'Secure and Sustainable Internet Infrastructure for Emerging Technologies'

Paul Wilson, Director General of APNIC delivers keynote presentation titled 'Secure and Sustainable Internet Infrastructure for Emerging Technologies' at VNNIC Internet Conference 2024, held in Hanoi, Vietnam from 4 to 7 June 2024.

1. Secure and Sustainable Internet Infrastructures for Emerging Technologies VNNIC Conference Hanoi, Viet Nam 7 June 2024

2. What is APNIC? The RIR for the Asia Pacific region, since 1993 For a ”Global, Open, Stable and Secure Internet” Delegates and manages Internet number resources IPv4 and IPv6 addresses AS numbers Agency for Internet development Training, infrastructure, advocacy Membership-based, not-for-profit Community self-regulatory body Open, Neutral, Transparent, Trusted Supporting VNNIC as NIR in Viet Nam

3. What is the Internet? Physical networks IPv4 IPv6 TCP UDP QUIC Apps, platforms, content 1. Link 2. Internet 3. Transport 4. Application Challenges at all layers

4. Challenges… Below the Internet layer New infrastructure technologies Satellites, mobile, wireless, cable/ fibre … Scaling: bandwidth and coverage Exploding demands Last mile: reaching the next and final billions Deployment and delivery of infrastructure Fragility, redundancy, physical security Natural and human disasters, failures and attacks Physical networks

5. Challenges… Above the Internet layer Internet applications Platforms, fragmentation, interoperability ICTs on the Internet Every application in use today ( eg AI!) Use and abuse Social risks and dangers, security and privacy Regulations and governance Avoid fragmentation, encourage growth, innovation, benefits Apps, platforms, content

6. Challenges… AT the Internet layer Internet growth and scale IP addressing and address management IPv6 transition IP Fragmentation Routability , efficiency and security Routing system growth RPKI, ROV and secured routing IPv4 IPv6

7. Where did we start?

8. Allocation Where do IP Addresses come from? Standards Allocation Assignment RIR More on all of this later.

9. Allocation Where do IP Addresses come from? Standards

10. Early days: 1981 – 1992 10 “ The assignment of numbers is also handled by Jon. If you are developing a protocol or application that will require the use of a link, socket, port, protocol, or network number please contact Jon to receive a number assignment . ” (RFC 790) 1981:

11. Boom times: 1992 – 2001 11 “ It has become clear that … these problems are likely to become critical within the next one to three years. ” (RFC1366, Gerich ) “ …it is [now] desirable to consider delegating the registration function to an organization in each of those geographic areas . ” (RFC 1338) 1992:

12. Maturity: 2000s… 12 1999: Internet Corporation for Assigned Names and Numbers (ICANN) 2004: Number Resource Organisation (NRO)

13. Regional Internet Registries today

14. What do RIRs do? Internet number resource management IP addresses: IPv4 and IPv6; and Autonomous System Numbers Resource allocation, registration ( “ whois ” ), transfer Resource Resource certification (RPKI, ROA publication) Policy development process Coordination and support of PDP Open Policy Meetings Global policy process (via ASO and ICANN) Public representation and advocacy Governmental and inter-Governmental spaces Defense of the Internet and its multistakeholder governance 14

15. NIRs in the APNIC region National registries existed prior to APNIC… JPNIC, CNNIC, KRNIC, TWNIC, AUNIC, NZNIC Some NIRs formed later VNNIC , IRINN, IDNIC NIR functions Providing IP address registration services according to APNIC policies Interfacing with APNIC: operations and PDP Other activities according to role and need No new NIRs are being accepted now (due to IPv4 exhaustion)

16. Today’s challenges…

17. Internet growth and scale IP addressing and address management IPv6 transition Fragmentation IPv4 IPv6

18. IPv4 exhaustion… APNIC internal http:// www.potaroo.net /tools/ipv4

19. IPv4 exhaustion… IANA pool expired in 2011 RIR regional supplies followed (2012 to 2017) Only APNIC has remaining supply (after reclamation in 2023) Delaying the inevitable… Address sharing, Network Address Translation (NAT), CGNAT RIR-registered transfers (sales or leases) Trading in the remains… Purchase and leasing Chaotic white/grey/black markets Price: 10 to 1,000x the price of registration $$$

20. The need for IPv6… One reason: more IP addresses Other benefits are minor The Internet will keep growing Broadband, wifi , 4G, 5G… Internet of Things IPv6 is the only viable option Enable sustainable growth of the Internet Without IPv6 the future isn’t great

21. IPv6 address space IPv4: 32-bit address 2 32 = 4,294,967,296 The number of stars in the observable universe IPv6: 128-bit address 2 128 = 340,282,366,920,938,463,463,374,607,431,768,211,456 Each of those stars contains an entire IPv4 Internet

22. Good news… 43% IPv6 capability in Asia https:// stats.labs.apnic.net /ipv6

23. More good news…. https:// www.google.com / intl /en/ipv6/ statistics.html 45% of Google traffic

24. IPv6 population – Top 20 Rank 2015 % 2024 % 1 Belgium 45% India 79% 2 Switzerland 28% Malaysia 71% 3 United States of America 26% France 69% 4 Germany 25% Belgium 67% 5 Portugal 18% Saudi Arabia 66% 6 Luxembourg 17% Germany 66% 7 Greece 17% Vietnam 60% 8 Estonia 17% Uruguay 59% 9 Japan 16% Taiwan 58% 10 Peru 15% United States of America 57% 11 Czech Republic 11% Greece 56% 12 Norway 10% Sri Lanka 56% 13 Malaysia 10% Israel 56% 14 Romania 10% Japan 55% 15 Singapore 10% Nepal 55% 16 France 6% Mexico 52% 17 Ecuador 6% United Arab Emirates 52% 18 Brazil 6% Hungary 51% 19 Finland 6% Puerto Rico 51% 20 Austria 6% Guatemala 51%

25. Routability , efficiency and security Routing system growth Network stability Network latency Routing system security RPKI and ROV deployment

26. Global routing tables IPv4 IPv6 200,000 1,000,000

27. Global routing complexity IPv4 IPv6

28. Global routing latency AS Path length – Global average

29. Latency: IPv4 v IPv6 12ms 1ms 4.3ms - 5.5ms 3.7ms 2.8ms 6.8ms -12.5ms

30. Routing System Security RPKI: Resource Public Key Infrastructure X.509 certificates authenticate resource holders Issued by RIRs (and NIRs) with resource delegations General purpose mechanism ROV: Route origin validation BGPSEC: BGP path validation RTA: Resource Tagged Attestation ROA: Route Origin Authorisation List of IP prefixes originated by a given ASNs, signed by the prefix holder Also AS0: special ROA stating which prefixes should NOT be routed.

31. ROA coverage global IPv4 IPv6 46% valid 59% valid

32. ROA coverage Viet Nam 72% valid 96% valid IPv4 IPv6

33. ROA coverage in Southeast Asia IPv6 72% IPv4 96%

34. The future…

35. Where are we on the curve? 36 0% 100% ?

36. Where are YOU on the curve? 37 0% 100% ?

37. Thanks Questions? http://www.apnic.net

38. Coming up… APNIC 58 Wellington, New Zealand, with Pacific IGF Workshops: 30 August to 2 September Conference: 4 to 6 September 2024 Fellowships available! https://conference.apnic.net/58

39. More about APNIC

40. APNIC The RIR for the Asia Pacific region, since 1993 For a ”Global, Open, Stable and Secure Internet” Delegates and manages Internet number resources IPv4 and IPv6 addresses AS numbers Agency for Internet development Training, infrastructure, advocacy Membership-based, not-for-profit Community self-regulatory body Open, Neutral, Transparent, Trusted

41. What else does APNIC do? Information products and services APNIC Labs, APNIC Blog, Ping Tools: Rex, DASH, Netox Representation Defense of the Internet and its multistakeholder governance Liaison: IETF, ICANN, ITU, APT, PITA, OECD, APEC TEL… Infrastructure support IXPs and DNS rootservers Internet development APNIC Academy APNIC Foundation (2016) Asia Pacific Internet Development Trust (2021) 42

42. Products…

43. apnic.academy

44. APNIC Foundation https:// apnic.foundation

45. isif.asia Back in 2025!

46. arena- pac.net

47. That’s all folks! Questions? http://www.apnic.net