1 of 70

APNIC and PDP

Kams Yeung

APNIC Executive Council

HKAPIGA 25th April 2025

1

2 of 70

Regional Internet Registries

2

2

3 of 70

Internet and IP Basics

Internet Fundamentals

3

4 of 70

The Internet is a Series of Networks

  • The Network of Networks

4

4

5 of 70

The Internet is a Series of Networks

  • The Network of Networks using standardized protocols

    • TCP/IP
    • HTTP
    • FTP
    • IPv4
    • IPv6

5

5

6 of 70

Who operates networks in Asia Pacific?

Mostly ISPs and Telcos

6

6

7 of 70

Who operates networks in Asia Pacific?

Mostly ISPs and Telcos

Content Providers

Banks

Universities

Enterprises

Govt Orgs

And many others…

7

7

8 of 70

Internet Basics

  • Every device on the Internet needs an address, to be found by other devices
    • IPv4: 66.220.144.0
    • IPv6: 2a03:2880:11:2f83:face:b00c:0:25de
  • Humans are not good with numbers. We have domain names that translate to address:

www.facebook.com 🡪 69.171.239.12

8

8

9 of 70

Names and Numbers

The Internet

2001:0C00:8888::

2001:0400::12

www.apnic.net

202.112.0.46�2001:0400::12

My Computer

www.apnic.net

www.apnic.net

202.112.0.46�2001:0400::12

9

9

10 of 70

Where do IP addresses come from?

10

10

11 of 70

IANA Functions

Management of Internet Number Resources

Management of Domain Names

Regional Internet Registries (x5)

Internet Service Providers

End users

gTLD Registries

Accredited Registrars

Resellers

End users

ccTLD Managers

Registries

Accredited Registrars

Resellers

End users

gTLD Domain Names�.com .net .shop .xyz

ccTLD Domain Names�.sg .my .id .vn .hk .tw .au

101.12.21.22�2001:db8:0:0:0:0:2:1

11

12 of 70

That’s great,�but who’s in�charge?

12

13 of 70

13

14 of 70

Where does APNIC fit in?

  • APNIC is the Regional Internet Registry (RIR) for the Asia Pacific region
  • Membership-based, not-for-profit
  • Industry self-regulatory body
    • Open
    • Consensus-based
    • Transparent
  • Delegates and manages Internet �number resources
    • IPv4 and IPv6 addresses
      • Diagram on next slide
    • AS numbers

14

14

15 of 70

APNIC’s Roles and Services

APNIC provides the following services:

Delegates & manages Internet resources

Manages reverse DNS delegations

Maintains the APNIC Whois Database

Facilitates IP address policy development

Provides capacity building

Research, measurements, publications

Supports Internet infrastructure development

15

15

16 of 70

IP Address Delegation

16

17 of 70

APNIC from a Global Perspective

17

17

18 of 70

APNIC in the Asia Pacific

18

18

19 of 70

Computer Networks from the Ground Up

Internet Fundamentals

19

20 of 70

The Layers of the Internet

1

PHYSICAL LAYER

The Physical layer uses transceivers to convert data into signals sent over a network link

20

20

21 of 70

The Layers of the Internet

1

PHYSICAL LAYER

The Physical layer uses transceivers to convert data into signals sent over a network link

2

DATA LINK LAYER

The Data Link layer uses protocols to transfer data between nodes on a network segment

21

21

22 of 70

The Layers of the Internet

1

PHYSICAL LAYER

The Physical layer uses transceivers to convert data into signals sent over a network link

2

DATA LINK LAYER

The Data Link layer uses protocols to transfer data between nodes on a network segment

3

NETWORK LAYER (IP)

The Network layer is responsible for creating the packets that move across the network

22

22

23 of 70

The Layers of the Internet

1

PHYSICAL LAYER

The Physical layer uses transceivers to convert data into signals sent over a network link

2

DATA LINK LAYER

The Data Link layer uses protocols to transfer data between nodes on a network segment

3

NETWORK LAYER (IP)

The Network layer is responsible for creating the packets that move across the network

4

TRANSPORT LAYER (TCP/UDP)

The Transport layer establishes the connection between applications on different hosts

23

23

24 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

5

APPLICATION LAYER

The Physical layer uses transceivers to convert data into signals sent over a network link

The Data Link layer uses protocols to transfer data between nodes on a network segment

The Network layer is responsible for creating the packets that move across the network

The Transport layer establishes the connection between applications on different hosts

The Application layer is the group of applications requiring network communications

24

24

25 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

The Physical layer uses transceivers to convert data into signals sent over a network link

The Data Link layer uses protocols to transfer data between nodes on a network segment

The Network layer is responsible for creating the packets that move across the network

The Transport layer establishes the connection between applications on different hosts

Generates the data and requests connection

Browser

Server

5

APPLICATION LAYER

25

25

26 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

The Physical layer uses transceivers to convert data into signals sent over a network link

The Data Link layer uses protocols to transfer data between nodes on a network segment

The Network layer is responsible for creating the packets that move across the network

Generates the data and requests connection

Establishes the connections using ports and protocols

Browser

Server

5

APPLICATION LAYER

26

26

27 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

The Physical layer uses transceivers to convert data into signals sent over a network link

The Data Link layer uses protocols to transfer data between nodes on a network segment

Generates the data and requests connection

Establishes the connections using ports and protocols

Transfers packets with IP addresses

Browser

Server

5

APPLICATION LAYER

27

27

28 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

5

APPLICATION LAYER

The Physical layer uses transceivers to convert data into signals sent over a network link

Generates the data and requests connection

Establishes the connections using ports and protocols

Transfers packets with IP addresses

Transfers frames with physical MAC addresses

Browser

Server

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

28

28

29 of 70

The Layers of the Internet

1

PHYSICAL LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

5

APPLICATION LAYER

Browser

Generates the data and requests connection

Establishes the connections using ports and protocols

Transfers packets with IP addresses

Transfers frames with physical MAC addresses

Transmits and receive bits

Server

00111010 00101001

2

DATA LINK LAYER

29

29

30 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

5

APPLICATION LAYER

Transmits and receive bits

Generates the data and requests connection

Establishes the connections using ports and protocols

Transfers packets with IP addresses

Transfers frames with physical MAC addresses

Server

00111010 00101001

30

30

31 of 70

Asia Pacific’s Networks - Under Water

Source: Telegeography, Submarine Cable Map, 2016

31

31

32 of 70

On the Ground…

32

32

33 of 70

In the Air…

33

33

33

34 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

5

APPLICATION LAYER

Transmits and receive bits

Generates the data and requests connection

Establishes the connections using ports and protocols

Transfers packets with IP addresses

Transfers frames with physical MAC addresses

Server

00111010 00101001

34

34

35 of 70

Connecting to a Local Network

  • Every device that can connect to a local area network has 1 or more hardware addresses (MAC address)
    • MAC addresses are 48 bit unique�identifiers, shown as 12 hex digits
    • One is assigned to each network �adapter at time of manufacture
    • Wired, Wi-Fi, and Bluetooth all have�MAC addresses from the same pool
    • Newer devices offer randomizing�MAC addresses, but that usually only�changes between different connections

35

35

36 of 70

Finding Your MAC Address

Operating System

Method

Windows Devices

Open cmd.exe, type ipconfig /all�(examples on next slide)

Linux and Mac

Launch Terminal, type ifconfiglook for “ether xx:xx:xx:xx:xx”

iPhone

Settings -> General -> About �then scroll to Wi-Fi Address

Android

Settings -> About Tablet -> Status�then scroll to Wi-Fi MAC address

36

36

37 of 70

Finding Your MAC Address

* Animations on this slide

37

37

38 of 70

The Layers of the Internet

1

PHYSICAL LAYER

2

DATA LINK LAYER

3

NETWORK LAYER (IP)

4

TRANSPORT LAYER (TCP/UDP)

5

APPLICATION LAYER

Transmits and receive bits

Generates the data and requests connection

Establishes the connections using ports and protocols

Transfers packets with IP addresses

Transfers frames with physical MAC addresses

Server

00111010 00101001

38

38

39 of 70

How to Connect to an IP Network

  • Every device that connects to an IP network must have an Internet Protocol (IP) address
  • Two classes of IP addresses
    • Class A or IP version 4 (IPv4) addresses are typically represented as dotted decimal numbers, e.g. 192.168.2.1
    • Class AAAA or IP version 6 (IPv6) addresses are ugly hexadecimal things with “:” as separators, e.g. fe80::226:bbff:fe11:5b32�(we talk more about IPv6 a bit later)

39

39

39

40 of 70

Connecting to the Internet

  • Your device needs a gateway to access the Internet beyond your local network
  • This gateway talks to your device using your MAC address, and provides your device with an IP address which is then used for Internet communication
    • A gateway modem/router can provide this information using DHCPDHCP = Dynamic Host Configuration Protocol

Can someone help me join a network?

Welcome! I’m your gateway

  • My address is 192.168.4.1
  • Your IP address is 192.168.4.94

40

40

41 of 70

Public Versus Private IP Addresses

  • Your device or gateway must have a globally unique (public) IP address to communicate with hosts outside your local network
  • Your router, ISP, or mobile provider may assign a private-use IP address to your device

Private-use IP Addresses

Public-use IP Addresses

Internet

APNIC

Google

eBayTwitter

41

41

42 of 70

Private IP Addresses (Reserved & Special Use)

  • RFC 1918
    • 10.0.0.0 - 10.255.255.255 (aka 10.0.0.0/8)
    • 172.16.0.0 - 172.31.255.255 (aka 172.16.0.0/12)
    • 192.168.0.0 - 192.168.255.255 (aka 192.168.0.0/16)
  • Others: RFC 5735
  • Complete list at: IANA IPv4 Special-Purpose Address Registry�https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml

42

42

42

43 of 70

IP Address Allocations

Internet Fundamentals

43

44 of 70

How IP Addresses are Delegated

44

44

44

45 of 70

IP Address Management

  • Portable Allocations
    • Allocations made by APNIC
    • This is APNIC’s main function
  • Non-Portable Allocations
    • Allocations made by APNIC Members (LIR)
    • Usually for downstream ISPs
  • Non-portable Assignments
    • Assignments made by APNIC Members�or by the Member’s customer
    • Usually for end customer
    • Must renumber if changing ISP
    • Helps scale the Internet effectively

45

45

45

46 of 70

So, who gets IP address and AS numbers?

  • National Internet Registry
  • Telcos, ISPs, Mobile Operators
  • Hosting Company (Amazon/AWS, Azure, GCP, Linode)
  • Universities, Government Departments, Banks

46

46

46

47 of 70

APNIC Policy Environment

  • “IP addresses are not freehold property”
    • Assignments & allocations on license basis
      • Addresses cannot be bought or sold; it’s more like renting
      • Internet resources are public resources
      • ‘Ownership’ is contrary to management goals

  • “Confidentiality & security”
    • APNIC to observe and protect trust relationship
      • Non-disclosure agreement signed by staff

47

47

47

48 of 70

IP address policy development

48

48

49 of 70

What is a Policy?

In the APNIC region, a policy refers to the rules and requirements or criteria that one must meet to be eligible to receive IP and ASN resources.

A policy proposal is a formal, written submission that outlines an idea for a new policy. If a policy proposal is successful it will become a policy.

49

49

50 of 70

Why do we need resource policy?

IP address and AS numbers are public shared resources. APNIC policies ensure that these resources are managed properly and distributed with the goal of fairness and consistency in mind.

The common aim of a policy is to ensure proper usage of Internet number resources according to the technical and operational needs of the network. This is vital for the continued stable growth of the Internet. 

50

50

51 of 70

Policy change

Policies change constantly.

They evolve as the needs of the technical community change

Good policy relies on a range of opinions

APNIC policies are developed by Members and the Internet community in a bottom-up process of consultation and consensus. 

51

51

52 of 70

What’s APNIC’s role?

  • The APNIC Secretariat is the organization that manages resources, implements policy and provides a range of services to the community
  • APNIC staff
    • Provide information and support to people who want to be involved in the policy development process
    • Provide support to the Policy SIG
    • Help authors to draft proposal wording
    • Manage the implementation of policy changes
    • Inform the policy changes to the community

52

52

53 of 70

Who can Participate?

Policies are developed by and for the Asia Pacific Internet community, which includes the APNIC membership.

Anyone can participate in the policy development process for managing and distributing IP addresses.

  • Whether you are a seasoned network engineer, a decision maker, a student in the IT field, or a user of the Internet, you can join the discussion.

You are invited to be part of this development process.

53

53

54 of 70

Why participate?

  • It is an opportunity to learn and share experiences and best practices in the Internet
  • Policies affect your organization’s operating environment and are constantly changing
  • Ensure your organization's needs are represented
  • It’s a great way to build your profile and contribute to the Internet
  • You can directly impact the way APNIC manages Internet number resources
  • Make these policies work for your networks and future growth

54

54

55 of 70

www.apnic.net/community/policy/participate

55

56 of 70

Policy Special Interest Group (SIG) Charter

Develop policies and procedures which relate to the management and use of Internet address resources by APNIC, NIRs, ISPs and other organizations within the Asia Pacific region.

56

56

56

57 of 70

What is a SIG?

A SIG, or Special Interest Group, is an open forum for the community to discuss topics of interest. There are no entry requirements to participate in the activity of the APNIC Policy SIG.

You don’t “join” a Special Interest Group; you participate in it. The first step to participation is usually to subscribe to the SIG mailing list.

57

Special Interest Group Guidelines

https://www.apnic.net/community/participate/sigs/

57

57

58 of 70

APNIC Policy SIG

Policy SIG Chair

Bertrand Cherrier

Co-Chairs

Shaila Sharmin

Ching-Heng Ku

Secretariat Support

Sunny Chendi

George Odagi

Elected by the Asia Pacific Internet Community

58

58

59 of 70

Policy Development Process

APNIC policies are developed by the community in a bottom-up approach. This approach is part of the Policy Development Process or commonly referred to as the ‘PDP’. �

PDP describes the process through which policy proposals are submitted, considered, and adopted by APNIC. �

59

59

60 of 70

Policy Process

60

What are the key characteristics of the PDP?

Open

Anyone in the community - Member or not - can propose a policy. This can be a proposed change to an existing policy or a new one altogether. Anyone can participate from the beginning, during the discussion as well as in the decision-making process.

Transparent

Bottom-up

APNIC publicly documents all policy discussions and decisions to provide complete transparency of the policy development process. These documents, the associated discussion in the mailing list, and decisions are freely available for viewing at any time.

The Policy Development Process is driven by the Internet community - by those who need and use these resources. It is catered to address the needs and requirements of the Asia-Pacific Internet community. APNIC stays neutral in the process.

60

60

61 of 70

APNIC PDP Process and Timelines

61

61

62 of 70

It all starts with a Proposal

  • Who can propose a policy idea?
  • Why would you do it?
  • What is required?
  • Where do you start?

Complete the online form

https://www.apnic.net/community/policy/proposals/submit-a-policy-proposal/

62

62

63 of 70

Policy SIG Mailing list

  • Some people think it’s a great idea
  • Others disagree
  • The author tries to convince or compromise
  • The Chairs monitor the discussions and participate as appropriate

Subscribe to the mailing list

https://mailman.apnic.net/mailman/listinfo/sig-policy

63

63

63

64 of 70

Open Policy Meeting (OPM)

  • Author presents
  • People line up at the microphone
    • Ask questions
    • Express support
    • Explain their concerns
    • Argue and praise
  • Remote participation is available so those not at the meeting in-person can still fully participate

64

64

64

65 of 70

Consensus Decision Making

  • Consensus =
    • “general agreement” taking into consideration comments on the mailing list and at the meeting.
  • Objections
    • Minor Objections:
      • some problems may occur for some members of the community
    • Major Objections:
      • major problems will occur for members of the community
  • Participants should “work together” to resolve objections

65

65

66 of 70

Chairs consider many sources

  • Mailing list discussions
  • Discussions at the SIG meeting
    • Incl. remote participants
  • Show of hands
    • Not a vote, a way of �“broadly gauging opinion”
    • CONFER assists remote participation
      • Require one-off registration
    • The Chair will ask for both

Have your say remotely

https://confer.apnic.net/

66

66

66

67 of 70

After the Open Policy Meeting (OPM)

  • Consensus at the Member Meeting
  • Mailing List Comment Period
  • EC Endorsement
  • Editorial Comment Period
  • Implementation

67

67

67

68 of 70

What’s next?

  • Subscribe to the mailing list
    • sig-policy@apnic.net
  • Review the proposals
    • https://www.apnic.net/community/policy/proposals/
  • Discuss with others
    • Morning and afternoon tea, lunch, dinner
  • Participate in Policy SIG Meeting
    • Check conference program

68

68

68

69 of 70

QUESTIONS?

Sunny Chendi�Senior Regional Advisor

sunny@apnic.net

69

70 of 70

Thanks!

70

blog.apnic.net

apnic.net/social

70

70