hkix updates at hknog 4.0 (v1.2) · hkix updates at hknog 4.0 kenneth chan 24 feb 2017. what is...
TRANSCRIPT
![Page 1: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/1.jpg)
HKIXUpdatesatHKNOG4.0
KennethCHANwww.hkix.net24Feb2017
![Page 2: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/2.jpg)
WhatisHKIX?
• EstablishedinApr1995,HongKongInterneteXchange(HKIX) isthemainlayer-2InterneteXchangePoint(IXP)inHongKongwherevariousautonomoussystemsinterconnectwithoneanotherandexchangetraffic
• HKIXisnowownedandoperatedbytheHongKongInterneteXchangeLimited(awholly-ownedsubsidiaryofTheChineseUniversityofHongKongFoundationLimited)incollaborationwithInformationTechnologyServicesCentre ofTheChineseUniversityofHongKong
• HKIXservesbothcommercialnetworksandR&Enetworks• Theoriginalgoalistokeepintra-HongKongtrafficwithin
HongKong
![Page 3: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/3.jpg)
ISP DISP A ISP B ISP C
Routes of ISP A
Routes of All ISPs in HKIX
Routes of ISP B
Routes of ISP C
Routes of ISP D
Routes of All ISPs in HKIX
Routes of All ISPs in HKIX
Routes of All ISPs in HKIX
MLPARoute
Servers
Routes of All ISPs in HKIX
Routes from All ISPs Switched Ethernet
HKIXModel—MLPAoverLayer2+BLPA
• MLPA traffic exchanged directly over layer 2 without going through MLPA Route Server
• BLPA over layer 2 without involvement of MLPA Route Server
• Supports both IPv4 and IPv6 over the same layer 2 infrastructure
![Page 4: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/4.jpg)
HelpKeepIntra-AsiaTrafficwithinAsia
• WehavealmostalltheHongKongnetworks• So,wecanattractparticipantsfromMainlandChina,Taiwan,
Korea,Japan,Singapore,Malaysia,Thailand,Indonesia,Philippines,Vietnam,IndiaandotherAsiancountries
• Wenowhavemorenon-HKroutesthanHKroutes• Wedohelpkeepintra-AsiatrafficwithinAsia• Intermsofnetworklatency,HongKongisagoodcentral
locationinAsia• HKIXdoeshelpHKmaintainasoneoftheInternethubsin
Asia• HKIXsupportsbothdomesticandinternationaltraffic
![Page 5: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/5.jpg)
HKIXToday• SupportsbothMLPA(MultilateralPeering)andBLPA(BilateralPeering)overlayer2
• SupportsIPv4/IPv6dual-stack• Moreandmorenon-HKparticipants• 260+autonomoussystemsconnected• 480+connectionsintotal
– 7 100GE,270+ 10GE & 200+GE
• 770+Gbps(5-min)totaltrafficatpeak• AnnualTrafficGrowth=30+%
![Page 6: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/6.jpg)
DailyTrafficStatistics
![Page 7: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/7.jpg)
YearlyTrafficStatistics
![Page 8: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/8.jpg)
NewHKIXDual-CoreTwo-TierSpine-and-LeafArchitecture
For2014andBeyondHKIX1CoreSite@CUHK HKIX1bCoreSite@CUHK
CoreSwitch@HKIX1
CoreSwitch
@HKIX1b
AccessSwitch(es)@HKIX2
AccessSwitches@HKIX1
AccessSwitches@HKIX1b
AccessSwitch
@HKIX-R&E
------(<2km)------
n x100GE/10GEInter-Switch
Links
n x100GE/10GEInter-Switch
Links
ISP1 ISP2 ISP3 ISP4 ISP5 ISP6 ISP7
CoreSwitch@HKIX1
CoreSwitch
@HKIX1b
AccessSwitch(es)@HKIXm
AccessSwitch(es)@HKIXn
100GE/10GE/GELinks
100GE/10GE/GELinks
![Page 9: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/9.jpg)
SettingupMultipleHKIXSatelliteSites
• AllowparticipantstoconnecttoHKIXmoreeasilyatlowercost fromthosesatellitesitesinHongKong
• OpentocommercialdatacentresinHKwhichfulfilminimumrequirementssoastomaintainneutralitywhichisthekeysuccessfactorofHKIX
• Createawin-winsituationwithsatellitesitecollaborators• TobenamedHKIX2/3/4/5/6/etc
Recentupdates:– HKIX2hasalreadybeenmigratedfromoldmodeltonewSatelliteSite
model– HKIX3/4/5sitewillbeReadyforServicebyApr2017
• HKIX1 andHKIX1b (thetwoHKIXcoresiteslocatedwithinCUHKCampus)willcontinuetoserveparticipantsdirectly
![Page 10: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/10.jpg)
SettingupMultipleHKIXSatelliteSites
HongKong,08Feb2017HKIXannouncesthat3newsatellitesiteswillbeestablishedincollaborationwith3commercialdatacentreswhichprovidecolocationservicesaswellaseasyconnectionstoHKIX.
SatelliteSite
SatelliteSiteCollaborator District PortsSupported Status
HKIX2 CITICTelecomInternational Kwai Chung GE/10GE ReadyforService
HKIX3 SUNeVision /iAdvantage FoTan GE/10GE/100GE Coming(byFeb2017)
HKIX4 NTTComAsia Tseung KwanO GE/10GE Coming(byApr2017)
HKIX5 KDDI /Telehouse/HKCOLO.net
Tseung KwanO GE/10GE/100GE Coming(byApr2017)
• ForconnectionstoHKIXatSatelliteSites,specialconnectionchargeswillbechargedbyrelevantoperators,inadditiontotheportchargeschargedbyHKIX.
• ForHKIXparticipantsnotcolocated atHKIXsatellitesites,theycanstillconnecttoanyofthetwoHKIXcoresites,i.e.HKIX1andHKIX1bsitesbylocalloopsvialocalloopproviders.
![Page 11: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/11.jpg)
![Page 12: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/12.jpg)
SupportofBlackholing forAnti-DDoSonHKIXRouteServers
HKIXrouteserverssupportRemoteTriggeredBlackHoleFiltering(RTBH)forannouncementofblack-holefiltering
No.ofASNsParticipated:27
Howitworks?• Thevictim’saddressmustbeincludedintheparticipantfilterontheHKIXroute
serversforBGPannouncement• Participanttagthe/32prefixwith4635:666 foritscustomer• HKIXrouteserverssettheprefixwithnexthop123.255.90.66• OtherHKIXparticipantsacceptthe/32prefixandsetthenexthopaddressfor
123.255.90.66tonull
ExpectedResults:• Onlythevictim(/32)willbeunreachableviaHKIXnetworkwhilesavingtheothers• TheDDoStrafficwillbeblack-holedatthesideoftheparticipatingrouterswhichare
closertotheDDoStrafficsources
![Page 13: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/13.jpg)
SupportofHidingAS4635onHKIXRouteServers
• HidingAS4635(ASNofHKIXRS)ontheASPathintheBGPannouncement
• SupportbothIPv4and/orIPv6
Steps:1. DisableBGPEnforcetheFirstAutonomousSystemPathonyour HKIX
peeringrouter- configuration:
Router(config)#routerbgp <Your-ASN>Router(config-router)#nobgp enforce-first-as
2. NotifyHKIXforhidingAS4635intheBGPannouncement3. SoftresettheBGPsession4. HKIXwillhidetheAS4635ontheASPathfortheIPv4and/orIPv6routes
sendingfromHKIXrouteserverstoyourHKIXpeering
![Page 14: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/14.jpg)
Near-TermPlan
• 1Q2017– True24x7NOC• 3Q2017– MoreBGPCommunitieswillbesupportedonRouteServersforRoutingControl
• 3Q2017– HKIXPortalforParticipants
![Page 15: HKIX Updates at HKNOG 4.0 (v1.2) · HKIX Updates at HKNOG 4.0 Kenneth CHAN 24 Feb 2017. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX)is the main layer-2](https://reader034.vdocuments.net/reader034/viewer/2022050323/5f7d0b4bfdc4fe4a280ba7b3/html5/thumbnails/15.jpg)
ThankYou!
Forenquiries,pleasecontactusatinfoAThkix.net