MENU
iran2-r

Iran: Exporting the Internet (1)

sales-r

Internet Transit Sales: 2005-10

September 18, 2010 Comments (5) Views: 286 Engineering, Internet, Politics, Security

Iran: Exporting the Internet (2)

Tweet about this on TwitterShare on FacebookShare on Google+Share on LinkedInShare on Reddit

iran2-f

Afghans headed to the polls today for parliamentary elections in a tense but hopeful atmosphere. If the Internet has a role to play this year in helping Afghanistan develop a peaceful civil society, it will probably turn on two key developments: cheap GPRS Internet delivered over mobile phones, and strong relationships with neighboring states to provide Internet transit.

In today’s followup to last week’s blog, we present the evidence we see in the global Internet routing tables for a strengthening technical relationship between the Tehran and Kabul governments. In Afghanistan, as in Iraq, Iran now sees an opportunity to export influence by exporting its technological infrastructure.


afghanTelecom_graph.jpg
Take a look at this transit shift plot. It depicts the evolution, over the course of 2010, of the main part of the Afghan government’s Internet connectivity (AS55330, “Government Communications Network / District Communications Network”). This is based on the same dataset that Renesys continuously collects from the global Internet routing tables, in order to advise the world’s Internet service providers about emerging competition in their regional transit markets.

At the start of 2010, if a Londoner visited an Afghan government website, the IP packets would probably have travelled from London to Marseilles on terrestrial fiber, onto a submarine cable like SMW4. They would have come ashore in Pakistan at Karachi. They would have been carried overland through terrestrial fiber and microwave relays to reach Kabul. It’s a simple story, with one path in and one path out.

Adding Uzbek Connectivity
In March 2010, the Afghan government adjusted its visible Internet routing, adding a second Internet provider for redundancy: Intal Telecom, providing connectivity across the Uzbek border, 300km to the north. Now your hypothetical connection to Kabul has a second path it can take: from London to Moscow, then down south to Tashkent (perhaps via Kazakhstan), and across the Uzbek border into Afghanistan. That path might even be a little faster; the Russian and ex-CIS Internet providers take great pride in the capacity and reliability of their Eurasian fiber backbone, and promote it as a more reliable alternative to the submarine cable routes to the south.

So far this looks like a conventional story of transit diversification on the part of the Afghan government, trying to make the national network more reliable and maintain connectivity to the outside world by adding an alternative northern route through the CIS to complement their Pakistan transit.

At this point, however, things take an unexpected turn.

In with Iran
In early April, the Afghan government diversifies yet again, adding a third route through Iran. Now your connection to the Afghan government servers has a third potential path: London to Iran on PCCW’s network, across Iran on the domestic fiber network, and across the Afghan border to Herat. From there, it might go on to Kabul, or these might be Herat networks — they are actually new creations, distinct from the sets of IP address blocks that are historically advertised by the Kabul government.

This is real Iranian transit, via the Iranian state telecommunications provider DCI (ASN 12880), even though the transit routing itself (via Hong Kong’s PCCW, probably coming ashore at Jask) is different and more specialized than the bulk of DCI’s international transit for Iranian domestic traffic. (One wonders: is the exported Iraqi and Afghan transit subject to the same strict Internet censorship imposed on DCI’s domestic customers?)

What it means for Afghanistan, we can only speculate. The western border region where these new networks live has enjoyed significant Iranian investment over the years. The new routes certainly make physical sense, given the existence of Iranian-financed electrical transmission capacity along the Herat highway. The two governments have many common security concerns to manage, obviously, including the massive cross-border drug trade. So it makes sense that Iran might offer to share their Internet pipeline, making it possible for the Afghan government’s western regions to stay connected, build mobile data networks, and so forth, with traffic flowing through Tehran.

Out with Pakistan
Finally, looking once more at the transit shift plot above, you can see that the Afghan government phases out Pakistan connectivity entirely for AS55330 networks in June, leaving only the Uzbek/Russian routes and the Iranian routes in place. Let me say that again: in June 2010 the Afghan government turns off long-established international connectivity through Pakistan, having replaced it with Uzbek connectivity, and having added significant capacity to Iran as well. That seems like a geopolitically strategic realignment, not a minor technical adjustment.
Kurdistan_jim_blog.jpg

So what is Iran up to here?
If you re-read our last blog, you’ll notice a similar pattern. In that case, the same kind of Iranian transit suddenly appeared in the global routing tables (within the same 2-week time period) servicing multiple customers in Iraqi Kurdistan, on the other side of Iran, far to the west. The concurrent timing, and the common physical paths implied by the common IP addressing of all these trans-Iranian routes, suggest that both Iraqi and Afghan customers are benefiting from the same Iranian initiative.

The Internet connectivity outreach that we now see in the global routing tables seems like continuing evidence of Iran’s long-term strategy: aggressively pursuing bilateral infrastructure and investment projects with its neighbors, in ways that will increase Iran’s regional influence after the Americans have moved on.

And who’s Iran’s next customer?
Maybe Pakistan, believe it or not. Iran has expressed a longstanding desire to export electricity and aid to Baluchistan, Pakistan’s restive and energy-starved southern coastal province that has suffered terribly in recent floods. If you’re visiting the coastal port of Gwadar next year, and you get out your Blackberry to check your email, don’t be surprised if your phone connects to a previously unknown Baluchi GPRS provider with cheap Internet transit through Tehran!

5 Responses to Iran: Exporting the Internet (2)

  1. A Blow to Sanctions: Iran Now Powers Regional Internet

    As Iran pursues its nuclear ambitions it destabilizes the entire region and threatens to spread nuclear war technology throughout the middle-east. Just one side-effect of this trend will be much easier access to nuclear material by terrorists and Iran …

  2. Eugene Kogan says:

    From an Iranian standpoint, there are certainly advantages to be gained on the intelligence-gathering front by having more packets traverse their part of the Internet. Likewise, in the tense and complex political environment of the Middle East, it makes sense for Afghanistan to limit its dependence on Pakistan for connectivity. Given the long and tumultuous history between these two nations, it’s not a surprising change.

  3. JM Allen says:

    Your ‘Out with Pakistan’ analysis is incorrect. Nothing political happening in Afghanistan relative to Internet traffic. Simply, a fiber cut between Kabul and Jalalabad on 24 June that cannot be repaired due to the security situation. Consequently, all Internet traffic to Pakistan, AFTEL’s cheapest source of transit, has stopped since that date. Kabul is connected to Mazar e Sharif and to Uzbekistan, so this traffic was shifted North. As the outage continued, another STM-1 was procured from Intal as reflected in your graphic. Just the usual network management ops in a difficult environment…not as interesting, but factual.
    Additionally, due to the incomplete status of the OFC Ring Network, Herat gets transit from Iran, by necessity, nothing else. Kandahar is also isolated and will obtain STM1 transit from Pakistan soon. Watch for the change within 10 days. Transit is procured from Tajikistan as well.
    Outages and repairs of the OFC Ring Network can be tracked to the ups and downs on your transit graph. Normal network rerouting not a political realignment.
    Ed. Note: Your alternative interpretation makes a lot of sense. When we see multiple transit shifts before a phased outage of a single provider, though, it generally implies a planned change (politically or economically motivated — the routing tables don’t say). It’s certainly plausible that in this case, the shift to Uzbek transit simply represents good planning and good luck ahead of the final Pakistan-facing outage in June. We’ll look for the additional transit shifts you predict and report on them in a future blog. Our hat is off to anyone who does Internet engineering in a challenging environment like Afghanistan.

  4. Alien says:

    What JM said its true – its fiber cut in JLD AFTEL is struggling hard to restore with PTCL as well Kandahar link is on its way to connect with PTCL so Mr.James Cowie Please make your story right

  5. JM Allen says:

    The shift to increased Uzbek transit was a necessity not preplanned and/or political as suggested. And definitely not economical since the Ital transit is the most expensive that AFTEL procures.
    And AFTEL is negotiating the security situation to resolve the fiber cut, not ignore it as part of a suggested, political agenda. Also, a separate fiber route and expanded microwave path to Pakistan via Jalalabad are being implemented.
    Additionally, alternative routes in Pakistan and beyond have been identified with significant reductions in IP transit anticipated. AFTEL’s transit will further diversify to and through Pakistan to potentially reduce the retail cost of Internet in Afghanistan by 75% over time. Standby for future, major shifts in traffic due to new routes and economics…only.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>