Categories
Deploy360 Events

ION Islamabad: IPv6, DNSSEC and Much More

ION Islamabad

We are excited to announce that the agenda for ION Islamabad has been finalized. This will take place on Wednesday, 25 January 2017, alongside the South Asia Network Operators Group (SANOG) conference, SANOG 29. As always, this ION is generously supported by our series sponsor Afilias.

The agenda is already online and it’s our patented mix of IPv6, DNSSEC, Securing BGP, and TLS for Applications. A quick preview of some of our session titles:

  • Deploying DNSSEC – Champika Wijayatunga, ICANN
  • DANE/DNSSEC/TLS Testing in the Go6lab – Jan Žorž, Internet Society
  • What’s Happening at the IETF? Internet Standards and How to Get Involved – Kevin Meynell, Internet Society
  • Mind Your MANRS & the Routing Resilience Manifesto – Aftab Siddiqui, Internet Society
  • IPv6 Regional Status – An Update – APNIC representative (tbc) & Aftab Siddiqui, Internet Society 
  • IPv6 Success Stories! – Panel Discussion

In order to register for the event, kindly use the SANOG 29 registration page. If you’re only interested in attending the ION conference then you may register for “Tutorial Only” and it will give you access to all SANOG 29 Tutorials as well as the ION Conference.

ION helps network operators stay ahead of the curve to understand and deploy emerging Internet technologies, and presents a unique opportunity to discuss the future of the Internet with the people who help craft it.

We’re also planning the rest of the 2017 calendar, so if you’re organising something that might lend itself to co-locating an ION then please let us know! We usually hold four events each year in locations all over the world, and we’re open to all sorts of opportunities. Contact us to discuss co-location possibilities, or how your company could sponsor an ION Conference.

Categories
Deploy360 Events

ION Bangladesh / bdNOG 5 in Dhaka

13029728_10154194365249884_2525848278973951241_o

The Deploy360 team has just completed a couple of hectic weeks that included our ION Conference in Bangladesh, participating in SEE 5 in Albania, before Jan headed off to SEEDIG in Serbia. The ION Conference was organised jointly with bdNOG 5 on 11 April 2016 at the Lakeshore Hotel in Dhaka, and attracted a very high turnout of 152 participants. This had been preceded by three days of technical training provided by bdNOG and APNIC.

Kevin Meynell opened the event with a overview of the Deploy360 programme, followed by a welcome from Professor Shabbir Ahmed, President of the ISOC Bangladesh Dhaka Chapter.

Jahangir Hossain (ISOC Bangladesh Dhaka) then explained Secure BGP and reported on RPKI adoption in Bangladesh. There were currently 2,079 advertised IP prefixes in Bangladesh, of  which 97 had Route Origin Authorisations (ROAs) accounting for 4.67% of the total. Unfortunately, 26 of these prefixes were invalid according to their ROAs, which was something that needed further investigation.

Jan speaking about DANE

Next up was a panel session on MANRS that included Fakrul Alam (APNIC), Rashed Amin (Link3 Technologies) and Jan Žorž. This introduced the Routing Resilience Manifesto initiative that aims to help network operators around the world work together to improve the security and resilience of the global routing system through four actions that include filtering, anti-spoofing, coordination and global validation. Although the initiative was new to most of the audience, it still generated significant discussion and several network operators expressed interest in signing-up during and after the conference.

Jan then updated the audience on DANE adoption and implementing it in the go6lab. This has previously been covered in the ION Cape Town and the Let’s Encrypt certificates for mail servers and DANE blogs, but the .bd domain is not currently signed with DNSSEC which has limited potential deployment of DANE in Bangladesh. Hopefully the increasing usage of TLS and Jan relating his experiences of successfully deploying DANE will encourage the implementation of DNSSEC in the .bd domain shortly.

The session after the tea break was devoted to the bdNOG report (provided by Rashed Amin, bdNOG President) and the keynote speech on the Potential of Indigenously Developed Telemedicine using the Internet (provided by Dr. Khondkar Siddique-e-Rabbani, University of Dhaka). There were also remarks from the Chief Guest Dr. Shahjahan Mahmoud, the Honourable Chairman of the Bangladesh Telecommunication Regulatory Commission, and from the Special Guest M.A Hakim, the President of ISPAB Bangladesh.

13040895_10154194367174884_9022138773687310107_o
Kevin & Jan at ION Bangladesh/bdNOG 5

After lunch, Kevin talked about what was happening at the IETF and how to get involved. He pointed out that had been 1,824 registered participants from 65 countries at the recent IETF in Buenos Aires, but not one was from Bangladesh even though India was well represented. There was clearly a very active Internet community in Bangladesh, but for whatever reason little engagement with the IETF. However, he encouraged the local community to check out the IETF Fellows and Regulators to the IETF programmes.

Pubudu Jayasinghe (APNIC) followed this with an update on the current situation in the Asia-Pacific region with respect to IPv4 address availability, how to request IPv6 addresses, and the rollout of RPKI to provide cryptographic attestations about route advertisements. The rest of the session was devoted to submitted papers including The Future of SIP in WebRTC (provided by Shaila Sharmin, Link3 Technologies) and a Holistic view of 802.1x integration & optimisation (provided by Faisal, BDPEER).

The final session focused on IPv6. Abdul Awal (BDREN) set the scene with a presentation on IPv6 deployment in BDREN, the Bangladesh National Research and Education Network, as well as the wider challenges of deploying IPv6 in Bangladesh. This led into the IPv6 Panel session moderated by Kevin that included Asela Galappattige (Sri Lanka Telecom), Nurul Islam Roman (APNIC), Sumon Ahmed Sabir (Fiber@Home), Matsuzaku Yoshinobu (IIJ) and of course Jan.

Lalbagh Fort in Old Dhaka

The panel session focused on the message that deploying IPv6 was not a complex or expensive process, but eking out IPv4 addresses would be in future. IPv4 addresses were a finite resource and would increasingly only be obtainable through recovery and trading, which would impose a real cost for network providers. This was particularly an issue in countries like Bangladesh that currently had relatively limited Internet penetration, but which had large productive and aspirational populations that would put heavy demands on address resources. IPv6 deployment was presently quite low in Bangladesh, but the experience of BDREN demonstrated that networks could be substantially enabled for IPv6 with minimal effort and limited impact on existing services.

The conference was concluded with some final remarks from Kevin, thanking the host bdNOG, as well as the sponsors Afilias, APNIC, ISPAB, ISOC Bangladesh Dhaka and the Bangladesh ICT Business Promotion Council, before the training certificates were presented. The Deploy360 team would also like to thank bdNOG and their officers for helping us bring an ION Conference to Bangladesh for the first time, as well their contributions towards making the event a successful and productive one.

The State Minister for ICT, Zunaid Ahmed Palak at the Cyber Security and Network Security Workshop

Our work was still not yet over though, as the following day Kevin was invited to open the Bangladesh Cyber Security and Network Security Workshop that was also attended by the State Minister for ICT, Zunaid Ahmed Palak. This workshop involved around 100 participants from the Internet community, academia, government as well as law enforcement agencies.

 

Further Information

The proceedings from ION Bangladesh are available here.

Categories
Deploy360 Domain Name System Security Extensions (DNSSEC)

Jim Galvin Writing About DNSSEC On CircleID

Jim GalvinWe’ve been very pleased to see Dr. Jim Galvin of Afilias writing a series of articles about DNSSEC over on Circle ID.  Jim has been a long-time friend and supporter of the Deploy360 Programme and has spoken multiple times at our ION conferences. (For example, he spoke at our recent ION Belfast event.)  Jim was also involved with the recent sponsorship of our ION conferences by Afilias.

Anyway, over at CircleID Jim started a series of articles about different aspects of DNSSEC. His articles thus far include:

The three articles provide a good overview of the current state of DNSSEC.  His third article, in particular, dives into an issue that has not been widely discussed – the potential 5-day waiting period during the transfer or a domain between registrars. As Jim notes:

In pre-DNSSEC days this technical issue would resolve itself relatively benignly. However, post-DNSSEC, if the domain name in question is DNSSEC signed, the failure of the domain name to DNS resolve (and hence, validate) results in a security incident. The previously benign “site not found” becomes a scary “you don’t want to go there” message, potentially damaging the credibility and brand of the domain name owner.

He goes on to note what needs to be done to address this issue and concludes:

The current business practices around this transfer policy require urgent coordination amongst registrars so that effective DNSSEC deployment can happen without an impact to the end-user or the domain name owner.

We agree that this is a concern when transferring domains and do hope to see this kind of coordination happening among registrars.

We also hope to see Jim continue writing detailed articles like these over on CircleID.  You can see his writing there on his author page at CircleID.

And if you’d like to learn more about DNSSEC, please visit our Start Here page to begin!

Categories
Deploy360 Events

Announcing Afilias as Multi-year ION Sponsor

Afilias logoIf you’ve been to the main ION Conference page lately, you may notice we’ve added some sponsor information for both ION Santiago and ION Tokyo. Today, we’re proud to officially announce that Afilias has signed a three-year agreement to be an ION Conference Series sponsor through 2016. From the press release:

“As the next generation Internet Protocol (IP) address standard, IPv6 is critical to the Internet’s continued growth as a platform for innovation and economic development. At the same time, DNSSEC and secure routing are critical to the Internet’s operations,” said Afilias EVP and CTO, Ram Mohan. “As two of the leading proponents of DNSSEC and IPv6 adoption worldwide, Afilias and the Internet Society are committed to promoting these standards, which are key to the continued growth and evolution of the Internet.”

Afilias (http://www.afilias.info/) is a leading global provider of Internet infrastructure solutions that make Internet addresses more accessible and useful through a wide range of applications. The company has partnered with the Internet Society on a wide range of initiatives, including providing highly reliable, cost-effective registry and DNS services in support of .ORG on behalf of Public Interest Registry, which the Internet Society founded.

We’re really excited to have Afilias on board. We had Jim Galvin on hand at ION Belfast last month to give the Business Case for DNSSEC talk, and we’re certain to have their help at future events, too.

Of course, additional corporate sponsorship opportunities are available to support ION Conferences, so if your company is interested just let us know!

ION Santiago is up next in just a few weeks on 28 October. We hope to see you there, at ION Tokyo on 17 November, or at one of our events in 2015. Stay tuned to this blog for event announcements.