《分配與管理》PPT课件.ppt

1,APNIC/TWNIC IP Address 分配與管理,2,Welcome APNIC Members Training Course,Effective IP Address Management: Asia-Pacific Policies and Procedures,3,Introduction to APNIC,Asia Pacific Network Information Center,4,What is APNIC?,Regional Internet Registry (RIR) for the Asia Pacific Region Resource registration, allocation and support IP addresses, AS numbers, delegation Membership-based organization Non-profit, neutral and impartial Not: an operations forum Not: a standards development body,5,Internet Registry Hierarchy,ASO,ICANN,6,APNIC Structure,7,APNIC Core Services,Resource allocation IP allocations Second Opinion approval of IP assignments AS number assignments Resource registration Registration services APNIC whois server DNS management Reverse domains - Not: Forward DNS services,8,Internet Registry allocation and assignment,Policies,9,Definitions (1),Internet Registry (IR) An organisation which allocates or assigns, and registers Internet resources including IP addresses and related resources,Regional Internet Registry (RIR) An organisation with regional responsibility for management of Internet resources Responsibilities include allocation/registration services, coordination and policy development Must be neutral and consensus-based,10,Definitions (2),Internet Registries Local Internet Registry (LIR) Otherwise known as an APNIC Member Normally operates as an ISP, and assigns address space to its customers National Internet Registry (NIR) IR which operates on a national basis and primarily allocates resources to its members Must be neutral and consensus-based,11,Definitions (3),Allocation and Assignment Allocation A block of address space held by an IR for subsequent allocation or assignment Assignment A block of address space used to address an operational network May be provided to IR customers, or used for an IRs infrastructure (“self-assignment”),12,APNIC Policies,Based on global Internet registry policies RFC 2050 (1996) Other RIR policies (developed since) Policies for Address Space Management in the Asia Pacific Region (was effective Jan 2000) /docs/add-manage-policy.html Minimum practical allocation: /19 Slow Start policy for new members Allocations as PA Address Space Provider responsible for aggregation Customer assignments must be non-portable,13,APNIC Policies,Allocations based on demonstrated need Detailed documentation required All address space held to be declared Address space to be obtained from one source routing considerations may apply Stockpiling not permitted Validity of allocations and assignments According to original criteria According to correct management According to duration of lease,14,Internet Registry procedures,Address space allocations and assignments,15,Overview,Addressing plan example ISP address request form Address allocations Second opinion request form,16,Addressing Plan Example,Starting off,Leased line services 5-8 customers,Customer services,Interconnected resilience,17,Addressing Plan Example,18,Addressing Plan (contd),Initial addressing plan,19,Network Plan Example,6 months later,scale increased redundancy,added new dial up equipment,increased number of hosts on all LANs,20,Addressing Plan (contd),Network plan at 6 months,21,Network Plan,12 months total,site redundancy greater complexity efficiency,added new customer router,two pieces of essential equipment,22,Addressing Plan (contd),Network plan at 12 months,23,Addressing Plan (contd),24,Addressing Plan (contd),Addressing plan for network-plan determination of relative subnet addresses re-ordered large to small according to relative subnet size network-plan: 1024 128/512/1024 60 leased line customers (pool) network-plan: 256 16/60/240 8 PRI dial up modems, vendor x network-plan: 256 0/60/240 8 PRI dial up modems, vendor y network-plan: 64 10/16/35 LAN -mail,DNS, web internal network-plan: 4 64 15/25/40 LAN -NOC and Ops management network-plan: 28 16 5/11/11 LAN -web hosting (http1.1) network-plan: 44 16 0/8/8 LAN -secondary servers network-plan: 60 16 4/6/12 loopback router interfaces network-plan: 76 4 2/2/2 router WAN ports (x8) cumulative total 08,25,Addressing Plan (contd),Addressing plan for network-plan determination of subnet masks network-plan: 1024 128/512/1024 60 leased line customers network-plan: 256 16/60/240 8 PRI dial up modems, vendor x network-plan: 256 0/60/240 8 PRI dial up modems, vendor y network-plan: 92 64 10/16/35 LAN -mail,DNS, web internal network-plan: 4 92 64 15/25/40 LAN -NOC & Ops management network-plan: 28 40 16 5/11/11 LAN -web hosting (http1.1) network-plan: 44 40 16 0/8/8 LAN -secondary servers network-plan: 60 40 16 4/6/12 loopback router interfaces network-plan: 76 52 4 2/2/2 router WAN ports (x 8 ),26,Addressing Plan (contd),Addressing plan for network-plan connect to the Internet (full-time, part-time)? network-plan: YES 1024 128/512/1024 60 leased customers network-plan: PART 256 16/60/240 8 PRI dial up modems network-plan: PART 256 0/60/240 8 PRI dial up modems network-plan: 92 YES 64 10/16/35 LAN -mail,DNS, web internal network-plan: 4 92 YES 64 15/25/40 LAN -NOC & Ops management network-plan: 28 40 YES 16 5/11/11 LAN -web hosting (http1.1) network-plan: 44 40 YES 16 0/8/8 LAN -secondary servers network-plan: 60 40 YES 16 4/6/12 loopback router interfaces network-plan: 76 52 YES 4 2/2/2 router WAN ports (x 8 ),27,Addressing plan complete total planned for customer assignments /22 total planned for ISP infrastructure /24 + /23 network-plan: YES 1024 128/512/1024 60 leased line customers network-plan: PART 256 16/60/240 8 PRI dial up modems network-plan: PART 256 0/60/240 8 PRI dial up modems network-plan: 92 YES 64 10/16/35 LAN -mail,DNS, web internal network-plan: 4 92 YES 64 15/25/40 LAN -NOC & Ops management network-plan: 28 40 YES 16 5/11/11 LAN -web hosting (http1.1) network-plan: 44 40 YES 16 0/8/8 LAN -secondary servers network-plan: 60 40 YES 16 4/6/12 loopback router interfaces network-plan: 76 52 YES 4 2/2/2 router WAN ports (x 8 lines ) detailed, efficient and accurate,Addressing Plan (contd),28,ISP Address Request Life-cycle,29,Overview,ISP address request form Network template Person template Technical template Additional information,30,Complete the Documentation,ISP Address Request Form (APNIC-065) Web /apnic-bin/isp-address-request.pl Plain text /apnic/docs/isp-address-request,31,ISP Address Request Form,Network Template - registration details need for allocation,APNIC ISP,Non Profit ISP in the Asia Pacific,AL25-AP,32,ISP Address Request Form,Person Template - need accurate contact details for network,An APNIC NIC handle will automatically be created,33,ISP Address Request Form,Technical Template - General Overview,Expectation is classless,Expectation of non-portable assignments,34,ISP Address Request Form,Technical Template - Customer Network fields,Odd sized assignments should be reported on multiple lines,35,Evaluation by APNIC,Customer network fields Registration check all customer assignments are in the APNIC whois database accurately Parser check the netname on the form & the netname field in the database are the same ie. software reports discrepancies host and subnet estimates are accurate and real Policy prefix distribution of all customer assignments classless assignments NOT on /24 boundaries assignments in line with rfc2050 - 50% after one year,36,ISP Address Request Form,Technical Template - ISP internal Infrastructure,37,ISP Address Request Form,Technical Template - ISP Future Network Plan,38,Evaluation by APNIC,Infrastructure & network-plan fields Policy technical descriptions are detailed enough so APNIC hostmaster can understand why subnet size was chosen do customer projections match infrastructure plans? Efficient subnet assignments Best current practice name based virtual web hosting dynamic dial up more on this to follow.,39,Evaluation by APNIC,Special verification IP based virtual hosting up to a /22 assigned for this purpose must send list of domains and URL virtual ftp, E-commerce with SSL excluded APNIC will ask why you cant use name based hosting cable,adsl, xdsl static assignment for permanently on-line customers IP addresses for static assignments /32 must be reported when subsequent allocation requested dynamic address assignment preferred,40,ISP Address Request Form,Additional Information POP topology Diagrams showing network design Diagrams showing POP design does network/POP topology description correlate with addressing plan and current infrastructure? larger requests will require additional documentation Deployment plan Give details of phases of deploying equipment Does deployment plan match information in network-plan fields?,41,ISP Address Request Form,Additional information Equipment and services Specifications, number of ports information that cannot fit onto fields of form Details of how implement services explain acronyms or special services Miscellaneous Anything not covered by the form, anything unusual supplementary information very useful to the hostmaster in evaluating your request,42,Evaluation by APNIC,General All address space held should be documented check other RIR, NIR databases for historical allocations No reservations policy Reservations may never be claimed Fragments address space Customers may need more or less address space than is actually reserved,43,Address Allocations,First allocation - summary Requires clear detailed request Implementation of Best Current Practice Efficient assignments planned Always a /19 slow start exceptions made for very large networks but not common,44,APNIC Address Allocation,Subsequent allocations 80% overall must be used unless large assignment pending Dependant on accurate and detailed information Demonstrated conservative assignments Correct database registrations for customers Amount depends on “usage” rate how much, how fast? allocate for up to one year Contiguous allocation not guaranteed but every effort made,45,Customers Needs,Address space assignment procedures,46,Definitions,Customer ASSIGNMENT (by APNIC member),Assignment window 0,determines maximum amount of address space a member can assign without approval from APNIC,increases when procedures & criteria are understood,Member ALLOCATION (by APNIC),Slow start /19,determines an initial allocation size that is consistent and fairly applied to all,increases when usage rate determined,47,Assignment Window,Assignment window of member AW=0 AW=/28 AW=/27 AW=/26 . AW=/19,Member Assignment limit (host addresses) All new registries requests = 16 requests = 32 requests = 64 . requests = 8192,48,Assignment Window,Step 1 - Member and customer complete 2nd Opinion Request form,Step 3 - Assignment Window procedure,Member adds comments & recommendations & sends to ,Member makes assignment, updates DB & local records,Step 2 - Member evaluates - OK,49,2nd Opinion Request Form,Name & address of customers network,/apnic-bin/second-opinion-request.pl,50,2nd Opinion Request Form,51,2nd Opinion Request Form,Overview of ALL address space used previously - use whois to research other databases,52,2nd Opinion Request Form,Requestor should be APNIC member and “known” to APNIC,Use to describe anything not covered by form eg. renumbering,53,Evaluation Summary,Policy Efficiency more than 50% used in any one subnet more than 80% used overall Stockpiling is all address space held declared on form? has organisation obtained address space from more than one member/ISP Registration is assignment in the APNIC database? are the contact details correct and up to date?,54,Evaluation,APNIC & Member evaluation Should be the same If NO, APNIC will ask member to obtain more information iterative process If YES, APNIC approves 2nd opinion request,55,Questions?,56,TWNIC IP Address 管理政策,57,IP Address 管理政策,相關需求之申請依規定之程序及所需文件審核, 無特殊待遇. 相關網路資源申請文件應確實且完整. 於 whois database 內之資料應紀錄至 end user level ,且應即時更改相關資料,以保持最新及最完整之資料於資料庫內. 不可買賣 IP Address, 且應於網際網路上宣告所持有之 IP Address. 若客戶更換 ISP, 需將IP Address 歸還予原 ISP, 然其所新換之 ISP 應無條件配發相同額度之 IP Adress 予該客戶.,58,第一次申請 IP Address 之會員應遵循 Slow Start 之機制, 其核定之最大量為 /19 ( 32 class C ),後續之申請則依其之前使用狀況審核. 一定期限內未使之 IP address 應退還原發放單位. 鼓勵使用 “ip unnumbered”, “private address space” (rfc1918), NAT 等方式,以節省 IP address 之使用. RIR 對 LIR 應設定 “assignment window”, 當 LIR 分配與客戶 IP address 之數量超過 “assignment window” 所定之數量時, 應填寫 ”second-opinion” 表, 送 RIR 審核, 審核通過方得分配給客戶.,IP Address 管理政策,59,IP Address 申請辦法,60,申請對象及原則,對象一 : 網際網路服務單位 原 則 : 凡網際網路服務單位向 TWNIC 提出 代理發放申請, 經 TWNIC 審核會議 通過授權者,即可向 TWNIC 提出 IP 位址需求申請。,61,徵選網際網路服務