- db-wg - mailman.ripe.net

Proposal: key-cert update procedure change
by Dmitry Morozovsky 17 Dec '02

17 Dec '02

Dear colleagues, changing today our key-cert objects, I'd encounter a bit of inconvenience: one can't cut'n'paste key-cert object from whois request: [s]he should manually delete method/owner/fingerpr attributes. My suggestion is: if one of r/o attributes exists in the object processed, DB should check whether auto-computed value of the attribute matches supplied value; - if yes, no error/warning should be produced - if no -- it should of course be reported; I think, it's up to the community to decide whether this condition should be treated as error or simply as warning. I think, the same procedure should be also applied to other de-facto read-only attributes, such as person name in person object. Sincerely, D.Marck [DM5020, DM268-RIPE, DM3-RIPN] ------------------------------------------------------------------------ *** Dmitry Morozovsky --- D.Marck --- Wild Woozle --- marck(a)rinet.ru *** ------------------------------------------------------------------------

2 2

Re: [db-wg] Proposal for automated clean-up of references by name
by Janos Zsako 05 Dec '02

05 Dec '02

> From db-wg-admin(a)ripe.net Thu Dec 5 11:08:46 2002 > From: Gert Doering <gert(a)space.net> > On Thu, Dec 05, 2002 at 10:42:53AM +0100, Engin Gunduz wrote: > > We have prepared a proposal to automatically clean-up references > > by name and other invalid references in RIPE Whois Database. > > I like the proposal. Go ahead! Yes, I agree too. > (Yes, it will potentially create lots of "ugly looking" objects - but > the situation right now, where you're not able to delete person objects > because they are locked by a reference-by-name, is much worse) I have one question though: who will be the maintainer of the new "ugly" object created? I have the feeling it could/should be the maintainer of the object that will reference it. Janos

1 0

Proposal for automated clean-up of references by name
by Engin Gunduz 05 Dec '02

05 Dec '02

[Apologies for duplicate messages] Dear Colleagues, We have prepared a proposal to automatically clean-up references by name and other invalid references in RIPE Whois Database. The proposal aims at fixing objects like (as an hypothetical example): inetnum: 58.210.0.0 - 58.210.255.255 netname: EXAMPLE-OBJECT descr: Example inconsistent object country: EU admin-c: Engin Gunduz tech-c: Engin Gunduz status: ASSIGNED PA mnt-by: RIPE-NCC-NONE-MNT changed: engin(a)ripe.net 19940508 source: RIPE Note that in admin-c and tech-c attributes there are names, instead of NIC handles, which is currently regarded as a syntax error. Such objects were introduced into RIPE Whois Database when the syntax checks were not as strict as today. There are 2114 (out of approximately 2 million references) such invalid references as of December 2nd, 2002. The proposal will affect only the objects that have invalid references where a NIC handle should be used. Please see http://www.ripe.net/db/dbconstat/ for more information on Database Consistency and Statistics Project which deals with this and other types of inconsistencies in RIPE Database. Please find our proposal below. We would like to discuss the proposal until December 20th, 2002, at which date we will sum up the discussion, and perhaps begin to implement the resulting solution. Regards, Engin Gunduz RIPE NCC Database Group -------------- Proposed solution for cleaning up references by name and other invalid references in RIPE Whois Database Motivation: References by name and invalid references cause two main problems: 1. One reference by name in a single object locks all person and role objects with that name, that is, they cannot be deleted, because of referential integrity checks. 2. Having anything other than a NIC handle as a reference makes the implementation of whois database software considerably more complex, since the software needs to deal with these exceptions. This increases the coding time, maintenance time and testing time of the software. Classification of the inconsistencies we need to solve and proposed solutions: 1. Objects that refer to a person or role object by name. a. There is only one object with this name. Solution: Update the inconsistent object so that it will contain the NIC handle instead of the name. Add appropriate remarks and changed attributes to the object to explain the reason for update. b. There is no person or role object with this name: Solution: Create a person object with this name. Clearly mark this new object putting appropriate remarks attributes so that users will see it is actually a dummy object. Update the inconsistent object to refer to the NIC handle of this new person object. Add appropriate remarks and changed attributes to the object to explain the reason for update. c. There are multiple person and role objects with this name. Solution: Create a role object with this name. It will list all the other role and person objects with the same name in its admin-c and tech-c attributes. Update the inconsistent object to refer to the NIC handle of this new role object. Add appropriate remarks and changed attributes to the object to explain the reason for update. 2. Objects that refer to a non-existent NIC handle. Solution: Create a person object with that NIC handle. Clearly mark this new object so that users will see it is actually a dummy object. Name it "person: Place Holder Object". Note that there is no need to update the inconsistent object itself. 3. Objects that refer to a string which is neither a name, nor a NIC handle. For example, it might be a phone number in admin-c attribute, or it might be 'Gunduz', a string that can't be a NIC handle, as it's longer than 4 letters, nor can it be a name as it has only one word. Another example could be "Mr. Gunduz", which enters this category because "Mr" can't appear in a name of person/role object. Solution: Create a person object for each such reference. Name the object "person: Place Holder Object" and list the object that refers to it in its remarks attribute. Then update the inconsistent object to refer to the NIC handle of this new place holder person object. In each case an object is updated, send appropriate notifications (determined by "mnt-by" and "notify" attributes, as with all other updates). Please note that this proposal does not actually solve the problem of invalid contact information-- rather, it makes the data set more uniform, thus decreases the administration and development time of the whois database.

2 1

Re: [lir-wg] Re: ERX of v4 address space proposal
by Andrei Robachevsky 20 Nov '02

20 Nov '02

Peter Galbavy wrote: > 192.0.0.0/8 ? > > The swamp is coming to RIPE or which poor RIR ? Our current data shows that around 753 networks will go to APNIC, 9072 stay with ARIN, 92 will go to LACNIC and 3176 to RIPE NCC. 192/8 will be processed as last and sweet piece, and statistics will be updated. > > Peter Regards, Andrei > > ----- Original Message ----- > From: "Andrei Robachevsky" <andrei(a)ripe.net> > To: <db-wg(a)ripe.net>; <lir-wg(a)ripe.net> > Sent: Wednesday, November 20, 2002 1:54 PM > Subject: [lir-wg] Re: ERX of v4 address space proposal > > > >>Dear Colleagues, >> >>You may find a list of networks (/8's) containing allocations that will >>be transferred by the ERX project at the following URL: >>http://www.ripe.net/db/erx/erx-ip/ >> >>A detailed list of which networks will be transferred, and to which RIR, >>will be posted before each /8 is transferred. A full schedule for each >>network will also be published for each /8. >> >>Regards, >> >>Andrei Robachevsky >>CTO, RIPE NCC >> >> >

1 0

ERX of v4 address space proposal
by Andrei Robachevsky 20 Nov '02

20 Nov '02

Dear Colleagues, Please find attached the proposal for the ERX of IPv4 address space for your review. This proposal was reviewed by the ERX-Taskforce that was set-up at the RIPE 43 meeting. Comments received were summarised and sent to both Database and LIR Working Group mailing lists. We would appreciate your feedback on this proposal no later than Wednesday, 13 November 2002. A timeline for this project will be issued along with final project description. Regards, Andrei Robachevsky RIPE NCC ERX of v4 address space ----------------------- INTRODUCTION When ARIN began operations, it inherited classful blocks of addresses ("legacy" space) that were issued to organisations not in ARIN's region. The Regional Internet Registries (RIRs) are co-ordinating the transfer of these records from the ARIN Database to RIPE Database or APNIC Database, as appropriate. This is based on geographic location of each resource holder. The affected records include class B networks and class C ranges, particularly those issued from 192/8. ARIN also maintains reverse delegation for all legacy address space. Once the transfer is complete, this responsibility will be distributed among the RIRs according to their respective regions. BENEFITS This will enable resource holders to maintain all their records in one database and End Users to interface with just one RIR for all database and reverse delegation matters. This effort will also help to locate address holders and recover unused or underutilised address space. IMPACT ON RESOURCE HOLDERS Entities holding legacy space to be transferred can expect the process to be largely transparent. While it will not affect network status in any way, resource holders might be required to create contact identifiers with the proper registry if they do not already exist. Queries made in WHOIS for an IP block that has been transferred to another RIR will be directed to the appropriate RIR. APPROACH The plan is to perform the transfer by /8. For each /8 the following tasks have to be performed: 1. Conflicts (contacts and description) to be resolved 2. Records and associated documentation to be transferred 3. Reverse delegation to be set up A total of 47 /8's with 8030 records have to be transferred. CONFLICTS The following types of conflicts have been identified: C1. Record exists in ARIN DB only. There is no exact matching (range wise) record in the RIPE DB. Proposal: to update internal documentation, create the record in the RIPE DB and protect with a unique generated mntner. C2. Range matches records in both ARIN and RIPE DBs. Meaning that contact and description may be different. Most cases indicate out of date information in one of the Databases, not real conflicts or attempts to hijack address space. What happened in most cases is that people started maintaining their allocation or assignement in the RIPE DB, especially since RIPE DB started to support the Routing Registry. Proposal: Notify conflicts and give time to reach consensus. After the deadline merge those who haven't responded, but _do_not_lock_ (keep the same mntner). C3.0 Record exists in the RIPE DB only. C3.1. One reason why such situation may exist is that this is a valid RIPE NCC allocation. Proposal: To preserve information in the RIPE DB. C3.2 Another situation is that the registration data are simply garbage. Proposal: Notify, give time for explanations and clean up in the end. PROCEDURE for a /8 1. Pre transfer 1.1 Initial dump is prepared for transfer by ARIN 1.2 Announcement is sent to ARIN's contacts 1.3 Reverese delegation domain space is cleaned up in the RIPE DB (reverse domain objects for which no delegation was provided are deleted) 2. Transfer 2.1 Final dump is prepared by ARIN 2.2 C1 group: database records are imported, documentation is updated, contacts are notified 2.3 C2 group: contacts (ARIN+RIPE) are asked to reach consensus. 2.4 C3.2 group: contacts are notified of possible deletion. 2.5 DNS is updated: domain objects are generated, zone (full or partial) is generated. 3. Conflict resolution 3.1 C2 group: non responding records are merged but _not_locked_. 3.2 C3.2 group: records without good reasons are deleted. -------

4 7

RADB mirror is not available over the weekend
by RIPE Database Administration 15 Nov '02

15 Nov '02

[Apologies for duplicate messages] Dear Colleagues, This is to announce that due to technical problems RADB mirror will not be available today and over the weekend on RIPE Whois Server. We hope to solve the problem and make it available again early next week. We are sorry for any inconvenience. Best regards, Engin Gunduz RIPE NCC Database Group

1 0

Re: [lir-wg] ERX of v4 address space proposal
by Wilfried Woeber, UniVie/ACOnet 12 Nov '02

12 Nov '02

--On 5. november 2002 10:00 +0100 Berislav Todorovic <beri(a)eurorings.net> wrote: > On Mon, 4 Nov 2002, Andrei Robachevsky wrote: > >>> Please find attached the proposal for the ERX of IPv4 address space for >>> your review. > > Most legacy IPv4 address space was assigned directly by InterNIC. Should > we read that all those addresses will have "PI" status? Given the fact that those address blocks were distributed before the RIR and NIR / LIR structure was devised, those blocks are _administratively_ PI, or maybe "unspecified" which I consider equivalent (much like the very early LIR blocks :-) Technically, and wirth regard to services rendered by LIRs and RIRs to the holders of those blocks, I'd venture to guess that they should be offered a chance to "opt-in" to an existing LIR or ISP environment. > Secondly, who will provide reverse delegation and how can users of these > blocks affect reverse delegation changes? I guess auto-inaddr will not > work since it requires a valid RegID. Actually this is one of the aspects that I would have liked to tackle in the ERX-TF, unfortunately it looks like I might be too late to have those ideas discussed and considered, due to overload on my end for a while. One of the things we should have learned from the ASN relocation is that those parties are not in touch with the most recent administartive procedures imposed by the RIR (and why should they?), and they simply get mixed up when they suddenly receive messages from the NCC :-( Wilfried.

1 0

Maintenance work on RIPE Whois Server 13.11.2002
by RIPE Database Administration 12 Nov '02

12 Nov '02

[Apologies for duplicate messages] Dear Colleagues, Tomorrow, 13 November 2002 Wednesday, we plan maintenance work for the whois server. As part of the maintenance work the server software will be upgraded to improve server query performance. We plan to start around 06:30 UTC and finish the work till 10:30 UTC. During this maintenance period, - mail updates will be queued and automatically processed after the maintenance work. - webupdates and syncupdates will not be possible. - queries will be answered by our secondary server. We apologise for any inconvenience. Please contact <ripe-dbm(a)ripe.net> for any questions/ comments. Best Regards, Engin Gunduz RIPE NCC Database Group

1 0

[Internet-Drafts@ietf.org: [Ietf-not43] I-D ACTION:draft-ietf-crisp-iris-areg-01.txt]
by Stephane Bortzmeyer 08 Nov '02

08 Nov '02

1 0

Webupdates Release
by Can Bican 07 Nov '02

07 Nov '02

Dear Colleagues, Web based graphical user interface for updating the RIPE database, is released, and accessible from the following urls: For updating RIPE database: http://www.ripe.net/webupdates or https://www.ripe.net/webupdates For updating RIPE TEST database: http://www.ripe.net/webupdates-test or https://www.ripe.net/webupdates-test Webupdates provides a web based graphical user interface, with the functionality for: * Adding/deleting/editing objects, * Adding/deleting/changing the order of attributes in an object, * Providing password based authentication for updating. Since the latest prototype, the following improvements have been introduced: * A help page for using the interface has been added. * source: fields of new objects are now prefilled. * It is now possible to add new fields more easily via the '+' icon. * It is now possible to manipulate multi-line fields. * There are now links for querying the database and the copyright information. Your feedback is important to us. Please send any comments, suggestions, questions and criticisms to dbtools(a)ripe.net . We also provide help via e-mail through working hours. You can communicate your problems and questions about the service to ripe-dbm(a)ripe.net . Regards, -- Can Bican Database Software Engineer RIPE NCC

1 0