August 2000 - lir-wg - mailman.ripe.net

RE: SLA's needed !!! (Was: Re: ASN wait time)
by Jorma Mellin 31 Aug '00

31 Aug '00

>Therefore, personally, I think it's time for us to start thinking how to set >up SLA's between LIRs and RIPE NCC: let's define strict time boundaries for >the first and later hostmaster answers to an IP/AS request. It doesn't matter >whether it is 5, 7 or 14 days - but let's define them and abide by them. Also, >an escalation procedure within RIPE NCC is needed (who to contact should a >request get not processed - e.g. Registration services manager and higher), >determine what happens should RIPE NCC fail to process a request within >specified time (e.g. deduce XXX EUR from next year contribution fee for each >day of delay). That doesn't clear the problem. The lack of resources don't vanish if issues are escalated to managers and such. Or if they do vanish we have a problem with work-moral within hostmasters. There is a risk with this suggestion that service-time (SLA) would be different for different LIR's, and the LIR whose hostmaster yells out load will get serviced first. If we reduce the annual contribution fee when a request is not served within the SLA, we are only making things worse. RIPE NCC will then have even less money to correct the problem. Maybe we should try to give somekind of carrot to NCC. If IP/ASN request is served less than 5 working days give 100EUR extra contribution, if it is served in less than 2 working days give 200EUR. This is also an equal method, you cannot use money to buy SLA's. Jorma ---------------------------------------------------------- jorma.mellin(a)teliafi.net Development Manager ; CCIE#4185 Telia Finland Inc, Network Services

3 2

Re: ASN wait time
by Hank Nussbacher 31 Aug '00

31 Aug '00

At 09:04 31/08/00 +0100, Willy Calderon wrote: Yes, I got hit by this last week after having filed over 80 ASN requests with no problem. Fortunately, we require a signed fax on letterhead from the requestor stating the 2 peers as well as other details. Even so, we have had about 5 cases of organizations either never announcing the ASN or reverting to being single homed. We continue to chase after those that do not use their ASN properly and have returned a few ASN to RIPE in the past and have 2-3 in the return process now as well. I would imagine that sites that do not require a signed document from a VP level or higher from the company asking for the ASN will incur an even higher rate than the 6% we have of troublemakers. I know that RIPE has started to scan the major peering sites to see if ASNs assigned are indeed multihomed (we have been doing that for the past 2 years - on a quarterly basis for all ASN's assigned) and I guess they are finding too many not being used, so they have toughened their ASN assignment policies. ASNs are also a finite resource - just like a /19. -Hank >Good morning, > >We filed a request for an AS Number several weeks ago. Ticket number is >NCC#2000085127. Having finally receiving initial response from RIPE late >last week, we were then asked to provide contact details for the ISP that >we had placed in our application. The reason being that RIPE would be >contacting them in their time to confirm that they will accept peering and >allow our PA space. Presumably this will take another few weeks for them >to verify that indeed our application was accurate and said ISP has agreed >to accept our peering details. As this is urgent, I'm quite concerned >whether or not this is the norm now at RIPE. > >Has this happened to anyone else? That is, has their ASN application >been needlessly delayed like this? > >Thanks, > >Willy Calderon

1 0

ASN wait time
by Willy Calderon 31 Aug '00

31 Aug '00

Good morning, We filed a request for an AS Number several weeks ago. Ticket number is NCC#2000085127. Having finally receiving initial response from RIPE late last week, we were then asked to provide contact details for the ISP that we had placed in our application. The reason being that RIPE would be contacting them in their time to confirm that they will accept peering and allow our PA space. Presumably this will take another few weeks for them to verify that indeed our application was accurate and said ISP has agreed to accept our peering details. As this is urgent, I'm quite concerned whether or not this is the norm now at RIPE. Has this happened to anyone else? That is, has their ASN application been needlessly delayed like this? Thanks, Willy Calderon

2 1

Re: ripe-db question
by Brent_Frere＠ses-astra.com 31 Aug '00

31 Aug '00

We (SES, Societe Europeene des Satellites, operator of Astra satellite system) assign IP addresses to end-customers who are using our Internet access by satellite. The only geographic limit we are sure about them is that they are in the Astra satellite system footprint... Footprint is visible at http://www.ses-astra.com/multimedia/bbi So I think this might slighly change your statistics if you count all them as Luxembourg citizens... Brent Frere, SES (Astra) Chateau de Bezdorf L-6815 Betzdorf Grand-Duchy of Luxembourg General phone: +352-710.725-1 Direct phone: +352-710.725-401 E-mail: bfrere(a)ses-astra.com URL: http://www.ses-astra.com "mediaWays Hostmaster" To: lir-wg(a)ripe.net, db-wg(a)ripe.net <hostmaster@medi cc: aways.net> Subject: ripe-db question Sent by: owner-lir-wg@rip e.net 08/30/00 05:23 PM Hi, some strange question: we need a complete list of assigned IP-Addresses in the european part of ripe region sort by country for a customer. Is there any chance to get it per whois/some application or do we buy some part of whois-db from ripe? The background is that a Online-Service needs this part of information to display the right website (on his top-level Webserver wich are reached by every online user first) for every user by his language. We are grateful for each assistance. Kind regards, _____________________________ Stephan Mankopf Networks/Backbone +49 5241 80 88729 stephan.mankopf(a)mediaways.net

2 1

RE: ripe-db question
by Stefan.Gasteiger＠Gendorf.de 30 Aug '00

30 Aug '00

You should use MIME content negotiation for this purpose. Have a look at: http://www.apache.org/docs/mod/mod_mime.html#multipleext Stefan Gasteiger SG5599-RIPE I+K Betrieb (zertifiziert nach DIN EN ISO 9001) InfraServ Gendorf Tel.: +49 8679 7 5599 Fax: +49 8679 7 39 5599 Mobiltel.: +49 172 8649205 E-Mail: Stefan.Gasteiger(a)gendorf.de > -----Original Message----- > From: mediaWays Hostmaster [mailto:hostmaster@mediaways.net] > Sent: Wednesday, August 30, 2000 4:24 PM > To: lir-wg(a)ripe.net; db-wg(a)ripe.net > Subject: ripe-db question > > > Hi, > > some strange question: > we need a complete list of assigned IP-Addresses > in the european part of ripe region sort by country > for a customer. > Is there any chance to get it per whois/some > application or do we buy some part of whois-db from ripe? > > The background is that a Online-Service needs this part > of information to display the right website (on his top-level > Webserver wich are reached by every online user first) > for every user by his language. > > We are grateful for each assistance. > > Kind regards, > _____________________________ > Stephan Mankopf > Networks/Backbone > +49 5241 80 88729 > stephan.mankopf(a)mediaways.net > > > > >

1 0

IP addresses
by Andrius Kasparavicius 19 Aug '00

19 Aug '00

hello, maybe somewhere is information about how many IP addresses is used as network and broadcast address today? How many addresses is unused yet? When has been created IPv4? ------------------------- Kasparavicius Andrius ________________________________________________________________________ http://www.andrius.org ICQ:17701001 tel.: +370 87 25630 nick: Casper AND-RIPE AND-6BONE

1 0

Re: lame delegations
by Joshua Goodall 18 Aug '00

18 Aug '00

(cross-cc'd to the RIPE LIR working group list for potential interest/comment) I suspect that solving this correctly would depend on the ICANN DNSO recognising the authentication mechanisms of the databases of the RIR's under the ICANN ASO (RIPE, ARIN, APNIC). Unfortunately, no-one thought of this problem when they let registrars inject host records. The only way to verify automatically that a host record is allowed from a given netblock is to use the same authentication mechanisms that (say) RIPE do for reverse delegations. I doubt that the RIR databases would take the strain of continuous lookups in that fashion. Futhermore, the RIPE database only defines password and PGP access controls for the LIR allocated space, not the assigned space used by nameserver operators. (no need to speculate upon the hazards of mail-from authentication). One possible solution, probably even manageable is that the DNSO/NSI Registry accepts host updates (or even just withdrawals) from an automated RIR system that can be triggered by correctly authenticated LIR maintainers, in the way that in-addr mappings already are. This satisfies the point-of-control requirements, and could probably be implemented without a change to the existing RRP. I don't know whether the situation arises often enough to motivate such a solution, but I would bet a (small) amount of money on some scriptkiddie reading this thread and trying it out for their dubious kicks. (you may guess correctly that I'm more familiar with RIPE systems than ARIN/APNIC :)) -[ Joshua Goodall ]----------------------------------------------- -[ IP Systems Architect ]---------------- Cook, Geek, Lover ------ -[ joshuag(a)interxion.com ]--------------- joshua(a)roughtrade.net -- On Fri, 18 Aug 2000, John O Comeau wrote: > > Obviously I didn't make it clear what is the problem in my previous post. > So far I got the following 2 replies: > > "The NIC should allow for dummy [default] nameservers and allow the > technical contact of a nameserver to remove his or her nameservers from a > domain without requiring an administrative ack." > > Yes, but we are not the technical nor the admin contact for these domains; > we just provide the IPs. What I propose is that the tech or admin contact > of the NETBLOCK has authority to delete the host registration by virtue of > the IP being his. > > "If the IP's are allocated to you, what's it matter where your old > customer still points their NS? Just remove the old customer from all of > your db's and reallocate your IP's elsewhere." > > We've been doing precisely that, and that's where the problem comes in. > The new customer cannot register his nameservers because the IP is already > registered as a nameserver. Then he complains, we look like idiots, and we > have to give him other IPs to use. > > jcomeau(a)world.std.com aka John Otis Lene Comeau > Home page: http://world.std.com/~jcomeau/ > Disclaimer: Don't risk anything of value based on free advice. > "Anybody can do the difficult stuff. Call me when it's impossible." > >

4 4

RE: ccTLD data moving from RIPE db
by Wilfried Woeber, UniVie/ACOnet 17 Aug '00

17 Aug '00

[ editorial: I think this should move from lir-wg(a)ripe.net to db-wg(a)ripe.net So, for any follow-up, please use db-wg and remove lir-wg. Thanks. ] Alex, >Then today I got a mail from the .IE domain registry, asking me to remove >entries from the RIPE DB for some .ie domains I have. The RIPE NCC, or the RIPE community never had any authority over the ccTLD name tree in the RIPE-DB. The individual sub-trees were (some still are) managed by the respective TLDs. So, from that point of view, the request in itself is probably valid. > So far so good, >except that the .ie domain registry does not have a functional whois >database to which we can move this data. If I comply, the data will no >longer be accessible from any whois databse. Well, not necessarily so. What "we" (the people and groups involved to migrate the name sub-trees to dedicated registries, maintined by the TLDs) had in mind was to preserve the "single point of entry" for the RIPE region to query domain names. To that end, the DB software was extended to support a referral mechanism. Assuming that this technology is deployed, you could still send your query to whois.ripe.net and the software would try to find a referred-to server which is authoritative for the name-tree. The RIPE server would then forward the request and send the answer back to the client. Quite a few TLD registries, which already have moved away from using the RIPE DataBase have completed that setup. Others are in the process of fixing migration problems. Other, obviously, have decided to _not_ use that option. Sigh. I'm still working with the RIPE NCC's DB group and CENTR to fixing deployment problems related to the referral mechanism. A couple of days ago, a summary page has become available on CENTR's server: http://www.centr.org/technical/ripe-db.html >Is this therefore a valid request? > >Thanks, Best regards Wilfried (DB-WG chair) _________________________________:_____________________________________ Wilfried Woeber : e-mail: Woeber(a)CC.UniVie.ac.at UniVie Computer Center - ACOnet : Tel: +43 1 4277 - 140 33 Universitaetsstrasse 7 : Fax: +43 1 4277 - 9 140 A-1010 Vienna, Austria, Europe : RIPE-DB: WW144, PGP keyID 0xF0ACB369 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~:~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The strange thing about common sense is that it is so uncommon. Buddah

1 0

RE: ccTLD data moving from RIPE db
by Mally Mclane 17 Aug '00

17 Aug '00

> I followed with some interest the debate in this list > regarding ccTLD data > being removed from the RIPE db for .de. > > Then today I got a mail from the .IE domain registry, asking > me to remove > entries from the RIPE DB for some .ie domains I have. So far so good, > except that the .ie domain registry does not have a functional whois > database to which we can move this data. If I comply, the > data will no > longer be accessible from any whois databse. > I would assume that since the Irish Government Data Protection Act prvents .ie informatio n from being accessed, this is indeed a valid request. regards, mally mclane =>senior hostmaster =>for Energis Squared, Leeds, UK =>mally(a)energis-squared.com <> www.energis-squared.com =>t: +44(0)1132076624 <> m: +44(0)7787100695

2 1

ccTLD data moving from RIPE db
by Alex French 17 Aug '00

17 Aug '00

Hi all, I followed with some interest the debate in this list regarding ccTLD data being removed from the RIPE db for .de. Then today I got a mail from the .IE domain registry, asking me to remove entries from the RIPE DB for some .ie domains I have. So far so good, except that the .ie domain registry does not have a functional whois database to which we can move this data. If I comply, the data will no longer be accessible from any whois databse. Is this therefore a valid request? Thanks,

1 0