Interconnection in LAC region. Guillermo Cicileo!

Transcription

1 ! Interconnection in LAC region Guillermo Cicileo!

2 LAC network infrastructure Fiber optics infrastructure connects most of the countries! Different submarine and terrestrial cables provide interconnection between the countries! However, we ll see that traffic does not always follow those paths.! Fuente: telegeography.com

3 Internet traffic in LAC Most of the traffic continues to exchange outside the region! NAP of the Americas is in most cases the common interconnection point between carriers! In other cases, NY or Europe may be used for transit!! Fuente: telegeography.com

4 Why is this happening? Connectivity exists in terms of infrastructure, but not at the level of peering / traffic exchange! Even in cases where there are interconnections of ISPs, traffic takes incorrect paths! There are countries with IXPs which do not take advantage of the connections! Also in many cases the peering is made in USA!

5 Example: Traffic from Panama to Uruguay goes trough NYC HOST: Guillermos-MacBook-Pro.loca Loss% Snt Last Avg Best Wrst StDev % % % % lib.pa.cmy.53.ufinetlatam 0.0% mai-b2-link.telia.net 0.0% ash-bb3-link.telia.net 0.0% nyk-bb1-link.telia.net 0.0% nyk-b5-link.telia.net 0.0% antel-ic nyk-b5.c. 0.0% ibr2nyx1-be50.antel.net.u 0.0% ibe2uni antel.n 0.0% cbb2tiu1-be200.antel.net. 0.0% ibb2cen3-be antel 0.0% r ir-static.a 0.0% fw-bbone.lacnic.net.uy 77.8% mail.lacnic.net.uy 0.0%

6 Example: internal traffic in Nicaragua goes trough Miami (from CNU to UCA) mtr -r -c 5 Start: Mon Aug 3 17:59: HOST: Guillermos-MacBook-Pro.loca Loss% Snt Last Avg Best Wrst StDev % ip amnet.com.ni 0.0% % % % ??? ae-2-52.edge1.miami2.leve 80.0% francetelecom-level3-ge.a 40.0% be2054.ccr21.mia01.atlas. 40.0% be2069.ccr21.iah01.atlas. 20.0% be2145.rcr12.iah02.atlas. 40.0% te nr11.b % % % % unifiedlay 40.0%

7 The need for more IXPs

8 What is an IXP? A place where ISPs interconnect! Other names: NAP, PIT! Generally hosted in a neutral place! Universities, neutral datacenters, non-profit organizations! Organization:! Generally the operators organize in a non-profit organization! Sometimes the government promotes and host! Operation:! Ideally, the IXP members should define the rules! They should not prejudice any of the participants! Decide the rules based on an agreement of all the members!

9 Types of agreements Bilateral Agreements Each ISP establishes peering sessions only with the providers they need Border routers of the ISPs are BGP neighbors of other ISPs border routers MulElateral Agreements Each ISP establishes a peering session with the central router The border routers of the ISP are BGP neighbors of the IXP 9

10 Layer 2 Model Client Router 1 IXP Switch Client Router 2 Private Peering Client Router N Each participant peers with each other participant.! Participants may peer trough the IXP also!

11 Layer 2 with Route Servers ISP 1 ISP 4 ISP 2 ISP 5 ISP 3 ISP N Route Server 11

12 What are Route Servers? Normally is a Unix Server running routing software! There are Open Source or proprietary sources! The routing software provides BGP functionality! Routing information is exchanged between ISPs and the IXP! The route server doesn t forward packets Only routing logic is processed! Avoids a huge amount of BGP sessions! Number of sessions = n * (n-1)! 12

13 Why some traffic is not routed through the IXP? In some cases it may be due to configuration errors! Inadequate use of BGP features! Improper route filtering! Preference of other links! However, it is often a decision of the operators! This delays the growth of national connectivity! As a strategy this ends up being detrimental to operators!

14 IXP participants It s important that content providers can join the IXP! Not only CDNs, also local providers:! Universities / NRENs! Government Agencies / Government Networks! Mass media! Other content providers! Thus, local traffic is locally routed! Most of connectivity problems are solved! The value of an IXP is proportional to the number of members!

15 Consideraciones acerca de la interconexión Los IXPs tienen que beneficiar a todos los operadores que lo integran! De lo contrario, los operadores prefieren rutear el tráfico por otro lado! Eventualmente, pueden desconectarse! También existen situaciones en las que el tráfico por el IXP es desfavorecido (enlaces subconfigurados)! Para esto es fundamental que los operadores que integran el IXP sean parte de las decisiones! Las regulaciones o las imposiciones generalmente no funcionan! Hay que pensar en un modelo económico que sirva a todos los participantes!

16 A successful model: CABASE Argen4na Originally hosted in Buenos Aires, the NAP model was successful for many years! This same model was extended to the rest of the country! This allowed to cover areas of poor connectivity! Traffic is routed locally in the main cities! This allowed an important growth for all the ISPs, making a profitable economic model!

17 PTT Metro supported by CGI.Br Model supported by Comite Gestor de Internet - Brasil! There s no charge for operators, no matters their capacity! They only have to afford the cost of the link to the IX! Generally metro ethernet! Traffic is locally aggregated! There are points of IX (PIX) in many locations in BR!

18 LACNIC SSR Strategy We think that a Secure and Stable Internet is a key factor for economic & social development of our region! We understand that security and stability are closely related aspects! Many actions in one aspect also contribute to the other! In our vision, Internet Security and Stability can not be achieved by a single organization, it s a shared goal! We develop collaborative work with other organizations like LAC-IX, LACTLD, ICANN, ISOC, that converge in those objectives!

19 Security, Stability and Resiliency Program Security:! Risk and danger free! Taking measures to prevent risks and dangers! Stability:! Permanence, continuity over time! Operation with the same characteristics in the absence of external stimulus! Resiliency:! Self restoration capacity!

20 Projects AMPARO & WARP! CSIRTs meetings! +RAICES! Promotion of RPKI, DNSSEC and IPv6 deployment! Human capacity building! IXPs promotion!

21 Why do IXPs matters for LACNIC?

22 IXPs advantages (stability and resiliency) Local traffic is routed locally! Lower latency for applications! Lower costs! Possibility of installing CDNs! Traffic from one region/country/zone is not seen from other countries/regions! Possible testbed for new technologies (IPv6, RPKI, etc)! Security incidents coordination between members! "Community" sense! Sharing problems, strategies, common actions!

23 Relevancia de los IXPs en nuestra línea estratégica Mayor estabilidad y resiliencia al tráfico de Internet! Mejora la conectividad, redundancia, conexiones estables! Facilidad para instalar servidores raíz de DNS (root servers)! Seguridad! Tráfico más controlado, localizado, menos sujeto a inspección! Posibilidad de intercambio de información de incidentes! Acciones en común a fin de mitigar ataques! Entrenamientos y capacitaciones: grupo focalizado! Facilidad de introducción de pilotos de RPKI e IPv6! Posibilidad de investigación y estadísticas de tráfico! Crecimiento y desarrollo de Internet en la región!

24 ! LACNIC Training Program for IXP Goal:! Support the creation of IXPs within the region! Training on different topics:! BGP! RPKI! IPv6! Security! IXP operation and organization models!

25 Program +RAICES Support for installation of anycast copies of root-servers in the region! Better access to one of the critical Internet resources: DNS! Better connectivity of local users and ISPs! LACNIC coordinates with host institutions and with the root servers operators! Currently working with root-servers F, L, K, I!

26 Thanks