《分配與管理》課件

APNIC/TWNICIPAddress

分配與管理1APNIC/TWNICIPAddress

分配與管理1Welcome

APNICMembersTrainingCourseEffectiveIPAddressManagement:Asia-PacificPoliciesandProcedures

2Welcome

APNICMembersTrainingIntroductiontoAPNICAsiaPacificNetworkInformationCenter3IntroductiontoAPNICAsiaPaciWhatisAPNIC?RegionalInternetRegistry(RIR)

fortheAsiaPacificRegionResourceregistration,allocationandsupportIPaddresses,ASnumbers,delegationMembership-basedorganizationNon-profit,neutralandimpartialNot:anoperationsforumNot:astandardsdevelopmentbody4WhatisAPNIC?RegionalInterneInternetRegistryHierarchyASOICANN5InternetRegistryHierarchyASOAPNICStructure6APNICStructure6APNICCoreServicesResourceallocationIPallocations‘SecondOpinion’approvalofIPassignmentsASnumberassignmentsResourceregistrationRegistrationservicesAPNIC‘whois’serverDNSmanagementReversedomains-

Not:ForwardDNSservices7APNICCoreServicesResourcealInternetRegistryallocationandassignmentPolicies8InternetRegistryallocationaDefinitions

(1)InternetRegistry(IR)Anorganisationwhichallocatesorassigns,andregistersInternetresourcesincludingIPaddressesandrelatedresourcesRegionalInternetRegistry(RIR)AnorganisationwithregionalresponsibilityformanagementofInternetresourcesResponsibilitiesincludeallocation/registrationservices,coordinationandpolicydevelopmentMustbeneutralandconsensus-based9Definitions(1)InternetRegistDefinitions

(2)InternetRegistriesLocalInternetRegistry(LIR)OtherwiseknownasanAPNICMemberNormallyoperatesasanISP,andassignsaddressspacetoitscustomersNationalInternetRegistry(NIR)IRwhichoperatesonanationalbasisandprimarilyallocatesresourcestoitsmembersMustbeneutralandconsensus-based10Definitions(2)InternetRegistDefinitions

(3)AllocationandAssignmentAllocationAblockofaddressspaceheldbyanIRforsubsequentallocationorassignmentAssignmentAblockofaddressspaceusedtoaddressanoperationalnetworkMaybeprovidedtoIRcustomers,orusedforanIR’sinfrastructure(“self-assignment”)11Definitions(3)AllocationandAPNICPoliciesBasedonglobalInternetregistrypoliciesRFC2050(1996)OtherRIRpolicies(developedsince)‘PoliciesforAddressSpaceManagementintheAsiaPacificRegion’

(waseffectiveJan2000)

/docs/add-manage-policy.htmlMinimumpracticalallocation:/19‘SlowStart’policyfornewmembersAllocationsasPAAddressSpaceProviderresponsibleforaggregationCustomerassignmentsmustbenon-portable12APNICPoliciesBasedonglobalAPNICPoliciesAllocationsbasedondemonstratedneedDetaileddocumentationrequiredAlladdressspaceheldtobedeclaredAddressspacetobeobtainedfromonesourceroutingconsiderationsmayapplyStockpilingnotpermittedValidityofallocationsandassignmentsAccordingtooriginalcriteriaAccordingtocorrectmanagementAccordingtodurationoflease13APNICPoliciesAllocationsbaseInternetRegistryprocedures

Addressspaceallocationsandassignments14InternetRegistryproceduresAOverviewAddressingplanexampleISPaddressrequestformAddressallocationsSecondopinionrequestform15Overview15AddressingPlanExampleStartingoff’Upstream

ISPLeasedlineservices

5-8customersDialupservices

16modemsCustomerservices15hostsNOCoperations10hosts

InternalDNS,Web

MailserversISPInfrastructure

5hostsVirtualweb

(http1.1)Interconnectedresilience16AddressingPlanExampleStartiAddressingPlanExample5hosts15hosts10hosts

Upstream

ISP16dialupmodemsWANpointtopoint/305-8leasedlinecustomers‘ipunnumbered’tocustomers

oneloopbackinterfaceper

assignedrouter/32‘ipunnumbered’toupstreamISP17AddressingPlanExample5hostsAddressingPlan(cont’d)network-plan:network-plan:network-plan:analoguedialupmodems,vendorxLAN-webhosting(http1.1)5-8leasedlinecustomers(/28)network-plan:network-plan:network-plan:network-plan:network-plan:LAN-NOCandOpsmanagementLAN-mail,DNS,webserversinternalloopbackrouterinterfacesrouterWANportsrouterWANports(x5lines)

Initialaddressingplan1651281510422-numbersofhostaddresses(interfaces)18AddressingPlan(cont’d)networNetworkPlanExample

6monthslater

scaleincreasedredundancy60dialup

modems(2PRI)30leasedline

customers11hosts-http1.18hosts-2ndaryServers25hosts-NOC16hosts-Servers60dialup

modems(2PRI)Upstream

ISPaddednewrouterand

LANforredundancyaddednewdialupequipmentreplacedoriginalmodemincreasednumberofleasedlinecustomersincreasednumberofhostsonallLANs19NetworkPlanExample6monthsAddressingPlan(cont’d)network-plan:network-plan:network-plan:2PRIdialupmodems,vendor‘y’LAN-webhosting(http1.1)30leasedlinecustomers(pool)16/5/128/15/10/4/2/2/network-plan:network-plan:network-plan:

network-plan:network-plan:LAN-NOCandOpsmanagementLAN-mail,DNS,webserversinternalloopbackrouterinterfacesrouterWANportsrouterWANports(x8lines)

Networkplanat6months60115122516622-increasesinhosts(interfaces)Newhardware2PRIdialupmodemsLAN-secondaryserversnetwork-plan:network-plan:0/0/608Changeddescription20AddressingPlan(cont’d)networNetworkPlan

12monthstotal

siteredundancygreatercomplexity

efficiency60leasedline

customers

ipunnumbered11hosts8hosts35host240dialup

modems(8PRI)Upstream

ISPA35hosts240dialup

modems(8PRI)40hostsUpstream

ISPBaddednew

customerrouterredundancyofWANconnections

nownumberedlinksforBGP4twopiecesofessentialequipment21NetworkPlan12monthstotalAddressingPlan(cont’d)network-plan:network-plan:network-plan:network-plan:8PRIdialupmodems,vendorx8PRIdialupmodems,vendoryLAN-webhosting(http1.1)60leasedlinecustomers(pool)16/60/0/60/5/11/128/512/15/25/10/16/0/8/2/2/2/2/4/6network-plan:network-plan:

network-plan:network-plan:network-plan:network-plan:LAN-NOCandOpsmanagementLAN-mail,DNS,webserversinternalLAN-secondaryserversrouterWANportsrouterWANports(x8lines)loopbackrouterinterfaces

Networkplanat12months240240111024403582212-increasesinhosts(interfaces)-oneyeartotal22AddressingPlan(cont’d)networAddressingPlan(cont’d)network-plan:network-plan:network-plan:network-plan:8PRIdialupmodems,vendorx8PRIdialupmodems,vendoryLAN-webhosting(http1.1)60leasedlinecustomers(pool)16/60/2400/60/2405/11/11128/512/102415/25/4010/16/350/8/82/2/22/2/24/6/12network-plan:network-plan:

network-plan:network-plan:network-plan:network-plan:LAN-NOCandOpsmanagementLAN-mail,DNS,webserversinternalLAN-secondaryserversrouterWANportsrouterWANports(x8lines)loopbackrouterinterfaces256256161024646484416

Cannowdeterminesubnetsizes23AddressingPlan(cont’d)networAddressingPlan(cont’d)Addressingplanfornetwork-plandeterminationofrelativesubnetaddressesre-orderedlargetosmallaccordingtorelativesubnetsizenetwork-plan:

1024 128/512/102460leasedlinecustomers(pool)network-plan: 256 16/60/240 8PRIdialupmodems,vendorxnetwork-plan: 256 0/60/240 8PRIdialupmodems,vendorynetwork-plan: 64 10/16/35 LAN-mail,DNS,webinternalnetwork-plan: 4 64 15/25/40 LAN-NOCandOpsmanagementnetwork-plan: 28 16 5/11/11 LAN-webhosting(http1.1)network-plan: 44 16

0/8/8 LAN-secondaryserversnetwork-plan: 60 16 4/6/12 loopbackrouterinterfacesnetwork-plan: 76 4 2/2/2 routerWANports(x8)

cumulativetotal0824AddressingPlan(cont’d)AddresAddressingPlan(cont’d)Addressingplanfornetwork-plandeterminationofsubnetmasksnetwork-plan: 1024128/512/102460leasedlinecustomersnetwork-plan: 256 16/60/240 8PRIdialupmodems,vendorxnetwork-plan: 256 0/60/240 8PRIdialupmodems,vendorynetwork-plan: 92 64 10/16/35 LAN-mail,DNS,webinternalnetwork-plan: 4 92 64 15/25/40 LAN-NOC&Opsmanagementnetwork-plan: 28 40 16 5/11/11 LAN-webhosting(http1.1)network-plan: 44 40 16

0/8/8 LAN-secondaryserversnetwork-plan: 60 40 16 4/6/12 loopbackrouterinterfacesnetwork-plan: 76 52 4 2/2/2 routerWANports(x8)25AddressingPlan(cont’d)AddresAddressingPlan(cont’d)Addressingplanfornetwork-planconnecttotheInternet(full-time,part-time)?network-plan: YES1024128/512/102460leasedcustomersnetwork-plan: PART256 16/60/240 8PRIwork-plan: PART256 0/60/240 8PRIwork-plan: 92 YES64 10/16/35 LAN-mail,DNS,webinternalnetwork-plan: 4 92 YES64 15/25/40 LAN-NOC&Opsmanagementnetwork-plan: 28 40 YES16 5/11/11 LAN-webhosting(http1.1)network-plan: 44 40 YES160/8/8 LAN-secondaryserversnetwork-plan: 60 40 YES164/6/12 loopbackrouterinterfacesnetwork-plan: 76 52 YES4 2/2/2 routerWANports(x8)26AddressingPlan(cont’d)AddresAddressingplancompletetotalplannedforcustomerassignments/22totalplannedforISPinfrastructure/24+/23network-plan: YES

1024 128/512/102460leasedlinecustomersnetwork-plan: PART 256 16/60/240 8PRIwork-plan: PART

256 0/60/240 8PRIwork-plan: 92 YES

64 10/16/35 LAN-mail,DNS,webinternalnetwork-plan: 4 92 YES

64 15/25/40 LAN-NOC&Opsmanagementnetwork-plan: 28 40 YES

16 5/11/11 LAN-webhosting(http1.1)network-plan: 44 40 YES 16 0/8/8 LAN-secondaryserversnetwork-plan: 60 40 YES 16 4/6/12 loopbackrouterinterfacesnetwork-plan: 76 52 YES 4 2/2/2 routerWANports(x8lines)

detailed,

efficientandaccurateAddressingPlan(cont’d)27AddressingPlan(cont’d)27ISPAddressRequestLife-cycleMoredocumentationandclarificationbyMember

no

Memberhascompleteddocumentation?Step1yes

EvaluationofrequestbyAPNIC-OK?Step2yesupdatelocalrecordsupdateAPNICdatabaseNotifyMemberStep3AllocationbyAPNICno28ISPAddressRequestLife-cycleOverviewISPaddressrequestformNetwork

templatePersontemplateTechnicaltemplateAdditionalinformation29Overview29CompletetheDocumentationISPAddressRequestForm(APNIC-065)Web/apnic-bin//apnic-bin/isp-address-request.plPlaintext/apnic/docs/isp-address-request30CompletetheDocumentationISPISPAddressRequestFormNetworkTemplate-registrationdetailsneedforallocationAPNICISPNonProfitISPintheAsiaPacificAL25-AP31ISPAddressRequestFormNetworISPAddressRequestFormPersonTemplate-needaccuratecontactdetailsfornetworkAnAPNICNIChandlewillautomaticallybecreated32ISPAddressRequestFormPersonISPAddressRequestFormTechnicalTemplate-GeneralOverview

MustbecurrentmembertoreceiveserviceExpectationis‘classless’TopologicalinformationExpectationof

non-portable

assignments

33ISPAddressRequestFormTechniISPAddressRequestFormTechnicalTemplate-‘CustomerNetwork’fields

Oddsizedassignmentsshouldbe

reportedonmultiplelines34ISPAddressRequestFormTechniEvaluationbyAPNIC‘Customernetwork’fieldsRegistrationcheckallcustomerassignmentsareinthe

APNIC‘whois’databaseaccuratelyParsercheckthe‘netname’ontheform&the‘netname’fieldinthedatabasearethesameie.softwarereportsdiscrepancieshostandsubnetestimatesareaccurateandrealPolicyprefixdistributionofall

customerassignments‘classless’assignmentsNOTon/24boundariesassignmentsinlinewithrfc2050-50%afteroneyear35EvaluationbyAPNIC‘CustomerISPAddressRequestFormTechnicalTemplate-ISPinternal‘Infrastructure’36ISPAddressRequestFormTechniISPAddressRequestFormTechnicalTemplate-ISP‘FutureNetworkPlan’37ISPAddressRequestFormTechniEvaluationbyAPNIC‘Infrastructure’&‘network-plan’fieldsPolicytechnicaldescriptionsaredetailedenoughsoAPNIChostmastercanunderstandwhysubnetsizewaschosendocustomerprojectionsmatchinfrastructureplans?Efficientsubnetassignments‘Bestcurrentpractice’namebasedvirtualwebhostingdynamicdialupmoreonthistofollow...38EvaluationbyAPNIC‘InfrastruEvaluationbyAPNIC SpecialverificationIPbasedvirtualhostinguptoa/22assignedforthispurposemustsendlistofdomainsandURLvirtualftp,E-commercewithSSLexcludedAPNICwillaskwhyyoucantusenamebasedhostingcable,adsl,xdslstaticassignmentforpermanentlyon-linecustomersIPaddressesforstaticassignments/32mustbereportedwhensubsequentallocationrequesteddynamicaddressassignmentpreferred39EvaluationbyAPNIC SpecialveISPAddressRequestFormAdditionalInformationPOPtopologyDiagramsshowingnetworkdesignDiagramsshowingPOPdesigndoesnetwork/POPtopologydescriptioncorrelatewithaddressingplanandcurrentinfrastructure?larger

requestswillrequireadditionaldocumentationDeploymentplanGivedetailsofphasesofdeployingequipmentDoesdeploymentplanmatchinformationin

network-planfields?40ISPAddressRequestFormAdditiISPAddressRequestFormAdditionalinformationEquipmentandservicesSpecifications,numberofportsinformationthatcannotfitontofieldsofformDetailsofhowimplementservicesexplainacronymsorspecialservicesMiscellaneousAnythingnotcoveredbytheform,anythingunusualsupplementaryinformationveryusefultothehostmasterinevaluatingyourrequest41ISPAddressRequestFormAdditiEvaluationbyAPNICGeneralAlladdressspaceheldshouldbedocumentedcheckotherRIR,NIRdatabasesforhistoricalallocations‘Noreservations’policyReservationsmayneverbeclaimedFragmentsaddressspaceCustomersmayneedmoreorlessaddressspacethanisactuallyreserved42EvaluationbyAPNICGeneral42AddressAllocationsFirstallocation-summaryRequirescleardetailedrequestImplementationof‘BestCurrentPractice’EfficientassignmentsplannedAlwaysa/19‘slowstart’exceptionsmadeforverylargenetworks

butnotcommon43AddressAllocationsFirstallocAPNICAddressAllocationSubsequentallocations80%overallmustbeusedunlesslargeassignmentpendingDependantonaccurateanddetailedinformationDemonstratedconservativeassignmentsCorrectdatabaseregistrationsforcustomersAmountdependson“usage”ratehowmuch,howfast?allocateforuptooneyearContiguousallocationnotguaranteedbuteveryeffortmade44APNICAddressAllocationSubseqCustomersNeedsAddressspaceassignmentprocedures45CustomersNeedsAddressspaceaDefinitionsCustomerASSIGNMENT(byAPNICmember)‘Assignmentwindow’0determinesmaximumamountofaddressspaceamembercanassignwithoutapprovalfromAPNICincreaseswhenprocedures&criteriaareunderstoodMemberALLOCATION

(byAPNIC)‘Slowstart’/19determinesaninitialallocationsizethatisconsistentandfairlyappliedtoallincreaseswhenusageratedetermined46DefinitionsCustomerASSIGNMENTAssignmentWindowAssignmentwindowofmemberAW=0AW=/28AW=/27AW=/26...AW=/19MemberAssignmentlimit(hostaddresses)Allnewregistriesrequests<=16requests<=32requests<=64….requests<=8192Increasingresponsibiltyofmember47AssignmentWindowAssignmentMeAssignmentWindowStep1-Memberandcustomercomplete2ndOpinionRequestformRequest>AW?NoStep3-AssignmentWindowprocedure

Memberaddscomments&recommendations&sendstohostmaster@Membermakesassignment,updatesDB&localrecordsYesStep2-Memberevaluates-OKAPNICapproves

request?YesiterationNo48AssignmentWindowStep1-Memb2ndOpinionRequestFormName&addressofcustomersnetworkTechnicaldetailsofcustomers

networkMustbecurrentAPNICmemberSizeofassignment/apnic-bin/second-opinion-request.pl492ndOpinionRequestFormName&2ndOpinionRequestFormConnecttoInternet?Future

networkplan

DescriptionofuseAccuratehostestimates502ndOpinionRequestFormConnec2ndOpinionRequestFormOverviewofALLaddressspaceusedpreviously-use‘whois’toresearchotherdatabases512ndOpinionRequestFormOvervi2ndOpinionRequestFormRequestorshouldbeAPNICmemberand“known”toAPNICUsetodescribeanythingnotcoveredbyformeg.renumbering522ndOpinionRequestFormRequesEvaluationSummaryPolicyEfficiencymorethan50%usedinanyonesubnetmorethan80%usedoverallStockpilingisalladdressspacehelddeclaredonform?hasorganisationobtainedaddressspacefrommorethanonemember/ISPRegistrationisassignmentintheAPNICdatabase?arethecontactdetailscorrectanduptodate?53EvaluationSummaryPolicy53EvaluationAPNIC&MemberevaluationShouldbethesameIfNO,APNICwillaskmembertoobtainmoreinformationiterativeprocessIfYES,APNICapproves2ndopinionrequest54Evaluation54Questions?55Questions?55TWNICIPAddress管理政策56TWNICIPAddress管理政策56IPAddress管理政策相關(guān)需求之申請依規(guī)定之程序及所需文件審核,無特殊待遇.相關(guān)網(wǎng)路資源申請文件應(yīng)確實(shí)且完整.於whoisdatabase內(nèi)之資料應(yīng)紀(jì)錄至enduserlevel,且應(yīng)即時更改相關(guān)資料,以保持最新及最完整之資料於資料庫內(nèi).不可買賣IPAddress,且應(yīng)於網(wǎng)際網(wǎng)路上宣告所持有之IPAddress.若客戶更換ISP,需將IPAddress歸還予原ISP,然其所新?lián)Q之ISP應(yīng)無條件配發(fā)相同額度之IPAdress予該客戶.57IPAddress管理政策相關(guān)需求之申請依規(guī)定之程序及所第一次申請IPAddress之會員應(yīng)遵循SlowStart之機(jī)制,其核定之最大量為/19(32classC),後續(xù)之申請則依其之前使用狀況審核.一定期限內(nèi)未使之IPaddress應(yīng)退還原發(fā)放單位.鼓勵使用“ipunnumbered”,“privateaddressspace”(rfc1918),NAT等方式,以節(jié)省IPaddress之使用.RIR對LIR應(yīng)設(shè)定“assignmentwindow”,當(dāng)LIR分配與客戶IPaddress之?dāng)?shù)量超過“assignmentwindow”所定之?dāng)?shù)量時,應(yīng)填寫”second-opinion”表,送RIR審核,審核通過方得分配給客戶.IPAddress管理政策58第一次申請IPAddress之會員應(yīng)遵循SlowSIPAddress申請辦法59IPAddress申請辦法59申請對象及原則

對象一:

網(wǎng)際網(wǎng)路服務(wù)單位

原則:

凡網(wǎng)際網(wǎng)路服務(wù)單位向TWNIC提出代理發(fā)放申請,經(jīng)TWNIC審核會議通過授權(quán)者,即可向TWNIC提出IP

位址需求申請。60申請對象及原則60徵選網(wǎng)際網(wǎng)路服務(wù)廠商(ISP)代理發(fā)放IP位址公告臺灣網(wǎng)路資訊中心(TWNIC)負(fù)責(zé)國內(nèi)、外網(wǎng)際網(wǎng)路IP地址的申請與分配，為因應(yīng)國內(nèi)商業(yè)網(wǎng)路的發(fā)展，擬開放其他網(wǎng)路服務(wù)申請代理發(fā)放IP地址予連線單位申請。目前國內(nèi)IP地址代理發(fā)放的單位有:

教育部電子計(jì)算機(jī)中心(TANet)行政院研考會(GSN)數(shù)位聯(lián)合限公司(SeedNet)中華電信數(shù)據(jù)分公司(HiNet)廣通科技股份有限公司(GCN)向邦網(wǎng)路科技股份有限公司(UNET)太碁股份有限公司(AcerNet)仲琦科技股份有限公司(HTNet)精業(yè)股份有限公司(SYSNet)臺灣電訊網(wǎng)路服務(wù)股份有限公司(TTN)悉達(dá)資訊股份有限公司(Seeder)英普達(dá)資訊科技股份有限公司(ISNet)太聯(lián)科技股份有限公司(MyNet)吉立通電訊網(wǎng)路股份有限公司(TimeNet)瑪凱電信股份有限公司(MKY)年代影視事業(yè)股份有限公司(ERA)昇源資訊科技有限公司遠(yuǎn)傳電信股份有限公司(FET)

成佳資訊股份有限公司(SaveCom)61徵選網(wǎng)際網(wǎng)路服務(wù)廠商(ISP)代理發(fā)放IP位址公告61徵選網(wǎng)際網(wǎng)路服務(wù)廠商(ISP)代理發(fā)放IP位址公告(續(xù))

2、有意代理此項(xiàng)業(yè)務(wù)之網(wǎng)路服務(wù)業(yè)者，需具有交通部電信總局第二類電信事業(yè)許可之執(zhí)照，並檢附計(jì)畫書暨執(zhí)照影本，送TWNIC。3、計(jì)畫書至少應(yīng)包含下列內(nèi)容：?需保證DomainNameServer及國內(nèi)外Routing能正常運(yùn)作?IPAddress使用相關(guān)規(guī)劃?網(wǎng)路架構(gòu)圖,並註明全國區(qū)域網(wǎng)路中心點(diǎn)數(shù)及國際專線、國內(nèi)專線速率6262申請對象及原則(續(xù))

對象二:一般網(wǎng)際網(wǎng)路用戶

原則:一般用戶可向代理發(fā)放單位申請所需

IPaddress,如需大量IPaddress(16個ClassC以上)可逕向TWNIC

提出申請(個人尚未開放申請),經(jīng)

TWNIC註冊組審核通過後發(fā)放。63申請對象及原則(續(xù))63申請流程填寫需求表送至TWNIC更多的文件與說明

更新whoisdatabaseTWNIC核發(fā)IPAddress文件是否完整需求是否明確、合理nonoyesyes(Email至hostmaster@.tw)64申請流程更多的文件更新whoisdatabaseTWN申請表(RequestForm)

ISPIPAddressRequestForm(APNIC-065)

SecondOpinionRequestForm(APNIC-073).tw/ip-info/apnic-065.txt.tw/ip-info/apnic-073.txt65申請表(RequestForm)ISPIPAdAllocationWindow-目前APNIC予TWNIC之額度為/19,即TWNIC欲分配予

ISPIPAddress量超過32classC,ISP需填寫APNIC-073送APNIC審核通過,TWNIC方可核發(fā).AssignmentWindow-目前APNIC予TWNIC之額度為/24,即ISP欲分配予客戶

IPAddress量超過1classC,ISP需請客戶填寫APNIC-073送TWNIC審核通過,ISP方可核發(fā).66AllocationWindowAssignmentWi相關(guān)組織網(wǎng)址TWNIC-.twAPNIC-RIPE-http://www.IANA-ICANN-67相關(guān)組織網(wǎng)址TWNIC-http://www.twniQuestions?68Questions?68APNIC/TWNICIPAddress

分配與管理69APNIC/TWNICIPAddress

分配與管理1Welcome

APNICMembersTrainingCourseEffectiveIPAddressManagement:Asia-PacificPoliciesandProcedures

70Welcome

APNICMembersTrainingIntroductiontoAPNICAsiaPacificNetworkInformationCenter71IntroductiontoAPNICAsiaPaciWhatisAPNIC?RegionalInternetRegistry(RIR)

fortheAsiaPacificRegionResourceregistration,allocationandsupportIPaddresses,ASnumbers,delegationMembership-basedorganizationNon-profit,neutralandimpartialNot:anoperationsforumNot:astandardsdevelopmentbody72WhatisAPNIC?RegionalInterneInternetRegistryHierarchyASOICANN73InternetRegistryHierarchyASOAPNICStructure74APNICStructure6APNICCoreServicesResourceallocationIPallocations‘SecondOpinion’approvalofIPassignmentsASnumberassignmentsResourceregistrationRegistrationservicesAPNIC‘whois’serverDNSmanagementReversedomains-

Not:ForwardDNSservices75APNICCoreServicesResourcealInternetRegistryallocationandassignmentPolicies76InternetRegistryallocationaDefinitions

(1)InternetRegistry(IR)Anorganisationwhichallocatesorassigns,andregistersInternetresourcesincludingIPaddressesandrelatedresourcesRegionalInternetRegistry(RIR)AnorganisationwithregionalresponsibilityformanagementofInternetresourcesResponsibilitiesincludeallocation/registrationservices,coordinationandpolicydevelopmentMustbeneutralandconsensus-based77Definitions(1)InternetRegistDefinitions

(2)InternetRegistriesLocalInternetRegistry(LIR)OtherwiseknownasanAPNICMemberNormallyoperatesasanISP,andassignsaddressspacetoitscustomersNationalInternetRegistry(NIR)IRwhichoperatesonanationalbasisandprimarilyallocatesresourcestoitsmembersMustbeneutralandconsensus-based78Definitions(2)InternetRegistDefinitions

(3)AllocationandAssignmentAllocationAblockofaddressspaceheldbyanIRforsubsequentallocationorassignmentAssignmentAblockofaddressspaceusedtoaddressanoperationalnetworkMaybeprovidedtoIRcustomers,orusedforanIR’sinfrastructure(“self-assignment”)79Definitions(3)AllocationandAPNICPoliciesBasedonglobalInternetregistrypoliciesRFC2050(1996)OtherRIRpolicies(developedsince)‘PoliciesforAddressSpaceManagementintheAsiaPacificRegion’

(waseffectiveJan2000)

/docs/add-manage-policy.htmlMinimumpracticalallocation:/19‘SlowStart’policyfornewmembersAllocationsasPAAddressSpaceProviderresponsibleforaggregationCustomerassignmentsmustbenon-portable80APNICPoliciesBasedonglobalAPNICPoliciesAllocationsbasedondemonstratedneedDetaileddocumentationrequiredAlladdressspaceheldtobedeclaredAddressspacetobeobtainedfromonesourceroutingconsiderationsmayapplyStockpilingnotpermittedValidityofallocationsandassignmentsAccordingtooriginalcriteriaAccordingtocorrectmanagementAccordingtodurationoflease81APNICPoliciesAllocationsbaseInternetRegistryprocedures

Addressspaceallocationsandassignments82InternetRegistryproceduresAOverviewAddressingplanexampleISPaddressrequestformAddressallocationsSecondopinionrequestform83Overview15AddressingPlanExampleStartingoff’Upstream

ISPLeasedlineservices

5-8customersDialupservices

16modemsCustomerservices15hostsNOCoperations10hosts

InternalDNS,Web

MailserversISPInfrastructure

5hostsVirtualweb

(http1.1)Interconnectedresilience84AddressingPlanExampleStartiAddressingPlanExample5hosts15hosts10hosts

Upstream

ISP16dialupmodemsWANpointtopoint/305-8leasedlinecustomers‘ipunnumbered’tocustomers

oneloopbackinterfaceper

assignedrouter/32‘ipunnumbered’toupstreamISP85AddressingPlanExample5hostsAddressingPlan(cont’d)network-plan:network-plan:network-plan:analoguedialupmodems,vendorxLAN-webhosting(http1.1)5-8leasedlinecustomers(/28)network-plan:network-plan:network-plan:network-plan:network-plan:LAN-NOCandOpsmanagementLAN-mail,DNS,webserversinternalloopbackrouterinterfacesrouterWANportsrouterWANports(x5lines)

Initialaddressingplan1651281510422-numbersofhostaddresses(interfaces)86AddressingPlan(cont’d)networNetworkPlanExample

6monthslater

scaleincreasedredundancy60dialup

modems(2PRI)30leasedline

customers11hosts-http1.18hosts-2ndaryServers25hosts-NOC16hosts-Servers60dialup

modems(2PRI)Upstream

ISPaddednewrouterand

LANforredundancyaddednewdialupequipmentreplacedoriginalmodemincreasednumberofleasedlinecustomersincreasednumberofhostsonallLANs87NetworkPlanExample6monthsAddressingPlan(cont’d)network-plan:network-plan:network-plan:2PRIdialupmodems,vendor‘y’LAN-webhosting(http1.1)30leasedlinecustomers(pool)16/5/128/15/10/4/2/2/network-plan:network-plan:network-plan:

network-plan:network-plan:LAN-NOCandOpsmanagementLAN-mail,DNS,webserversinternalloopbackrouterinterfacesrouterWANportsrouterWANports(x8lines)

Networkplanat6months60115122516622-increasesinhosts(interfaces)Newhardware2PRIdialupmodemsLAN-secondaryserversnetwork-plan:network-plan:0/0/608Changeddescription88AddressingPlan(cont’d)networNetworkPlan

12monthstotal

siteredundancygreatercomplexity

efficiency60leasedline

customers

ipunnumbered11hosts8hosts35host240dialup

modems(8PRI)Upstream

ISPA35hosts240dialup

modems(8PRI)40hostsUpstream

ISPBaddednew

customerrouterredundancyofWANconnections

nownumberedlinksforBGP4twopiecesofessentialequipment89NetworkPlan12monthstotalAddressingPlan(cont’d)network-plan:network-plan:network-plan:network-plan:8PRIdialupmodems,vendorx8PRIdialupmodems,vendoryLAN-webhosting(http1.1)60leasedlinecustomers(pool)16/60/0/60/5/11/128/512/15/25/10/16/0/8/2/2/2/2/4/6network-plan:network-plan:

network-plan:network-plan:network-plan:network-plan:LAN-NOCandOpsmanagementLAN-mail,DNS,webserversinternalLAN-secondaryserversrouterWANportsrouterWANports(x8lines)loopbackrouterinterfaces

Networkplanat12months2402401110244035822