Shifting Sands. PLNOG March Andrzej Wolski Training Department
|
|
|
- Douglas Whitehead
- 5 years ago
- Views:
Transcription
1 Shifting Sands PLNOG March 2014 Andrzej Wolski Training Department
2 RIPE NCC 2 Began operating in 1992 Not-for-profit membership organisation 10,000 members (Local Internet Registries) Neutral, Impartial, Open, Transparent No commercial interest or influences and operates as a bottom-up and self-governing organisation Provides administrative support to RIPE
3 Regional Internet Registries 3 IANA Lacnic Latin America ARIN North America RIPE NCC Eurasia Middle East AFRINIC Africa APNIC Asia Pacific
4 RIPE NCC Training Services 4 Courses Local Internet Registry RIPE Database IPv6 for LIRs Routing Security New courses (Q2 2014) Deploying IPv6 DNSSEC Webinars RIPE Database IPv6 RPKI Statistics 2013: 31 countries 115 courses 2347 attendees ripe.net/training
5 Why the Internet is changing? 5 People Devices Innovation Internet is becoming a critical part of our life
6 Unprecedented changes 6 Artificial limitations Names! Names resolution Addresses! Routing Security considerations
7 gtlds Names
8 TLDs 8 gtlds.com.org.net.info.biz.name cctlds.pl.cz.nl.io.ly.tv 台湾.рф.امارات Infrastrucure.arpa
9 New gtlds 9.whatever.you.would.like
10 Closed gtlds 10 Single registrant model Brand TLDs Limited second level registration Problems Abuse Homonyms!! On Hold
11 Dotless gtlds 11 Representation Problems search lists collisions with existing host names certificate authorities Requires apex of a TLD zone in the DNS! Should be outlawed! some cctld operators do it anyway!
12 Delegated gtlds 12.CHRISTMAS.PUB.GURU. みんな.SHOES بازار..FISH.MANGO.FLORIST..KIWI.MENU.DATING. .HOUSE.BERLIN.дети.TOKYO. 公司.COFFEE. 网络.TIPS.SEXY.AGENCY. RED.SUPPORT
13 DNS Security Extensions Names resolution
14 DNSSEC 14 Overlay on top of DNS Verifies data integrity Verifies data authenticity Does not prevent Data snooping No encryption, public data anyway Attacks against the name server It s backwards compatible
15 DNSSEC Chain of Trust 15 Web Server? NS.com DS DNS root Web Browser? example.com SERVFAIL DNS Resolver Attacker? NS example.com DS? A example.com DNSKEY RRSIG DNS.com DNS example.com
16 Every response is signed 16 dig -t AAA +dnssec ripe.net +short 2001:67c:2e8:22::c100:68b AAAA ripe.net. rmlimjmrulby8yplh/pn+bx2uhayhtr3pd7aijdlwgwkrkufk+qfvurz UxZYqWRpD8o58MXPeNiRc6L9pEG6f3hoyuhxDtC9whHitCNBkNdAlytl OJd8V9e5bmUkwtjvf/+NFtSQaxfqmgY8natE6odi5Kozu1ThvBZVoj7A 4ts= dig -t NS +dnssec ripe.net +short sec1.apnic.net. sns-pb.isc.org. ns3.nic.fr. tinnie.arin.net. sec3.apnic.net. pri.authdns.ripe.net. NS ripe.net. GtlGGBVIf71MKDmiKYzt7OKfOa6z5Y6VQwFZUug1o3MdahIOuF8+ADzJ DA9vPRMQ8b8jhT2EHXcKKorpMB97gJjavi2Rs/D9w5TuKpBkXJ1sMJJr Rd0H/QWJlxaKA/DMc1LuXRqjtNEnCjsZstd7NVQMA1Sq+JPVSarjTHbX HZc=
17 SSL Certificate Pinning (DANE) 17 dig +dnssec +noall +answer +multi _443._tcp. TLSA _443._tcp IN TLSA ( C92D44FE99DD32B0C DFAB89575DCC4C E A36D186 ) Early adopter stage New DNS TLSA records Support in BIND and up Support in various other software IETF Proposed Standard RFC 6698
18 SSH Keys 18 dig +dnssec +multi host.example.com SSHFP host.example.com. 88 IN SSHFP 1 1 ( 7E7A55CEA3B8E A6781CA7C35190CF0EB ) host.example.com. 88 IN SSHFP 2 1 ( CC17F14DA60CF38E809FE58B10D0F22680D59D08 ) New DNS SSHFP records Support in OpenSSH VerifyHostKeyDNS IETF Standard RFC 4255
19 DNSSEC Deplyment Status 19 source: internetsociety.org/deploy360/dnssec/maps/
20 IPv6 Addresess
21 IANA IPv4 Pool 21 40% 30% 20% 10% 0%
22 RIPE NCC IPv4 Pool 22 On 14 September 2012, the RIPE NCC began to allocate IPv4 address space from the last /8 of IPv4 address space it holds.
23 Getting an IPv6 Allocation 23 To qualify, an organisation must: Be an LIR Have a plan for making assignments within two years! Minimum allocation size /32 Up to a /29 without additional justification More if justified by customer numbers
24 Getting IPv6 PI Assignment 24 To qualify, an organisation must Meet the contractual requirements for provider independent resources LIRs must demonstrate special routing requirements Minimum assignment size /48 PI space can not be used for sub-assignments Not even for 1 IP address
25 IPv6 Global Pool 25 Reserved IANA RIRs
26 IPv6 Pool in Distribution 26 IANA Other RIRs RIPE NCC
27 IPv6 RIPENess 27 Rating system One star if the LIR has an IPv6 allocation! Additional stars if IPv6 Prefix is announced on router A route6 object is in the RIPE Database Reverse DNS is set up! A list of all 4 star LIRs: Experimental 5th star:
28 IPv6 RIPEness 28
29 IPv6 Enabled Networks 29
30 RPKI Routing
31 Why RPKI? 31 To be able to answer the question Is that ASN authorised to originate that address range?! Tight integration with routers Routers have awareness of RPKI validity states Can make routing decision Stepping stone for AS-Path Validation Prevent Attacks on BGP
32 RPKI BGP Origin Validation 32 LIRs can use their certificate to create a ROA for each of their resources (address ranges) ROA states address range which AS this is announced from (freely chosen) maximum length (freely chosen)! You can have multiple ROAs for an IP range ROAs can overlap
33 Can I Make Routing Decisions? 33 A ROA affects the RPKI validity of a BGP route VALID ROA found, authorised announcement INVALID ROA found, unauthorised announcement UNKNOWN No ROA found (resource not yet signed) Every operator is free to base any routing decision on these three validity states
34 Adoption 34 ARP source: rpki.surfnet.nl
35 RPKI Support in Routers 35 RPKI and RPKI-RTR Protocol are an IETF standard All router vendors can implement it Cisco Support: XR (CRS-x, ASR9000, c12k) / XR (NCS6000, XRv) XE 3.5 (C7200, c7600, ASR1K, CSR1Kv, ASR90x, ME3600 ) IOS15.2(1)S Juniper has support since version 12.2 Quagga has support through BGP-SRX BIRD has support for ROA but does not do RPKI-RTR localcert.ripe.net ripe.net/certification
36 Questions? 36?
37 RIPE Meeting May 2014 ripe68.ripe.net
38 Dziękuje ;-) Koniec
ARIN Support for DNSSEC and RPKI. ION San Diego 11 December 2012 Pete Toscano, ARIN
ARIN Support for DNSSEC and ION San Diego 11 December 2012 Pete Toscano, ARIN 2 DNS and BGP They have been around for a long time. DNS: 1982 BGP: 1989 They are not very secure. Methods for securing them
IPv6 Deployment and Distribution in the RIPE NCC Service Region. Marco Schmidt IP Resource Analyst Monday, 23 April 2012
IPv6 Deployment and Distribution in the RIPE NCC Service Region Marco Schmidt IP Resource Analyst Monday, 23 April 2012 Topics: RIPE NCC IPv4 - review and last /8 IPv6 - current status How to get IPv6
IPv4 depletion & IPv6 deployment in the RIPE NCC service region. Kjell Leknes - June 2010
IPv4 depletion & IPv6 deployment in the RIPE NCC service region Kjell Leknes - June 2010 Outline About RIPE and RIPE NCC IPv4 depletion IPv6 deployment Engaging the community - RIPE NCC and the RIPE community
RPKI. Resource Pubic Key Infrastructure
RPKI Resource Pubic Key Infrastructure Purpose of RPKI RPKI replaces IRR or lives side by side? Side by side: different advantages Security, almost real time, simple interface: RPKI Purpose of RPKI Is
Securing Routing: RPKI Overview. Mark Kosters Chief Technology Officer
Securing Routing: RPKI Overview Mark Kosters Chief Technology Officer Why are DNSSEC and RPKI important? Two of the most critical resources DNS Routing Hard to tell when resource is compromised Focus of
What s new at the RIPE NCC?
What s new at the RIPE NCC? PLNOG, Kraków, 28 September 2011 Ferenc Csorba Trainer, RIPE NCC ferenc@ripe.net Topics - overview The Registry System IPv4 depletion IPv6 policy update and statistics RIPEstat,
Introduction to the RIR System. Dr. Nii N. Quaynor
Introduction to the RIR System Dr. Nii N. Quaynor 1 Internet Identifiers Name resources: Names Names used to access the Internet gtlds: Generic Top level domains (.com,.net, info,.org,.int etc) cctld:
APNIC s role in stability and security. Adam Gosling Senior Policy Specialist, APNIC 4th APT Cybersecurity Forum, 3-5 December 2013
APNIC s role in stability and security Adam Gosling Senior Policy Specialist, APNIC 4th APT Cybersecurity Forum, 3-5 December 2013 Overview Introducing APNIC Working with LEAs The APNIC Whois Database
IPv6, Act Now! Daniel Karrenberg, RIPE NCC Chief Scientist
IPv6, Act Now! Daniel Karrenberg, RIPE NCC Chief Scientist Who is talking: Daniel Karrenberg 1980s: helped build Internet in Europe EUnet, Ebone, IXes,... RIPE 1990s: helped build RIPE NCC 1st CEO: 1992-2000
Resource Certification. Alex Band, Product Manager DENIC Technical Meeting
Resource Certification Alex Band, Product Manager DENIC Technical Meeting Internet Routing Routing is non-hierarchical, open and free Freedom comes at a price: - You can announce any address block on your
Internet Numbers Introduction to the RIR System
Internet Numbers Introduction to the RIR System Chafic Chaya MEAC-IG Summer School, AUB - Lebanon August 2016 1 Who Runs the Internet? The short answer is NO ONE!!! Chafic Chaya MEAC-IG Summer School August
A Policy Story - IPv4 Transfer. TWNIC OPM 26, Taipei 14 December 2016 George Kuo, Services Director
A Policy Story - Transfer TWNIC OPM 26, Taipei 14 December 2016 George Kuo, Services Director 1 About APNIC Membership-based, not-for-profit, Regional Internet Registry (RIR) Delegates and registers IP
Madison, Wisconsin 9 September14
1 Madison, Wisconsin 9 September14 2 Security Overlays on Core Internet Protocols DNSSEC and RPKI Mark Kosters ARIN Engineering 3 Why are DNSSEC and RPKI Important Two critical resources DNS Routing Hard
RPKI and Routing Security
Presentation September 2015 Yerevan Regional Meeting Routing Security 2 Routing Registry route objects RPKI (Resource Public Key Infrastructure) ROAs (Route Origin Authorisation) What is the Purpose of
Security Overlays on Core Internet Protocols DNSSEC and RPKI. Mark Kosters ARIN CTO
Security Overlays on Core Internet Protocols DNSSEC and RPKI Mark Kosters ARIN CTO Why are DNSSEC and RPKI Important Two critical resources DNS Routing Hard to tell if compromised From the user point of
Internet Number Resources
Internet Number Resources 1 Internet Number Resources Key Internet resources IPv6 addresses Autonomous System number IPv4 addresses Internet Fully Qualified Domain Name Internet Number Resources The IP
RIPE NCC IPv6 Update. 4th Belgian IPv6 Council Meeting 11 September Nathalie Trenaman
RIPE NCC IPv6 Update 4th Belgian IPv6 Council Meeting 11 September 2013 Nathalie Trenaman Who are we? RIPE NCC Located in Amsterdam Not for profit membership organisation One of five Regional Internet
DNS Security. Wolfgang Nagele DNS Group Manager
DNS Security Wolfgang Nagele DNS Group Manager DNS: the Domain Name System Specified by Paul Mockapetris in 1983 Distributed Hierarchical Database Main purpose: Translate names to IP addresses Since then:
DNS Security. Wolfgang Nagele DNS Services Manager
DNS Security Wolfgang Nagele DNS Services Manager DNS: the Domain Name System Specified by Paul Mockapetris in 1983 Distributed Hierarchical Database Main purpose: Translate names to IP addresses Since
Security Overlays on Core Internet Protocols DNSSEC and RPKI. Mark Kosters ARIN CTO
Security Overlays on Core Internet Protocols DNSSEC and RPKI Mark Kosters ARIN CTO Why are DNSSEC and RPKI Important Two critical resources DNS Routing Hard to tell if compromised From the user point of
News from RIPE and RIPE NCC
News from RIPE and RIPE NCC FRNOG, Paris 11 December 2009 Vesna Manojlovic RIPE / RIPE NCC RIPE Operators community Develops addressing policies Working group mailing lists 2010 meetings: Prague 3-7 May
RIPE NCC Status Update
RIPE NCC Status Update IPv4 and more Marco Hogewoning, Trainer The five RIRs 2 RIPE NCC Service region: Europe, Middle East and parts of Central Asia Supports coordination of Internet operations Not-for-profit
IPv6 Allocation Policy and Procedure. Global IPv6 Summit in China 2007 April 13, 2007 Gerard Ross and Guangliang Pan
IPv6 Allocation Policy and Procedure Global IPv6 Summit in China 2007 April 13, 2007 Gerard Ross and Guangliang Pan 1 Overview Introduction to APNIC Policy development process IPv6 policy and procedures
Current Policy Topics A World Wide View
Current Policy Topics A World Wide View filiz@ripe.net Overview RIPE Policy Update World Wide Look by Topic - IPv4 - IPv6 - ASNs RIPE Policy Update - Archived Withdrawn - Contact e-mail Address Requirements
Facilitating Secure Internet Infrastructure
Facilitating Secure Internet Infrastructure RIPE NCC http://www.ripe.net About the RIPE NCC RIPE Network Coordination Centre Bottom-up, self-regulated, membership association, notfor-profit Regional Internet
RIPE NCC DNS Update. Wolfgang Nagele DNS Services Manager
RIPE NCC DNS Update Wolfgang Nagele DNS Services Manager DNS Department Services Reverse DNS for RIPE NCC zones Secondary for other RIRs K-root F-reverse (in-addr.arpa & ip6.arpa) Secondary DNS for cctlds
IPv6 Allocation Policy and Procedure. Global IPv6 Summit in China 2007 April 13, 2007 Gerard Ross and Guangliang Pan
IPv6 Allocation Policy and Procedure Global IPv6 Summit in China 2007 April 13, 2007 Gerard Ross and Guangliang Pan 1 Overview Introduction to APNIC Policy development process IPv6 policy and procedures
RIPE NCC Services & Activities
RIPE NCC Services & Activities NaMeX Regional Meeting 2013, Paestum, Italy, 21 June 2013 Mirjam Kühne, RIPE NCC Overview What is the RIPE NCC Services for members and public services Tools and Measurements
Securing Internet Infrastructure: Route Origin Security using RPKI at ARIN. Mark Kosters CTO
Securing Internet Infrastructure: Route Origin Security using RPKI at ARIN Mark Kosters CTO What is RPKI? Resource Public Key Infrastructure Attaches digital certificates to network resources AS Numbers
RIPE NCC Technical Services
RIPE NCC Technical Services France-IX General Meeting 26 September 2013 Mirjam Kühne, Xavier Le Bris, RIPE NCC Overview What is the RIPE NCC Services for members and public services IP address policy update
RIPE NCC Academic Day. November 2016 Saudi Arabia
RIPE NCC Academic Day November 2016 Saudi Arabia Who Runs the Internet? The Short Answer is No ONE!!! 2 What is the Internet? 3 What is the Internet? 4 What is the Internet? The Internet has roughly 55,000
RIPE NCC Introduction. Jochem de Ruig Chief Financial Officer
RIPE NCC Introduction Chief Financial Officer RIPE NCC Contents Basics what are Internet Number Resources (INR)? The INR world The registration Legal aspects of INR RIPE NCC and Law Enforcement Basics
IPv6 Policy and Statistics. Ingrid Wijte July 2018 IPv6 Roundtable - Tel Aviv
IPv6 Policy and Statistics Ingrid Wijte July 2018 IPv6 Roundtable - Tel Aviv About the RIPE NCC One of five Regional Internet Registries (RIRs) - Serving Europe, the Middle East and parts of Central Asia
Securing Core Internet Functions Resource Certification, RPKI. Mark Kosters ARIN CTO
Securing Core Internet Functions Resource Certification, RPKI Mark Kosters ARIN CTO Core Internet Functions: Routing & DNS The Internet relies on two critical resources DNS: Translates domain names to
IPv6 Allocation and Policy Update. Global IPv6 Summit in China 2007 April 12, 2007 Guangliang Pan
IPv6 Allocation and Policy Update Global IPv6 Summit in China 2007 April 12, 2007 Guangliang Pan 1 Overview IPv6 allocation status update Global IPv6 allocations APNIC allocation and assignment details
Feedback From RIPE NCC Registration Services. Andrea Cima 24 October 2017 RIPE 75
Feedback From RIPE NCC Registration Services Andrea Cima 24 October 2017 RIPE 75 The Aim of this Update To report back to the RIPE community: - The feedback that we receive from LIRs - Highlighting potential
IP Address Management The RIR System & IP policy
IP Address Management The RIR System & IP policy Nurani Nimpuno APNIC Overview Early address management Evolution of address management Address management today Address policy development IP allocation
RPKI Trust Anchor. Geoff Huston APNIC
RPKI Trust Anchor Geoff Huston APNIC Public Keys How can you trust a digital signature?? What if you have never met the signer and have no knowledge of them or their keys? One approach is transitive trust
Introduction to the DANE Protocol
Introduction to the DANE Protocol ICANN 46 April 10, 2013 Internet Society Deploy360 Programme Providing real-world deployment info for IPv6, DNSSEC and other Internet technologies: Case Studies Tutorials
APNIC allocation and policy update. JPNIC OPM July 17, Tokyo, Japan Guangliang Pan
APNIC allocation and policy update JPNIC OPM July 17, 2007 - Tokyo, Japan Guangliang Pan 1 Overview Internet registry structure Number resource allocation statistics APNIC recent policy implementations
RIPE NCC Status Update
RIPE NCC Status Update IPv4 and more Marco Hogewoning, Trainer IPv4 Run Out IPv4 Distribution IANA 3 February 2011 15 April 2011 AfriNIC ARIN RIPE NCC APNIC LACNIC? 7,000 LIRs End Users 3 Business As Usual
Life After IPv4 Depletion
1 Life After IPv4 Depletion Jon Worley Analyst Securing Core Internet Functions Resource Certification, RPKI Mark Kosters Chief Technology Officer 2 Core Internet Functions: Routing & DNS The Internet
Managing Internet Resources
Managing Internet Resources 4th Internet Governance Forum German Valdez Communications Area Manager APNIC Sharm El Sheikh, Egypt 15 October 2009 1 Internet Resources how are the managed? Where do IP addresses
Module 10. (Reconnaissance Whois and DNS)
(Reconnaissance Whois and DNS) At the end of this module, you should what Domain Names and IPv4 Address are and how they are related by the Domain Name Service. You should also have an idea of what kind
Secure Routing with RPKI. APNIC44 Security Workshop
Secure Routing with RPKI APNIC44 Security Workshop Misdirection / Hijacking Incidents YouTube Incident Occurred 24 Feb 2008 (for about 2 hours) Pakistan Telecom announced YT block Google (AS15169) services
Newcomers Session! By! Newcomers Team! 01/12/2015!
Newcomers Session By Newcomers Team 01/12/2015 INTRODUCTION AGENDA AGENDA AFRINIC- 23 AT A GLANCE INTERNET ECOSYSTEM INTERNET ECOSYSTEM The term used to describe the organisations and communities that
APNIC Update. RIPE 59 October 2009
APNIC Update RIPE 59 October 2009 Overview APNIC Services Update APNIC 28 policy outcomes APNIC Members and Stakeholder Survey Next APNIC Meetings Resource Delegations (1 Oct 09) No of /8 delegated No
RIPE NCC Mission and Services. Paul Rendek Director of External Relations
Mission and Services Paul Rendek Director of External Relations ENOG 8 Baku, Azerbaijan June 2014 History of the 2 The was formed in 1992 by the RIPE community: - Network coordination centre for Internet
ISP 1 AS 1 Prefix P peer ISP 2 AS 2 Route leak (P) propagates Prefix P update Route update P Route leak (P) to upstream 2 AS 3 Customer BGP Update messages Route update A ISP A Prefix A ISP B B leaks
Update from the RIPE NCC. David Hilario, RIPE NCC
Update from the RIPE NCC David Hilario, RIPE NCC The Internet Registry System 2 Regional Internet Registries (RIR) Distribution and registration of Internet number resources: IP addresses, AS Numbers Not-for-profit
Decentralized Internet Resource Trust Infrastructure
Decentralized Internet Resource Trust Infrastructure Bingyang Liu, Fei Yang, Marcelo Bagnulo, Zhiwei Yan, and Qiong Sun Huawei UC3M CNNIC China Telecom 1 Critical Internet Trust Infrastructures are Centralized
IPv4 Run-Out, Trading, and the RPKI
IPv4 Run-Out, Trading, and the RPKI MENOG 3 / Salmiya 2008.04.15 Randy Bush http://rip.psg.com/~randy/080415.menog-v4-trad-rpki.pdf 2008.04.15 MENOG v4 Trade RPKI 2 Internet Initiative
APNIC & Internet Address Policy in the Asia Pacific
APNIC & Internet Address Policy in the Asia Pacific NZ Internet Industry Forum Auckland, 29 November 2001 Anne Lord, APNIC Overview Introduction to APNIC Policy Development Address Management APNIC Update
NIR February JPNIC Updates. Hiroki Kawabata Japan Network Information Center (JPNIC) Copyright 2016 Japan Network Information Center
NIR SIG@APNIC41 February 2016 JPNIC Updates Hiroki Kawabata Japan Network Information Center (JPNIC) Contents Statistics IPv4 IPv6 ASN transfer Activities IPv6 Policy and Internet Governance RPKI Reverse
Resource Public Key Infrastructure (RPKI) Nurul Islam Roman, APNIC
Resource Public Key Infrastructure (RPKI) Nurul Islam Roman, APNIC Target Audience Knowledge of Internet Routing(specially BGP) Fair idea on Routing Policy No need to know Cryptography Basic knowledge
Misdirection / Hijacking Incidents
Security Tutorial @ TWNOG SECURE ROUTING WITH RPKI 1 Misdirection / Hijacking Incidents YouTube Incident Occurred 24 Feb 2008 (for about 2 hours) Pakistan Telecom announced YT block Google (AS15169) services
RSC Part II: Network Layer 3. IP addressing (2nd part)
RSC Part II: Network Layer 3. IP addressing (2nd part) Redes y Servicios de Comunicaciones Universidad Carlos III de Madrid These slides are, mainly, part of the companion slides to the book Computer Networking:
RIPE Policy Development & IPv4 / IPv6
RIPE Policy Development & IPv4 / IPv6 Workshop on the IPv6 development in Saudi Arabia 8 February 2009 Axel Pawlik axel@ripe.net Overview RIPE PDP (Policy Development Process) Current Policy Issues IPv4
IP Addressing and ICT Development in the Pacific Islands. Anne Lord and Save Vocea, APNIC ICT Workshop, Fiji, November, 2002
IP Addressing and ICT Development in the Pacific Islands Anne Lord and Save Vocea, APNIC ICT Workshop, Fiji, 11-13 November, 2002 A Glimpse of the Future. What is ICT Development? E-commerce and E-education
Update from the RIPE NCC
Update from the RIPE NCC INEX Meeting, Dublin, 14 December 2011 Mirjam Kühne, RIPE NCC Outline RIPE Labs - Background, Purpose, Content, Participation IPv6 Activities and Statistics RIPE Atlas RIPEstat
Deploying RPKI An Intro to the RPKI Infrastructure
Deploying RPKI An Intro to the RPKI Infrastructure VNIX-NOG 24 November 2016 Hanoi, Vietnam Issue Date: Revision: Misdirection / Hijacking Incidents YouTube Incident Occurred 24 Feb 2008 (for about 2 hours)
IPv6 Address Allocation and Assignment Policy
IPv6 Address Allocation and Assignment Policy How to read this draft document: This document relates to a project to improve the readability of RIPE policy documents. If approved, it will replace ripe-512,
Introduction to The Internet
Introduction to The Internet ITU/APNIC/MOIC IPv6 Workshop 19 th 21 st June 2017 Thimphu These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International license (http://creativecommons.org/licenses/by-nc/4.0/)
Internet Corporation for Assigned Names & Numbers - Internet Assigned Numbers Authority Update
Internet Corporation for Assigned Names & Numbers - Internet Assigned Numbers Authority Update PacNOG 3, Rarotonga Save Vocea Regional Liaison - Australasia/Pacific 17 June 2007 ICANN Mission To coordinate,
IPv6: The Future of the Internet? July 27th, 1999 Auug
IPv6: The Future of the Internet? July 27th, 1999 Auug Overview Introduction to APNIC Introduction to IPv6 Obtaining IPv6 Address Space References and RFCs What is APNIC? Regional Internet Registry (RIR)
Overview of the Resource PKI (RPKI) Dr. Stephen Kent VP & Chief Scientist BBN Technologies
Overview of the Resource PKI (RPKI) Dr. Stephen Kent VP & Chief Scientist BBN Technologies Presentation Outline The BGP security problem RPKI overiew Address & AS number allocation system Certificates
Internet Addressing and the RIR system (part 2)
Internet Addressing and the RIR system (part 2) 12 February 2004 Phnom Penh, Cambodia Paul Wilson, APNIC Overview Part 2 Allocation statistics Asia Pacific Internet Resource statistics Global Internet
FREQUENTLY ASKED QUESTIONS ABOUT IPv6
FREQUENTLY ASKED QUESTIONS ABOUT IPv6 What is an IP? The letters IP stand for Internet Protocol. This protocol comprises a series of rules used by devices (computers, servers, routers and other equipment:
Internet Resource Certification and Inter- Domain Routing Security! Eric Osterweil!
Internet Resource Certification and Inter- Domain Routing Security! Eric Osterweil! Who is allowed to do what?! BGP (the Internet s inter-domain routing protocol) runs by rumor Participants assert reachability
Routing Security. Training Course
Routing Security Training Course Training Services RIPE NCC November 2015 Schedule 09:00-09:30 11:00-11:15 13:00-14:00 15:30-15:45 17:30 Coffee, Tea Break Lunch Break End Routing Security 2 Introductions
BGP Origin Validation
BGP Origin Validation ISP Workshops These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International license (http://creativecommons.org/licenses/by-nc/4.0/) Last updated
Current Policy Topics
Current Policy Topics with World Wide View 1 Overview RIPE Policy Update World Wide View - IPv4, IPv6, Transfers Promotional slides 2 RIPE Policy Update - Accepted Run Out Fairly (2009-03) - Accepted in
Feedback from RIPE NCC Registration Services. Alex Le Heux - RIPE NCC RIPE62, May 2011, Amsterdam
Feedback from RIPE NCC Registration Services Alex Le Heux - RIPE NCC RIPE62, May 2011, Amsterdam Outline ASN32 success, a competitive disadvantage? Last /8 implementation detail Upgrade of /32 IPv6 allocations
APNIC Update. Elly Tawhai Senior Internet Resource Analyst/Liaison Officer, APNIC PacNOG
APNIC Update Elly Tawhai Senior Internet Resource Analyst/Liaison Officer, APNIC PacNOG 14 02-12-2013 Overview Serving APNIC Members Supporting Internet development in the Asia Pacific region Collaborating
DNSSEC All You Need To Know To Get Started
DNSSEC All You Need To Know To Get Started Olaf M. Kolkman RIPE NCC A Semi Technical Introduction Why do we need DNSSEC What does DNSSEC provide How does DNSSEC work Question: www.ripe.net A Reminder:
Robust Inter-Domain Routing
Establishing the Technical Basis for Trustworthy Networking Robust Inter-Domain Routing Addressing Systemic Vulnerabilities in BGP Doug Montgomery (dougm@nist.gov) Manager, Internet and Scalable Systems
Internet Protocol Addresses What are they like and how are the managed?
Internet Protocol Addresses What are they like and how are the managed? Paul Wilson APNIC On the Internet, nobody knows you re a dog by Peter Steiner, from The New Yorker, (Vol.69 (LXIX) no. 20) On the
IPv4 Run-Out, Trading, and the RPKI
IPv4 Run-Out, Trading, and the RPKI RIPE 56 / Berlin 2008.05.07 Randy Bush http://rip.psg.com/~randy/080507.ripe-v4-trad-rpki.pdf 2008.05.07 RIPE v4 Trade RPKI 2 Internet Initiative Japan
IPv4 Depletion and IPv6 Adoption Today. Richard Jimmerson
IPv4 Depletion and IPv6 Adoption Today Richard Jimmerson 2 History of the Internet Protocol Internet Protocol version 4 (IPv4) Developed for the original Internet (ARPANET) in 1978 4 billion addresses
IPv6 Address Allocation APNIC
IPv6 Address Allocation APNIC IPv6 Summit July 2-62 6 2001, Korea Anne Lord, APNIC Overview Address Policy Gobal policy document status Current issues Deployment Status Allocation analysis Database registrations
The Regional Internet Registries
The Regional Internet Registries Managing Internet Number Resources www.afrinic.net www.apnic.net www.arin.net www.lacnic.net www.ripe.net www.nro.net Global Coordination A Fair and Stable Platform Whether
Problem. BGP is a rumour mill.
Problem BGP is a rumour mill. We want to give it a bit more authorita We think we have a model AusNOG-03 2009 IP ADDRESS AND ASN CERTIFICATION TO IMPROVE ROUTING SECURITY George Michaelson APNIC R&D ggm@apnic.net
10 March Informal Expert Group for the ITU World Telecommunication Policy Forum
10 March 2009 Informal Expert Group for the ITU World Telecommunication Policy Forum The Internet Society has been actively engaged in the preparation of the next World Telecommunication Policy Forum (WTPF)
Update on Resource Certification. Geoff Huston, APNIC Mark Kosters, ARIN IEPG, March 2008
Update on Resource Certification Geoff Huston, APNIC Mark Kosters, ARIN IEPG, March 2008 Address and Routing Security What we have had for many years is a relatively insecure interdomain routing system
Measuring IPv6 Deployment
Measuring IPv6 Deployment The story so far IANA Pool Exhaustion In this model, IANA allocates its last IPv4 /8 to an RIR on the 18 th January 2011 Ten years ago we had a plan Oops! We were meant to have
Prepared by Regional Internet Registries APNIC, ARIN, LACNIC and RIPE NCC
Prepared by Regional Internet Registries APNIC, ARIN, LACNIC and RIPE NCC Overview History & Evolution Structure IP Address Management Internet Number Resource Management Policy Development Internet Number
An ARIN Update. Susan Hamlin Director of Communications and Member Services
An ARIN Update Susan Hamlin Director of Communications and Member Services ARIN, a nonprofit member-based organization, supports the operation of the Internet through the management of Internet number
ARIN Policies How to Qualify for Number Resources. Leslie Nobile
ARIN Policies How to Qualify for Number Resources Leslie Nobile Director, Registration Services ARIN Policies IPv4 IPv6 ASN Terms Allocate to issue number resources to ISPs (LIRs) for internal networks
Internet Governance & Current Internet Eco-system. Filiz Yilmaz SNE Colloquium, University of Amsterdam September 2016
Internet Governance & Current Internet Eco-system Filiz Yilmaz SNE Colloquium, University of Amsterdam September 2016 koalafil@gmail.com Overview Who am, I why am I here? Brief History of Internet Internet
ARIN Update. Mark Kosters CTO
ARIN Update Mark Kosters CTO Agenda What does ARIN do? A short ARIN status report How you can get IP space from us? 2 3 ARIN, a nonprofit member-based organization, supports the operation of the Internet
CIDR. The Life Belt of the Internet 2005/03/11. (C) Herbert Haas
CIDR The Life Belt of the Internet (C) Herbert Haas 2005/03/11 Early IP Addressings Before 1981 only class A addresses were used Original Internet addresses comprised 32 bits (8 bit net-id = 256 networks)
RIPE NCC Update. Nathalie Trenaman 19 April 2017 IPv6 Council - Belgium
RIPE NCC Update Nathalie Trenaman 19 April 2017 IPv6 Council - Belgium IPv6 Routing in BE -from an Atlas probe perspective Probes and Anchors 9,600+ probes connected (250 RIPE Atlas Anchors) 4,100+ results
An Amsterdam Update. RIPE Network Coordination Centre. Nick Hyrka. APNIC 25, 29 April 2008, Taiwan 1. ArtistServer.
An Amsterdam Update ArtistServer.com/Brillman ArtistServer.com/Brillman APNIC 25, 29 April 2008, Taiwan http://www.ripe.net 1 Personnel Changes New key staff Anand Buddhdev Database Manager Andrea Cima
ARIN Update. Summer 2011 ESCC/Internet2 Joint Techs Mark Kosters Chief Technology Officer
ARIN Update Summer 2011 ESCC/Internet2 Joint Techs Mark Kosters Chief Technology Officer Agenda A Brief Overview of ARIN IPv4 and IPv6 Stats Call to Action Technology Initiatives 2 of 23 About ARIN Regional
Introduction to The Internet
Introduction to The Internet ITU/APNIC/MICT IPv6 Security Workshop 23 rd 27 th May 2016 Bangkok Last updated 5 th May 2015 1 Introduction to the Internet p Topologies and Definitions p IP Addressing p
RPKI Introduction. APNIC Technical Workshop July 5-6, 2018 in Beijing, China. Hosted By:
RPKI Introduction APNIC Technical Workshop July 5-6, 2018 in Beijing, China. Hosted By: 1 Content Why do we need RPKI What is RPKI How to deploy RPKI Configuration case Misdirection / Hijacking Incidents
RPKI deployment at AFRINIC Status Update. Alain P. AINA RPKI Project Manager
RPKI deployment at AFRINIC Status Update Alain P. AINA RPKI Project Manager What is Resource Certifcation? Resource Certifcation is a security framework for verifying the association between resource holders
32-bit ASNs. Philip Smith. MENOG 5, Beirut, 29th October 2009
32-bit ASNs Philip Smith MENOG 5, Beirut, 29th October 2009 Autonomous System (AS) AS 100 Collection of networks with same routing policy Single routing protocol Usually under single ownership, trust and
32-bit ASNs. Philip Smith. Last updated February 2010
32-bit ASNs Philip Smith Last updated February 2010 Autonomous System (AS) AS 100 Collection of networks with same routing policy Single routing protocol Usually under single ownership, trust and administrative
RIPE Network Coordination Centre. K-root and DNSSEC. Wolfgang Nagele RIPE NCC.
K-root and DNSSEC Wolfgang Nagele RIPE NCC RIPE NCC One of the five Regional Internet Registries Provides IP address and AS number resources to Europe and Middle-East regions DNS related work - Parent