Smart Cities and AMRUT Urban Renewal Projects
- Thread starter Ashwin
- Start date
India tops the world in IPv6 deployment, it should now vie for similar edge on IPv6 root server
Last month, along with the Independence day, India also celebrated 25 years of internet and mobile, with a pledge to become atmanirbhar. The digital transformation facilitated by the adoption of next-generation technologies and new Internet (IPv6) offers a low-hanging fruit to achieve this ambition fast.
A number of misconceptions over security properties and privacy features of IPv6—the new generation internet which is solving the problem of IP address shortages of the IPv4 version—exist. This article provides a reality check of IPv6 from the security, reliability and privacy standpoint and touches upon the way forward.
In the last few years, IPv6 momentum in Industry has dramatically increased. These large IPv6 deployments in business have been driven by falling costs, decreasing complexity, improving security and eliminating barriers to innovation in networked information systems. Mobile networks, data centres and leading-edge enterprise networks, for example, have been evolving towards IPv6-compatible networks.
The most well-known benefit that IPv6 offers is the exponentially increased address space, providing many more unique IP addresses than what can be derived through IPv4, and hence, covering all users and devices connected to the internet. The 32-bit IPv4 addressing format enables only 4.3 billion IP addresses across the globe. Operators use measures like NAT (Network Address Translation) and CIDR (Classless Interdomain Routing) to somewhat extend the utility of IPv4 addresses.
However, NAT has its own limitations, and given the rate of internet users growth, 5G, and IoT adoption in the country, NAT is simply not desirable going forward. IPv6, on the other hand, has enormous address space, practically inexhaustible in the foreseeable future. Therefore, it allows simple, seamless, and cost-effective connectivity for service providers, enterprises and end-users.
The 128-bit IPv6 addressing format offers 340 sextillion IP addresses, making it extremely future-proof. But, that’s not all; IPv6 is also considered a protocol of better reliability, security and privacy. Also, IPv4 packets are often blocked by corporate firewalls because they could potentially carry malware. But IPv6 promises better reliability and security as IPSec, a protocol for authenticating and securing all IP data, is built into IPv6 as a default.
However, since the protocol was first specified, several myths have arisen about its properties in the areas of quality of service (QoS), “plug-and-play” features and, particularly, security. Many of these myths have been fuelled by IPv6 opponents or by the those who, ignorant of proper understanding of the features of this technology, may have thought their marketing-heavy statements would slow down the deployment and adoption of IPv6.
Today’s networks, whether they have IPv6 deployed in them or not, are largely IPv6-compatible. All modern operating systems and network devices employ IPv6 dual-stacks, in which IPv6 is turned on by default.
In network security, it is crucial not to underestimate the scale of risks. The most common misconception about IPv6 is that IPv6 is just IPv4 with longer address space. Actually, IPv6 is vastly different from IPv4, often in complex and subtle ways. The IPv6 operating systems create automatically two IPv6 addresses. One IPv6 with randomised MAC address in the suffix to hide the device identity and be used for web surfing so that nobody can identify who is connecting to its web site.
And another IPv6 with real MAC address which is only used for end-to-end encrypted applications. Such services, for the time being, are non-existent but will be available with the next wave of internet innovations. Besides, IPv6 has a privacy protocol to protect end-user privacy. The current internet (v4) lacks effective privacy and effective authentication mechanisms beneath the application layer. IPv6 remedies these shortcomings by having a few integrated options that provide security and privacy services.
IPv6 can run end-to-end encryption. While this technology was retrofitted into IPv4, it remains an optional extra that isn’t universally used. The encryption and integrity-checking used in current VPNs, especially required for work-from-home applications, is a standard feature in IPv6, available for all connections and supported by all compatible devices and systems. Widespread adoption of IPv6 will, therefore, make man-in-the-middle attacks significantly more difficult.
IPv6 also supports more-secure name resolution. The Secure Neighbour Discovery (SEND) protocol is capable of enabling cryptographic confirmation to confirm the identity of the host at the time of the connection. This renders Address Resolution Protocol (ARP) poisoning and other naming-based attacks more difficult. And, while it isn’t a replacement for application or service-layer verification, it still offers an improved level of trust in connections. With IPv4, it is fairly easy for an attacker to redirect traffic between two legitimate hosts and manipulate the conversation or, at least, observe it.
Though IPv4 also offers IPSec support as an optional feature, it is mandatory in IPv6. IPSec consists of a set of cryptographic protocols designed to provide security in data communications. IPSec has some protocols that are part of its suite: AH (Authentication Header) and ESP (Encapsulating Security Payload). The first provides for authentication and data integrity, the second, in addition to these, also for confidentiality.
According to the State of Internet IPv6 Adoption Visualisation published by Akamai, India tops the list of 229 countries with 59.7% IPv6 connections.
In terms of absolute numbers, as per the APNIC IPv6 data dated March 2020, India has the highest number of IPv6 devices, nearly 360 million, almost double that in the US (143 million). This is mainly led by country’s innovative operator Jio, which is poised to emerge as a global technology giant. This is going to grow further with the advent of 5G, adoption of IoT and an increase in the number of smartphones.
Reliance Jio is a 100% IPv6 compliant operator in India, thanks to its digital VoLTE network. However, other operators in the country are also moving to adopt IPv6. Most of our operators are more or less IPv6 compliant in the current scenario. Our operators need to get more IPv6 addresses in advance so that they do not miss out, as happened in the earlier version of internet.
The sustainable development and evolution of internet infrastructure is essential to the global cyberspace and digital economy, and IPv6 root server, which controls and manages the internet, can serve as a great tool. Creating such critical infrastructure at the national level is important. This can serve as a multi-stakeholder platform for diverse and innovative players from across the internet community in the country, academia and user communities to collectively experiment and develop the local routing infrastructure to maintain and operate the new internet.
As a critical internet resource, the IPv6 root server system is pivotal to manage the security and stability of the internet. Historically, there are 13 root server authorities from the IPv4 era with 10 in the US, 2 in EU and 1 in Japan, creating an unequal geographic distribution of critical internet management resource. Now, as we step into the next generation internet (IPv6) era, it offers us an opportunity to manage this critical infrastructure locally and create a more open architecture which welcomes innovation and flexibility.
The following main factors contribute to the adoption of IPv6 and establishing IPv6 Root Server locally:
the need for additional address space for new applications, the emergence of new connected devices which require more addresses and efficient network infrastructure, having a root server will contribute to in-country expertise building on critical information infrastructure as well as promoting ‘a major technological knowledge base within the country’, and having a root server within the country would facilitate surveillance by Indian legal authorities.
www.financialexpress.com
Last month, along with the Independence day, India also celebrated 25 years of internet and mobile, with a pledge to become atmanirbhar. The digital transformation facilitated by the adoption of next-generation technologies and new Internet (IPv6) offers a low-hanging fruit to achieve this ambition fast.
A number of misconceptions over security properties and privacy features of IPv6—the new generation internet which is solving the problem of IP address shortages of the IPv4 version—exist. This article provides a reality check of IPv6 from the security, reliability and privacy standpoint and touches upon the way forward.
In the last few years, IPv6 momentum in Industry has dramatically increased. These large IPv6 deployments in business have been driven by falling costs, decreasing complexity, improving security and eliminating barriers to innovation in networked information systems. Mobile networks, data centres and leading-edge enterprise networks, for example, have been evolving towards IPv6-compatible networks.
The most well-known benefit that IPv6 offers is the exponentially increased address space, providing many more unique IP addresses than what can be derived through IPv4, and hence, covering all users and devices connected to the internet. The 32-bit IPv4 addressing format enables only 4.3 billion IP addresses across the globe. Operators use measures like NAT (Network Address Translation) and CIDR (Classless Interdomain Routing) to somewhat extend the utility of IPv4 addresses.
However, NAT has its own limitations, and given the rate of internet users growth, 5G, and IoT adoption in the country, NAT is simply not desirable going forward. IPv6, on the other hand, has enormous address space, practically inexhaustible in the foreseeable future. Therefore, it allows simple, seamless, and cost-effective connectivity for service providers, enterprises and end-users.
The 128-bit IPv6 addressing format offers 340 sextillion IP addresses, making it extremely future-proof. But, that’s not all; IPv6 is also considered a protocol of better reliability, security and privacy. Also, IPv4 packets are often blocked by corporate firewalls because they could potentially carry malware. But IPv6 promises better reliability and security as IPSec, a protocol for authenticating and securing all IP data, is built into IPv6 as a default.
However, since the protocol was first specified, several myths have arisen about its properties in the areas of quality of service (QoS), “plug-and-play” features and, particularly, security. Many of these myths have been fuelled by IPv6 opponents or by the those who, ignorant of proper understanding of the features of this technology, may have thought their marketing-heavy statements would slow down the deployment and adoption of IPv6.
Today’s networks, whether they have IPv6 deployed in them or not, are largely IPv6-compatible. All modern operating systems and network devices employ IPv6 dual-stacks, in which IPv6 is turned on by default.
In network security, it is crucial not to underestimate the scale of risks. The most common misconception about IPv6 is that IPv6 is just IPv4 with longer address space. Actually, IPv6 is vastly different from IPv4, often in complex and subtle ways. The IPv6 operating systems create automatically two IPv6 addresses. One IPv6 with randomised MAC address in the suffix to hide the device identity and be used for web surfing so that nobody can identify who is connecting to its web site.
And another IPv6 with real MAC address which is only used for end-to-end encrypted applications. Such services, for the time being, are non-existent but will be available with the next wave of internet innovations. Besides, IPv6 has a privacy protocol to protect end-user privacy. The current internet (v4) lacks effective privacy and effective authentication mechanisms beneath the application layer. IPv6 remedies these shortcomings by having a few integrated options that provide security and privacy services.
IPv6 can run end-to-end encryption. While this technology was retrofitted into IPv4, it remains an optional extra that isn’t universally used. The encryption and integrity-checking used in current VPNs, especially required for work-from-home applications, is a standard feature in IPv6, available for all connections and supported by all compatible devices and systems. Widespread adoption of IPv6 will, therefore, make man-in-the-middle attacks significantly more difficult.
IPv6 also supports more-secure name resolution. The Secure Neighbour Discovery (SEND) protocol is capable of enabling cryptographic confirmation to confirm the identity of the host at the time of the connection. This renders Address Resolution Protocol (ARP) poisoning and other naming-based attacks more difficult. And, while it isn’t a replacement for application or service-layer verification, it still offers an improved level of trust in connections. With IPv4, it is fairly easy for an attacker to redirect traffic between two legitimate hosts and manipulate the conversation or, at least, observe it.
Though IPv4 also offers IPSec support as an optional feature, it is mandatory in IPv6. IPSec consists of a set of cryptographic protocols designed to provide security in data communications. IPSec has some protocols that are part of its suite: AH (Authentication Header) and ESP (Encapsulating Security Payload). The first provides for authentication and data integrity, the second, in addition to these, also for confidentiality.
According to the State of Internet IPv6 Adoption Visualisation published by Akamai, India tops the list of 229 countries with 59.7% IPv6 connections.
In terms of absolute numbers, as per the APNIC IPv6 data dated March 2020, India has the highest number of IPv6 devices, nearly 360 million, almost double that in the US (143 million). This is mainly led by country’s innovative operator Jio, which is poised to emerge as a global technology giant. This is going to grow further with the advent of 5G, adoption of IoT and an increase in the number of smartphones.
Reliance Jio is a 100% IPv6 compliant operator in India, thanks to its digital VoLTE network. However, other operators in the country are also moving to adopt IPv6. Most of our operators are more or less IPv6 compliant in the current scenario. Our operators need to get more IPv6 addresses in advance so that they do not miss out, as happened in the earlier version of internet.
The sustainable development and evolution of internet infrastructure is essential to the global cyberspace and digital economy, and IPv6 root server, which controls and manages the internet, can serve as a great tool. Creating such critical infrastructure at the national level is important. This can serve as a multi-stakeholder platform for diverse and innovative players from across the internet community in the country, academia and user communities to collectively experiment and develop the local routing infrastructure to maintain and operate the new internet.
As a critical internet resource, the IPv6 root server system is pivotal to manage the security and stability of the internet. Historically, there are 13 root server authorities from the IPv4 era with 10 in the US, 2 in EU and 1 in Japan, creating an unequal geographic distribution of critical internet management resource. Now, as we step into the next generation internet (IPv6) era, it offers us an opportunity to manage this critical infrastructure locally and create a more open architecture which welcomes innovation and flexibility.
The following main factors contribute to the adoption of IPv6 and establishing IPv6 Root Server locally:
the need for additional address space for new applications, the emergence of new connected devices which require more addresses and efficient network infrastructure, having a root server will contribute to in-country expertise building on critical information infrastructure as well as promoting ‘a major technological knowledge base within the country’, and having a root server within the country would facilitate surveillance by Indian legal authorities.
India tops the world in IPv6 deployment, it should now vie for similar edge on IPv6 root server
Reliance Jio is a 100% IPv6 compliant operator in India, thanks to its digital VoLTE network. However, other operators in the country are also moving to adopt IPv6. Most of our operators are more or less IPv6 compliant in the current scenario. Our operators need to get more IPv6 addresses in...
www.financialexpress.com
Budget to unveil large DFI for infrastructure
A new, large development financial institution (DFI) is being born under the partial ownership of the government and with considerably higher risk-tolerance than banks or even state-run, sector-specific lenders like PFC-REC or IRFC. An announcement in this regard is likely in the Budget FY22.The proposed entity will have the specific mandate to finance large rural infrastructure projects that require long-term finance and could serve as antidote to general investment famine during economic downturns. It will work under an innovative framework, where private corporate funds and even global patient capital will find viability in India’s rural projects. Also, there will be practical solutions to the issue of asset-liability mismatches faced by banks as they lend to long-gestation projects.
According to a senior government functionary, the new entity would be designed to provide structured concessional loans and even grants to capital-intensive rural infrastructure projects. The DFI will be distinctly different from the existing four — Nabard, NHB, Sidbi, and EXIM Bank — as it will provide not just incremental last-mile finance and refinance, but will be the key anchor of the projects being financed.
While the proposed DFI would mobilise resources from assorted sources, including budgetary funds, household savings would be leveraged too. A few groups comprising government officials and representatives from Indian banking sector, global funds and Corporate India have been deliberating on the DFI model over the last several weeks, sources said.
Under the National infrastructure Pipeline (NIP), investments to the tune of Rs 111 lakh crore is envisaged in various infrastructure sub-sectors over the next 5 years, including at least Rs 60-70 lakh crore in debt financing. The National Investment and Infrastructure Fund (NIIF), which is supposed to play a key role in mobilizing the resources for the NIP, has made only modest headway so far. Close to five years after its start, the quasi-sovereign wealth fund is yet to develop into a large enough financing vehicle to be able to meaningfully anchor the government’s ambitious investment plans. NIIF manages assets of $4.3 billion across its three funds.
To catalyse debt funding of infrastructure projects, the Cabinet on Wednesday approved a proposal to infuse Rs 6,000 crore in NIIF’s debt platform, aiming to enable the two NIIF-sponsored incorporated entities to raise Rs 1 lakh crore in debt over five years.
Modi government notifies VGF scheme, to boost India’s infrastructure projects
India’s infra sector to get a boost! The Viability Gap Funding (VGF) scheme has been notified by the Finance Ministry under which infrastructure projects would be selected for financial support. As per the VGF scheme notified by the Finance Ministry, the Empowered Committee (EC) headed by the economic affairs secretary will sanction funding up to an amount of Rs 200 crore, while projects requiring over Rs 200 crore would be approved by the Empowered Committee with Finance Minister’s approval, according to a PTI report. The other members of the Empowered Committee would be CEO of NITI Aayog, expenditure secretary, line ministry’s secretary dealing with the subject as well as joint secretary in the Department of Economic Affairs as member secretary.According to the report, this VGF scheme will be known as the Scheme for Financial Support to PPPs (Public Private Partnerships) in the infrastructure sector. This scheme will be a central sector scheme to be administered by the Finance Ministry. The report further said the VGF scheme shall come into force with immediate effect. Regarding the eligibility of a project, it shall be implemented by a private sector company, the report said. The selection of the private sector company will be done by the government or a statutory entity through an open competitive bidding process, it further stated.
For projects belonging to the social sector, including water supply as well as solid waste management, the VGF amount shall be equivalent to the lowest bid for the grant of capital. This will be subject to a maximum of 30 per cent of the project’s total cost. For projects belonging to all other eligible sectors, the financial support amount of VGF shall be equivalent to the lowest bid for the grant of capital subject to a maximum of 20 per cent of the project’s total cost, the report added.
Modi government notifies VGF scheme, to boost India’s infrastructure projects; Check details
As per the VGF scheme notified by the Finance Ministry, the Empowered Committee (EC) headed by the economic affairs secretary will sanction funding up to an amount of Rs 200 crore.
www.financialexpress.com
Guwahati To Get Piped Cooking Gas by 2021
GUWAHATI: The capital city of Guwahati is slated to get piped gas supply by next year.Through the city gas distribution network being set up by Purba Bharati Gas Private Ltd, a joint venture of three public sector units — Assam Gas Company Ltd (AGCL), Oil India Limited (OIL) and GAIL Gas Ltd, city residents will have the option of piped cooking gas by 2021.
Chairman of Duliajan Numaligarh Pipeline Limited (DNPL), Rupam Goswami, said that work was ongoing to bring the gas line from Numaligarh in Upper Assam to Nagaon.
He said, “The DNPL, which is also a joint venture of OIL, Numaligarh Refinery Limited and Assam Gas Company Limited, is laying down the pipelines to bring the gas from Numaligarh to Nagaon. Subsequently, the operation will move to Cachar through Hojai and Lanka.”
Adding to him, the chairman of Purba Bharati Gas Private Limited, Gokul Swargiyari said that piped gas will be provided in Kamrup Metro and Kamrup.
“We are expecting that in the next nine months, we will able to provide piped gas in Guwahati,” said Swargiyari adding that already 300 gas connections were provided in Silchar.
He informed that in two Kamrup districts, at least 3 lakh connections will be provided.
The Barauni to Guwahati section of the Nation Gas Grid is likely to be completed by next year. Thereafter, eight states of the northeast will be connected by Indradhanush Gas Grid Ltd to the National Gas Grid.
Piped Gas | Guwahati To Get Piped Cooking Gas by 2021
The capital city of Guwahati is slated to get piped gas supply by next year. In two Kamrup districts, 3 lakh connections will be provided
www.time8.in
India's Smart Cities Mission, 2015-2021: A Stocktaking | ORF
The Smart Cities Mission (SCM), launched on 25 June 2015, is a joint effort of the Ministry of Housing and Urban Affairs (MoHUA),
Swachh Bharat Mission-Urban 2.0 and AMRUT 2.0
In a landmark initiative, Prime Minister Shri Narendra Modi will launch Swachh Bharat Mission-Urban 2.0 and Atal Mission for Rejuvenation and Urban Transformation 2.0 at 11 AM on 1st October 2021, at Dr. Ambedkar International Centre, New Delhi.
In line with the vision of the Prime Minister, SBM-U 2.0 and AMRUT 2.0 have been designed to realize the aspiration to make all our cities ‘Garbage Free’ and ‘Water Secure’. These flagship Missions signify a step forward in our march towards effectively addressing the challenges of rapidly urbanizing India and will also help contribute towards achievement of the Sustainable Development Goals 2030.
Union Minister and MoS for Housing & Urban Affairs and Ministers of Urban Development of States & UTs will also be present on the occasion.
About Swachh Bharat Mission-Urban 2.0
SBM-U 2.0 envisions to make all cities ‘Garbage Free’ and ensure grey and black water management in all cities other than those covered under AMRUT, make all urban local bodies as ODF+ and those with a population of less than 1 lakh as ODF++, thereby achieving the vision of safe sanitation in urban areas. The Mission will focus on source segregation of solid waste, utilizing the principles of 3Rs (reduce, reuse, recycle), scientific processing of all types of municipal solid waste and remediation of legacy dumpsites for effective solid waste management. The outlay of SBM-U 2.0 is around ₹1.41 lakh crore.
About AMRUT 2.0
AMRUT 2.0 aims to provide 100% coverage of water supply to all households in around 4,700 urban local bodies by providing about 2.68 crore tap connections and 100% coverage of sewerage and septage in 500 AMRUT cities by providing around 2.64 crore sewer/ septage connections, which will benefit more than 10.5 crore people in urban areas. AMRUT 2.0 will adopt the principles of circular economy and promote conservation and rejuvenation of surface and groundwater bodies. The Mission will promote data led governance in water management and Technology Sub-Mission to leverage latest global technologies and skills. ‘Pey Jal Survekshan’ will be conducted to promote progressive competition among cities. The outlay of AMRUT 2.0 is around ₹2.87 lakh crore.
Impact of SBM-U and AMRUT
SBM-U and AMRUT have contributed significantly to improve urban landscape during the last seven years. The two flagship Missions have augmented the capacity to deliver basic services of water supply and sanitation to the citizens. Swachhta has become a Jan Andolan today. All urban local bodies have been declared Open Defecation Free (ODF) and 70% solid waste is being scientifically processed now. AMRUT has been ensuring water security by adding 1.1 crore household water tap connections and 85 lakh sewer connections, thus benefiting more than 4 crore people.