16
Issue Date: Revision: Technical Assistance Service Fakrul Alam Senior Training Officer [email protected] [29 th May 2016] [1.0] OPM & RAKERNAS 30-31 May 2016, Batam, Indonesia

APNIC Technical Assistance Service, IDNIC OPM 2016

  • Upload
    apnic

  • View
    415

  • Download
    0

Embed Size (px)

Citation preview

Page 1: APNIC Technical Assistance Service, IDNIC OPM 2016

Issue Date:

Revision:

Technical Assistance Service

Fakrul AlamSenior Training Officer

[email protected]

[29th May 2016]

[1.0]

OPM & RAKERNAS30-31 May 2016, Batam, Indonesia

Page 2: APNIC Technical Assistance Service, IDNIC OPM 2016

Facts!

Page 3: APNIC Technical Assistance Service, IDNIC OPM 2016

Latest Fact!

3

Page 4: APNIC Technical Assistance Service, IDNIC OPM 2016

Excuses

4

http://ipv6bingo.com/

Page 5: APNIC Technical Assistance Service, IDNIC OPM 2016

Technical Assistance Service

• Small scale technology solution

• No viable business case as Commercial Project

• Problem remains for ever

Page 6: APNIC Technical Assistance Service, IDNIC OPM 2016

Scope

• Routing Registry Function Automation

• IPv6 Deployment Planning

• Prefix De-aggregation analysis & action plan

• IXP OSS

Page 7: APNIC Technical Assistance Service, IDNIC OPM 2016

Routing Registry Function Automation

7

Page 8: APNIC Technical Assistance Service, IDNIC OPM 2016

Secure Internet Routing

8

To Secure Internet Routing; we need to check:

A network should only originate his own prefix

1. How do we verify? 2. How do we avoid false

advertisement?

A transit network should filter customer prefix

1. Check customer prefix and ASN delegation

2. Transitive trust

Page 9: APNIC Technical Assistance Service, IDNIC OPM 2016

Secure Internet Routing

9

Secure Internet Routing

Routing Policy System (RPS) Working Group’s model

Secure Inter-Domain Routing (SIDR) Working Group’s model

Page 10: APNIC Technical Assistance Service, IDNIC OPM 2016

Routing Registry Function Automation• Analyse the Member organization’s routing policy.

• Help prepare relevant RPSL object templates.

• Create the relevant ROA.

• Help deploy cache validator and integrate with solution.

10

Page 11: APNIC Technical Assistance Service, IDNIC OPM 2016

How

11

Page 12: APNIC Technical Assistance Service, IDNIC OPM 2016

IPv6 Deployment Planning

12

Page 13: APNIC Technical Assistance Service, IDNIC OPM 2016

IPv6 Transition Plan

13

source : http://www.potaroo.net/ispcol/2012-08/EndPt2.html

Page 14: APNIC Technical Assistance Service, IDNIC OPM 2016

It’s there

• IPv6 is now inevitable

• Without IPv6 deployment, it is just a matter of time before networks (countries) become isolated and unable to communicate

• Ability to integrate devices, such as mobile phones, IoT, etc, is no longer a want − it is a need

• IPv6 is no longer just a technical issue to be tackled only at the operational level. It needs to involve all levels and agencies within government

14

Page 15: APNIC Technical Assistance Service, IDNIC OPM 2016

"It's enough to do an experiment. The problem is the experiment never ended”

- Vint Cerf(comments of 32 bit IPv4 addressing)

15

Page 16: APNIC Technical Assistance Service, IDNIC OPM 2016

Terima Kasih!