Hi Robert, Please see my comments inline. This time am wearing my KIXP CTO hat on :) robert yawe wrote:
Hi,
The GIXP is essential because KIXP is in principle a private entity of which membership is by invitation.
The above is not accurate - in anycase KIXP has tried to upload its license requirement to connect only those operators licensed by CCK to be Internet or Data service providers. Something in my humble opinion that needs a review to allow any organization with content to be able to connect i.e content providers etc. GIXP is essential for security and
also to improve on the governments internal traffic which they would not enjoy if using the KIXP which does not accomodate all providers.
To start with KIXP provides a Layer 2 service like most other IXPs in the world. Security in terms of access to the layer 2 infrastructure is provided at all times. However our inability to connect everyone is a limitation of the existing license requirement and not that of KIXP.
KIXP mainly provides mail routing and the links from the various ISPs to the exchange point vary thus causing regular congestion which then falls you back to routing through the internet.
The specifics are very important here - we do not provide mail routing. We provide a layer 2 infrastructure for interconnection. That means ISPs come to KIXP instead of having direct links to every other ISP, but they all have a single link to a single location. They use BGP protocol to announce their own prefixes to all those at KIXP and receive the prefixes (IP address blocks) of everyone else announcing at the facility. IP addresses can originate and receive all known and unknown internet services/protocols. Thus with KIXP providing a Switch (layer 2 service) we have no ability to filter based on protocol or other since its a layer 2 service. Therefore protocol policies is not possible in a layer 2 service. If KIXP wants to disprove me
let them give us access to the traffic graphs for the exchange point, a summary of the connected providers, protocols allowed and size of links to the exchange point.
Please check on the kixp website for a listing of all this - its public information www.kixp.or.ke under membership - we provide the data available i.e Name, Status, ASN, EtherIP allocated to them at KIXP and who their infrastructure provider is. The aggregate traffic statistic is also available i have attached the current weeks aggregate traffic and past 12 months as well. For obvious reasons, i.e i doubt if any of our members would appreciate us disclosing the capacity of their link to the KIXP is or what the composition of their traffic is to a public mailing list. Am sure you would equally not be pleased if your provider publicly published your traffic composition on any public website. I once again emphasize there's no protocol policing at the KIXP we provide a layer 2 service and not a layer 3 service. We also dont publish how much capacity they have but we do monitor individually.
The IXP for Kenya needs to be owned and run by CCK and preferably placed in Mombasa at the entry/exit point of the fibre cables so as to reduce the inefficiencies of routing local traffic through expensive international gateways.
If you carefully read my previous post, you will understand what a market boundary is - you will further see why its economically viable to have an IXP in Nairobi and another in Mombasa and any other market boundary that can exist in the country/region. As to who runs the IXP thats an open discussion and i placed some discussion points in the previous email (commercial or non-profit). For instance, KIXP was formed by the ISPs and as such is run by the ISP association. If the KRA and others peer at the KIXP which is valuable to them. One important aspect to have in mind is that for anyone to peer at a facility, trust is a key concern - do your members trust you enough that you are not going to be biased with the way you treat them. In any case do they have a say on how the facility is run?. Please remember that the ISP business is quite competitive hence trust issues are rife and cannot be ignored.
Carry out a trace between an ISP on SeaCom and another on TEAMS to see the routing that forces many of us to host overseas.
If you have bandwidth limitations between one ISP to another not going via KIXP, please check with that ISP, they have what it takes to be at the KIXP (license and access to infrastructure) to have good speeds available. For your information we monitor members links and advise them when they fail, run close to the allowed threshold etc. Here's my traceroute using Instaconnect/Igowireless to Jambo.co.ke which is Jambonet. My ISP is on Seacom and i would presume TKL is on TEAMS. The trace is via KIXP and the latencies are quite acceptable to me Last login: Wed Jan 6 11:19:49 on ttys010 Mich:~ michuki$ traceroute -n www.jambo.co.ke traceroute to www.jambo.co.ke (212.49.70.11), 64 hops max, 40 byte packets 1 10.0.1.1 1.825 ms 1.670 ms 9.838 ms 2 41.190.232.233 52.833 ms 84.094 ms 63.567 ms 3 41.190.235.254 76.717 ms 59.312 ms 141.762 ms 4 198.32.143.79 109.559 ms * 97.589 ms 5 10.10.0.8 135.833 ms 44.089 ms 89.653 ms 6 212.49.70.11 109.201 ms !<10> 101.042 ms !<10> 111.535 ms !<10> Mich:~ michuki$ I have similar traces to other networks which i can share - by the way i live in a place called Kinoo on Naivasha Road, just before Kikuyu on wimax solution. It works just fine for me. If you wish you can ask folks on skunkworks to do their traces and submit their results, they will be alot similar. The bottom line is, if an ISP has a limited capacity via KIXP you need to push them to upgrade it. In some instances an ISP can fail to announce all its prefixes at KIXP - we have no way of enforcing this because its likely their peering policy or other decision. As such, the impact of this will be felt across the entire network. Hope that helps. Regards, Michuki.
