APNIC Seminar The Internet in crisis IPv4 address depletion and life thereafter

1. APNIC SeminarThe Internet in crisisIPv4 address depletion and life thereafter 20th, December, 2007, Hong Kong At the Chinese University of Hong Kong

2. Assumptions • Diversified audience: • People with technical background • People involved with education • University students • Varying levels of expertise, so no assumptions of prior knowledge made other than: • An understanding of internetworking concepts (IP addressing, routing and routers) • Diversified content presented: • Concepts and theory • Policy and operation • Technical and hands-on

3. Acknowledgements The material used in this course was created in collaboration with the Japan IPv6 Promotional Council, Jordi Palet Martinez of Consulintel, Merike Kaeo of Double Shot Security, Philip Smith of Cisco, Randy Bush (IIJ), Paul Wilson (APNIC), and Geoff Huston (APNIC) and includes material provided by them. APNIC acknowledges with thanks and appreciation the contribution and support of the above.

4. Seminar overview • The current operation and structure of the Internet • The importance/role of an addressing structure • The growth of the Internet and IPv4 unallocated address space exhaustion • The current situation and the consequences of address exhaustion • How can we cope with it? • The interim solutions (NAT, CIDR) • IPv6 as the solution • Overview of IPv6 • IPv4/IPv6 co-existence (transition) • IPv6 deployment • Issues and concerns • Future scenarios • Conclusion

5. The current operation and structure of the Internet The importance/role of an addressing structure

6. Recap IP address, DNS and routing

7. What is the Internet? • “The Internet is a worldwide, publicly accessible network of interconnected computer networks that transmit data by packet switching using the standard Internet Protocol (IP). • It is a "network of networks" that consists of millions of smaller domestic, academic, business, and government networks, which together carry various information and services, such as electronic mail, online chat, file transfer, and the interlinked Web pages and other documents of the World Wide Web.” http://en.wikipedia.org/wiki/Internet

8. What is IP? • “The Internet Protocol (IP) is a data-oriented protocol used for communicating data across a packet-switchedinternetwork. • IP is a network layer protocol in the Internet protocol suite and is encapsulated in a data link layer protocol (e.g., Ethernet). As a lower layer protocol, IP provides the service of communicable unique global addressing amongst computers.” http://en.wikipedia.org/wiki/Internet_Protocol

9. What is an IP address? • An IP address is NOT a domain name • It is an identifier that includes necessary information to reach a network location • Each network location has an IP address • Reaching a location is achieved via the Internet routing system

10. The Internet 192.168.5.1002001:0600::1 www.gov.au ? My Computer www.gov.au IP addresses are not domain names DNS 2001:0C00:8888:: 2001:0600::1

11. IP addresses • Are either IPv4 or IPv6 • IPv4: 32-bit* number • 4 billion different host addresses • E.g. 202.12.29.142 • IPv6: 128-bit* number • 16 billion billion network addresses • E.g. 2001:0400:3c00:a:b:c:d:1 * bit = binary digit

12. Application Transport Internet Network Access The Four Layers of TCP/IP

13. What is the packet switching? • “Packet switching is a communications paradigm in which packets (units of information carriage) are routed between nodes over data links shared with other traffic. In each network node, packets are queued or buffered, resulting in variable delay.” http://en.wikipedia.org/wiki/Packet_switching

14. TCP/IP protocol structure SMTP FTP Telnet DNS HTTP ……… UDP TCP ICMP IGMP IP ARP RARP DATA LINK PHYSICAL

15. What else is an IP address? • Internet infrastructure address • Uniquely assigned to infrastructure elements • Globally visible to the entire Internet • A finite “common resource” • Never “owned” by address users • Not dependent upon the DNS

16. end user Where do IP addresses come from? IPv4 IPv6 Allocation * Allocation Assignment * In some cases via an NIR such as KRNIC

17. Routing

18. What is a router • A device in the network that processes and routes data between two points • A device that routes data between networks using IP addressing • A layer 3 device • Hardware or software used to connect two or more networks

19. How does routing work? • The routing system is normally hierarchical • Each part of the hierarchy provides specific detail • This detail enables traffic to flow from one network to another • It works in a similar manner to telephone routing

20. National Local Telephone network routing Global

21. Internet address routing The Internet Announce 202.12.24.0/21 Traffic 202.12.29.142 202.12.29.128/25

22. Internet address routing Traffic 202.12.29.142 202.12.29.142 202.12.29.128/25

23. Internet address routing – with NAT Ref: http://207.46.196.114/windowsserver/en/library/0f4bad59-5237-4452-a693-708ac61fe1671033.mspx?mfr=true

24. Sustainablegrowth? Dot-Com boom Projected routing table growth without CIDR CIDR deployment Growth of global routing table http://bgp.potaroo.net/as1221/bgp-active.html

25. Addresses Prefix Classful Net Mask ... ... ... ... 128 networks x 16M hosts /29 8 255.255.255.248 A 16 /28 255.255.255.240 16K networks x 64K hosts B 32 /27 255.255.255.224 2M networks x 256 hosts C 64 /26 255.255.255.192 128 /25 255.255.255.128 256 /24 1 C 255.255.255.0 ... ... ... ... 4096 /20 16 C’s 255.255.240.0 8192 /19 32 C’s 255.255.224 /18 64 C’s 16384 255.255.192 32768 /17 128 C’s 255.255.128 /16 1 B 65536 255.255.0.0 ... ... ... ... IP addressing architecture Best Current Practice Classful Classless Classful addressing is dead! • Obsolete • inefficient • depletion of B space • too many routes from C space • Network boundaries may occur at any bit

26. IP addressing architecture • Classful(Obsolete) • Wasteful address architecture • network boundaries are fixed at 8, 16 or 24 bits (class A, B, and C) • Classless • Efficient architecture • network boundaries may occur at any bit (e.g. /12, /16, /19, /24 etc) • CIDR • Classless Inter Domain Routing architecture • Allows aggregation of routes within ISPs infrastructure Best Current Practice RFC 1517 RFC 1518 RFC 1519

27. /19: 8190 hosts Network address: 19 bits Host: 13 bits /10: 4M hosts Net: 10 bits Host address: 22 bits Classless addressing - examples /20: 4094 hosts Network address: 20 bits Host: 12 bits /24: 254 hosts Host: 6 bits Network address: 24 bits /28: 14 hosts Network address: 28 bits Host: 4 bits

28. The Internet Net Net Net Net Net Net Net Net Net Net Net Global Internet routing

29. ISP tier structure Ref: CISCO ISP workshop presented in SANOG 2006

30. ISP A ISP A ISP B ISP B Internet Internet ISP C ISP C ISP D ISP D IP address aggregation No Aggregation Aggregation (21 routes) (4 routes) (Non-portable Assignments) (Portable Assignments)

31. Internet resource management Role of Regional Internet Registry

32. What are RIRs? • Industry self-regulatory structures • Open membership-based bodies • Representative of ISPs globally • Service organisations • Non-profit, neutral and independent • 100% self-funded by membership • First established in early 1990s • Voluntarily by consensus of community • To satisfy emerging technical/admin needs • In the “Internet Tradition” • Consensus-based, open and transparent

33. 1981: “The assignment of numbers is also handled by Jon. If you are developing a protocol or application that will require the use of a link, socket, port, protocol, or network number please contact Jon to receive a number assignment.” (RFC 790) The early years: 1981 – 1992

34. The boom years: 1992 – 2001 1992: “It has become clear that … these problems are likely to become critical within the next one to three years.” (RFC1366) “…it is [now] desirable to consider delegating the registration function to an organization in each of those geographic areas.” (RFC 1338)

35. Recent years: 2002 – 2007 2004: Number Resource Organization

36. What do RIRs do? • Internet resource allocation • Primarily, IP addresses – IPv4 and IPv6 • Receive resources from IANA/ICANN, and redistribute to ISPs on a regional basis • Registration services (“whois”) • Policy development and coordination • Open Policy Meetings and processes • Training and outreach • Training courses, seminars, conferences • Liaison: IETF, ITU, APT, PITA, APEC • Publications • Newsletters, reports, web site

37. RIR policy development process OPEN Need Anyone can participate Evaluate Discuss ‘BOTTOM UP’ TRANSPARENT Consensus Implement Internet community proposes and approves policy All decisions and policies documented and freely available to anyone

38. What is APNIC? • Regional Internet Registry (RIR) for the Asia Pacific region • One of five RIRs currently operating around the world • Non-profit, membership organisation • Open participation, democratic, bottom-up processes • Responsible for distributing Internet resources throughout the AP region • Industry self-regulatory body • Consensus-based, open, and transparent decision-making and policy development • Meetings and mailing lists • Open to anyone • http://www.apnic.net/meetings/23/index.html • http://www.apnic.net/community/lists/index.html

39. Where is APNIC region?

40. APNIC services • Internet resource allocations • “MyAPNIC” secure membership portal • Multilingual helpdesk – email, phone, chat, VOIP* • Open Policy Meetings • Twice annually • Webcast and remote participation • Stenocaptioning • Training and education • Technical workshops: Routing, DNS, Security • Internet support • Fellowships • R&D grants funding • icons – ISP support website

41. APNIC is NOT • A network operator • Does not provide networking services • Works closely with APRICOT forum • A standards body • Does not develop technical standards • Works within IETF in relevant areas (IPv6 etc) • A domain name registry or registrar • Will refer queries to relevant parties

42. APNIC NIR LIR LIR LIR ISP ISP Internet Registry structure ICANN (IANA) ARIN LACNIC RIPE NCC AfriNIC

43. Global policy coordination AfriNIC RIPE NCC NRO APNIC LACNIC ARIN • The main aims of the NRO: • To protect the unallocated number resource pool • To promote and protect the bottom-up policy development process • To facilitate the joint coordination of activities e.g., engineering projects • To act as a focal point for Internet community input into the RIR system

44. Global policy coordination AfriNIC RIPE NCC ICANN ASO NRO APNIC LACNIC ARIN • The main function of ASO: • ASO receives global policies and policy process details from the NRO • ASO forwards global policies and policy process details to ICANN board

45. RIR and Internet resource management Global IPv4 Delegations (in /8) As of July 2007

46. Sustainablegrowth? Dot-Com boom Projected routing table growth without CIDR CIDR deployment RIR and Internet resource management Growth of global routing table http://bgp.potaroo.net/as1221/bgp-active.html

47. The growth of the Internet and IPv4 unallocated address space exhaustion

48. Current status of IPv4 Ref: IPv4 unallocated address space exhaustion by Geoff Huston, Sept 2007

49. Current status of IPv4 Ref: IPv4 unallocated address space exhaustion by Geoff Huston, Sept 2007

50. IPv4 address allocation – IANA to RIRs Ref: IPv4 unallocated address space exhaustion by Geoff Huston, Sept 2007