whats the benefits?
– 1 RTT response possible: so faster initial web service
– Path MTU “busting” design: less fragmentation, drop
– “Session” model –it copes with address mobility/agility
mobile/wifi/fibre from same device
– Secure

21
Vietnam in 9th place in S.E. Asia
https://stats.labs.apnic.net/quic/XU

22
Watch this space
• Low levels of uptake by ASN
– Mostly this requires browser
upgrade in clients, it isn’t about
infrastructure ISPs deploy really
• Except if you do ISP supplied OS
upgrades/OTA
– Enabled by CDNs like Cloudflare

23
NEW FEATURES IN THE TOOLS FROM
APNIC INFORMATION PRODUCTS

25
25
New Look and Feel, and comparison mode
Select from routing,
delegation, history,
whois, geo-location
tools
Compare up to 6 ASN
or IP prefixes side-by-
side
Worldwide, resource
data from
RIPESTAT
No login required!

27
27
New Look and Feel, charting improvements
Comparison mode,
select regions,
economies to show in
a single chart
Can download data or
chart views for offline
use
APNIC Region data
No login required!

28
28
New Look and Feel, charting improvements
Comparison mode,
select regions,
economies to show in
a single chart
Can download data or
chart views for offline
use
APNIC Region data
No login required!
Coming Soon: Worldwide Data

30
30
New: Routing inconsistency report
Compares BGP to
RPKI (ROA) and IRR
(route object)
APNIC Region data
APNIC Login required.

31
31
New: Suspicous traffic now has alerts
You specify the ASN,
prefix, conditions
We send you email
notifications when
events trigger.
We’re working on SMS
and Slack integration
APNIC Login required

32
32
New: Routing inconsistency report
Compares BGP to
RPKI (ROA) and IRR
(route object)
APNIC Region data
APNIC Login required.
Coming soon: alerts!

33
33
New: Routing inconsistency report
Compares BGP to
RPKI (ROA) and IRR
(route object)
APNIC Region data
APNIC Login required.
Would you like access?
Talk to VNNIC 
(we’d love to see if we can extend
service to NIR members)

Mais conteúdo relacionado

Semelhante a VINX-NOG 2022: An update on IPv6, RPKI and tools

ARA JAGUAR-7000 Product Brief

Chul-Woong Yang

High Scalability Network Monitoring for Communications Service Providers

CA Technologies

IPv6 Deployment: Why and Why not?

apnic_slides

Monitoring federation open stack infrastructure

Fernando Lopez Aguilar

Dr. Christos Kolias – Senior Research Scientist Keynote Title: “NFV: Empowering the Network” Keynote Abstract: Network Functions Virtualization (NFV) envisions and promises to change the service provider landscape and has emerged as one of one of today’s significant trends. Although less than two years old, NFV has garnered the industry’s full attention and support. Moving swiftly, a number of key accomplishments have already taken place, and a lot more work is currently under way within ETSI NFV while we are embarking on its future phase. Various proofs-of-concepts (ranging from vEPC to vCPE, vIMS and vCDN) are being developed while issues such as open source and SDN are becoming key ingredients as the can play a pivotal role. Dr. Christos Kolias' Bio: Christos Kolias is a senior research scientist at Orange Silicon Valley (a subsidiary of Orange). Christos is a co-founder of the ETSI NFV group and had led the formation of ONF’s Wireless & Mobile working group. He has lectured on NFV and SDN at several events. Christos has more than 15 years of experience in networking, he is the originator of Virtual Output Queueing (VOQ) used in packet switching. He holds a Ph.D. in Computer Science from UCLA. --------------------------------------------------- ★ Resources ★ Zerista: http://lcu14.zerista.com/event/member/137765 Google Event: https://plus.google.com/u/0/events/cpeksim4hr4ghhuufv5ic4viirs Video: https://www.youtube.com/watch?v=tFDnj_342n4&list=UUIVqQKxCyQLJS6xvSmfndLA Etherpad: http://pad.linaro.org/p/lcu14-400a --------------------------------------------------- ★ Event Details ★ Linaro Connect USA - #LCU14 September 15-19th, 2014 Hyatt Regency San Francisco Airport --------------------------------------------------- http://www.linaro.org http://connect.linaro.org

NFV Linaro Connect Keynote

Linaro

Frank Brockners' presentation from the 2017 Open Networking Summit. While troubleshooting or planning, did you ever wish to get full insight into which paths *all* your packets take in your network, understand whether your SLA is really in place, or were you ever asked to prove that your traffic really follows the path you specified by service chaining or traffic engineering? We approach this problem by adding meta-data to *all* packets. In-band OAM adds forwarding path information and other information/stats to every data packet - as opposed to relying on probe packets, which is the traditional method that tools like ping or traceroute use. This session will introduce In-band OAM, explain the technology and outline the reference implementation in FD.io/VPP and OpenDaylight using a example demos.

Next-gen Network Telemetry is Within Your Packets: In-band OAM

Open Networking Summit

Jun Bi Professor & Director Tsinghua University Outline • Intra-AS (campus level) IPv6 source address validation using OpenFlow (with extension) – Good for introducing new IP services to network • Planning next step if we run SDN as a common infrastructure for new services and architectures – Some personal viewpoints and thoughts on design challenges – Forwarding abstraction for Post-IP architectures – Control abstraction for scalable NOS and programmable/manageable virtualization platform – Inter-AS policies negotiation abstraction ONS2015: http://bit.ly/ons2015sd ONS Inspire! Webinars: http://bit.ly/oiw-sd Watch the talk (video) on ONS Content Archives: http://bit.ly/ons-archives-sd

The Challenges of SDN/OpenFlow in an Operational and Large-scale Network

Open Networking Summits

IPv6 deployment status - APEC TEL47

APNIC

Embracing SDN in the Next Gen Network

NetCraftsmen

RPKI - Securing the Internet One Hop at a Time

RIPE NCC

guna_2015.DOC

Gunasekaran Subramani

Law Enforcement engagement capacity building

APNIC

Internet Structural Analysis by End to-End Measurement

Satoshi KAMEI

Recent Developments in RPKI

RIPE NCC

Webinar 2017. Supercharge your analytics with ClickHouse. Vadim Tkachenko

Altinity Ltd

Continuum PCAP Cost Effective, Open Network Packet Capture How do you know what is really coming through your network? Without capturing that traffic, you don't have the means of identifying and solving your security and network performance problems. Though some organizations have the budgets and infrastructure to record network traffic, many current tools either do not capture all necessary packets, are too expensive to implement on a large scale, or don't easily integrate with other applications. And even companies that are capturing their network data are frustrated by these systems' lack of flexibility, or paying for functionality that they don't really use. Continuum PCAP solves these problems by fusing the best of both worlds. It is a powerful, affordable enterprise-class packet capture appliance that integrates with your favorite 3rd party or open-source tools, or with your own applications via a REST API.

Continuum pcap-oem

blabadini

Overview xs en

Sophie Morin

PEPS: CNES Sentinel Satellite Image Analysis, On-Premises and in the Cloud wi...

OW2

We use resources like weather reports or air quality measurements to navigate the world. These resources become especially important when faced by extreme events like the current wildfires in the Western USA. The data for the reports, predictions, and maps all start as realtime sensor networks. In this presentation, I look at some of my research into scientific data representation on the Web and how the key mechanism is the partitioning, annotation, and naming of data representations. We’ll take a look at a few examples, including some recent work on air quality data relating to the current wildfires in the western USA. We’ll explore the central question of how geospatial sensor network data can be collected and consumed within K8s deployments.

Geospatial Sensor Networks and Partitioning Data

AlexMiowski

Cumulus Linux CAPEX and OPEX savings

Adam Lorts

Semelhante a VINX-NOG 2022: An update on IPv6, RPKI and tools (20)

ARA JAGUAR-7000 Product Brief

High Scalability Network Monitoring for Communications Service Providers

IPv6 Deployment: Why and Why not?

Monitoring federation open stack infrastructure

NFV Linaro Connect Keynote

Next-gen Network Telemetry is Within Your Packets: In-band OAM

The Challenges of SDN/OpenFlow in an Operational and Large-scale Network

IPv6 deployment status - APEC TEL47

Embracing SDN in the Next Gen Network

RPKI - Securing the Internet One Hop at a Time

guna_2015.DOC

Law Enforcement engagement capacity building

Internet Structural Analysis by End to-End Measurement

Recent Developments in RPKI

Webinar 2017. Supercharge your analytics with ClickHouse. Vadim Tkachenko

Continuum pcap-oem

Overview xs en

PEPS: CNES Sentinel Satellite Image Analysis, On-Premises and in the Cloud wi...

Geospatial Sensor Networks and Partitioning Data

Cumulus Linux CAPEX and OPEX savings

Mais de APNIC

APNIC Policy Roundup presented by Sunny Chendi at TWNOG 5.0

APNIC

APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...

APNIC

APNIC Updates presented by Paul Wilson at ARIN 53

APNIC

DDoS In Oceania and the Pacific, presented by Dave Phelan at NZNOG 2024

APNIC

'Future Evolution of the Internet' delivered by Geoff Huston at Everything Op...

APNIC

On Starlink, presented by Geoff Huston at NZNOG 2024

APNIC

Networking in the Penumbra presented by Geoff Huston at NZNOG

APNIC

IP addressing and IPv6, presented by Paul Wilson at IETF 119

APNIC

draft-harrison-sidrops-manifest-number-01, presented at IETF 119

APNIC

Making an RFC in Today's IETF, presented by Geoff Huston at IETF 119

APNIC

IPv6 Operational Issues (with DNS), presented by Geoff Huston at IETF 119

APNIC

Is DNS ready for IPv6, presented by Geoff Huston at IETF 119

APNIC

Benefits of doing Internet peering and running an Internet Exchange (IX) pres...

APNIC

APNIC Update and RIR Policies for ccTLDs, presented at APTLD 85

APNIC

NANOG 90: 'BGP in 2023' presented by Geoff Huston

APNIC

DNS-OARC 42: Is the DNS ready for IPv6? presentation by Geoff Huston

APNIC

APAN 57: APNIC Report at APAN 57, Bangkok, Thailand

APNIC

Lao Digital Week 2024: It's time to deploy IPv6

APNIC

AINTEC 2023: Networking in the Penumbra!

APNIC

CNIRC 2023: Global and Regional IPv6 Deployment 2023

APNIC

Mais de APNIC (20)