Hi Aleksi, That one strikes me as well. I don't know how often people arguing about ASN stockpiling really apply for ASN's but my experience is that it takes quite a lot of explanation even to get a second ASN for the same entity. But maybe I am missing something here and the "non multihoming" rule means the NCC will not check anything at all in the future and just give away ASN's to anyone asking for them, no matter how many? On Mon, 19 Jan 2015, Aleksi Suhonen wrote:
Hi,
There was a small ruckus on this mailing list about the 1000 ASN limit during the holidays. The whole disagreement is centred around the fact that ASNs are free now. I've read a lot of messages that seem to suggest that there should be some charge related to them that prevents amassing them in the billions. I sort of agree with that, but...
Is there someone in this community that feels they should be completely free, no matter how many you have?
I'd like to offer some more food for thought. These are not realistic suggestions, but I hope they will close the gap between the two debating sides:
How many ASNs can a LIR get using one email or one click on the RIPE portal? My understanding is that even after 2014-03 is implemented, the answer will be one(1).
After that email/click, the LIR will go through the Process. I don't think any amount of policy simplification will reduce the work required per Process Instance at both the LIR and the RIR below two minutes. In the crypto(slash)security community this is called the proof-of-work system.
So, for a thousand ASNs this would mean about 33 hours. As we want to turn that into money, working at ten Euros per hour the cost would be 330 Euros. You can twist the numbers every which way, but it's hard to twist them so far that the result would be much smaller than Nick's example of setting up another company for 10 Euros (+work.)
If we want to make sure that a LIR doesn't automate their email responses to the Process, we can include another random proof-of-work such as "what is the sum of the digits in today's date?", "how much is this ticket number divided by the number of ASNs you already have?" or "when do the cows come home to roost?" Or just a plain old CAPTCHA.
Someone suggested that if the ASNs were free and someone got four billion of them, we can fix that post-fact by raising the ASN fee above zero. The same person, in the same sentence, also hinted that this special someone would be based at some tax haven sort of place, where exacting this fee won't really be possible, should the someone refuse to pay the new fee.
The resulting reclamation process would leave us without ASNs for a couple of years. Then again, according to my above thesis of ASN acquisition speed, it would take thousands of years for the bad guy to finish all the Processes to get all the ASNs in the first place.
There, a couple of cents worth...
-- Aleksi Suhonen / Let bogons be bogons.
Best Regards, Daniel Stolpe _________________________________________________________________________________ Daniel Stolpe Tel: 08 - 688 11 81 stolpe@resilans.se Resilans AB Fax: 08 - 55 00 21 63 http://www.resilans.se/ Box 45 094 556741-1193 104 30 Stockholm