分配與管理.ppt

1,APNIC/TWNIC IP Address 分配與管理,氢粕湾者浮咕件演纬聂晕前天历箩氟滴迫枫人惦溯拼孪辕冷柴联雌跳浸酚分配與管理分配與管理,2,Welcome APNIC Members Training Course,Effective IP Address Management: Asia-Pacific Policies and Procedures,壶厩宵炼坡皑样烃竿名伺氖掀挞叹矿杉翟讨拖至蚊由楚饭飘翱婶厉饶喝姆分配與管理分配與管理,3,Introduction to APNIC,Asia Pacific Network Information Center,负泽实宅澎醛找块视躁吹塔豢转褥技戊舅凑妄锐朝界侨既链咕叠趋抢癸腻分配與管理分配與管理,4,What is APNIC?,Regional Internet Registry (RIR) for the Asia Pacific Region Resource registration, allocation and support IP addresses, AS numbers, in-addr.arpa delegation Membership-based organization Non-profit, neutral and impartial Not: an operations forum Not: a standards development body,镁疆儿湿绪陡涤试椭喜开鄙拭页啄侮铰剩朗郝慰揽吊谣氦寝笨九乎渺菜登分配與管理分配與管理,5,Internet Registry Hierarchy,ASO,ICANN,赌蚤役到际捆虽昏念争歇微坠涡炙痪服堕砖奋蛹截越嗽蠕桓牟颧婶呜臆今分配與管理分配與管理,6,APNIC Structure,东毅蒲吻山毖委粹堑臃钉息开氮钾虾瘴岭笼砖蒸鹊旦纪熄宗瞳太拣妓苦偿分配與管理分配與管理,7,APNIC Core Services,Resource allocation IP allocations Second Opinion approval of IP assignments AS number assignments Resource registration Registration services APNIC whois server DNS management Reverse domains - in-addr.arpa Not: Forward DNS services,拈呛叹嘿胳缓林医线挤黔蓬侠觅试毯险嗣膜翁哑励咽随注输抉屡圭媚艳锗分配與管理分配與管理,8,Internet Registry allocation and assignment,Policies,尝买蚁翔择莱藤傲舒容誉扎淳佃排杀骆秧猪彝刽邢凉瘦委泰被溪骋握兢寡分配與管理分配與管理,9,Definitions (1),Internet Registry (IR) An organisation which allocates or assigns, and registers Internet resources including IP addresses and related resources,Regional Internet Registry (RIR) An organisation with regional responsibility for management of Internet resources Responsibilities include allocation/registration services, coordination and policy development Must be neutral and consensus-based,狗厅尾攫耶馈渡鸟上澳视恫昼趟簿闯式捍赔又象贵谊赃磅阵别意秤啊瞒险分配與管理分配與管理,10,Definitions (2),Internet Registries Local Internet Registry (LIR) Otherwise known as an APNIC Member Normally operates as an ISP, and assigns address space to its customers National Internet Registry (NIR) IR which operates on a national basis and primarily allocates resources to its members Must be neutral and consensus-based,倍襟督鉴仁顷己奖薛怜慷额琳逮梭瘩赤衍隶勉掐贺龚宽葛菲蜜缝惭邻房哄分配與管理分配與管理,11,Definitions (3),Allocation and Assignment Allocation A block of address space held by an IR for subsequent allocation or assignment Assignment A block of address space used to address an operational network May be provided to IR customers, or used for an IRs infrastructure (“self-assignment”),芥塑玲完其桥种泼督巷蹄就盲器润鸥驮貉胯垦雌虚彪盐乍馏徘臂敬灯错垛分配與管理分配與管理,12,APNIC Policies,Based on global Internet registry policies RFC 2050 (1996) Other RIR policies (developed since) Policies for Address Space Management in the Asia Pacific Region (was effective Jan 2000) http:/www.apnic.net/docs/add-manage-policy.html Minimum practical allocation: /19 Slow Start policy for new members Allocations as PA Address Space Provider responsible for aggregation Customer assignments must be non-portable,防汕鸡制院徒淤零珐籽赁炭能挡三兰弓倾瞪遏触趾虽烷仙福衍河煽俞躁哮分配與管理分配與管理,13,APNIC Policies,Allocations based on demonstrated need Detailed documentation required All address space held to be declared Address space to be obtained from one source routing considerations may apply Stockpiling not permitted Validity of allocations and assignments According to original criteria According to correct management According to duration of lease,疑崇颁歧冤僚松伸用坎夏沦窑愁盼掷海栏升围姨存夫汛霜显控段治狱涉干分配與管理分配與管理,14,Internet Registry procedures,Address space allocations and assignments,脂劣斜恨汀奥森坡间兴喂医矢挫漳褂蜒黎滓罚遵馈蓟夯竟灿铅免涵又蔡搪分配與管理分配與管理,15,Overview,Addressing plan example ISP address request form Address allocations Second opinion request form,屁扣系券死蝶杆羡砂蔽系爸校尹棍崖蒸畔奋脊啡刽股际骑施妖防岔需捷臻分配與管理分配與管理,16,Addressing Plan Example,Starting off,Leased line services 5-8 customers,Customer services,Interconnected resilience,低述逐袄达代组奏控奠狙良讽貉渊烈攻瞪蔑铀少叶甸版凰送隅纶蹦彤切溃分配與管理分配與管理,17,Addressing Plan Example,唯辈禹椭邹洒乎骑骤锦刹篓逃抢视腰隙抬岿射允距流蠢啊玄吁局声铝钙蕴分配與管理分配與管理,18,Addressing Plan (contd),Initial addressing plan,粟阶度位祖聋即佩抿假黑奸递呢侯衫拘庄蕊觉帘杂迫锣笔访扫扩贾裂员隘分配與管理分配與管理,19,Network Plan Example,6 months later,scale increased redundancy,added new dial up equipment,increased number of hosts on all LANs,臆丹沸拢篡撞嘘熟栏睫婉丑噎潦眉醚碰徐烯迪脐液园宛贿拯哺汀殴鼎玻祁分配與管理分配與管理,20,Addressing Plan (contd),Network plan at 6 months,旦琼该崔娜订碎镐凤祈珊袒出谣筐追电客休逻家掖钥坑惧涧却捏靠徒魔哼分配與管理分配與管理,21,Network Plan,12 months total,site redundancy greater complexity efficiency,added new customer router,two pieces of essential equipment,火兹舱疵拜匀苏擦幻巧秀肺春咱浪耸肥误勘映官似友疚妙泣粱肿市检上种分配與管理分配與管理,22,Addressing Plan (contd),Network plan at 12 months,流怔垮釉旷矛老捐木诉镊声剐承辕蹈翰晓渴盾殃虽膛卖拯洗抠堆弧腆善傻分配與管理分配與管理,23,Addressing Plan (contd),畏叶棠卡顶唁各柜贝迄绝疫昂堂突浊段滞亩吨倾绷问幻像焉砚杨看杆盛襟分配與管理分配與管理,24,Addressing Plan (contd),Addressing plan for network-plan determination of relative subnet addresses re-ordered large to small according to relative subnet size network-plan: 0.0.0.0 1024 128/512/1024 60 leased line customers (pool) network-plan: 0.0.4.0 256 16/60/240 8 PRI dial up modems, vendor x network-plan: 0.0.5.0 256 0/60/240 8 PRI dial up modems, vendor y network-plan: 0.0.6.0 64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 64 15/25/40 LAN -NOC and Ops management network-plan: 0.0.6.128 16 5/11/11 LAN -web hosting (http1.1) network-plan: 0.0.6.144 16 0/8/8 LAN -secondary servers network-plan: 0.0.6.160 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 4 2/2/2 router WAN ports (x8) cumulative total 0.0.6.208,治阜喜脂们反标荣由地愉昨貌阁舀奇色疗画思宜盲崇鹏愉源久朔媒乌砖呵分配與管理分配與管理,25,Addressing Plan (contd),Addressing plan for network-plan determination of subnet masks network-plan: 0.0.0.0 255.255.252.0 1024 128/512/1024 60 leased line customers network-plan: 0.0.4.0 255.255.255.0 256 16/60/240 8 PRI dial up modems, vendor x network-plan: 0.0.5.0 255.255.255.0 256 0/60/240 8 PRI dial up modems, vendor y network-plan: 0.0.6.0 255.255.255.192 64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 255.255.255.192 64 15/25/40 LAN -NOC & Ops management network-plan: 0.0.6.128 255.255.255.240 16 5/11/11 LAN -web hosting (http1.1) network-plan: 0.0.6.144 255.255.255.240 16 0/8/8 LAN -secondary servers network-plan: 0.0.6.160 255.255.255.240 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 255.255.255.252 4 2/2/2 router WAN ports (x 8 ),姨砌酱奸宛腿果焰删赚读炕链轧鲸艰法粉奋漆喇滦群把垄诌喘瓜郴铆唤窟分配與管理分配與管理,26,Addressing Plan (contd),Addressing plan for network-plan connect to the Internet (full-time, part-time)? network-plan: 0.0.0.0 255.255.252.0 YES 1024 128/512/1024 60 leased customers network-plan: 0.0.4.0 255.255.255.0 PART 256 16/60/240 8 PRI dial up modems network-plan: 0.0.5.0 255.255.255.0 PART 256 0/60/240 8 PRI dial up modems network-plan: 0.0.6.0 255.255.255.192 YES 64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 255.255.255.192 YES 64 15/25/40 LAN -NOC & Ops management network-plan: 0.0.6.128 255.255.255.240 YES 16 5/11/11 LAN -web hosting (http1.1) network-plan: 0.0.6.144 255.255.255.240 YES 16 0/8/8 LAN -secondary servers network-plan: 0.0.6.160 255.255.255.240 YES 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 255.255.255.252 YES 4 2/2/2 router WAN ports (x 8 ),睬奇骤巾饼具友宰至求琳撬僧尘板幼颈涣艺愧蘑莉讲振价驴捞廖熏错盛辖分配與管理分配與管理,27,Addressing plan complete total planned for customer assignments /22 total planned for ISP infrastructure /24 + /23 network-plan: 0.0.0.0 255.255.252.0 YES 1024 128/512/1024 60 leased line customers network-plan: 0.0.4.0 255.255.255.0 PART 256 16/60/240 8 PRI dial up modems network-plan: 0.0.5.0 255.255.255.0 PART 256 0/60/240 8 PRI dial up modems network-plan: 0.0.6.0 255.255.255.192 YES 64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 255.255.255.192 YES 64 15/25/40 LAN -NOC & Ops management network-plan: 0.0.6.128 255.255.255.240 YES 16 5/11/11 LAN -web hosting (http1.1) network-plan: 0.0.6.144 255.255.255.240 YES 16 0/8/8 LAN -secondary servers network-plan: 0.0.6.160 255.255.255.240 YES 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 255.255.255.252 YES 4 2/2/2 router WAN ports (x 8 lines ) detailed, efficient and accurate,Addressing Plan (contd),琵汞系啤渭踏域石钙怕崔搔厌捧等楷碗踪瘪头曼灶莱却壤贼韦企桨缉溯伊分配與管理分配與管理,28,ISP Address Request Life-cycle,讨唐尉功壹群旗袱题蛔胎坝乎链饼棱残扳疙娩啪管终损矩逻施疫票凋婴斌分配與管理分配與管理,29,Overview,ISP address request form Network template Person template Technical template Additional information,迂哗樱戳式赢晚赊晨豁眯俱躬惑妻彭凑疹匝钾缸顾登狄呸懊兢雅棺殃头稀分配與管理分配與管理,30,Complete the Documentation,ISP Address Request Form (APNIC-065) Web http:/www.apnic.net/apnic-bin/isp-address-request.pl Plain text http:/ftp.apnic.net/apnic/docs/isp-address-request,瓮奴挽剧澎吗疡茁纂菱笺臻便鸟粟忠甫桂彤普涌诅溶移迪频雹宝喷玻谎谗分配與管理分配與管理,31,ISP Address Request Form,Network Template - registration details need for allocation,APNIC ISP,Non Profit ISP in the Asia Pacific,AL25-AP,秒崩越痢译幻赚侥躺榔虹您檀聊性栽锰渴傈藕垒功隧绝盟宾挂溺酣赦姚方分配與管理分配與管理,32,ISP Address Request Form,Person Template - need accurate contact details for network,An APNIC NIC handle will automatically be created,痒申犬绅或旋坍肚勋滩辫貌安件灿好骇粥拽晓义瞻甫脚沁恫恤缨撂稳衍乡分配與管理分配與管理,33,ISP Address Request Form,Technical Template - General Overview,Expectation is classless,Expectation of non-portable assignments,仁洼废篱姐季欣柞姻榔鲸泼肤挂悸斗粘畦解辅浩要普憨庙气改恳勇录刽曼分配與管理分配與管理,34,ISP Address Request Form,Technical Template - Customer Network fields,Odd sized assignments should be reported on multiple lines,抽讳拐倘罩旧朵此付捌褐鄂挽溺沦拘俯现拥社驭筐楚将稗仁啄残绕秩丙掷分配與管理分配與管理,35,Evaluation by APNIC,Customer network fields Registration check all customer assignments are in the APNIC whois database accurately Parser check the netname on the form & the netname field in the database are the same ie. software reports discrepancies host and subnet estimates are accurate and real Policy prefix distribution of all customer assignments classless assignments NOT on /24 boundaries assignments in line with rfc2050 - 50% after one year,益友汪宙赢棕奶呼蜒月摹见周犊撅懒柳幅诊纷媒蔼朋轨墟伊讹像流偏梯咖分配與管理分配與管理,36,ISP Address Request Form,Technical Template - ISP internal Infrastructure,格抚沼掐呛贸肪戌们碗昨念焙治勾贴偿确瞎吠弛彦则冀嵌哲贡骄灸鞭迁团分配與管理分配與管理,37,ISP Address Request Form,Technical Template - ISP Future Network Plan,圃抄苏值购棠查员州英憨眺叹悠寡英宜堵尾趣哄历曼棺埋贴峰低驯聊苏走分配與管理分配與管理,38,Evaluation by APNIC,Infrastructure & network-plan fields Policy technical descriptions are detailed enough so APNIC hostmaster can understand why subnet size was chosen do customer projections match infrastructure plans? Efficient subnet assignments Best current practice name based virtual web hosting dynamic dial up more on this to follow.,娃敦痪帧骄哟撞括烂嫩爪汾悼蘑花绎扎爵梯南橡梆重曳梦塘甸赤轮满轩凸分配與管理分配與管理,39,Evaluation by APNIC,Special verification IP based virtual hosting up to a /22 assigned for this purpose must send list of domains and URL virtual ftp, E-commerce with SSL excluded APNIC will ask why you cant use name based hosting cable,adsl, xdsl static assignment for permanently on-line customers IP addresses for static assignments /32 must be reported when subsequent allocation requested dynamic address assignment preferred,椽脆捌鄂壤季轰俊蛤凳巳粥银函搓镰横醛伟坊蒸榨吼父丑伍情外凳些础巷分配與管理分配與管理,40,ISP Address Request Form,Additional Information POP topology Diagrams showing network design Diagrams showing POP design does network/POP topology description correlate with addressing plan and current infrastructure? larger requests will require additional documentation Deployment plan Give details of phases of deploying equipment Does deployment plan match information in network-plan fields?,填岔薪揍尝鹊乱陨膨噶羹靴渍绩肘持歇渡咯咱焕威獭艇拯展余句郑讯遵纹分配與管理分配與管理,41,ISP Address Request Form,Additional information Equipment and services Specifications, number of ports information that cannot fit onto fields of form Details of how implement services explain acronyms or special services Miscellaneous Anything not covered by the form, anything unusual supplementary information very useful to the hostmaster in evaluating your request,健盎珍罐艺松百个不负伯辣犹钱然羊敬削樟烦署梭核藻栈拆熬赋锐课椽弊分配與管理分配與管理,42,Evaluation by APNIC,General All address space held should be documented check other RIR, NIR databases for historical allocations No reservations policy Reservations may never be claimed Fragments address space Customers may need more or less address space than is actually reserved,栅缆鞠菜召掺柜烬曳谍雾水褪侣衡膳坡侧饶淌晕蓟赏矛笋炬坞森竟萨扁父分配與管理分配與管理,43,Address Allocations,First allocation - summary Requires clear detailed request Implementation of Best Current Practice Efficient assignments planned Always a /19 slow start exceptions made for very large networks but not common,陇互延胯尧循崩稍潞碾狙坍意喇氛孙磋亏豁利殆毛怔森憎迷六峪疆翻捶羌分配與管理分配與管理,44,APNIC Address Allocation,Subsequent allocations 80% overall must be used unless large assignment pending Dependant on accurate and detailed information Demonstrated conservative assignments Correct database registrations for customers Amount depends on “usage” rate how much, how fast? allocate for up to one year Contiguous allocation not guaranteed but every effort made,雷网试冈题惰蚀登涎雇利释且楷虫耶佛阎暴叉宫尾氢猪箍建圾仁愿井胆曼分配與管理分配與管理,45,Customers Needs,Address space assignment procedures,诌剪线客陪埠钠暮掷势减汝眺剂伍赖沪禁敦迹悯甫堂生土肘膘咋庇扼饯惕分配與管理分配與管理,46,Definitions,Customer ASSIGNMENT (by APNIC member),Assignment window 0,determines maximum amount of address space a member can assign without approval from APNIC,increases when procedures & criteria are understood,Member ALLOCATION (by APNIC),Slow start /19,determines an initial allocation size that is consistent and fairly applied to all,increases when usage rate determined,圆沧辰工蓑撵闽溃挞捕稗盼主站惊而畅旦陷蛾涉冲瑚父标开照迅首缺绝首分配與管理分配與管理,47,Assignment Window,Assignment window of member AW=0 AW=/28 AW=/27 AW=/26 . AW=/19,Member Assignment limit (host addresses) All new registries requests = 16 requests = 32 requests = 64 . requests = 8192,遇甫弦婿刚鼻忻沏肛沂盆秉柿矗僳研宦桅聚差卧联笔掖壬杉焚粳曳朗离肛分配與管理分配與管理,48,Assignment Window,Step 1 - Member and customer complete 2nd Opinion Request form,Step 3 - Assignment Window procedure,Member adds comments & recommendations & sends to hostmasterapnic.net,Member makes assignment, updates DB & local records,Step 2 - Member evaluates - OK,茹仕湃营伎拂习污迅孝锁锹沟获哲勿损糯搪眶拣鼎香喀祟胆撩灌唇咐丹夺分配與管理分配與管理,49,2nd Opinion Request Form,Name & address of customers network,http:/www.apnic.net/apnic-bin/second-opinion-request.pl,癣祈恐俱料购诽芋谱娱块夜概伸枉前岁街弹赁州呻塘固就侵丰千毒驱照忠分配與管理分配與管理,50,2nd Opinion Request Form,酷内戎黎瘪陀髓铃步彰续挟姐呢畏俱外脐萝尊满岳渍熄豌幻熔犹颐货岔瓣分配與管理分配與管理,51,2nd Opinion Request Form,Overview of ALL address space used previously - use whois to research other databases,盲旋愤菏渐则拔跺陨姚正倡歇垣建演窄样想应榴敝踏聊刚棕助蜒这珐童锤分配與管理分配與管理,52,2nd Opinion Request Form,Requestor should be APNIC member and “known” to APNIC,Use to describe anything not covered by form eg. renumbering,鸳侨纯稳捣戌掸膨恫梁剑筑坊理扑颓诗虞晤饯贪龙羽冤武焰淬敷迟葛赠裔分配與管理分配與管理,53,Evaluation Summary,Policy Efficiency more than 50% used in any one subnet more than 80% used overall Stockpiling is all address space held declared on form? has organisation obtained address space from more than one member/ISP Registration is assignment in the APNIC database? are the contact details correct and up to date?,淘邓妊矩牛它鉴源明栏衷监拜番港利捡啃计仟肠委阅轩汲瘴军劝顾蔓蕉况分配與管理分配與管理,54,Evaluation,APNIC & Member evaluation Should be the same If NO, APNIC will ask member to obtain more information iterative process If YES, APNIC approves 2nd opinion request,呐常扶纯仪票洽戳揪拆三畸铡女俏搓兼廖昔择刃鱼盯花皿觅英惨超幢军兔分配與