______________________________________________________________________ DRAFT TRANSCRIPT SIG: IX Date: Thursday 2 March 2006 Time: 4.00pm Presentation: NPIX update Presenter: Gaurab Raj Upadhaya ______________________________________________________________________ CHE-HOO CHENG: Our next speaker is Gaurab. He is going to talk about NPIX update, NPIX in Nepal. GAURAB RAJ UPADHAYA: OK, we are a couple of new - well, for those of you who haven't been to my previous NPIX presentations, we are a Layer 2 access point in Kathmandu. Two locations, one was the old primary location and now we have our own facility. Last year, we had three new companies join, all of them came in with fibreoptics. Whatever. Two of our existing ISPs upgraded to fibre link, dealing with DSL and wireless connections before that. We also moved to a new building and installed a new rack, mainly because pulling that fibre through the - in the place we were earlier, alright, it's like we just moved to our existing building because in the earlier building, we had problems pulling the fibre and getting our own address space and stuff like that. We said that rather than moving in a few years, we'd do it now and so the new fibre is in the new building space. We did training on BGP routing and multihoming. So I'm almost glad to report that we no longer have any static in place finally after two years. But there is some problems. We've got a Looking Glass. You can see our routes at lg.pch.net. We got a grant from the TU Foundation of Sweden. That's to install the i-root-servers.net. I just installed it and got on a plane to come here. I've been told that it's being tested and will get operational maybe some time next week. The Autonomica people can tell you more about it than I can. We've been working with people from the local university. Well, this is funny - I don't have an MRTG graph because I'm not able to access our new transit line from here. We do have it on the server locally but I can't get it to put it in my slide. Then, when we have a Netflow project to give us a better idea of what's happening with traffic flows. In aggregate, we see about 15Mbps of traffic through NPIX in average on the two switches. That is actually 200% increased over the last one year, especially after the two big companies upgraded to fibre from wireless. We saw a huge increase in traffic overnight. There was a Nepali version of Linux released last year and that basically saw a huge amount of traffic, because we had a local mirror of the thing and people were downloading this every day for almost a week. There was a strange amount of high traffic which made a lot of people happy because, for many people, it was the first time they downloaded entire CDs from the Internet in less than half an hour. Routing stats - we've started collecting the stats. It's currently seeing an aggregate of slightly more than a /17, so basically we have a /17 plus a /19 and five /24s. So there is the distribution there of about three /19 and all sorts of things. We're still seeing at least two providers doing longer prefixes than /24s, mainly because of satellite VSats being used. The way it works is they've got a box in another parts of Nepal and the VSats don't connect to anywhere in Kathmandu. They don't announce those couple of /25s in Kathmandu. One guy has a /28 so special cases. This is a roughly 25% increase from the previous count. In six months, we'll have a new /19 and couple of new members. So in last year, in the year 2005, basically, the number of routes grew by 25% All members are now using BGP, no more static routes. And, as I said, we still have one member using a private ASN but that should be temporary because they applied for APNIC membership so we started with private ASN and I am told that, by now, they've got their own AS number from APNIC and so they're over. And this is also a new policy. We said that, for a while, we don't accept connections unless people give an AS number. At the last member meeting, we said we'd give three months' grace and they can come in and get used to using BGP and running the network and we don't charge for people for three months after they first connect. The first three months for private ASNs. We've got our own LAN now. This is probably a major thing. We've got our transit LAN, our own ASN, own space, getting transit and all that. The reason we had to do this was our network was getting shaky because it kept having problems and also one of the necessaries was we had to provide transit to some of the services and instead of asking for transit every few months with a different ISP, we said we'd go and get our own AS transit and put it together. So we got a root server, DNS anycast servers, AS 1 and 2 installed and we'll seen have an NTP server. This is the target for the next six months. We'll migrate MRTG to a better machine and put Netflow on a machine connected to the switch. So almost everything is done. We'll create an archive of the routing table then a big thing is we won't start anything new before we finish all of this. In the last meeting, there was some things about - out of the two locations, one location is at a telco building and access to that is very restricted. So the new members are not there so some of them were saying, "Can we get a second location?" The thought behind this is, though we have people coming in with fibre, it's all overhead fibre, and the chances of vandalism and things like that happening is reasonably higher compared to some other countries so it's actually cheaper for the ISPs to propose a second site than constantly upgrading one site or putting all the eggs in one basket so, though the traffic will be small - all the international bandwidth is pretty expensive. We're talking $2,000 per meg, one way. So, even one meg traffic is pretty significant so we need to put more resources and more money into it. So, if you want to visit us, we have two general meetings a year. You are welcome to come. Thank you. Questions? CHE-HOO CHENG: Any questions? (None) OK. Thank you. APPLAUSE