- db-wg - mailman.ripe.net

RIPE whois server
by Marten Terpstra 16 Jun '93

16 Jun '93

Dear people, I am currently working on a new whois server and update procedure and would like to know if there are any additional features you would like to see in the server (I'll leave the update procedure for now, still too early to talk about features). I have rewritten de whois server and the index program in Perl, and have a prototype running (not the production server). I have made the following changes: - database objects are *completely* configurable from a configuration file - this means the indexer follows this file to look for keys - the server follows this file for recursive lookups - multiple databases can be served, all seperately indexed, and kept in seperate files (with the same object structure though) - databases can be indexed at different times - all configurable from config file. - additional functionality in the server - "-s SOURCE" flag to ask the data from specific source (in the prototype "RIPE", "MERIT" and "INTERNIC") - default SOURCE configurable in config file - all SOURCES ("-a" flag) configurable in config file - "-g" option to indicate an object "grep" for a certain string, in stead of the normal key lookup (running low priority - slow) - able to handle more queries/sec (no longer running out of inetd) - an option to keep a connection to the server open, for multiple queries fast after each other. (esp useful for applications like prtraceroute) Any other features you always wanted to have in the server ? Now is the time to make them known, so that we could incorporate them. If you want to have a go at the new server, it is running on rijp.ripe.net on the normal whois port (no uptime guarentees). One thing is that the new flags (-g and -s) do not work with the RIPE whois client ;-( An old client with the flags inside quotes should work. Oh, just remembered, -g is not implemented yet ;-) The data in the prototype server is a bit outdated (last weeks databases or so). so, with an old client you should be able to say: whois -h rijp.ripe.net "-s ripe marten" whois -h rijp.ripe.net "-s merit 192.87.45" whois -h rijp.ripe.net "-s internic mt2" whois -h rijp.ripe.net "-a 192.87.45" You can give it a stress test if you wish, we have done the same, and could not make it crash yet (we did 50 parallel sessions of 10 sequential queries each) A little bit on the update procedure, we are implementing an "on-the-fly" update procedure, that is, no "once-a-day" updates, but updates are processed and incorporated in the running database (and whois server) immediately when they come in. This would mean that (because there will be no manual intervention any longer) that more updates will be bounced because of syntax errors, but you get the bounces fast ;-) Then once a day the guarded tags will be added at a set time. They will be ignored during the normal updates. Please do not nag too much on the update procedure yet, it is still in a "pre-pre-pre-prototype" stage. So, so much for a quick update, if you have suggestions, please let me know. -Marten

1 0

Description of Inter-AS Networks in the RIPE Routing Registry
by Daniel Karrenberg 08 Jun '93

08 Jun '93

Friends, here is the proposal on how to solve the prtraceroute problem as discussed in the last routing-WG meeting. Could we have comments until May 17th please! I'll circulate new versions as substantive comments are incorporated. The goal is to have the database capable of storing this a.s.a.p. and have some data in there quickly as prtraceroute is released. Note that this is not only useful for prtraceroute but much more generally. It could also be the start of the local inter-AS connection information dicussed in the last routing-wg meeting too. As such this addendum could be extended. Proposals ? Cheers Daniel Description of Inter-AS Networks in the RIPE Routing Registry Tony Bates Daniel Karrenberg Addendum to Representation of IP Routing Policies in the RIPE Database (ripe-81) What is an Inter-AS Network ? Inter-AS IP networks are those networks which connect multi- ple autonomous systems (1). An inter-AS network exists for the purpose of passing traffic and routing information between different autonomous systems. The most simple exam- ple of an inter-AS network is a point-to-point link, con- necting exactly two ASes. Each end of such a link is con- nected to an interface of router living in each of the auto- nomous systems. More complex examples are broadcast type networks with multiple interfaces connecting multiple ASes with the possibility of more than one connection per AS. Which additional information is needed? Consider the following example of three routers 1, 2 and 3 with interfaces a through f connected by two inter-AS net- works X and Y: X Y a1b --- c2d --- e3f _________________________ (1) Inter-AS networks are currently called FIXes, IXFs, DMZs, NAPs, GIX and other names. - 2 - Suppose that network X is registered in the routing registry as part of AS1 and net Y as part of AS3. If traffic passes from left to right prtraceroute will report the following sequence of interfaces and ASes: a in AS1 c in AS1 e in AS3 The traceroute algorithm enumerates only the receiving interfaces on the way to the destination. In the example this leads to the passage of AS2 going unnoticed. This is confusing to the user and will also generate exceptions when the path found is checked against the routing registry. For operational monitoring tools such as prtraceroute it is necessary to know which interface on an inter-AS network belongs to which AS. If AS information is not known about interfaces on an inter-AS network, tools like prtraceroute cannot determine correctly which ASes are being traversed. Proposed Format All interfaces on inter-AS networks will be described in a new ias-int attribute of the corresponding network object in the RIPE database. The ias-int attribute has the following syntax: ias-int: <interface-address> <autonomous-system> The <interface-address> must be an address within the corresponding intenum and <autonomous-system> must be of the form AS<number> refering to an aut-num object in the data- base. - 3 - For example: inetnum: 193.193.193.0 netname: INTER-AS-EXAMPLE descr: This is a hypothetical inter-as network. descr: It might be called a NAP, FIX, GIX, IXF, DMZ, descr: Mehrfachdienstanbieterkommunikationseinrichtung or ... country: DE admin-c: Werner Mueller tech-c: Paul Schmitz tech-c: Hans Meier changed: ripe-dbm(a)ripe.net 920714 aut-sys: AS4711 ias-int: 193.193.193.1 AS123 ias-int: 193.193.193.3 AS4711 ias-int: 193.193.193.9 AS789 source: RIPE Note that the interface 193.193.193.3 is described although it is in the same AS as the network. This is recommended practice. The update procedure for the ias-int attribute will be the normal update procedure for network objects. The attribute does not need to be guarded because it does not influence routing policy of operational traffic. In which AS does an Inter-AS Network belong? Only one AS announces an inter-AS network externally. The other ASes connected to the inter-AS network will probably carry this network in their internal routing for redundancy but will not announce it to other ASes. In exceptional cases more than one AS may need to originate external routing information about the inter-AS network, This kind of routing setup cannot be described within the framework of ripe-81 and is generally discouraged. Tools using a ripe-81 type registry could take heuristic hints from the ias-int attributes when they encounter such situa- tions.

3 6

Mail archive
by Marten Terpstra 14 May '93

14 May '93

Folks, We have created an archive of all mails that go over the db list on ftp.ripe.net:ripe/archives/db Current directory contents: % ls -lg ~ftp/ripe/archives/db total 128 -rw-r--r-- 1 marten staff 2163 May 14 15:58 db.Apr-93.Z -rw-r--r-- 1 marten staff 30977 May 14 15:58 db.Feb-93.Z -rw-r--r-- 1 marten staff 5416 May 14 15:58 db.Jan-93.Z -rw-r--r-- 1 marten staff 65481 May 14 15:58 db.Mar-93.Z -rw-r--r-- 1 marten staff 9896 May 14 15:57 db.Nov-92.Z -rw-r--r-- 1 marten staff 13376 May 14 15:55 db.Oct-92.Z -Marten

1 0

RIPE database on ftp.ripe.net
by Marten Terpstra 12 May '93

12 May '93

db and routing gurus, Since there have been people complaining about the size of the database that they need to transfer every day to just update their access-lists, we have made a little script that will split the database into several pieces, one file per object type in the database. This script will run every night at 20:00, so please make sure that if you retrieve one of these files that you do it after 20:00. We did not want to add it to the update procedure of the database straightaway, since that is already overloaded with side effects. Please check the date on the first line if you are not quite sure you have the latest copy. The date line and copyright notice have been copied to all seperate files. The seperate files can be found on ftp.ripe.net:/ripe/dbase/split. Below is the current directory contents. All files are compressed, but since our ftp server compresses and uncompresses on the fly, there is not really a difference. -Marten % ls -lg ~ftp/ripe/dbase/split -rw-r--r-- 1 root dbase 7301 May 12 16:46 ripe.db.aut-num.Z -rw-r--r-- 1 root dbase 1235 May 12 16:45 ripe.db.bdry-gw.Z -rw-r--r-- 1 root dbase 173800 May 12 16:46 ripe.db.domain.Z -rw-r--r-- 1 root dbase 618303 May 12 16:46 ripe.db.inetnum.Z -rw-r--r-- 1 root dbase 737450 May 12 16:45 ripe.db.person.Z -rw-r--r-- 1 root dbase 883 May 12 16:45 ripe.db.rout-pr.Z

1 0

AS information available via DNS
by Tony Bates 12 May '93

12 May '93

Folks, As one of the actions from the last RIPE meeting we have been thinking about a nice way to have an automatic update procedure based on DNS. As a trial for this an auto-script has been been produced that loads current AS derived data into zonefiles under the domain aut-num.ripe.net. This has two very nice features straight away. It allows you to see a list of networks associated with an AS. For example... [mature-tony-1480] host -lt txt as1104.aut-num.ripe.net AS1104.aut-num.ripe.net TXT 192.16.185.0 AS1104.aut-num.ripe.net TXT 192.16.186.0 AS1104.aut-num.ripe.net TXT 192.16.194.0 AS1104.aut-num.ripe.net TXT 192.16.195.0 AS1104.aut-num.ripe.net TXT 192.16.199.0 AS1104.aut-num.ripe.net TXT 192.87.45.0 I currently use TXT records for the zonefiles (suggestions are welcome if something else is more appropriate ?). Also, you can do more interesting things like perhaps generate access-lists.. For Example... [mature-tony-1482] host -lt txt as1104.aut-num.ripe.net | awk '{ printf ("acces s-list 30 permit %s\n", $3)}' access-list 30 permit 192.16.185.0 access-list 30 permit 192.16.186.0 access-list 30 permit 192.16.194.0 access-list 30 permit 192.16.195.0 access-list 30 permit 192.16.199.0 access-list 30 permit 192.87.45.0 and so on. You can also see what ASes are currently in the RIPE database. host -lt ns aut-num.ripe.net aut-num.ripe.net NS mature.ripe.net AS760.aut-num.ripe.net NS mature.ripe.net AS766.aut-num.ripe.net NS mature.ripe.net AS590.aut-num.ripe.net NS mature.ripe.net NONE-LOCAL.aut-num.ripe.net NS mature.ripe.net AS1717.aut-num.ripe.net NS mature.ripe.net AS2107.aut-num.ripe.net NS mature.ripe.net AS2108.aut-num.ripe.net NS mature.ripe.net AS2111.aut-num.ripe.net NS mature.ripe.net AS1205.aut-num.ripe.net NS mature.ripe.net AS786.aut-num.ripe.net NS mature.ripe.net AS2116.aut-num.ripe.net NS mature.ripe.net AS789.aut-num.ripe.net NS mature.ripe.net AS1213.aut-num.ripe.net NS mature.ripe.net AS2119.aut-num.ripe.net NS mature.ripe.net AS1899.aut-num.ripe.net NS mature.ripe.net AS2122.aut-num.ripe.net NS mature.ripe.net AS1739.aut-num.ripe.net NS mature.ripe.net AS1741.aut-num.ripe.net NS mature.ripe.net AS1923.aut-num.ripe.net NS mature.ripe.net AS1752.aut-num.ripe.net NS mature.ripe.net AS1755.aut-num.ripe.net NS mature.ripe.net AS1241.aut-num.ripe.net NS mature.ripe.net AS2148.aut-num.ripe.net NS mature.ripe.net AS137.aut-num.ripe.net NS mature.ripe.net AS1770.aut-num.ripe.net NS mature.ripe.net AS513.aut-num.ripe.net NS mature.ripe.net AS1257.aut-num.ripe.net NS mature.ripe.net AS2004.aut-num.ripe.net NS mature.ripe.net AS517.aut-num.ripe.net NS mature.ripe.net AS679.aut-num.ripe.net NS mature.ripe.net AS1104.aut-num.ripe.net NS mature.ripe.net AS1267.aut-num.ripe.net NS mature.ripe.net AS1274.aut-num.ripe.net NS mature.ripe.net AS1275.aut-num.ripe.net NS mature.ripe.net AS697.aut-num.ripe.net NS mature.ripe.net AS174.aut-num.ripe.net NS mature.ripe.net AS719.aut-num.ripe.net NS mature.ripe.net AS544.aut-num.ripe.net NS mature.ripe.net AS1290.aut-num.ripe.net NS mature.ripe.net AS2380.aut-num.ripe.net NS mature.ripe.net AS2036.aut-num.ripe.net NS mature.ripe.net AS553.aut-num.ripe.net NS mature.ripe.net AS2043.aut-num.ripe.net NS mature.ripe.net AS1324.aut-num.ripe.net NS mature.ripe.net AS559.aut-num.ripe.net NS mature.ripe.net AS378.aut-num.ripe.net NS mature.ripe.net AS1849.aut-num.ripe.net NS mature.ripe.net NONE.aut-num.ripe.net NS mature.ripe.net AS1853.aut-num.ripe.net NS mature.ripe.net AS565.aut-num.ripe.net NS mature.ripe.net AS224.aut-num.ripe.net NS mature.ripe.net AS60.aut-num.ripe.net NS mature.ripe.net The NONE and NONE-LOCAL zones are not currently loaded. The second aspect of this is the possibilty of having an update procedure based on DNS. Here we could delegate the zone to the "guardian" and if we provided a consistency checking tool to avoid conflicts it would be a nice "dynamic" mechanism for updating AS information. We would like to go this way if you feel using DNS is reasonable as opposed to using some form of login/ftp mechanism as previous used for ripe-60 tags and planned for ripe-81. Please let us know your views on this and also please try looking at the information in the aut-num.ripe.net zone. --Tony

2 4

Re: AS information available via DNS
by Tony Bates 06 May '93

06 May '93

"Willem van der Scheun, SARA, +31 20 5923079" <SCHEUN(a)SARA.NL> writes: * Tony, * * This sounds at first sight as a good idea. Fairly dynamic and distributed a * nd * the like. Right. * A remark about the possibility as building access lists and the like. You c * an * do that quite easily of course, but I would like to have one way of buildin * g * access lists (and BGP network lists for that matter) from the RIPE database * . * Currently we are using nlc. I would definitely prefer that we have ONE tool * to * generate the lists. Apart form this other nice solutions may be available. * Talking about this, will te the tool the NCC is working upon (as was report * ed * at the last RIPE), be based on nlc, or is it completely new? Sure - this was only an example of doing things interactively with the information is all. The tools we are working on will be able to make use of nlc also and generate both ASpath lists and network based lists. * * If you delegate zones should this delegation also be put in the AS object l * ike * it is in the domain object? Delegation can not be done to the guardian (I g * uess * that's why you used double quotes). For AS1103 (SURFnet) the guardian is a * alias for a list of responsibles. If you put delegation info in the AS info * , Well the thing is. Whatever way the update is done it will be some form of file maintainence and whether that is here or there, to me at least doesn't make a lot of difference even if it is multiple people maintaining the zone. * should this state nserver as well as zone-c and tech-c? * Possibly if it is decided this is how the update procedure is done. * Willem --T

1 0

RE: AS information available via DNS
by Willem van der Scheun, SARA, +31 20 5923079 06 May '93

06 May '93

Tony, This sounds at first sight as a good idea. Fairly dynamic and distributed and the like. A remark about the possibility as building access lists and the like. You can do that quite easily of course, but I would like to have one way of building access lists (and BGP network lists for that matter) from the RIPE database. Currently we are using nlc. I would definitely prefer that we have ONE tool to generate the lists. Apart form this other nice solutions may be available. Talking about this, will te the tool the NCC is working upon (as was reported at the last RIPE), be based on nlc, or is it completely new? If you delegate zones should this delegation also be put in the AS object like it is in the domain object? Delegation can not be done to the guardian (I guess that's why you used double quotes). For AS1103 (SURFnet) the guardian is a alias for a list of responsibles. If you put delegation info in the AS info, should this state nserver as well as zone-c and tech-c? Willem

1 0

Additional ways to access the RIPE database
by Marten Terpstra 05 May '93

05 May '93

People, We have been experimenting a bit with other means of accessing the RIPE database and have implemented access via "finger" and mail. Especially the last one should be a real addition to access, since we have had requests from people that just had e-mail facilities, but did want to access the database. So, you can use: finger 192.87.45.0(a)whois.ripe.net finger as1104(a)whois.ripe.net and all the other keys to access the RIPE database (RIPE part only) or send mail to <whois(a)ripe.net> with a message containing lines starting with "whois" and then a key (one word keys only), for instance: whois 192.87.45 whois as1104 Make sure that the line starts with whois (no leading characters). Please give them a try and see if you like it. -Marten

1 0

193.in-addr.arpa procedures -> ripe-85
by Marten Terpstra 03 May '93

03 May '93

Folks, The 193.in-addr.arpa delegation procedures have been made into a RIPE document ripe-85. Only changes since version 1.4 are a few typos and cosmetic. You can find it as ftp.ripe.net:ripe/docs/ripe-docs/ripe-85.txt It is now version 1.5. Before asking for a block delegation, please read the document. Cheers, -Marten

1 0

Re: Problems with putting a bl (futur as) in a block
by Marten Terpstra 22 Apr '93

22 Apr '93

farrache(a)ccpnxt5.in2p3.fr (Gilles Farrache) writes: * * If I have (or you or anyone else) to ask a NIC (Italien or not) to modify a * * block for routing problems it is completly illogical. In fact we decide to * put a bl flag manage by the routing operator in order to be able not to * depend on national NICS, so if to split a block for routing problems we have * * to ask the national NIC, what has been put in place is completly useless. Gilles, The flags are controlled by guardians, but should only be put in a network number on request of one of the contact persons of a network (or the organisation that represents them). This same person or organisation controls the data in the database. If they decide to put a block in the database, they make clear that they want the block treated as one unit. If they then want to have some of these nets routed seperately or have different information for these nets, THEY are responsible for splitting the block, not you. They have the control over their data in the database, and can change it themselves. The fact that a national NIC (like GARR NIS) manages the data, does not mean that they control the data. The responsible for a network can still change the data themselves, although the GARR NIS would like to get these changes as well to keep their own database in sync with the RIPE database. It is not that ONLY the GARR NIS (or any other NIC, just using GARR NIS as an example) can change the data, by no means. -Marten

1 0

Proposed agenda DB-WG for the RIPE Mtg
by Wilfried Woeber, UniVie/ACOnet, +43 1 436111 355 20 Apr '93

20 Apr '93

Raw proposal for the DB-WG meeting in Amsterdam. I'd like to have a 1.5 hour slot allocated. Any comments/additions welcome! Wilfried. ________________________________________________________________________________ RIPE Database WG Proposed agenda for RIPE 15 meeting - Review of recently introduced and proposed DB objects - Review of basic documents describing the DB objects and operational procedures. - Discussion of requests from other WGs - AoB ________________________________________________________________________________

1 0

193.in-addr.arpa procedures V1.3
by Marten Terpstra 29 Mar '93

29 Mar '93

Folks, One last go. I think we folded in most of the comments from Blaso and others. We have included the procedures for single class C reverse zones, not via block zones. We are already doing our first trials with block delegations, all seems to work fine. Please let's get this document accepted and delegate these blocks. -Marten Guidelines for the delegation of zones in the 193.in-addr.arpa domain Marten Terpstra March 1993 V1.3 Introduction This document describes the procedures for the delegation of authority of zones in the 193.in-addr.arpa domain. As of March 16th 1993 the RIPE NCC has been delegated the authority for the 193.in-addr.arpa domain from the root. Due to the fact that in the 193.x.y address space blocks of 256 class C network numbers are further delegated to local registries , the possibility exists to also delegate the zone for these blocks in the 193.in-addr.arpa domain. This document describes some guidelines and procedures for this type of delegation and the delegation of reverse zones for individual class C networks in 193.x.y. A bit more explained With the assignment of class C network numbers following the CIDR (RFC 1338) model, in which large chunks of the address space are delegated to one region, and within that region blocks of class C network numbers are delegated to service providers and non-provider registries, some hierarchy in the address space is created, similar to the hierarchy in the domain name space. Due to this hierarchy the reverse Domain Name System mapping can also be delegated in a similar model as used for the normal Domain Name System. For instance, the RIPE NCC has been assigned the complete class C address space starting with 193. It is therefore possible to delegate the 193.in-addr.arpa domain completely to the RIPE NCC, instead of each and every reverse mapping in the 193.in-addr.arpa domain to be registered with the INTERNIC. This implies that all 193.in-addr.arpa resistrations will be done by the RIPE NCC. Even better, since service providers receive complete class C network blocks from the RIPE NCC, the RIPE NCC can delegate the reverse registrations for such complete blocks to these local registries. This implies that customers of these service providers no longer have to register their reverse domain mapping with the root, but the service provider have authority over that part of the reverse mapping. This decreases the workload on the INTERNIC and the RIPE NCC, and at the same time increase the service a provider can offer its customers by improve response times for reverse mapping changes . However there are some things that need to be examined a bit more closely to avoid confusion and inconsistencies. These issues are covered in the next section. Procedures for the delegation of direct subdomains of 193.in-addr.arpa 1. A secondary nameserver at ns.ripe.net is mandatory for all blocks of class C network numbers delegated in the 193.in-addr.arpa domain. 2. Because of the increasing importance of correct reverse address mapping, for all delegated blocks a good set of secondaries must be defined. There should be at least 2 nameservers for all blocks delegated, excluding the RIPE NCC secondary. 3. The delegation of a class C block in the 193.in-addr.arpa domain can be requested by sending in a domain object for the RIPE database to <hostmaster(a)ripe.net> with all necessary contact and nameserver information. The RIPE NCC will then forward all current reverse zones inside this block to the registry, and after addition of these by the registry, the NCC will check the working of the reverse server. Once everything is setup properly, the NCC will delegate the block, and submit the database object for inclusion in the database. An example domain object can be found at the end of this document. 4. All reverse servers for blocks must be reachable from the whole of the Internet. In short, all servers must meet similar connectivity requirements as top-level domain servers. 5. Running the reverse server for class C blocks does not imply that one controls that part of the reverse domain, it only implies that one administers that part of the reverse domain. 6. Before adding individual nets, the administrator of a reverse domain must check wether all servers to be added for these nets are indeed setup properly. 7. There are some serious implications when a customer of a service provider that uses address space out of the service provider class C blocks, moves to another service provider. The previous service provider cannot force its ex-customer to change network addresses, and will have to continue to provide the appropriate delegation records for reverse mapping of these addresses, even though it they are no longer belonging to a customer. 8. The registration of the reverse zones for individual class C networks will usually be done by the registry administering the class C block this network has been assigned from. The registry will make the necessary changes to the zone, and update the network objects in the RIPE database for these networks, to reflect the correct "rev-srv" fields. In case the RIPE NCC receives a request for the reverse zone of an individual class C network out of a block that has been delegated, the request will be forwarded to the zone contact for this reverse block. Above procedures are defined to ensure the necessary high availability for the 193 reverse domains, and to minimize confusion. The NCC will ensure fast repsonse times for addition requests, and will in principle update the 193.in-addr.arpa domain at least once per working day. Example domain object to request a block delegation domain: 202.193.in-addr.arpa descr: Pan European Organisations class C block admin-c: Daniel Karrenberg tech-c: Marten Terpstra zone-c: Marten Terpstra nserver: ns.eu.net nserver: sunic.sunet.se nserver: ns.ripe.net changed: marten(a)ripe.net 930319 source: RIPE Procedures for the delegation of individual network zones The registration of the reverse zones for individual class C networks will usually be done by the registry administering the class C block this network has been assigned from. In case the zone corresponding to the class C block has not been delegated, the RIPE NCC will automatically add the reverse nameserver as specified in the "rev-srv" attribute of the RIPE database object for this network, using the following procedures: 1. Because of the increasing importance of correct reverse address mapping, for all delegated networks a good set of secondaries must be defined. There should be at least two nameservers for all networks delegated. 2. The "rev-srv" field should ONLY contain one fully qualified domain name of a nameserver which is authoritative for the reverse zone for this network. 3. At least two reverse servers must be reachable from the whole of the Internet. In short, these servers must meet similar connectivity requirements as top-level domain servers. 4. The checking and addition of the reverse zones for single networks is completely automated at the RIPE NCC. Although we do our best to check the setup of the nameservers, these does not receive the same level of scrutiny as nameservers for blocks of class C network numbers. It is the responsibility of the network contacts to ensure proper operation. 5. Any problems regarding the reverse zones in 193.in-addr.arpa should be directed to <hostmaster(a)ripe.net>. The NCC also suggests that similar procedures are set up for the delegation of reverse zones for individual class C networks from the registries to individual organisations.

4 5

Blocks in 193.in-addr.arpa domain document
by Marten Terpstra 24 Mar '93

24 Mar '93

Folks, Here's the updated document. I was planning on sending this out over the weekend, but forgot the modem cable ;-( Anyway, let's see if we can get agreement on this. Please note that the database specific things I do not want to spend too much on, this should be done at the RIPE meeting. A few more days to comment. Want to start delegating blocks end of the week, and during next week (although I will be at the IETF). -Marten Guidelines for the delegation of class C blocks in the 193.in-addr.arpa domain Marten Terpstra March 1993 V1.1 Introduction This document describes the procedures for the delegation of authority of zones in the 193.in-addr.arpa domain. As of March 16th 1993 the RIPE NCC has been delegated the authority for the 193.in-addr.arpa domain from the root. Due to the fact that in the 193.x.y address space blocks of 256 class C network numbers are further delegated to local registries and national registries, the possibility exists to also delegate the zone for these blocks in the 193.in-addr.arpa domain. This document describes some guidelines and procedures for this type of delegation. A bit more explained With the assignment of class C network numbers following the CIDR (RFC 1338) model, in which large chunks of the address space are delegated to one region, and within that region blocks of class C network numbers are delegated to service providers and national registries, some hierarchy in the address space is created, similar to the hierarchy in the domain name space. Due to this hierarchy the reverse Domain Name System mapping can also be delegated in a similar model as used for the normal Domain Name System. For instance, the RIPE NCC has been delegated the complete class C address space starting with 193. It is therefore possible to delegate the 193.in-addr.arpa domain completely to the RIPE NCC, in stead of each and every reverse mapping in the 193.in-addr.arpa domain to be registered with the INTERNIC. This implies that all 193.in-addr.arpa resistrations will be done by the RIPE NCC. Even better, since service providers receive complete class C network blocks from the RIPE NCC, the RIPE NCC can delegate the reverse registrations for such complete blocks to these local registries. This implies that customers of these service providers no longer have to register their reverse domain mapping with the root, but the service provider have authority over that part of the reverse mapping. This decreases the workload on the INTERNIC and the RIPE NCC, and at the same time increase the service a provider can offer its customers and response times for such additions. However there are some things that need to be examined a bit more closely to avoid confusion and inconsistencies. These issues are covered in the next section. Procedures 1. A secondary nameserver at ns.ripe.net is mandatory for all blocks of class C network numbers delegated in the 193.in-addr.arpa domain. 2. Because of the increasing importance of correct reverse address mapping, for all delegated blocks a good set of secondaries must be defined. There should be at least 2 nameservers for all blocks delegated, excluding the RIPE NCC secondary. 3. The delegation of a class C block in the 193.in-addr.arpa domain can be requested by sending in a domain object for the RIPE database to <hostmaster(a)ripe.net> with all necessary contact and nameserver information. The RIPE NCC will then forward all current reverse zones inside this block to the registry, and after addition by the registry, the NCC will check the working of the reverse server. Once everything is setup properly, the NCC will delegate the block, and submit the database object for inclusion in the database. An example domain object can be at the end of this document. 4. All reverse servers for blocks must be reachable from the whole of the Internet. In short, all servers must meet similar connectivity requirements as top-level domain servers. 5. Running the reverse server for class C blocks does not imply that one controls that part of the reverse domain, it only implies that one administers that part of the reverse domain. 6. Before adding individual nets, the administrator of a reverse domain must check wether all servers to be added for these nets are indeed setup properly. 7. There are some serious implications when a customer of a service provider that uses address space out of the service provider class C blocks, moves to another service provider. The service provider cannot force its ex-customer to change network addresses, and will have to continue to provide the appropriate delegation records for reverse mapping of these addresses, even though it is no longer a customer of his. 8. The registration of the reverse zones for individual class C networks will usually be done by the registry administering the class C block this network has been assigned from. The registry will make the necessary changes to the zone, and update the network objects in the RIPE database for these networks, to reflect the correct "rev-srv" fields. In case the RIPE NCC receives a request for the reverse zone of an individual class C network out of a block that has been delegated, the request will be forwarded to the zone contact for this reverse block. Above procedures are defined to ensure the necessary high availability for the 193 reverse domains, and to minimize confusion. The NCC will ensure fast repsonse times for addition requests, and will in principle update the 193.in-addr.arpa domain at least once per working day. The NCC also suggests that similar procedures are set up for the delegation of reverse zones from the registries to individual organisations. Example domain object to request a block delegation domain: 202.193.in-addr.arpa descr: Pan European Organisations class C block admin-c: Daniel Karrenberg tech-c: Marten Terpstra zone-c: Marten Terpstra nserver: ns.eu.net nserver: sunic.sunet.se nserver: ns.ripe.net changed: marten(a)ripe.net 930319 source: RIPE

3 3

Typos in assignments
by Marten Terpstra 22 Mar '93

22 Mar '93

Dear Registries, We have found that the number of typos made in assignments and database updates is increasing too much lately. Especially mixing 192.x.y and 193.x.y is very popular. Also, we see a lot of 193 assignments send to <ripe-dbm>, and normal updates send in to <assign> We have for that purpose put some more strict checking on entries send in to <assign(a)ripe.net>. For each net that is being send in the <assign(a)ripe.net> we now check whether or not that network is already in the RIPE/MERIT/DDN database. If it is, it will be initially rejected and an error will be send to the NCC staff. The NCC staff will find out whether this is a typo, or just usage of the wrong e-mail address. In the latter case, we will forward the update to ripe-dbm(a)ripe.net, and it will be processed. If however a typo seems to be made, we will contact the person that send in the entry and try to resolve the issue. Long story short: - only NEW 193.x.y assignments to <assign(a)ripe.net> - ALL updates and other new entries to <ripe-dbm(a)ripe.net> -Marten

2 3

Re: 193.in-addr.arpa block delegation procedures (draft)
by Wilfried Woeber, UniVie/ACOnet, +43 1 436111 355 19 Mar '93

19 Mar '93

| * > Another thing would be to create YADO (Yet Another Database Object) for | * > delegated blocks only, but I do not quite like that idea either. | |After some in-house discussion here we would like to following: | |- requests for delegation of a block in 193.in-addr.arpa should be done | by sending in the xxx.193.in-addr.arpa domain object to HOSTMASTER. |- we will then forward all entries that are already in the 193.in-addr.arpa | zone that belong to this block |- we will check that the existing entries are put into the delegated zone. |- we will delegate authority, and pass object to the database |- we will forward any request for reverse registration inside this block | to the zone-c for this reverse block. I like it. |The question about zone-c in the inetnum object and/or removing the rev-srv |field and replace it by an individual net.block.193.in-addr.arpa domain is |something for the database and dns working group. We really would like to get |the block delegation going. I think this is the essential thing. I propose to go ahead _doing_ it. Otherwise I'd even like to suggest a "back to square one" approach for the DB issues. I think we have to back up and figure out/define _what_ we want to organize for _which_ group of people. Generally my feeling is that we should try to - use _existing_ procedures wherever possible without "bending" them - invent new and _simple_ things if there is a need (the KISS principle) - keep the procedure for the "users" as simple as possible. Personally I prefer additional "small" objects that can be cross-checked automatically for consistency against "huge" multi-purpose objects with a lot of options and implied semantics. But that's probably a question of taste... |If noone has strong objections against the above procedure for block |delegation (not the net things), I will update the document and send out a |new version later today (probably tonight). My vote in favour. wilfried. -------------------------------------------------------------------------------- Wilfried Woeber : E-m: Wilfried.Woeber(a)CC.UniVie.ac.at (Internet) Computer Center - ACOnet : Z00WWR01(a)AWIUNI11.BITNET (EARN) Vienna University : [ woeber(a)can.aconet.ada.at (X.400) ] Universitaetsstrasse 7 : [ S O P A C ] A-1010 Vienna, Austria, Europe : Tel: +43 1 436111 355, Fax: +43 1 436111 170 --------------------------------------------------------------------------------

1 0

Re: Use of RIPE DNS registration form
by Marten Terpstra 19 Mar '93

19 Mar '93

Havard Eidnes <Havard.Eidnes(a)runit.sintef.no> writes: * Hi, * * a question has recently arisen concerning the use of the RIPE form for * registering DNS domains in relation to registering names which only have MX * records associated with themselves. In this case, several of the mandatory * fields defined in the RIPE document ripe-49. In particular, we wonder what * we should do about these fields: Questions have been raised before. I have put in some comments given by people: * zone-c: * Should be zone contact of closest parent domain with a separate SOA * record? Why duplicate the information? According to some the zone-c for the closest SOA should be mentioned here. Other suggest that for MX only domains have no zone-c. * nserver: * Same as above? Each domain has a nserver, even an MX only domain. The MX records must be somewhere. This domain has no SOA though. * sub-dom: * Is it really necessary to list the sub-names in use (this also goes * for the general case, but also for the MX-only case) If you wish so. Most people do. Last meeting the DNS working group decided that the first level of useful domain names should be stored in the database, below that is for your own choice. You van in this way restrict the number of objects you have. Most useful level is usually 2, 3 in cases where co, ac and other second level domains are used: Useful: nikhef.nl ulcc.ac.uk ... Database and DNS working group, what say you ? -Marten

3 3

193.in-addr.arpa block delegation procedures (draft)
by Marten Terpstra 19 Mar '93

19 Mar '93

Folks, It seems that the delegation of the 193.in-addr.arpa domain will take place during the root zone update of today. In order to be able to delegate class C blocks in this zone, we have drafted some procedures for this. Please read the paper below and comment within one week. We will finalize this paper next week, and then start delegating blocks of Cs in the domain. Cheers, -Marten Guidelines for the delegation of class C blocks in the 193.in-addr.arpa domain Marten Terpstra March 1993 1.0 Introduction This document describes the procedures for the delegation of authority of zones in the 193.in-addr.arpa domain. As of March 16th 1993 the RIPE NCC has been delegated the authority for the 193.in-addr.arpa domain from the root. Due to the fact that in the 193.x.y address space blocks of 256 class C network numbers are further delegated to local registries and national registries, the possibility exists to also delegate the zone for these blocks in the 193.in-addr.arpa domain. This document describes some guidelines and procedures for this type of delegation. A bit more explained With the assignment of class C network numbers following the CIDR (RFC 1338) model, in which large chunks of the address space are delegated to one region, and within that region blocks of class C network numbers are delegated to service providers and national registries, some hierarchy in the address space is created, similar to the hierarchy in the domain name space. Due to this hierarchy the reverse Domain Name System mapping can also be delegated in a similar model as used for the normal Domain Name System. For instance, the RIPE NCC has been delegated the complete class C address space starting with 193. It is therefore possible to delegate the 193.in-addr.arpa domain completely to the RIPE NCC, in stead of each and every reverse mapping in the 193.in-addr.arpa domain to be registered with the INTERNIC. This implies that all 193.in-addr.arpa resistrations will be done by the RIPE NCC. Even better, since service providers receive complete class C network blocks from the RIPE NCC, the RIPE NCC can delegate the reverse registrations for such complete blocks to these local registries. This implies that customers of these service providers no longer have to register their reverse domain mapping with the root, but the service provider have authority over that part of the reverse mapping. This decreases the workload on the INTERNIC and the RIPE NCC, and at the same time increase the service a provider can offer its customers and response times for such additions. However there are some things that need to be examined a bit more closely to avoid confusion and inconsistencies. These issues are covered in the next section. Procedures 1. A secondary nameserver at ns.ripe.net is mandatory for all blocks of class C network numbers delegated in the 193.in-addr.arpa domain. 2. Because of the increasing importance of correct reverse address mapping, for all delegated blocks a good set of secondaries must be defined. There should be at least 2 nameservers for all blocks delegated, excluding the RIPE NCC secondary. 3. All reverse servers for blocks must be reachable from the whole of the Internet. In short, all servers must meet similar connectivity requirements as top-level domain servers. 4. Running the reverse server for class C blocks does not imply that one controls that part of the reverse domain, it only implies that one administers that part of the reverse domain. 5. Before adding individual nets, the administrator of a reverse domain must check wether all servers to be added for these nets are indeed setup properly. 6. There are some serious implications when a customer of a service provider that uses address space out of the service provider class C blocks, moves to another service provider. The service provider cannot force its ex-customer to change network addresses, and will have to continue to provide the appropriate delegation records for reverse mapping of these addresses, even though it is no longer a customer of his. Above procedures are defined to ensure the necessary high availability for the 193 reverse domains, and to minimize confusion. The NCC will ensure fast repsonse times for addition requests, and will in principle update the 193.in-addr.arpa domain at least once per working day. The NCC also suggests that similar procedures are set up for the delegation of reverse zones from the registries to individual organisations.

1 0

Re: 193.in-addr.arpa block delegation procedures (draft)
by Wilfried Woeber, UniVie/ACOnet, +43 1 436111 355 18 Mar '93

18 Mar '93

> individual nets inside the block... If you really want to put it in the > database, why not send in an object like: > > domain: 204.193.in-addr.arpa > descr: blah > zone-c: <person> > nserver: <first server> > nserver: <second server> > nserver: ns.ripe.net > .... > I'm really in favour of this approach, because it seems to fit nicely into the system and we can access the information with tools that need not have any special knowledge, as Marten pointed out already. Wilfried.

1 0

FYI: 193.in-addr.arpa delegation
by Marten Terpstra 17 Mar '93

17 Mar '93

Folks, the delegation of 193.in-addr.arpa is a fact. % host -vt any 193.in-addr.arpa 193.in-addr.arpa 518400 IN SOA ns.ripe.net hostmaster.ripe.net ( 100010 ;serial (version) 28800 ;refresh period 7200 ;retry refresh time 604800 ;expiration period 518400 ;default ttl ) 193.in-addr.arpa 518400 IN NS ns.ripe.net 193.in-addr.arpa 518400 IN NS ns.eu.net 193.in-addr.arpa 518400 IN NS ns.uu.net 193.in-addr.arpa 518400 IN NS layon.inria.fr 193.in-addr.arpa 518400 IN NS sunic.sunet.se 193.in-addr.arpa 518400 IN NS munnari.oz.au -Marten ------- Forwarded Message Date: Tue, 16 Mar 93 20:06:13 PST From: bobm(a)nic.ddn.mil (Bob McCollum ) To: Marten.Terpstra(a)ripe.net (Marten Terpstra) cc: markk(a)nic.ddn.mil (Mark Kosters), scottw(a)nic.ddn.mil (Scott Williamso n) Subject: Re: 193.in-addr.arpa updated at the NCC > Ready to go ! > > -Marten Marten, The release has gone out. Everything looked ok from our end. We have made internet history. ;^) Please let us know if you see anything unusual! Thanks! Bob Mc ------- End of Forwarded Message

1 0

Autonomous Systems Available via RIPE WHOIS
by Daniel Karrenberg 12 Mar '93

12 Mar '93

Autonomous System (AS) information is now available from the RIPE whois server. The server will accept queries for AS<number>. Very basic information about most existing ASes from the NIC and other sources has been entered with a source attribute of INTERNIC and will only be found if the -a flag is passed to the whois server. This information is also available as file from ftp.ripe.net in file ripe/dbase/asn.db.Z. In order to get things going some instances of the new RIPE AS object have also been entered already. For example whois as786 will produce aut-num: AS786 descr: The JANET IP Service descr: UK as-in: AS60 50 AS60 as-in: AS766 100 AS766 as-in: AS1263 45 DEFAULT as-in: AS1275 100 AS1275 as-in: AS1290 50 AS1290 as-in: AS1755 102 RIPE-DB AND NOT (LOCAL AS786) as-in: AS1849 50 AS1849 as-in: AS1930 100 AS1930 as-in: AS2107 100 AS2107 as-in: AS2111 100 AS2111 as-out: AS60 AS786 AS766 as-out: AS766 AS786 AS1755 as-out: AS1263 AS786 AS766 AS1930 AS2107 AS2111 as-out: AS1275 AS786 AS1755 as-out: AS1290 AS786 as-out: AS1755 AS786 AS766 AS1275 AS1930 AS2107 AS2111 as-out: AS1849 AS786 AS1755 as-out: AS1930 AS786 AS1755 as-out: AS2107 AS786 AS1755 as-out: AS2111 AS786 AS1755 default: AS1263 1 guardian: jips-nosc(a)noc.ulcc.ac.uk admin-c: Duncan Rogerson admin-c: Kevin Hoadley tech-c: Duncan Rogerson tech-c: Kevin Hoadley remarks: AS2111 link is not yet active, coming soon. changed: D.Rogerson(a)nosc.ja.net 930226 source: RIPE A description of the AS object can be found in appendix A of document ripe-81. We also accept updates and additions of AS objects in the RIPE database at <ripe-dbm(a)ripe.net>. We urge everyone to send in AS objects a.s.a.p.. They do not necessarily need to include the routing policy information (as-in, as-out, default and guardian). If you want to jump in at the deep end you could read ripe-81 and generate the routing policy as well. We will be happy to help you with this. However don't put off sending in the basic information because of this. There is a real benefit in this being available too. Further plans: The NCC will generate AS objects for all ASes being used in the European Internet and not present in the database during the next week and send them to the suspected contact persons for validation. Shortly after these are installed, a new update procedure for the aut-sys tag of network objects will be anabled. This procedure is described in ripe-81. Basically it means that aut-sys tags will be generated from information supplied by the AS guardians. Initially the NCC will be guardian for all ASes which do not have a guardian yet and process change requests manually. Please do not hesitate to contact us if you have any questions about this. The NCC Staff PS: A new ripe document containing all database templates and update procedures is being prepared and will be released shortly.

2 1

in-addr.arpa zone data in RIPE database
by Daniel Karrenberg 03 Mar '93

03 Mar '93

Folks, since we have observed many inconsistencies between the RIPE database and the DNS regarding reverse mapping zones in in-addr.arpa we have developed a little checking script. The current output can be found in ftp.ripe.net:ripe/ripe-op/in-addr.check It lists all networks for which discrepancies have been detected as follows: First the RIPE database entry in short format: *in: 128.131.0.0 *na: TUNET-F *de: LAN Technical University of Vienna *cy: AT *ac: Johannes Demel *tc: Johannes Demel *co: LOCAL *as: 697 *rz: tunamea.tuwien.ac.at tunameb.tuwien.ac.at *ch: demel(a)noc.tuwien.ac.at 930202 *so: RIPE Then a list of all reverse servers as listed in the database: DB servers: tunamea.tuwien.ac.at tunameb.tuwien.ac.at Then a list of all reverse servers found in the DNS: DNS servers: Then a diagnostic each server which has something wrong: tunamea.tuwien.ac.at: only in DB and not reverse server for 128.131.0.0! tunameb.tuwien.ac.at: only in DB and not reverse server for 128.131.0.0! Then a list of suggested actions to resolve the inconsistency: DB remove 128.131.0.0: tunamea.tuwien.ac.at tunameb.tuwien.ac.at Note that the recommended actions are not the only way to resolve the problem. In the example above one could also set up the name servers and register them in the DNS. The script tries the shortes path. Please go through the list and see wether any of your nets needs action. Questions: Should we automatically make the suggested changes in the RIPE database? Or should we send mail to the technical contacts asking them to change things? We have asked the NIC accept change notices from us, so that registration of reverse servers in the database would be enough to get them into the DNS. Is this desirable? Daniel By way of example here is the start of the current file: *in: 128.131.0.0 *na: TUNET-F *de: LAN Technical University of Vienna *cy: AT *ac: Johannes Demel *tc: Johannes Demel *co: LOCAL *as: 697 *rz: tunamea.tuwien.ac.at tunameb.tuwien.ac.at *ch: demel(a)noc.tuwien.ac.at 930202 *so: RIPE DB servers: tunamea.tuwien.ac.at tunameb.tuwien.ac.at DNS servers: tunamea.tuwien.ac.at: is only in DB and is not reverse server for 128.131.0.0! tunameb.tuwien.ac.at: is only in DB and is not reverse server for 128.131.0.0! DB remove 128.131.0.0: tunamea.tuwien.ac.at tunameb.tuwien.ac.at *in: 129.177.0.0 *na: BERGEN-NET *de: Bergen University, Norway *cy: NO *ac: Kenneth Hostland *tc: Kenneth Hostland *co: NORDU RIPE NSF *as: 224 *gw: kth *rz: alf.uib.no eik.ii.uib.no aun.uninet.no *ch: ripe-dbm(a)ripe.net 920914 *so: RIPE DB servers: alf.uib.no aun.uninet.no eik.ii.uib.no DNS servers: alf.uib.no aun.uninett.no eik.ii.uib.no aun.uninet.no: is only in DB and does not exist! aun.uninett.no: is only in DNS and is OK DB add 129.177.0.0: aun.uninett.no DB remove 129.177.0.0: aun.uninet.no note: obiously a spelling error in the database *in: 129.206.0.0 *na: HD-NET *de: University of Heidelberg *de: BelWue *cy: DE *ac: Michael Hebgen *tc: Lothar Binding *tc: Peter Merdian *co: RIPE NSF WIN *rl: HEPNET *bl: DESY *as: 553 *gw: crn *rz: sun0.URZ.Uni-Heidelberg.DE sun1.URZ.Uni-Heidelberg.DE noc.BelWue.DE ns.Germany.EU.net deins.Informatik.Uni-Dortmund.DE *ch: rv(a)Informatik.Uni-Dortmund.DE 920530 *ch: ar(a)deins.Informatik.Uni-Dortmund.DE 920601 *ch: ripe-dbm(a)ripe.net 920602 *so: RIPE DB servers: deins.informatik.uni-dortmund.de noc.belwue.de ns.germany.eu.net sun0.urz.uni-heidelberg.de sun1.urz.uni-heidelberg.de DNS servers: sun0.urz.uni-heidelberg.de sun1.urz.uni-heidelberg.de deins.informatik.uni-dortmund.de: is only in DB and is OK noc.belwue.de: is only in DB and is OK ns.germany.eu.net: is only in DB and is OK DNS add 129.206.0.0: deins.informatik.uni-dortmund.de noc.belwue.de ns.germany.eu.net note: the DNS is missing some servers *in: 130.37.0.0 *na: VU-NET *de: Vrije Universiteit Amsterdam *de: Amsterdam *cy: NL *ac: Jacques Schuurman *tc: Jacques Schuurman *co: RIPE NSF SARA SURF *gw: cwi *rz: ohrid.cca.vu.nl *rz: star.cs.vu.nl *ch: dfk(a)cwi.nl 900802 *ch: Erik-Jan.Bos(a)surfnet.nl 920708 *ch: Erik-Jan.Bos(a)surfnet.nl 920708 *ch: ripe-dbm(a)ripe.net 920708 *ch: martijn(a)nluug.nl 921110 *so: RIPE DB servers: ohrid.cca.vu.nl star.cs.vu.nl DNS servers: hardy.nat.vu.nl ohrid.cca.vu.nl star.cs.vu.nl hardy.nat.vu.nl: is only in DNS and is OK DB add 130.37.0.0: hardy.nat.vu.nl *in: 130.192.0.0 *na: TORINO-IT-LAN *de: Politecnico di Torino *de: CISIP *cy: IT *ac: Silvano Gai *tc: Antonio Lioy *co: GARR *as: 137 *rz: 130.192.2.91 leonardo.polito.it *rz: 130.192.2.117 galileo.polito.it *rz: 130.192.3.1 ercole.polito.it *rz: 192.12.192.5 dns.nis.garr.it *rm: LAN's and MAN connecting University departments and *rm: research institutes located in or near Torino *rm: fully managed *ch: ip-reg(a)nis.garr.it 930115 *so: RIPE DB servers: dns.nis.garr.it ercole.polito.it galileo.polito.it jolly.nis.garr.it leonardo.polito.it DNS servers: dns.nis.garr.it ercole.polito.it galileo.polito.it leonardo.polito.it jolly.nis.garr.it: is only in DB and is OK DNS add 130.192.0.0: jolly.nis.garr.it note: the addresses in the database are not conforming to the database format, but the script resolves them and deletes duplicate entries *in: 130.231.0.0 *na: OUNET *de: University Ethernet network *de: Oulu University *de: Oulu *cy: FI *ac: Kaisu Ranta *tc: Raimo Salo *co: NORDU RIPE NSF FUNET *as: 1741 *rz: ousrvr.oulu.fi *ch: lk-kr(a)finou.oulu.fi 930119 *so: RIPE DB servers: ousrvr.oulu.fi DNS servers: hydra.helsinki.fi ousrvr.oulu.fi hydra.helsinki.fi: is only in DNS and is OK DB add 130.231.0.0: hydra.helsinki.fi *in: 130.251.0.0 *na: GENUANET *de: Universita' degli Studi di Genova *cy: IT *ac: Pier Paolo Puliafito *tc: Tiziana Podesta' *co: GARR *as: 137 *rz: 192.148.193.8 sun.cisi.unige.it SUN UNIX *rz: 130.251.1.4 dist.dist.unige.it SUN UNIX *rm: Multiple interconnected LANs of academic institutes *rm: located in Genoa *ch: ip-reg(a)nis.garr.it 930210 *so: RIPE DB servers: dist.dist.unige.it sun sun.cisi.unige.it unix DNS servers: carla.dist.unige.it dist.dist.unige.it nameserver.cnr.it carla.dist.unige.it: is only in DNS and is not responding! nameserver.cnr.it: is only in DNS and is OK sun: is only in DB and does not exist! sun.cisi.unige.it: is only in DB and is OK unix: is only in DB and does not exist! DB add 130.251.0.0: nameserver.cnr.it DNS add 130.251.0.0: sun.cisi.unige.it DB remove 130.251.0.0: sun unix note: "interesting" syntax server data seems out of date *in: 131.114.0.0 *na: PISA-NET *de: Consiglio Nazionale delle Ricerche *de: Pisa *cy: IT *ac: Marco Sommani *tc: Vittorio Miori *co: GARR *as: 137 *rz: 192.12.192.4 nameserver.cnr.it *rz: 128.84.254.152 odin.cs.cornell.edu *rz: 131.114.1.32 itgbox.cnuce.cnr.it *rz: 192.65.81.6 ns.surfnet.nl *rz: 131.114.21.10 serra.unipi.it *rm: Multiple-Lan of CNR institutes and University departments in Pisa *rm: This net belongs to the nation-wide CNRnet, coordinated *rm: thru the cnr-core working group. CNRnet is member of GARR. *ch: ip-reg(a)nis.garr.it 930204 *so: RIPE DB servers: itgbox.cnuce.cnr.it nameserver.cnr.it ns.surfnet.nl odin.cs.cornell.edu serra.unipi.it survey.surfnet.nl DNS servers: itgbox.cnuce.cnr.it nameserver.cnr.it ns.surfnet.nl odin.cs.cornell.edu serra.unipi.it survey.surfnet.nl: is only in DB and is OK DNS add 131.114.0.0: survey.surfnet.nl *in: 131.155.0.0 *na: TUENET1 *de: Technische Universiteit Eindhoven *de: Eindhoven *cy: NL *ac: Joop Schillemans *tc: Joep Brand *co: RIPE NSF SURF *ni: 1=590 *rz: tuegate.tue.nl *ch: piet(a)cwi.nl 910501 *so: RIPE DB servers: tuegate.tue.nl DNS servers: rc6.urc.tue.nl tuegate.tue.nl rc6.urc.tue.nl: is only in DNS and is OK DB add 131.155.0.0: rc6.urc.tue.nl *in: 131.174.0.0 *na: NUNET *de: Universiteit Nijmegen *de: Nijmegen *cy: NL *ac: Jos Alsters *ac: Peter van Campen *tc: Jos Alsters *tc: Peter van Campen *co: RIPE NSF SURF *ni: 1=590 *rz: wn1.sci.kun.nl *rz: wn3.sci.kun.nl *ch: piet(a)cwi.nl 910501 *so: RIPE DB servers: wn1.sci.kun.nl wn3.sci.kun.nl DNS servers: wn0.sci.kun.nl wn3.sci.kun.nl wn0.sci.kun.nl: is only in DNS and is OK wn1.sci.kun.nl: is only in DB and does not exist! DB add 131.174.0.0: wn0.sci.kun.nl DB remove 131.174.0.0: wn1.sci.kun.nl *in: 131.211.0.0 *na: RUUNET *de: Universiteit Utrecht *de: Utrecht *cy: NL *ac: Dre Hopmans *tc: Dre Hopmans *co: RIPE NSF SURF *ni: 1=590 *rz: accucx.cc.ruu.nl *rz: praxis.cs.ruu.nl *ch: piet(a)cwi.nl 910501 *so: RIPE DB servers: accucx.cc.ruu.nl praxis.cs.ruu.nl DNS servers: accucx.cc.ruu.nl infix.cs.ruu.nl kali.cc.ruu.nl infix.cs.ruu.nl: is only in DNS and is OK kali.cc.ruu.nl: is only in DNS and is OK praxis.cs.ruu.nl: is only in DB and is not responding! DB add 131.211.0.0: infix.cs.ruu.nl kali.cc.ruu.nl

5 15

Re: in-addr.arpa zone data in RIPE database
by jalm＠spirou.puug.pt 03 Mar '93

03 Mar '93

...... Still, there are the issues of the DNS versus the DB, but I feel that others are already dealing with that one ;-) In the previous discussion concerning DNS and RIPE database coherence, I think that we should try to keep separate different issues (DNS and RIPE dbm). 1) We have a system designed to deal with addressing, naming servers, etc. the DNS. We should concentrate on this system for this purpose. It should be considered the real source of information for the data it as been designed to deal with. So, the place were I can find the information about servers, addresses, etc. is in the DNS. Well, DNS has been designed to be managed in a decentralized way. This is a very good point but it has a very bad point: in general it contains lots of errors and inconsistencies. Conclusion: we should invest in tools to detect such errors and notify the administrators concerned. There are some of these tools available in the archive of RIPE. Anyway, I, as an administrator, would prefer to have a single point of focus for stating which are the servers running authoritative for my domain or for the reverse mapping of my network and that is the DNS, nothing more. 2) We have the RIPE database: this is a very good tool to deal with some administrative data. Well, lets use it for this purpose. Anyway, we should avoid to have to deal manually with DUPLICATE data. So, we should avoid to have information about servers and addresses of those servers in the RIPE dbm. My suggestion is: use the RIPE dbm to deal * only * with those informations that cannot be effectively registered in the DNS. If we decide to maintain in the RIPE dbm information about DNS servers, those fields should be automatically updated from the DNS on a (for example) monthly basis. And its semantics should be seen as "the vison about this subject that the tools of the RIPE NCC have been able to extract from the DNS some XXX days ago". I do not believe on centralized repositories and management unless I have no other way to avoid it. I do not believe in consistency maintained mannually by hundreds (thousands ?) of administrators. Jose'

2 1

Re: in-addr.arpa zone data in RIPE database
by keith＠pipex.net 02 Mar '93

02 Mar '93

In <9303021347.AA06706(a)mcsun.EU.net>, <Piet.Beertema(a)mcsun.EU.net> wrote: > Interaction is fine. But RIPE stepping into someone else's > authority is quite something different! > I don't see any problem with that as long as we (european > networking people) agree to send update to the RIPE-NCC > instead of sending them to the NIC. > RIPE-DB and DNS are entirely different objects. I would > like RIPE to notify me *in some cases* about discrepancies > between my entries in the RIPE-DB and my DNS entries, but > I do *NOT* want RIPE to step into my authority by asking > or telling the NIC to change *MY* DNS info because they > found discrepancies: I may well have good reason why those > discrepancies exist. This is a bit of an aside to the debate above, but there is something that has struck me as obvious which would make the management of in-addr.arpa much easier for everyone, and help with the above issue. Why not get all of 193.in-addr.arpa delegated to the RIPE NCC, and have it in turn delegate xx.193.in-addr.arpa to the service providers ? That way we don't have to deal directly with the creaking NIC, but authority is still delineated clearly by existing DNS mechanisms. This has not been possible in the past, due to the restriction of in-addr DNS delegations needing to be on byte boundaries, *but* that is exactly how the RIPE supernet block is being assigned. Or have I missed a good reason why this won't work ? Keith Mitchell Network Manager Public IP Exchange keith(a)pipex.net 216 The Science Park keith(a)unipalm.co.uk Cambridge, UK Phone: +44 223-424616 Fax: +44 223-426868

3 2

Re: Database Update Acknowledgement Messages
by Daniel Karrenberg 24 Feb '93

24 Feb '93

> Piet.Beertema(a)mcsun.EU.net writes: > > I don't like the idea of *by default* getting all or even > upto 20 (or some other limit) changed objects reported. > However, in some cases I would like to have this feature. > How about making it depend on the presence of the "ACK" > keyword in the Subject: line? OK, this sounds reasonable. I have implemented this using the string LONGACK rather than ACK which might legitimately be in the subject line. If you send us an update with the string LONGACK (in capitals) somewhere in the Subject:-line, the acknowledgements will contain a line saying Update OK: <object-name> for each update which generated no messages. The updates generating messages will return the full object and messages as before. Please let us know your experiences and suggestions. Daniel

1 0

Database Update Acknowledgement Messages
by Daniel Karrenberg 24 Feb '93

24 Feb '93

Effective immediately the acknowledgements we send out for database updates will mention the "Subject" of the update mail message being acknowledged in addition to the "Message-ID". This should allow easier matching of acknowledgements to update requests. Please let us know if you see any wrong behaviour of this new feature. We also have had requests to mention the names of all objects updated e.g. person, network, domain etc.. We have refrained from doing this as it would produce *very* long acknowledgements in some cases. We were thinking of providing it for updates containing less objects than a threshold of -say- 20. Anyone who wants this in addition to the Subject please speak up with an explanation why to the list. Then we can make a decision whether it is worthwhile. Daniel

1 0