January 2024 - members-discuss

Questions about the published Draft Agenda and Supporting Documents
by Erik Bais 30 Mar '24

30 Mar '24

Dear Hans Petter, Thank you for providing the supporting documents for the GM in Rome. Before we are going to be in Rome, I have a question for you and I cc:'ed the member-discuss ML, as I'm sure some other members might also have a couple questions on the following topic. I would like to ask you, how the RIPE NCC thought it was a great slide to present just a 2Milj Euro budget cut .. as if it was the best it could do .. given that it was stated on the last GM .. that it wasn't going to increase the budget .. And with the inflation, basically what that means .. you need to cut cost and cut hard ... So I would assume that the Director of the NCC .. would see this as an opportunity ... and discuss with management and staff, what is excessive .. and where can we 'kill our darlings' ... As for any writer that needs to do proper editing of a long novel .. I get the feeling that you didn't went/wanted to go through that process .. not as fierce as that the membership have suggested you to do .. And I would suggest that this budget document, need some serious editing ... One of the reasons for my disbelieve that you did that process already properly .. is that if I see an IT spend of 7.6 milj. Euro (2023 ) and you proudly present that the IT spend for 2024 is going to be 7.4 milj Euro .. Either you have a HUGE technical debt that you can't manage .. or you didn't went head to head with your CTO / IT Director ... and stopped asking for more cuts until he actually sad in your office crying in despair. Just an example ... If I'm correct, the RIPE NCC is currently in a datacenter facility in Amsterdam .. with roughly 80 cabinets filled with $random equipment, almost half of that (most likely as my gut feeling is ) to store and hold every single ICMP ping/trace life on disk etc.. since the conception of the Atlas project.. And the best you can come back to the community is .. we've managed to reduce the cost of Atlas with 50.000 euro p/yr ? The proper question to ask is, do we need every freaking completed test to store that into infinity on spinning disks .. because we never asked the community if we can just through away every PING test result after 60 days . and save 20 cabinets in storage, equipment and power usage. Who are you kidding ... And that colocation / hw cost is next to the already half milj. Euro charge for the public cloud (AWS) already (per year..) So I seriously wonder if you asked the right questions instead of just tried to maintain the status quo ... One of those 'services' that I seriously think that the NCC should step away from .. is providing 'secondary' DNS server for reverse dns .. I mean .. come on .. how hard is that for the community to manage that by themselves .. and just because the NCC did that since the conception of the NCC ( or at least longer than I can remember ) .. is that still something that people use and expect the NCC to provide ? It might be good suggestion to setup an impartial task force / audit team.. reporting to the Executive Board (EB) .. that does (IT) spending audits .. looking for projects that are WAY over budgets, technical debt, overspending due to historic reasoning etc.. These should be externals to the RIPE NCC (staff), but with lots of different views and know how to spot a pet project when they see one .Or project, because we always did it that way. And then report to the EB with suggestions on how to act on it. I think it is then up to the EB, to discuss those findings internally and decide to have the discussion with the RIPE NCC Management on how to change and reduce the technical debt and how to actual cut cost. I have a gut feeling that the EB isn't getting all the information during the EB meetings or during the follow up's or it takes AGES to obtain the information or it is based on consolidated info, with 3 layers of management cutting and rewriting in between. The "Kill Your Darlings Audit Team" ( KYDAT ), should be the fresh look, to see if the NCC is still doing the right things .. and if the RIPE NCC management is managing towards a more agile and leaner future. This doesn't mean .. let's host everything at the public cloud and see how long the credit card keeps clearing .. it means that common sense with eye's from the outside of the RIPE NCC, might help to provide a better insight. The benefit of KYDAT is that they aren't 'burdened' with employee politics or with smoke and mirrors of certain management that is withholding / stalling documents of how bad it really is .. they will look for themselves .. and report and suggest. I don't envy the role that you have been tasked with ... But I was expecting something more serious .. Regards, Erik Bais

16 32

The redesigned www.ripe.net is now live
by Phillip Oldham 26 Jan '24

26 Jan '24

Dear colleagues, If you visit www.ripe.net today, you might notice some changes. For the past few months, we’ve been working on redesigning ripe.net, and we released the new version yesterday at approximately 18:00 UTC+1. Here are some of the major changes: • The design of the website has changed • The content management system has been changed from Plone to Wagtail • We migrated servers to make this switch • The website is now significantly more mobile and tablet friendly • We are using a new search engine on the website, so search results should be more relevant, and we will be investing time to make this experience even better • Accessibility has been improved, and we aim to align with WCAG 2.1 standards as soon as possible • Visitors should see some performance improvements, and we aim to continue adding improvements for usability and energy efficiency • The RIPE community is more prominent and easy to access from the top-level navigation under “community”, and we are applying a new community design to community-related pages: https://www.ripe.net/community/ The overall navigation of the website has not been significantly altered to ensure a smooth transition. We will be making more changes to the navigation to improve readability and discoverability. Many of you shared input in a survey and some of you joined us for user interviews at RIPE 86 and for conversations following my presentation at RIPE 87. Thank you for helping us through this process. While we have launched the newly redesigned website, with over 8,000 web pages migrated to the new platform, we know there will be fixes and tweaks needed in the weeks to come. If you notice any issues or have feedback, please let us know on the forum: https://forum.ripe.net/t/www-ripe-net-redesign-is-live/820 For anything urgent, please email us at webmaster(a)ripe.net Kind regards, Phillip Oldham (he/him) <poldham(a)ripe.net> Manager, Web Services RIPE NCC Stationsplein 11, 1012 AB Amsterdam

5 6

Re: [members-discuss] The redesigned www.ripe.net is now live
by Phillip Oldham 24 Jan '24

24 Jan '24

Hi Luca The LIR Portal is managed by a different team within the RIPE NCC, however I do know that there is an ongoing effort across teams to align the designs of our various applications with the refreshed www.ripe.net <http://www.ripe.net/> website design. Unfortunately I don’t have any further information at this time. I’ll forward your question to that team so they can reach out with further details. Best regards, Phillip Oldham (he/him) <poldham(a)ripe.net> Manager, Web Services RIPE NCC Stationsplein 11, 1012 AB Amsterdam > On 19 Jan 2024, at 14:55, Luca Marini <marini.luca(a)c1vhosting.it> wrote: > > Thanks for the new design, it looks cool! > > Do you plan to update the UI of the LIR portal too? > > > Luca Marini > Chief Commercial Officer > C1V Hosting > Direct: +39 324 6939 048 | Email: marini.luca(a)c1vhosting.it <mailto:marini.luca@c1vhosting.it> > Website: www.c1vhosting.it <http://www.c1vhosting.it/> | Telegram: t.me/c1vhosting <http://t.me/c1vhosting> > Empowering your digital world with sustainability and innovation: > 🌿 Sustainable Solutions: Committed to net zero with renewable energy. > 🌐 Broadband Services: Local and international connectivity. > 🔗 Data Services: WDM paths, Dark Fiber, IP transit. > ☁️ Cloud & Datacenter: Robust, eco-friendly infrastructure. > 🛡️ Cybersecurity: Advanced D/DoS defense and system integration. > > C1V Hosting: Pioneering sustainable digital connectivity. > > Confidentiality Notice: This email may contain confidential information for the sole use of the intended recipient. If you are not the intended recipient, please notify the sender and delete this email. Unauthorized use is prohibited. > > Thank you for choosing C1V Hosting, your partner for sustainable and innovative digital solutions. > > Warm regards, > > Luca Marini > > >> On 19 Jan 2024, at 14:51, Michele Neylon - Blacknight via members-discuss <members-discuss(a)ripe.net> wrote: >> >> >> This is great. Well done to all involved! >> >> >> >> -- >> Mr Michele Neylon >> Blacknight Solutions >> Hosting, Colocation & Domains >> https://www.blacknight.com/ >> https://blacknight.blog/ >> Intl. +353 (0) 59 9183072 >> Direct Dial: +353 (0)59 9183090 >> Personal blog: https://michele.blog/ >> Some thoughts: https://ceo.hosting/ >> ------------------------------- >> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 >> >> I have sent this email at a time that is convenient for me. I do not expect you to respond to it outside of your usual working hours. >> >> >> From: members-discuss <members-discuss-bounces(a)ripe.net> on behalf of Phillip Oldham <poldham(a)ripe.net> >> Date: Friday, 19 January 2024 at 12:18 >> To: members-discuss(a)ripe.net <members-discuss(a)ripe.net> >> Subject: [members-discuss] The redesigned www.ripe.net is now live >> >> [EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources. >> >> Dear colleagues, >> >> If you visit www.ripe.net <http://www.ripe.net/> today, you might notice some changes. For the past few months, we’ve been working on redesigning ripe.net, and we released the new version yesterday at approximately 18:00 UTC+1. >> >> Here are some of the major changes: >> • The design of the website has changed >> • The content management system has been changed from Plone to Wagtail >> • We migrated servers to make this switch >> • The website is now significantly more mobile and tablet friendly >> • We are using a new search engine on the website, so search results should be more relevant, and we will be investing time to make this experience even better >> • Accessibility has been improved, and we aim to align with WCAG 2.1 standards as soon as possible >> • Visitors should see some performance improvements, and we aim to continue adding improvements for usability and energy efficiency >> • The RIPE community is more prominent and easy to access from the top-level navigation under “community”, and we are applying a new community design to community-related pages: >> https://www.ripe.net/community/ >> >> The overall navigation of the website has not been significantly altered to ensure a smooth transition. We will be making more changes to the navigation to improve readability and discoverability. >> >> Many of you shared input in a survey and some of you joined us for user interviews at RIPE 86 and for conversations following my presentation at RIPE 87. Thank you for helping us through this process. >> >> While we have launched the newly redesigned website, with over 8,000 web pages migrated to the new platform, we know there will be fixes and tweaks needed in the weeks to come. If you notice any issues or have feedback, please let us know on the forum: >> https://forum.ripe.net/t/www-ripe-net-redesign-is-live/820 >> >> For anything urgent, please email us at webmaster(a)ripe.net >> >> Kind regards, >> >> Phillip Oldham (he/him) <poldham(a)ripe.net> >> Manager, Web Services >> RIPE NCC >> Stationsplein 11, 1012 AB Amsterdam >> >> >> _______________________________________________ >> members-discuss mailing list >> members-discuss(a)ripe.net >> https://lists.ripe.net/mailman/listinfo/members-discuss >> Unsubscribe: https://lists.ripe.net/mailman/options/members-discuss/michele%40blacknight… >> _______________________________________________ >> members-discuss mailing list >> members-discuss(a)ripe.net <mailto:members-discuss@ripe.net> >> https://lists.ripe.net/mailman/listinfo/members-discuss >> Unsubscribe: https://lists.ripe.net/mailman/options/members-discuss/support%40c1vhosting…

5 4

Re: [members-discuss] [ncc-services-wg] The redesigned www.ripe.net is now live
by Petrit Hasani 22 Jan '24

22 Jan '24

Dear Randy, Thank you for your report. We have investigated the reported issue. The issue is not as a result of the recent work carried out on the new ripe.net <http://ripe.net/> website. Your AS number submission receives an error due to the “AS-“ prefix which is not allowed to be used in an as-name. The “AS-“ prefix is is a reserved prefix for AS SET in accordance with RFC 2622: Routing Policy Specification Language (RPSL): https://datatracker.ietf.org/doc/html/rfc2622#section-2 RFC 2622: Routing Policy Specification Language (RPSL) datatracker.ietf.org The error message received in the request form does not properly clarify it, creating confusion, so we will look to fix it as soon as possible. Please do not hesitate to contact us if you have any questions or concerns. Kind regards, Petrit Hasani RIPE NCC > On 22 Jan 2024, at 16:12, Petrit Hasani <phasani(a)ripe.net> wrote: > > Dear Randy, > > Thank you for reporting the bug. > > We will look into it and hope to resolve it as soon as possible. > > I will contact you once a fix has been deployed. > > Please do not hesitate to contact us if you have any other questions or concerns. > > Kind regards, > > Petrit Hasani > RIPE NCC > >> On 20 Jan 2024, at 21:28, Randy Bush <randy(a)psg.com <mailto:randy@psg.com>> wrote: >> >>> Date: Fri, 19 Jan 2024 13:16:42 +0100 >>> If you visit www.ripe.net today, you might notice some changes. >> >> deploy on friday afternoon and go home for the weekend. i think that is >> covered pretty early in the textbook. >> >> <ripe-asn.jpg> >> which i can fudge past by skipping the hyphens, but then i submit the AS >> allocation form and get >> >> <ripe-ouch.jpg> >> was a show stopper. and it reproduces. with safari and firefox. and >> when i go to re-do, it has not saved the data i entered. >> >> randy-- >> >> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://lists.ripe.net/mailman/listinfo/ncc-services-wg

2 2

two-factor authentication mandatory
by Mike B 22 Jan '24

22 Jan '24

Hello, I agree completely with the use of 2FA and do agree with the spirit of this being mandatory. However the current state of RIPE NCC MFA is not suitable to be made mandatory. Namely the TOTP requires a phone (sms) or TOTP App. I would like to see support for FIDO2 keys, if this is not possible OTP via email would be a compromise. My rational for this is that some organisations do not allow phones within the office, nor have any Apps available to install on their systems. Perhaps a more generic scenario is if a phone is out of battery. I'm sure you can appreciate while I am in favour of MFA I think this must be in a different format. I'm aware this is a feature many have been keen for for a while. I see two ways forward: 1) RIPE supports another method of MFA (FIDO KEYS or emailed OTP). 2) RIPE makes Mandatory MFA the choice of the LIR admin. I would like to hear other views on this request to the RIPE NCC. I am not looking for suggestions for workarounds such as online TOTP or writing my own code for this. Regards, Michael

13 14

[Ticket #675089] Re: The redesigned www.ripe.net is now live
by FlexiScale Flexiscale Support 21 Jan '24

21 Jan '24

Franziska Kunsmann, Thank you for request. We will be in touch shortly. SUBJECT: Re: [members-discuss] The redesigned www.ripe.net is now live STATUS: Open http://myservices.flexiscale.com/?cmd=tickets&action=view&num=675089&hash=s…

1 0

Re: [members-discuss] [ncc-services-wg] The redesigned www.ripe.net is now live
by Randy Bush 20 Jan '24

20 Jan '24

> Date: Fri, 19 Jan 2024 13:16:42 +0100 > If you visit www.ripe.net today, you might notice some changes. deploy on friday afternoon and go home for the weekend. i think that is covered pretty early in the textbook. which i can fudge past by skipping the hyphens, but then i submit the AS allocation form and get was a show stopper. and it reproduces. with safari and firefox. and when i go to re-do, it has not saved the data i entered. randy

1 1

Re: [members-discuss] two-factor authentication mandatory
by Oleksij Samorukov 11 Jan '24

11 Jan '24

On 2024/01/11 14:48, Mark Janssen via members-discuss wrote: > On Thu, 2024-01-11 at 14:35 +0100, Mike B wrote: >> My rational for this is that some organisations do not allow phones >> within the office, nor have any Apps available to install on their >> systems. Perhaps a more generic scenario is if a phone is out of >> battery. I'm sure you can appreciate while I am in favour of MFA I >> think this must be in a different format. > > TOTP can be done without phones or phone apps... it just needs the > shared secret and a HMAC fucntion, this can be done via various > password-managers, simple python-scripts, your Ti-81 calculator or any > number of other methods. > > I would advise against any form of e-mail 2fa, as this really reduces > it to a single-factor (with password-resets via email). BTW, TOTP is supported by a recent Yubi key, so you can use it as a hardware token as well. But +1 for FIDO2 implementation, is a very popular standard with many implementations on the market. And it should be easy to implement on the backend/frondent side, implementation is very straightforward with many examples all-around. -- Oleksij Samorukov

1 0