May 2010 - address-policy-wg - mailman.ripe.net

2010-03 New Policy Proposal (Global Policy State in RIPE PDP)
by Filiz Yilmaz 14 Jul '10

14 Jul '10

PDP Number: 2010-03 Global Policy State in RIPE PDP Dear Colleagues A new RIPE Policy Proposal has been made and is now available for discussion. You can find the full proposal at: http://www.ripe.net/ripe/policies/proposals/2010-03.html We encourage you to review this proposal and send your comments to <address-policy-wg(a)ripe.net> before 18 May 2010. Regards Filiz Yilmaz Policy Development Manager RIPE NCC

5 8

2010-02 New Policy Proposal (Allocations from the last /8)
by Ingrid Wijte 16 Jun '10

16 Jun '10

PDP Number: 2010-02 Allocations from the last /8 Dear Colleagues A new RIPE Policy Proposal has been made and is now available for discussion. You can find the full proposal at: http://www.ripe.net/ripe/policies/proposals/2010-02.html We encourage you to review this proposal and send your comments to <address-policy-wg(a)ripe.net> before 11 May 2010. Regards Ingrid Wijte Policy Development Officer RIPE NCC

6 6

Registry - not a policy proposal
by Rob Blokzijl 03 Jun '10

03 Jun '10

[apologies for duplicate mails] Dear RIPE, soon there will be no more IPv4. However, we still have a registry of these addresses. Daniel Karrenberg and myself have produced a document (attached to this mail) which describes what we think the role of this registry should be after the runout of the unallocated IPv4 address space. We will present this document in the Address Policy WG, and would like to invite you to let us know your thoughts. The place for further discussion will be <address-policy-wg(a)ripe.net>. Thank you for your attention, Rob Blokzijl

10 10

Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Sander Steffann 11 May '10

11 May '10

Hello working group, A document was distributed today at the RIPE 60 meeting in Prague. The document highlights the differences between IPv4 PI and IPv6 PI and the trends that have been observed. The document provides food for thought, and there will be a discussion in the second slot (11:00 - 12:30) of the Address Policy Working Group session tomorrow. Facilities for remote participation are available at http://www.ripe.net/ripe/meetings/ripe-60/index.php?home=remote. This discussion will of course be followed up on this mailing list. Sander Steffann APWG co-chair

11 29

New IPv4 blocks allocated to RIPE NCC
by Andrea Cima 11 May '10

11 May '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [Apologies for duplicate mails] Dear Colleagues, The RIPE NCC received the IPv4 address ranges 31/8 and 176/8 from the IANA in May 2010. We will begin allocating from these ranges in the near future. The minimum allocation size for these two /8s has been set at /21. You may wish to adjust any filters you have in place accordingly. More information on the IP space administered by the RIPE NCC can be found on our web site at: <https://www.ripe.net/ripe/docs/ripe-ncc-managed-address-space.html> Additionally, please note that three "pilot" prefixes will be announced from each /8. The prefixes are: 31.0.0.0/16 31.1.0.0/21 31.1.24.0/24 176.0.0.0/16 176.1.0.0/21 176.1.24.0/24 They all originate in AS12654. More information on this "pilot" activity is available in the draft document "De-Bogonising New Address Blocks" which can be found at: <http://www.ripe.net/ripe/docs/ripe-351.html> Kind regards, Andrea Cima Registration Services Manager RIPE NCC -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkvpJ1QACgkQXOgsmPkFrjMChQCgxw7pxH6OgI0nQuwdhdOIWRp7 ig4An0QaM80yGTPN603EvW7dXkrUNQ/g =4M3X -----END PGP SIGNATURE-----

1 0

AW: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Marcus.Gerdon 06 May '10

06 May '10

Richard, > A /64 in IPv6 is what a single address is for IPv4. I don't agree on this when talking about connecting servers. Place a server in a segment and assign it's interface an IPv4 address 192.168.0.1/24 and an IPv6 address FC00::1/64. Will you (be able to) address another server in the same segment using addresses within those prefixes? Can you get that server connected in IPv4 deploying 192.168.0.0/32 onto its interface? The relevant part here what I meant by 'single address' is the number of addresses configured onto those customers server. Indepent of doing v4 oder v6 you'll configured 'a single address' at the server to get it connected. I agree with you when talking i.e. about DSL lines. Instead of the typical /32 assigned for IPv4 you'll put a /64 on the line. But that's another topic talking about lines instead of servers. As said this were quickly noted items that came to my mind. For the last case of a /64 segment dedicated to one customer I'm not sure but might agree with you that as this would be the equivalent to the DSL line's example. As long as you don't route another /64 (or whatever size) onto customer equipment addressed in this segment. But it's definitely hard to tell where to draw the line. regards, Marcus ----------------------------------------------------------------------------------------- Engineering IP Services Versatel West GmbH Unterste-Wilms-Strasse 29 D-44143 Dortmund Fon: +49-(0)231-399-4486 | Fax: +49-(0)231-399-4491 marcus.gerdon(a)versatel.de | www.versatel.de Sitz der Gesellschaft: Dortmund | Registergericht: Dortmund HRB 21738 Geschäftsführer: Dr. Hai Cheng, Joachim Bellinghoven ----------------------------------------------------------------------------------------- AS8881 / AS8638 / AS13270 / AS29610 | MG3031-RIPE ----------------------------------------------------------------------------------------- > -----Ursprüngliche Nachricht----- > Von: Richard Hartmann [mailto:richih.mailinglist@gmail.com] > Gesendet: Donnerstag, 6. Mai 2010 10:50 > An: Marcus.Gerdon > Cc: address-policy-wg(a)ripe.net > Betreff: Re: [address-policy-wg] Discrepancy Between RIPE > Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > > On Thu, May 6, 2010 at 08:42, Marcus.Gerdon > <Marcus.Gerdon(a)versatel.de> wrote: > > > - single address for connecting a customers server > > => PI > > - contained /64 (!) segment (i.e. dedicated vlan for a > customers rack) > > => I think somewhat of a border case, but tend to *no* PI > > A /64 in IPv6 is what a single address is for IPv4. > This is obviously a _very_ reduced view for the sake of my > argument, but > I think doing this is valid, in this case. > > > Richard >

4 3

RE: 2010-01 New Policy Proposal (Temporary Internet Number Assignment Policies)
by Jamie Stallwood 06 May '10

06 May '10

Hi RIPE, Today's discussion was interesting and concern was raised about commercials being able to get all or most of the address space set aside in the proposal, and about unfair commercial advantage. My thoughts as a paragraph, which I know is rushed and woolly and only intended as a discussion point: 3.5 Use by Commercial Organizations Temporary address space will not be assigned by the RIPE NCC to any commercial organization where such an allocation: * Is not shown to be for a research, development or testing project relevant to an operational business of that organization * Does not seek to provide a "benefit", e.g. through published work in academic or industrial journals, or * Is unable to demonstrate a fair inclusion policy for other commercial organizations to contribute to, or benefit from, the project. [Address allocation is at the RIPE NCCs discretion, but subject to the RIPE NCC Conflict Arbitration Procedure.] Kind regards Jamie Stallwood -- Jamie Stallwood Security Specialist Imerja Limited Tel: 07795 840385 jamie.stallwood(a)imerja.com -- Imerja Limited Tel: 0870 8611488 | Fax: 0870 8611489 | 24x7 ISOC: 0870 8611490 | Web: www.imerja.com Registered Office: Paragon House, Paragon Business Park, Chorley New Road, Horwich, Bolton BL6 6HG Registered in England and Wales No. 5180119 VAT Registered No. 845 0647 22 ISO Registered Firm No. GB2001527 This email is confidential and intended solely for the person or organisation to which it is addressed. It may contain privileged and confidential information. If you are not the intended recipient(s) you should not use, copy, distribute or take any action or reliance on it, since to do so is strictly prohibited and may be unlawful. If you have received this transmission in error please notify the sender immediately by email reply and delete it from your system. E-mail messages are not secure and attachments could contain software viruses which may damage your system. Whilst every reasonable precaution has been taken to minimise this risk, Imerja Limited cannot accept any liability for any damage sustained as a result of these factors. You are advised to carry out your own virus checks before opening any attachment. Any views or opinions expressed in this e-mail are solely those of the author and do not represent those of Imerja Limited unless otherwise stated.

3 4

FW: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Stream Service 06 May '10

06 May '10

-----Original Message----- From: Mark Scholten [mailto:mark@streamservice.nl] Sent: Thursday, May 06, 2010 11:21 AM To: 'Marcus.Gerdon'; 'address-policy-wg(a)ripe.net' Subject: RE: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > -----Original Message----- > From: address-policy-wg-admin(a)ripe.net [mailto:address-policy-wg- > admin(a)ripe.net] On Behalf Of Marcus.Gerdon > Sent: Thursday, May 06, 2010 8:43 AM > To: address-policy-wg(a)ripe.net > Subject: AW: [address-policy-wg] Discrepancy Between RIPE Policies on > IPv4 and IPv6 Provider Independent (PI) Address Space > > In the scenario described here I'd tend to think the colocation/housing > provider imho is going for ISP bussiness. > > Handing out chunks of address space to customers, which are supposedly > going to be single-homed, documenting them etc. sounds like LIR > business. Multi-homing these chunks independent of wether they are PI > or PA gets to the 'sub-allocation' topic - which isn't supposed to be > done using parts of a PI space *assigned* to another party. Who's going > to handle abuse and what ever else might come from the address usage? > > My opinion I'm led to by this scenario is that there's someone who > wants to circumvent the administrative tasks and save a few $$$ by > doing ISP/LIR bussiness within PI space. > > Accordingly I think the policy should be kept at (noted at a quick) > > - single address for connecting a customers server > => PI > - prefix routed onto customers server > => *no* PI - go for LIR > - prefix/range further distributed by customer himself > => *no* PI - go for LIR > - contained /64 (!) segment (i.e. dedicated vlan for a customers rack) > => I think somewhat of a border case, but tend to *no* PI > > Surely everyone wanting to can become a LIR, and everyone wanting to > hand out chunks of address space to other parties is able to request an > allocation, or did I miss something? > > @Mark: > >>PA IPv6 address space is currently not available for us > Why's that? Sorry for asking a possibly obvisous question, but going > over the PA policies now I'm simply to lazy. :) Becoming a LIR is from a business economics view not good for us and the network we use doesn't offer IPv6 PA, so the only option left without moving to another network is to use IPv6 PI. But if we are required to be a LIR we will also require more IPv4 IP space so we have enough for the future. Is it a target by preventing us to use IPv6 PI to use the last IPv4 IPs as fast as possible? We currently not even use a /22 IPv4 space, but when we need to become a LIR we will look for ways to get more IPv4 space. Regards, Mark > > I can remember that there's been a discussion quite some time ago where > someone stated he's not able/allowed the LIR contracts with RIPE due to > regulatory/legal issue or something like that. In case something like > this is the underlying reason why PI is used for ISP/LIR bussiness then > imho RIPE/NCC should look into solving this 'organizational' problem > directly instead of bending policies around making PI into PA lite. > > Just my 2c. > > regards, > > Marcus > > ----------------------------------------------------------------------- > ------------------ > Engineering IP Services > > Versatel West GmbH > Unterste-Wilms-Strasse 29 > D-44143 Dortmund > > Fon: +49-(0)231-399-4486 | Fax: +49-(0)231-399-4491 > marcus.gerdon(a)versatel.de | www.versatel.de > > Sitz der Gesellschaft: Dortmund | Registergericht: Dortmund HRB 21738 > Geschäftsführer: Dr. Hai Cheng, Joachim Bellinghoven > ----------------------------------------------------------------------- > ------------------ > AS8881 / AS8638 / AS13270 / AS29610 | MG3031-RIPE > ----------------------------------------------------------------------- > ------------------ > > > > -----Ursprüngliche Nachricht----- > > Von: address-policy-wg-admin(a)ripe.net > > [mailto:address-policy-wg-admin@ripe.net] Im Auftrag von > > michael.dillon(a)bt.com > > Gesendet: Mittwoch, 5. Mai 2010 14:47 > > An: address-policy-wg(a)ripe.net > > Betreff: RE: [address-policy-wg] Discrepancy Between RIPE > > Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > > > > > > > - With IPv6 we would like to offer a client (collocation) at > > > least a /112 (with PI this isn't allowed if I'm correctly informed) > > > > This points out a material difference between IPv6 and IPv4. > > > > IPv6 is classful. Normally, ISPs get a /32 class allocation and > > give their customers /48 class assignments. Currently the PI policy > > comes from wanting to allow organizations to get a /48 class > > assignment from RIPE directly. But if the organization is involved > > in the hosting business, it is conceivable that customers will > > expect to receive a /48 class block from the data centre operator. > > > > Forget whether this is allowed or not because that is irrelevant. > > The point is that in the IPv6 world there is the expectation that > > no network will ever get less than a /64. In a data centre > environment > > one would expect that people renting a server or even a rack, would > > be satisfied with a /64. But people renting a room, or a row of > racks, > > might justifiably demand a /48 for their own internal subnetting and > > routing, even if much of it happens on virtual routers and switches. > > With the increasing number of cores per chip, even an organization > > renting a full rack might need more than a /64 because they need > > to have a network hierarchy within their rack. > > > > The problem is that /48 class blocks can't be stretched. In IPv4, > > there are no classes and everyone allocates according to strict needs > > now and in the very near future. But IPv6 has classes and allocates > > so that 99% of allocations can be permanent and never have to be > > expanded. > > > > We would not want organizations asking for a /40 PI allocation this > > year, then returning next year for another /40, and the year > > after that. > > > > The only way out that I can see is to treat a data centre like an ISP > > and offer organizations one /32 for each data centre that > > they operate. > > This would not apply to WAN operators since they can ask RIPE > > for a /30 > > or a /28 to cover all of their WAN and all data centres, then > allocate > > internally at whatever bit boundary is appropriate. > > > > One thing that RIPE should never accept is any plan that assigns less > > than > > /64 to a network. If such a plan is submitted, it should be > > returned and > > the applicant should be requested to expand any longer prefixes to a > > full > > /64, then resubmit. In other words, if you ask for too few addresses, > > RIPE > > should deny the request, because it is not in line with IPv6 > > architecture. > > > > > > --Michael Dillon > > > >

1 0

AW: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Marcus.Gerdon 06 May '10

06 May '10

In the scenario described here I'd tend to think the colocation/housing provider imho is going for ISP bussiness. Handing out chunks of address space to customers, which are supposedly going to be single-homed, documenting them etc. sounds like LIR business. Multi-homing these chunks independent of wether they are PI or PA gets to the 'sub-allocation' topic - which isn't supposed to be done using parts of a PI space *assigned* to another party. Who's going to handle abuse and what ever else might come from the address usage? My opinion I'm led to by this scenario is that there's someone who wants to circumvent the administrative tasks and save a few $$$ by doing ISP/LIR bussiness within PI space. Accordingly I think the policy should be kept at (noted at a quick) - single address for connecting a customers server => PI - prefix routed onto customers server => *no* PI - go for LIR - prefix/range further distributed by customer himself => *no* PI - go for LIR - contained /64 (!) segment (i.e. dedicated vlan for a customers rack) => I think somewhat of a border case, but tend to *no* PI Surely everyone wanting to can become a LIR, and everyone wanting to hand out chunks of address space to other parties is able to request an allocation, or did I miss something? @Mark: >>PA IPv6 address space is currently not available for us Why's that? Sorry for asking a possibly obvisous question, but going over the PA policies now I'm simply to lazy. :) I can remember that there's been a discussion quite some time ago where someone stated he's not able/allowed the LIR contracts with RIPE due to regulatory/legal issue or something like that. In case something like this is the underlying reason why PI is used for ISP/LIR bussiness then imho RIPE/NCC should look into solving this 'organizational' problem directly instead of bending policies around making PI into PA lite. Just my 2c. regards, Marcus ----------------------------------------------------------------------------------------- Engineering IP Services Versatel West GmbH Unterste-Wilms-Strasse 29 D-44143 Dortmund Fon: +49-(0)231-399-4486 | Fax: +49-(0)231-399-4491 marcus.gerdon(a)versatel.de | www.versatel.de Sitz der Gesellschaft: Dortmund | Registergericht: Dortmund HRB 21738 Geschäftsführer: Dr. Hai Cheng, Joachim Bellinghoven ----------------------------------------------------------------------------------------- AS8881 / AS8638 / AS13270 / AS29610 | MG3031-RIPE ----------------------------------------------------------------------------------------- > -----Ursprüngliche Nachricht----- > Von: address-policy-wg-admin(a)ripe.net > [mailto:address-policy-wg-admin@ripe.net] Im Auftrag von > michael.dillon(a)bt.com > Gesendet: Mittwoch, 5. Mai 2010 14:47 > An: address-policy-wg(a)ripe.net > Betreff: RE: [address-policy-wg] Discrepancy Between RIPE > Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > > > > - With IPv6 we would like to offer a client (collocation) at > > least a /112 (with PI this isn't allowed if I'm correctly informed) > > This points out a material difference between IPv6 and IPv4. > > IPv6 is classful. Normally, ISPs get a /32 class allocation and > give their customers /48 class assignments. Currently the PI policy > comes from wanting to allow organizations to get a /48 class > assignment from RIPE directly. But if the organization is involved > in the hosting business, it is conceivable that customers will > expect to receive a /48 class block from the data centre operator. > > Forget whether this is allowed or not because that is irrelevant. > The point is that in the IPv6 world there is the expectation that > no network will ever get less than a /64. In a data centre environment > one would expect that people renting a server or even a rack, would > be satisfied with a /64. But people renting a room, or a row of racks, > might justifiably demand a /48 for their own internal subnetting and > routing, even if much of it happens on virtual routers and switches. > With the increasing number of cores per chip, even an organization > renting a full rack might need more than a /64 because they need > to have a network hierarchy within their rack. > > The problem is that /48 class blocks can't be stretched. In IPv4, > there are no classes and everyone allocates according to strict needs > now and in the very near future. But IPv6 has classes and allocates > so that 99% of allocations can be permanent and never have to be > expanded. > > We would not want organizations asking for a /40 PI allocation this > year, then returning next year for another /40, and the year > after that. > > The only way out that I can see is to treat a data centre like an ISP > and offer organizations one /32 for each data centre that > they operate. > This would not apply to WAN operators since they can ask RIPE > for a /30 > or a /28 to cover all of their WAN and all data centres, then allocate > internally at whatever bit boundary is appropriate. > > One thing that RIPE should never accept is any plan that assigns less > than > /64 to a network. If such a plan is submitted, it should be > returned and > the applicant should be requested to expand any longer prefixes to a > full > /64, then resubmit. In other words, if you ask for too few addresses, > RIPE > should deny the request, because it is not in line with IPv6 > architecture. > > > --Michael Dillon > >

3 2

Re: [address-policy-wg] Registry - not a policy proposal
by Toni Stoev 05 May '10

05 May '10

On Wednesday 05 May 2010 at 11:15:36 Rob Blokzijl sent: > > [apologies for duplicate mails] > > Dear RIPE, > > soon there will be no more IPv4. However, we still have a registry > of these addresses. Perhaps you mean "no more unallocated IPv4 addresses". > > Daniel Karrenberg and myself have produced a document (attached to > this mail) which describes what we think the role of this registry > should be after the runout of the unallocated IPv4 address space. > > We will present this document in the Address Policy WG, and would > like to invite you to let us know your thoughts. The place for > further discussion will be <address-policy-wg(a)ripe.net>. > > Thank you for your attention, > > Rob Blokzijl

1 0