A Bhutanese story of ROAs, ROVs and IPs presentation for btNOG 9
•Descargar como PPTX, PDF•
0 recomendaciones•162 vistas
A presentation by Pubudu Jayasinghe on a Bhutanese story of ROAs, ROVs and IPs, delivered at btNOG 9 in Bhutan
Recomendados
Recomendados
Más contenido relacionado
Similar a A Bhutanese story of ROAs, ROVs and IPs presentation for btNOG 9
Similar a A Bhutanese story of ROAs, ROVs and IPs presentation for btNOG 9 (20)
Más de APNIC
Más de APNIC (20)
Último
Último (20)
A Bhutanese story of ROAs, ROVs and IPs presentation for btNOG 9
- 1. 1
- 2. 2 2
- 3. 3 A Bhutanese story of ROAs, ROVs and IPs BTNOG9 | Oct 14, 2022 Pubudu Jayasinghe pubudu@apnic.net
- 4. 4 Source : https://stats.labs.apnic.net/roa ROAs in BT World. Average is : 35.5% Economy ROA % BT 99.3 MV 98.3 NP 97.1 BD 95.7 PK 91.2 LK 90.1 IN 69.0 AF 49.1 As of 13 Oct, 2022
- 5. 5 Source : https://stats.labs.apnic.net/roa ROVs in BT World. Average is : 11.5% Economy ROV % MV 62.1 BT 27.5 AF 10 PK 3.5 IN 3.1 BD 2 LK 1.5 NP 1.4
- 6. 6 Who is doing ROV in BT
- 7. 7 RPKI Invalids in APNIC region Could be a Hijack prevented, but most are mistakes. BT has 0 invalids
- 8. 8 Who are doing ROV ? https://isbgpsafeyet.com/
- 12. 12 How about IPv4 and IPv6…
- 13. 13 • 30% to 40% increase during COVID times (2020 Jan – 2022 Oct) • Steady linear growth since 2017 40% Source : www.google.com/ipv6 IPv6 end user Readiness; Google stats
- 14. 14 Source : www.facebook.com/ipv6 36% • 25% to 35% increase during COVID times (2020 Jan – 2022 Oct) • Once again, steady linear growth during last few years IPv6 end user Readiness; FB stats
- 15. 15 15 • 24% to 33% increase during 2020 Jan – 2022 Oct • Still shows steady linear growth since 2017 33% IPv6 end user Readiness; APNIC stats Source : https://stats.labs.apnic.net/ipv6
- 16. 16 IPv6 end user Readiness, Bhutan Source : https://stats.labs.apnic.net/ipv6 Economy Capability % IN 79.1 LK 53.7 NP 33.2 BT 16.5 PK 3.2 BD 2.4 MV 0.1 AF 0.03 World. Average is : 33.1%
- 17. 17 Timeline of IPv6 readiness in BT 33% 0.01% 17% 16% • Early start • Back the drawing boards • Getting it right • Pandemic? • Recovery and beyond ?
- 18. 18
- 19. 19 Top ASNs in BT Source : https://stats.labs.apnic.net/ipv6 ASN AS Name IPv6 Capable IPv6 Preferred Samples AS18024 BTTELECOM-AS-AP Bhutan Telecom Ltd 18.03% 17.86% 76,981 AS137412 TASHICELL-MOBILE-AS Tashicell Domestic AS Thimphu Bhutan 11.29% 11.25% 15,087 AS23955 TASHICELL-DOMESTIC-AS Tashi InfoComm Limited 8.20% 8.15% 14,592 AS134715 DRUKREN-MOIC-AS Ministry of Information & Communications Thimphu, Bhutan 34.83% 34.36% 6,994 AS138529 DATANET-AS-AP DATANET WIFI 0.11% 0.11% 921 AS136039 NANO-AS-AP NANO, Bhutan 0.82% 0.70% 855 AS141680 SUPERNET1-AS-AP SuperNet Infocomm 0.21% 0.21% 466 AS38004 FASTLINK-ISP FastLink Wireless ISP, DrukCom Pvt. Enterprise. 0.00% 0.00% 275 AS9009 M247 0.00% 0.00% 49 AS209854 SURFSHARK 0.00% 0.00% 28
- 20. 20 AS interconnections IPv4 vs IPv6
- 21. 21 IP delegations in BT Source : rex.apnic.net
- 22. 22 Have you started your IPv6 journey? • Automatic eligibility to get IPv6, if you are eligible to get IPv4 • If you already have IPv4, you can get IPv6 in 5 minutes • No extra cost, only IPv4 or IPv6 (which ever is higher) incurs cost
- 23. 23 23 • Track, measure, report – End-user readiness, – Performance analysis • Operational trainings – Direct country assistance (Gov) – Standalone workshops – NOGs • Technical Assistance – Remote or F2F www.apnic.net/ipv6 IPv6 @ APNIC
- 24. 24 IPv6 funding
- 27. 27 THANK YOU !
Notas del editor
- I have a cool story to tell about visiting Paro Taktsang on a wet Wednesday, which came after the dry Tuesday….and how Rene was checking his heart beat every five minutes to make sure its beating. I understood that I am not as strong as I thought…. And the local guy…..he seem to breathing something else, not the same oxygen that Rene and I were struggling to find. But the program committee didn’t approve this story, because its NOG conference….so, this story is for another time.
- So lets have a look how Bhutan is doing interms, of Route Origin Authorisation, Route origin Validation, and how Ipv4 and Ipv6 is doing.
- Route origin Authorization started in about 2007. At the moment, from the delegated IP address space, about 35% is covered with ROAs. APNIC started actively encourage the community to create ROAs in about 2014. The graph shows a comparison of ROA coverage in South Asia, its good to see that all the countries are above the world average. Bhutan is sitting right at the top with 99.3 ROA coverage. I tried to find where that remaining 0.7 is, but I couldn’t. If you are from that organization with the 0.7, please create the ROA and make Bhutan 100%.
- The second step is filtering. Route origin Validation. This is where ISPs would drop packets if the traffic has conflicts with a ROA. Surprisingly Maldives has a very high rate of ROV. This is because Dhiraagu, the largest ISP in MV started ROV. They single handedly increased the entire countries ROV percentage. BT is doing well too, considering the world average is only 11.5%. Not so well interms of other countries.
- It is good to see that all the top 7 ASNs have at least some ROV enabled. Tashi-cell is doing very will with 99% on both their ASNs. We can see that BTTELECOM has also started ROV, with their sample size, once BTTELCOM starts doing more ROV, the country percentage would naturally go up fast, adding more BGP security to the country.
- When you create ROAs you need to maintain them.
- At a glance you can check if you have any invalids.
- You can create Alerts if someone is hijacking your prefixes.
- Also check if your ASN is originating suspicious traffic
- Covid seem to had no effect what so ever
- 13 Nov 2019: 24.07 14 Nov 2015: 5.22
- In India, it was Relicance Jio 98%, Airtel, Vodafone India, Idea Cellular,; they all have more than 80% IPv6 capability. Sri Lanka it was Dialog Axiata, and Sri Lanka telecome, and in Nepal it isWorld Link leading with Subisu, vianet.
- A huge spike in 2012, must be the World Ipv6 day. Very early start compared to the neighbours. After that, for the next 6 years, it was a declining trend. Back to the drawing boards….or comparatively high Ipv4 usage ? From 2018 to 2020, a boarder spike, and then a calm another couple of low activity probably due to the pandemic…… and now we are seeing a steady growth since beginning of 2022. Which is great.
- Who are the main contributors for this growth. ….Bttelecom, Tashicell, Drucknet, have deployed IPv6 in. their networks and are growing, while other
- This is another way of looking at IPv6 deployment. This is the connectivity between the ASNs. In other words if networks are speaking to each other in Ipv6. 38740 TashiCell and 134715 Drukren ASN exchange lot of traffic on IPv6. 17660 Is one of the oldest AS numbers in Bhutan, it was delegated 21 years ago, in 2001.
- On the left side, we can see that the for IPv6 delegations is steadily rising. Which is a good sign. On the right side is it is the Ipv4 delegations. It is declining. But don’t get the wrong idea that the demand is decling. Last few days I was speaking to engineers in Tashi Cell, Mr Ganga, Dawa from BTTELCOME….they still need IPv4, but APNIC don’t have any to give. In 2015
- I think all of you must have seen this banner at the entrance. We have been preaching about IPv6 deployment for 10-15 years now. Dr Philip was telling me, this question “Are you ready for Ipv6?” is old, everyone should be ready by now. But as you saw from the stats, some are not yet ready. So, please don’t make us bring this banner again, anywhere close to a SANOG event next time. For those who are not yet ready….due to some reason or the other….the journey starts by getting your IPv6 resources from APNIC.
- The APNIC Foundation hosts the administrative functions. and technical infrastructure for the fund There is a special fund allocated to support IPv6 deployment. Please visit the site to find out how to apply for these funds. A independent committee will evaluate your implementation plans to determine if you qualify. The committee consists of distinguished people like Sumon, Gurab, and many others.
- Most Engineers think that policy is not for us. They are happy to do the router configurations. But policy development is very important as well. As the registry, we live by the policy. If policy says only a /23 can be delegated, that is what we do. Where does the policies come from….it comes from the Community, that is you. Anyone can propose an idea.