BKNIX Peering Forum: Quick introduction of HKIX
1 like541 views
The Hong Kong Internet Exchange (HKIX), established in 1995, serves as a key layer-2 Internet exchange point in Hong Kong, facilitating traffic exchange between various autonomous systems while promoting intra-Asia connectivity. Owned by the Hong Kong Internet Exchange Limited, HKIX offers services such as multilateral peering, colocation, and has transitioned to a simple port charge model for sustainability. With over 260 connected autonomous systems and significant traffic growth, HKIX aims to maintain Hong Kong's status as a vital internet hub in Asia.
BKNIX Peering Forum: Quick introduction of HKIX
- 1. Quick Introduction of HKIX Che-Hoo Cheng Development Director APNIC
- 2. What is HKIX? • Established in Apr 1995, Hong Kong Internet eXchange (HKIX) is the main layer-2 Internet eXchange Point (IXP) in Hong Kong where various autonomous systems interconnect with one another and exchange traffic • HKIX is now owned and operated by the Hong Kong Internet eXchange Limited (a wholly-owned subsidiary of The Chinese University of Hong Kong Foundation Limited) in collaboration with Information Technology Services Centre of The Chinese University of Hong Kong • HKIX serves both commercial networks and R&E networks • The original goal is to keep intra-Hong Kong traffic within Hong Kong
- 3. Help Keep Intra-Asia Traffic within Asia • HKIX has almost all the Hong Kong networks • So, HKIX can attract participants from Mainland China, Taiwan, Korea, Japan, Singapore, Malaysia, Thailand, Indonesia, Philippines, Vietnam, Cambodia, India and other Asian countries • HKIX now has more non-HK routes than HK routes • HKIX does help keep intra-Asia traffic within Asia • In terms of network latency, Hong Kong is a good central location in Asia • HKIX does help HK maintain as one of the Internet hubs in Asia • HKIX supports both domestic and international traffic
- 4. HKIX Services • HKIX Ports (with MLPA Peering Service) – GE / 10GE / 100GE Ports • Colocation Service (limited offer) – Limited to strategic partners only (e.g. critical Internet infrastructure such as Root/TLD DNS Servers) • SpeedTest Service for OFCA – speedtest.ofca.gov.hk 4
- 5. Charging Model • An evolution from free-of-charge model adopted at the very beginning, to penalty-based charging model based on traffic volume for curbing abuse, to now simple port charge model for fairness and sustainability • HKIX has started simple port charge model since 01 Jan 2013 • Not target for profit – the Hong Kong Internet eXchange Ltd (100% owned by CUHK) to sign agreement with participants – Target for long-term sustainability 5
- 6. 6
- 7. HKIX Model — MLPA over Layer 2 + BLPA 7 ISP DISP A ISP B ISP C Routes of ISP A Routes of All ISPs in HKIX Routes of ISP B Routes of ISP C Routes of ISP D Routes of All ISPs in HKIX Routes of All ISPs in HKIX Routes of All ISPs in HKIX MLPA Route Servers Routes of All ISPs in HKIX Routes from All ISPs Switched Ethernet • MLPA traffic exchanged directly over layer 2 without going through MLPA Route Server • BLPA over layer 2 without involvement of MLPA Route Server • Supports both IPv4 and IPv6 over the same layer 2 infrastructure
- 8. Current HKIX Dual-Core Two-Tier Spine-and-Leaf Architecture (2014-) 8This document is uncontrolled when HKIX1 Core Site @CUHK HKIX1b Core Site @CUHK Core Switch @HKIX1 Core Switch @HKIX1b Access Switch(es) @HKIX2 Access Switches @HKIX1 Access Switches @HKIX1b Access Switch @HKIX-R&E ------(<2km)------ n x 100GE/10GE Inter-Switch Links n x 100GE/10GE Inter-Switch Links ISP 1 ISP 2 ISP 3 ISP 4 ISP 5 ISP 6 ISP 7 Core Switch @HKIX1 Core Switch @HKIX1b Access Switch(es) @HKIXm Access Switch(es) @HKIXn 100GE/10GE/GE Links 100GE/10GE/GE Links
- 9. 9 This document is uncontrolled when printed. Before use, check the APNIC electronic master document to verify that this is the current version.
- 10. Setting up Multiple HKIX Satellite Sites • Allow participants to connect to HKIX more easily at lower cost from those satellite sites in Hong Kong • Open to commercial data centres in HK which fulfil basic requirements so as to maintain neutrality which is the key success factor of HKIX • Intend to create win-win situation with satellite site collaborators • 4 Satellite Sites as of today: • HKIX1 and HKIX1b (the two HKIX core sites located within CUHK Campus) will continue to serve participants directly 10
- 11. HKIX Today • Supports both MLPA (Multilateral Peering) and BLPA (Bilateral Peering) over layer 2 • Supports IPv4/IPv6 dual-stack • More and more non-HK participants • 260+ autonomous systems connected • 490+ connections in total – 9 100GE, 280+ 10GE & 200+ GE • 780+Gbps (5-min) total traffic at peak • Annual Traffic Growth = 30+% 11This document is uncontrolled when
- 12. Planned Work in 2017-18 • Improving Stability – Better Control of Proxy ARP – More L2 ACL on HKIX peering LAN • Improving Services – Set up Satellite Sites in multiple commercial data centres – Set up portal for HKIX participants – Improve after-hour support for 24 x 7 NOC – Introduce advanced Route Server functions • Improving Security – ISO27001 – Better support for DDoS Mitigation 12
- 13. Why HKIX is successful • Neutral – Treat all partners equal, big or small – Neutral among ISPs / telcos / local loop providers / data centres / content providers / cloud services providers • Trustable – Fair and consistent – Respect business secrets of every partner / participant • Not for Profit • HKIX started very early, well before incumbent telcos started to do ISP business 13
- 14. Thank You 14