- ipv6-wg - mailman.ripe.net

MERIT Darknet Experiment and RPKI alerts
by Alex Band 10 Dec '12

10 Dec '12

A number of you have reported that your are getting alert emails from the Resource Certification (RPKI) service. The alerting system can warn you if some of your certified address space has the RPKI validity "Unknown" or "Invalid". The warning people are receiving will look something like this: > There are alerts about BGP announcements with your certified address > space in the Resource Certification (RPKI) service. > > These are BGP announcements with your certified address space that have > the status Unknown. You should create a ROA for each authorised > announcement to make them Valid: > > AS Number Prefix > AS237 2a00::/12 > > You are able to fix and ignore reported issues, change your alert > settings, or unsubscribe by visiting http://certification.ripe.net/. In this case, the alert is triggered for LIRs who hold an IPv6 address block, but do not announce (all of) it. The *unannounced* address space is being "hijacked" by MERIT as part of its darknet experiment: http://www.ripe.net/internet-coordination/news/merit-to-temporarily-use-2a0… If you have received the alert, your certified, unannounced IPv6 prefix is hijacked by AS237 because 2a00::/12 is the most specific announcement that overlaps with it. There are two things you can do: 1. Announce *all* of the IPv6 address space you hold. This way AS237 cannot hijack your prefix with a less specific announcement. 2. Suppress the alert for the announcement from AS237 in the Resource Certification (RPKI) system in the LIR Portal. Please note that the RPKI Alerting system uses the RIPE NCC Route Collectors to trigger the errors, so there may be slight differences between what they see and what you actually do. If you have any questions, please do not hesitate to contact me. Kind regards, Alex Band

8 10

RIPE NCC Training Courses January-March 2013 - BG, DE, UK, PT, NL, SA, DK, UA, LV, KG
by Training Mailbox 26 Nov '12

26 Nov '12

Dear Colleagues, Our training team travels the RIPE NCC service region to deliver training courses to our members without any additional cost. Over the next few months, we'll be in Sofia, Düsseldorf, London, Lisbon, Milan, Amsterdam, Riyadh, Copenhagen, Kiev, Riga, Bishkek. Visit the following page to register and to check which training courses we are giving in your area: https://lirportal.ripe.net/training/courses The RIPE NCC delivers the following training courses: - LIR Training Course - IPv6 for LIRs Training Course - Routing Registry and Resource Certification Training Course For more information visit: http://www.ripe.net/lir-services/training/courses With kind regards, Rumy Spratley-Kanis Training Services Manager

1 0

IP Analyser IPv6 functionality
by Alex Band 05 Nov '12

05 Nov '12

A few weeks ago the RIPE NCC introduced the production release of the IP Analyser; an LIR Portal tool to help you manage and analyse your allocations, assignments, free space and invalids: https://lirportal.ripe.net/ipanalyser/ (requires member login) Currently it only provides IPv4 functionality and we are in the process of gathering IPv6 feature requirements so we can plan a roadmap for the beginning of 2013. This is why I would like to know what kind of functionally you would like the IP Analyser to provide. I'm looking for input for invalid or incorrect DB assignments, and tools to make your IP address management easier. As warnings, the application could for example display all RIPE DB objects which have an incorrect prefix length; a sanity checker basically. So if you created an inetnum or route object with prefix "2001:0DB8:0401::/40", the application would tell you that you probably meant to create "2001:0DB8:0400::/40". For tools, the IP Analyser currently suggests prefixes out of your free IPv4 allocations for assignments, but this is not very useful in IPv6 (i.e. please suggest me a free /48 out of my /32). You would probably benefit more from a subnet calculator, an address notation validator or something else entirely. I'm looking forward to your input. Cheers, Alex Band Product Manager RIPE NCC

1 0

Re: [ipv6-wg] route6: 2A00::/12
by Antonio Prado 01 Nov '12

01 Nov '12

[cross-posted to ipv6-wg(a)ripe.net] Il 20/10/12 21:58, Manish Karir ha scritto: > > Hi Antonio, > > Yes. Merit is in the process of running a large IPv6 darknet experiment. Our goal is to announce every allocated /12 (1 from each RIR) first sequentially and then together. We conducted a 1hr test announcement on wed and to the best of knowledge we did not break anything. > These announcements will each last 1 week each starting Nov 1. > Your more specific announcements in BGP should still get all your data correctly routed to you. However if you have noticed any strange behavior please let us know. > > Thanks. > -manish Manish, thanks for your kind reply. Maybe I missed some announcement e-mail here. Is there any document to read about that "large IPv6 darknet experiment" you at Merit are going to run in accordance also with RIPE NCC? (I'm aware of what Geoff Juston made at APINIC in June 2010 with 2400::/12 https://labs.ripe.net/Members/mirjam/background-radiation-in-ipv6) I was wondering if any consensus is needed before starting such a big thing that involves IPv6 production networks as well. I mean: when my route6 is not announced via BGP, it's supposed that every packet sent to it doesn't get anywhere, hopefully. OTOH, if during this experiment, for any reason (wanted or not), my prefix is no more announced, I'm afraid the /12 would attract (perhaps hijack?) those packets (actually breaking, I believe, any existent ROA for the prefix). So, just asking: what kind of packets are going to be collected and how stored, analysed and by whom? Thank you -- antonio > ----- Original Message ----- > From: Antonio Prado <aprado(a)topnet.it> > To: ipv6-ops(a)lists.cluenet.de > Cc: mkarir(a)merit.edu > Sent: Fri, 19 Oct 2012 13:09:23 -0400 (EDT) > Subject: route6: 2A00::/12 > > Hello, > > just saw a new entry in RADB for 2A00::/12 and was wondering if could be > a fat-finger issue as our IPv6 prefix (a /29) actually belongs to that /12. > > route6: 2A00::/12 > descr: MERIT Network Inc. > 1000 Oakbrook Drive, Suite 200 > Ann Arbor > MI 48104, USA > origin: AS237 > mnt-by: MAINT-AS237 > remarks: This announcement is part of an RIPE approved > experiment. For additional information please > send email to mkarir(a)merit.edu > source: RADB > changed: ljb(a)merit.edu 20121017 > > Anyone aware of this experiment? > > Thank you > -- > antonio >

6 9

New on RIPE Labs: Counting IPv6 in the DNS
by Mirjam Kuehne 29 Oct '12

29 Oct '12

[apologies for duplicates] Dear colleagues, Geoff Huston gave an interesting presenting at the recent NANOG meeting showing another way to measure IPv6 deployment. This time he looked at the DNS. His findings are now published on RIPE Labs: "Counting IPv6 in the DNS" https://labs.ripe.net/Members/gih/counting-ipv6-in-the-dns Kind regards, Mirjam Kuehne RIPE NCC

1 0

RIPE NCC Webinars - new dates
by Training Mailbox 29 Oct '12

29 Oct '12

[Apologies for duplicate e-mails] Dear colleagues, We are pleased to announce the launch of new dates for our Webinars for LIRs. The RIPE NCC Webinars are live, one hour online training courses that allow participants to interact with our trainers without leaving their desks. We focus on the topics and issues most important for LIRs. Register now at https://www.ripe.net/lir-services/training/e-learning/webinars Participation is limited to 20 people, so don't hesitate if you want to take part! If you have questions, please email<e-learning(a)ripe.net>. We look forward to seeing you online. Kind regards, RIPE NCC Training Services

1 1

This may be of interest to this wg
by João Damas 25 Oct '12

25 Oct '12

It's a simple petition to request IPv6 support for Skype. I am not going to argue about the effectiveness of the approach, each person can do that. http://www.change.org/petitions/skype-add-ipv6-support-to-skype Joao

1 0

6a44
by Aleksi Suhonen 22 Oct '12

22 Oct '12

Hi, A new RFC (RFC6751) defines a new transition technology called 6a44 that (re)uses 192.88.99.0/24. As an operator of a 6to4 relay router, I'm looking for implementations of 6a44. A google search yielded nothing, so I wonder if anyone here has heard of any implementations in progress? -- Aleksi Suhonen / TREX

2 1

New on RIPE Labs: IPv6 CPE Survey and More IPv6 RIPEness
by Mirjam Kuehne 17 Oct '12

17 Oct '12

Dear colleagues, We just published two new IPv6 related articles on RIPE Labs: 1. The 2012 IPv6 CPE Survey (Background info and description): https://labs.ripe.net/Members/marco_hogewoning/the-2012-ipv6-cpe-survey Please note that the actual survey results are on IPv6ActNow: http://www.ipv6actnow.org/cpe 2. IPv6 RIPEness - More Stars (introducing a 5th star): https://labs.ripe.net/Members/emileaben/ipv6-ripeness-more-stars Please do not hesitate to leave any comments or suggestions under the articles on RIPE Labs. Kind Regards, Mirjam Kuehne RIPE NCC

4 4

New on RIPE Labs: Number of New LIRs and their IPv6 RIPEness
by Mirjam Kuehne 12 Oct '12

12 Oct '12

Dear colleagues, In Q3 2012, we observed an increase in the number of new LIRs in the RIPE NCC service region. Many of these new LIRs show 1-star IPv6 RIPEness. Read more on RIPE Labs: Number of New LIRs and their IPv6 RIPEness https://labs.ripe.net/Members/mirjam/new-lirs-and-their-ipv6-ripeness Kind Regards, Mirjam Kuehne RIPE NCC

1 0