ca cctld news ccnso @ icann55 · .ca cctld news ccnso @ icann55 canadian internet registraon...

.CAccTLDNewsccNSO@ICANN55

CanadianInternetRegistra:onAuthority(CIRA)L'AutoritéCanadiennepourlesEnregistrementsInternet(ACEI)

JacquesLatour2016-03-09

Agenda

•  NewInternetExchangePoints(IXPs)acrossCanada

•  MappingCanada’sInternetperformanceusingournewInternetPerformanceTool

•  UpdateonD-ZoneDNSAnycastserviceoffering.

•  Q&A

.CAccTLDNews-ICANN55-2016-03-092

CanadianIXPInfrastructure

overview


CanadianIXPInfrastructure


•  7establishedandopera:onalIXPsfrom2fiveyearsago

IXPBenefitstoCanada

5

•  Keyserviceposi:oningfor.CAinfrastructure– DNS,Registry,NTP,CIRAD-Zone,etc…

•  BederglobalInternet(IPv4andIPv6)accesstosmallandmediumISPandfor.CA

•  MovingtheheartoftheInternetintoCanada•  Benefits:

–  Lowerlatency,accesstoIPv6– Directaccesstoglobalcontentproviders–  Internetrou:ngresiliency–  TowardanautonomousCanadianInternet


CanadianInternetVision


ß Canadian IXPs

InternetPerformance

TestOverview

h8p://cira.ca/performance

2015CanadianISPSummit7

CIRA’sIPTPortal

•  Canadianportal•  Postalcode•  Measure&Report:

–  IPV6– DNSSEC– Uploadspeed– Downloadspeed– 96qualitymetrics


CIRA’sInternetPerformanceTest

•  EvolvingexperimenttomeasuretheperformanceandstateoftheCanadianInternet

•  BasedonworldrenownedM-LabplahormandWeb100NetworkDiagnos:cTest(NDT)

•  On-goingdevelopmentofacustomizedportaltomaketheinforma:onrelevanttoCanadians–  Visuallybyaggrega:ngthedatabasedonpostalcode– Opensource,bymakingM-Labresultsfreelyavailable


CanadianM-LabInfrastructure


IPT uses 3 M-Lab nodes in Canada •  Calgary, Toronto, Montreal Nodes are owned and operated by M-Lab http://www.measurementlab.net/infrastructure

CIRAIPTisaboutQualitynotQuan:ty


Source: http://www.tagxedo.com/app.html?url=http%3A//cira.ca/IPT/results-help&shape=Classic&orientation=Any

D-ZoneAnycastDNSService


D-ZoneAnycastDNS

•  GlobalarchitecturewithnodeskeyInternethubs

•  Simplemanagementinterfacefortrackingdomainac:vity(queryvolume,NXDOMAINS,etc)

•  ItiscurrentlyinusebytwoTLDs(.CAand.KIWI)

A secondary DNS designed for Top Level Domain Registries

DDoS attacks can be over 100 Gbps - it is a best practice to back-up your DNS in a minimum of two clouds and with a minimum of two suppliers.

D-Zone is designed for the most rigorous demands of an always-on service ü  Typical global node is built for

redundancy and scalability

ü  DDoS resistant by providing two 10 GB paths via transit and local IXP

ü  State of the art equipment deployed this past year

10 Gbps transit

Typical D-Zone Global Node

10 Gbps to peer

Router/ Load balancer

Stats Collector

DNS Servers

DNS Servers

IXP

AGLOBALANYCASTDNSSERVICEACROSSTWOCLOUDSANDBUILTTOSCALE

Cloud1Miami,FLLosAngeles,CALondon,UK*HongKong,CNCalgary,ABMontreal,QCToronto,ONWinnipeg,MB

Cloud2Vancouver,BCMontreal,QCToronto,ON

*directly peered node to six sites in the EU scales instantly

Q&A

ThankYou!


ca cctld news ccnso @ icann55 · .ca cctld news ccnso @ icann55 canadian internet registraon...

Documents