- members-discuss - mailman.ripe.net

Questions about the published Draft Agenda and Supporting Documents
by Erik Bais 30 Mar '24

30 Mar '24

Dear Hans Petter, Thank you for providing the supporting documents for the GM in Rome. Before we are going to be in Rome, I have a question for you and I cc:'ed the member-discuss ML, as I'm sure some other members might also have a couple questions on the following topic. I would like to ask you, how the RIPE NCC thought it was a great slide to present just a 2Milj Euro budget cut .. as if it was the best it could do .. given that it was stated on the last GM .. that it wasn't going to increase the budget .. And with the inflation, basically what that means .. you need to cut cost and cut hard ... So I would assume that the Director of the NCC .. would see this as an opportunity ... and discuss with management and staff, what is excessive .. and where can we 'kill our darlings' ... As for any writer that needs to do proper editing of a long novel .. I get the feeling that you didn't went/wanted to go through that process .. not as fierce as that the membership have suggested you to do .. And I would suggest that this budget document, need some serious editing ... One of the reasons for my disbelieve that you did that process already properly .. is that if I see an IT spend of 7.6 milj. Euro (2023 ) and you proudly present that the IT spend for 2024 is going to be 7.4 milj Euro .. Either you have a HUGE technical debt that you can't manage .. or you didn't went head to head with your CTO / IT Director ... and stopped asking for more cuts until he actually sad in your office crying in despair. Just an example ... If I'm correct, the RIPE NCC is currently in a datacenter facility in Amsterdam .. with roughly 80 cabinets filled with $random equipment, almost half of that (most likely as my gut feeling is ) to store and hold every single ICMP ping/trace life on disk etc.. since the conception of the Atlas project.. And the best you can come back to the community is .. we've managed to reduce the cost of Atlas with 50.000 euro p/yr ? The proper question to ask is, do we need every freaking completed test to store that into infinity on spinning disks .. because we never asked the community if we can just through away every PING test result after 60 days . and save 20 cabinets in storage, equipment and power usage. Who are you kidding ... And that colocation / hw cost is next to the already half milj. Euro charge for the public cloud (AWS) already (per year..) So I seriously wonder if you asked the right questions instead of just tried to maintain the status quo ... One of those 'services' that I seriously think that the NCC should step away from .. is providing 'secondary' DNS server for reverse dns .. I mean .. come on .. how hard is that for the community to manage that by themselves .. and just because the NCC did that since the conception of the NCC ( or at least longer than I can remember ) .. is that still something that people use and expect the NCC to provide ? It might be good suggestion to setup an impartial task force / audit team.. reporting to the Executive Board (EB) .. that does (IT) spending audits .. looking for projects that are WAY over budgets, technical debt, overspending due to historic reasoning etc.. These should be externals to the RIPE NCC (staff), but with lots of different views and know how to spot a pet project when they see one .Or project, because we always did it that way. And then report to the EB with suggestions on how to act on it. I think it is then up to the EB, to discuss those findings internally and decide to have the discussion with the RIPE NCC Management on how to change and reduce the technical debt and how to actual cut cost. I have a gut feeling that the EB isn't getting all the information during the EB meetings or during the follow up's or it takes AGES to obtain the information or it is based on consolidated info, with 3 layers of management cutting and rewriting in between. The "Kill Your Darlings Audit Team" ( KYDAT ), should be the fresh look, to see if the NCC is still doing the right things .. and if the RIPE NCC management is managing towards a more agile and leaner future. This doesn't mean .. let's host everything at the public cloud and see how long the credit card keeps clearing .. it means that common sense with eye's from the outside of the RIPE NCC, might help to provide a better insight. The benefit of KYDAT is that they aren't 'burdened' with employee politics or with smoke and mirrors of certain management that is withholding / stalling documents of how bad it really is .. they will look for themselves .. and report and suggest. I don't envy the role that you have been tasked with ... But I was expecting something more serious .. Regards, Erik Bais

16 32

Re: [members-discuss] RIPE NCC Charging Scheme 2025 Open House: Recording and Slides Available
by Andrea Borghi 29 Mar '24

29 Mar '24

On Thursday 28 March 2024 18:17:47 Sebastien Brossier wrote: > On 28/03/2024 16:53, sdy(a)a-n-t.ru wrote: [..] > You're right, small and big can mean different things and there are > various financial realities. > > But the only practical metric for RIPE NCC is the number of IP > addresses. From there we can only assume that LIRs with lots of IP > addresses have enough money for a higher membership fee, and that LIRs > with very limited finances just have their initial allocation. > Far from perfect, but it is difficult to do better. [..] Please keep in mind that we moved from an allocation of an intangible technical resource (IPv4 addresses) to a scarcity of that while permitting the sale of that resource between parties, thus creating a market that assigned a value to that resource and consequentially has created an asset value that the companies have (should have?) put in the balance sheet. With this view is not so immediate to force the small companies (the not so small ones doesn't have this problem) to devalue their company in order to keep the costs low. It is a slippery road and for me was the first obrstacle to the poll and the resolution last year. From a practical stand point i think we can make a more informed calculation based on HOW MANY additional resources a company has requested and was granted beyond their INITIAL allocation ad the last-assignment in case of v4. See to myself, for example, i have a /21 that was the standard allocation at the time of me joining Ripe, and the last v4 allocation we all been offered in the past. Beyond that i will get my standard initial allocation of v6 addresses. Can I considered a big player? by no means. But last year in the proposal I was in the medium category with almost doubling the membership, and if forced to sell the addresses I have free at the moment i will suffer almost an halfing of the assets of my company, so i am not inclined to do that for a miriad of reasons. My humble proposal is to class basing on how many additional resources a company have beyond the basics that was valid at the time of joining Ripe. This manner of thinking, will naturally shift the majority of financial burdens to the very large organizations that, for the fact to be very large, can handle the money BUT with the provision to not alter the governance of Ripe (more money normally makes more power and influence, and we don't want this.) Best Regards, Andrea Borghi --------------------------------------------------------------------------------------------------------------- Andrea Borghi - W KEY srl - http://www.wkey.it

10 11

RIPE NCC Security Update
by Eleonora Petridou 19 Mar '24

19 Mar '24

Dear colleagues, We would like to share some updates regarding security measures available to RIPE NCC members. We have now introduced a feature that shows LIR administrators whether or not two-factor authentication (2FA) has been enabled by users on their LIR account. This feature allows LIR administrators greater insight into the security measures being implemented within their teams. Please note that only admins have access to this feature. We have also strengthened password requirements and added a reminder to enable 2FA when users log in to their RIPE NCC Access accounts. This is an interim measure until mandatory 2FA is rolled out. Our roadmaps have been updated to expedite the rollout of mandatory two-factor authentication: https://www.ripe.net/support/documentation/quarterly-planning/business-appl… The rollout is currently planned to take place towards the end of Q1 2024. Additionally, we have increased our efforts to actively identify leaked credentials available online and to reset those passwords. The password reset process for any credentials identified as leaked through our monitoring system has been automated. We urge all members to be mindful of their password security and to enable two-factor authentication. Please follow our security recommendations: - Review your LIR account(s), restrict access to necessary personnel only and remove former employee accounts. - Make use of our new feature and ensure that all users on your account enable two-factor authentication. - If you use a password management tool, we recommend that you enable data breach monitoring for your own credentials. Kind regards, Eleonora Petridou Chief Information Security Officer RIPE NCC

1 0

Consultation on RIPE NCC Charging Scheme 2025
by Fergal Cunningham 18 Mar '24

18 Mar '24

Dear RIPE NCC members, I want to remind you that this Wednesday, 20 March, from 10:00-11:30 UTC (11:00-12:30 CET) we will have an Open House where members can give their input on the RIPE NCC Charging Scheme 2025. You can register to attend now at: https://www.ripe.net/membership/meetings/open-house/ripe-ncc-charging-schem… This open house will kick off discussion on the charging scheme and will give the Executive Board valuable input ahead of its meeting on 25 March, where it will decide on the draft charging proposal it will present to the members. All those who register to attend will receive a Meetecho link to participate in the open house on Wednesday morning. This year, we want to receive input from members before publishing any draft charging scheme. We believe this will help to arrive at a good proposal well in advance of the General Meeting. To help with discussions, we also provide a consultation page where members can see relevant facts and documentation about the charging scheme as well as the financial landscape the RIPE NCC is operating in. We will develop this page with further information as the consultation progresses: https://www.ripe.net/membership/mail/member-and-community-consultations/cha… We look forward to your involvement in this important process for RIPE NCC members. Kind regards, Fergal Cunningham Head of Membership Engagement RIPE NCC Key Dates 20 March - Consultation with members begins at Charging Scheme 2025 Open House 25 March - RIPE NCC Executive Board discusses charging scheme proposal to put forward to members 27 March - Registration for RIPE NCC General Meeting opens 10 April - Draft charging scheme proposal published for members to discuss 24 April - Final charging scheme proposal published for members to vote on 22-24 May - RIPE NCC membership votes on charging scheme options for 2025

1 0

RIPE NCC Charging Scheme 2025: Open House on 20 March 11:00-12:30 UTC+1
by Fergal Cunningham 05 Mar '24

05 Mar '24

Dear members, We invite you to take part in an Open House on 20 March to discuss the RIPE NCC Charging Scheme 2025. This year, we would like to get input from the members before the Executive Board proposes one or more charging schemes to be discussed and voted on by members. You can register to attend now at: https://www.ripe.net/membership/meetings/open-house/ripe-ncc-charging-schem… The RIPE NCC will give a presentation at the Open House that explains the current outlook and financial considerations, and then take input and guidance from the members on this important topic. The Open House will be recorded for those who can not attend on the day. The following Monday, 25 March, a RIPE NCC Executive Board Meeting will take place where the Board and Management will discuss the input from members and decide on one or more draft charging schemes to propose to the membership to be voted on at the May General Meeting. We will provide background information and data that can help guide discussions ahead of the Open House. And of course we encourage members to continue to discuss the 2025 charging scheme on this list after the Open House takes place. We look forward to your participation. Kind regards, Fergal Cunningham Head of Membership Engagement RIPE NCC

1 0

[GM] Call for Volunteers for Executive Board Election Code of Conduct Team
by Ondrej Filip 14 Feb '24

14 Feb '24

Dear members, This is a call for volunteers from the membership to join the Executive Board Election Code of Conduct Team for the May 2024 General Meeting elections. The Executive Board election of 2024 will be the fourth to have a Code of Conduct (CoC) for Executive Board Election candidates. I should make it clear that this is a separate Code of Conduct to the RIPE NCC and RIPE community CoCs. This code has been established and is only in effect for confirmed candidates during the election process. An Executive Board Election Code of Conduct Team was also established to evaluate reports of violations of the Code of Conduct. The team for 2023 was made up of six volunteers and the Executive Board would like to express its gratitude to Cynthia Revström, Arnold Nipper, Annie Yanyan Yang, Kris Edgar, Nat Morris and Sebastian Becker who carried out this important work. The Executive Board would now like to ask for volunteers from the membership to be on the Executive Board Election Code of Conduct Team for the May 2024 election. The task of this team will be to evaluate any reports of violations of the election Code of Conduct by candidates. If the team confirms that a violation of the election Code of Conduct has taken place, disqualification of the candidate in question can take place. If you are willing to participate in this role, please send a mail to <agm(a)ripe.net> by *6 March 2024*. The Board will appoint members of the team from the list of those that volunteer. Members should not volunteer if they expect to become candidates in the election. The Executive Board Election Code of Conduct can be found at: https://www.ripe.net/membership/meetings/gm/meetings/may-2024/executive-boa… Kind regards, Ondřej Filip Chair, RIPE NCC Executive Board

1 0

The redesigned www.ripe.net is now live
by Phillip Oldham 26 Jan '24

26 Jan '24

Dear colleagues, If you visit www.ripe.net today, you might notice some changes. For the past few months, we’ve been working on redesigning ripe.net, and we released the new version yesterday at approximately 18:00 UTC+1. Here are some of the major changes: • The design of the website has changed • The content management system has been changed from Plone to Wagtail • We migrated servers to make this switch • The website is now significantly more mobile and tablet friendly • We are using a new search engine on the website, so search results should be more relevant, and we will be investing time to make this experience even better • Accessibility has been improved, and we aim to align with WCAG 2.1 standards as soon as possible • Visitors should see some performance improvements, and we aim to continue adding improvements for usability and energy efficiency • The RIPE community is more prominent and easy to access from the top-level navigation under “community”, and we are applying a new community design to community-related pages: https://www.ripe.net/community/ The overall navigation of the website has not been significantly altered to ensure a smooth transition. We will be making more changes to the navigation to improve readability and discoverability. Many of you shared input in a survey and some of you joined us for user interviews at RIPE 86 and for conversations following my presentation at RIPE 87. Thank you for helping us through this process. While we have launched the newly redesigned website, with over 8,000 web pages migrated to the new platform, we know there will be fixes and tweaks needed in the weeks to come. If you notice any issues or have feedback, please let us know on the forum: https://forum.ripe.net/t/www-ripe-net-redesign-is-live/820 For anything urgent, please email us at webmaster(a)ripe.net Kind regards, Phillip Oldham (he/him) <poldham(a)ripe.net> Manager, Web Services RIPE NCC Stationsplein 11, 1012 AB Amsterdam

5 6

Re: [members-discuss] The redesigned www.ripe.net is now live
by Phillip Oldham 24 Jan '24

24 Jan '24

Hi Luca The LIR Portal is managed by a different team within the RIPE NCC, however I do know that there is an ongoing effort across teams to align the designs of our various applications with the refreshed www.ripe.net <http://www.ripe.net/> website design. Unfortunately I don’t have any further information at this time. I’ll forward your question to that team so they can reach out with further details. Best regards, Phillip Oldham (he/him) <poldham(a)ripe.net> Manager, Web Services RIPE NCC Stationsplein 11, 1012 AB Amsterdam > On 19 Jan 2024, at 14:55, Luca Marini <marini.luca(a)c1vhosting.it> wrote: > > Thanks for the new design, it looks cool! > > Do you plan to update the UI of the LIR portal too? > > > Luca Marini > Chief Commercial Officer > C1V Hosting > Direct: +39 324 6939 048 | Email: marini.luca(a)c1vhosting.it <mailto:marini.luca@c1vhosting.it> > Website: www.c1vhosting.it <http://www.c1vhosting.it/> | Telegram: t.me/c1vhosting <http://t.me/c1vhosting> > Empowering your digital world with sustainability and innovation: > 🌿 Sustainable Solutions: Committed to net zero with renewable energy. > 🌐 Broadband Services: Local and international connectivity. > 🔗 Data Services: WDM paths, Dark Fiber, IP transit. > ☁️ Cloud & Datacenter: Robust, eco-friendly infrastructure. > 🛡️ Cybersecurity: Advanced D/DoS defense and system integration. > > C1V Hosting: Pioneering sustainable digital connectivity. > > Confidentiality Notice: This email may contain confidential information for the sole use of the intended recipient. If you are not the intended recipient, please notify the sender and delete this email. Unauthorized use is prohibited. > > Thank you for choosing C1V Hosting, your partner for sustainable and innovative digital solutions. > > Warm regards, > > Luca Marini > > >> On 19 Jan 2024, at 14:51, Michele Neylon - Blacknight via members-discuss <members-discuss(a)ripe.net> wrote: >> >> >> This is great. Well done to all involved! >> >> >> >> -- >> Mr Michele Neylon >> Blacknight Solutions >> Hosting, Colocation & Domains >> https://www.blacknight.com/ >> https://blacknight.blog/ >> Intl. +353 (0) 59 9183072 >> Direct Dial: +353 (0)59 9183090 >> Personal blog: https://michele.blog/ >> Some thoughts: https://ceo.hosting/ >> ------------------------------- >> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845 >> >> I have sent this email at a time that is convenient for me. I do not expect you to respond to it outside of your usual working hours. >> >> >> From: members-discuss <members-discuss-bounces(a)ripe.net> on behalf of Phillip Oldham <poldham(a)ripe.net> >> Date: Friday, 19 January 2024 at 12:18 >> To: members-discuss(a)ripe.net <members-discuss(a)ripe.net> >> Subject: [members-discuss] The redesigned www.ripe.net is now live >> >> [EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources. >> >> Dear colleagues, >> >> If you visit www.ripe.net <http://www.ripe.net/> today, you might notice some changes. For the past few months, we’ve been working on redesigning ripe.net, and we released the new version yesterday at approximately 18:00 UTC+1. >> >> Here are some of the major changes: >> • The design of the website has changed >> • The content management system has been changed from Plone to Wagtail >> • We migrated servers to make this switch >> • The website is now significantly more mobile and tablet friendly >> • We are using a new search engine on the website, so search results should be more relevant, and we will be investing time to make this experience even better >> • Accessibility has been improved, and we aim to align with WCAG 2.1 standards as soon as possible >> • Visitors should see some performance improvements, and we aim to continue adding improvements for usability and energy efficiency >> • The RIPE community is more prominent and easy to access from the top-level navigation under “community”, and we are applying a new community design to community-related pages: >> https://www.ripe.net/community/ >> >> The overall navigation of the website has not been significantly altered to ensure a smooth transition. We will be making more changes to the navigation to improve readability and discoverability. >> >> Many of you shared input in a survey and some of you joined us for user interviews at RIPE 86 and for conversations following my presentation at RIPE 87. Thank you for helping us through this process. >> >> While we have launched the newly redesigned website, with over 8,000 web pages migrated to the new platform, we know there will be fixes and tweaks needed in the weeks to come. If you notice any issues or have feedback, please let us know on the forum: >> https://forum.ripe.net/t/www-ripe-net-redesign-is-live/820 >> >> For anything urgent, please email us at webmaster(a)ripe.net >> >> Kind regards, >> >> Phillip Oldham (he/him) <poldham(a)ripe.net> >> Manager, Web Services >> RIPE NCC >> Stationsplein 11, 1012 AB Amsterdam >> >> >> _______________________________________________ >> members-discuss mailing list >> members-discuss(a)ripe.net >> https://lists.ripe.net/mailman/listinfo/members-discuss >> Unsubscribe: https://lists.ripe.net/mailman/options/members-discuss/michele%40blacknight… >> _______________________________________________ >> members-discuss mailing list >> members-discuss(a)ripe.net <mailto:members-discuss@ripe.net> >> https://lists.ripe.net/mailman/listinfo/members-discuss >> Unsubscribe: https://lists.ripe.net/mailman/options/members-discuss/support%40c1vhosting…

5 4

Re: [members-discuss] [ncc-services-wg] The redesigned www.ripe.net is now live
by Petrit Hasani 22 Jan '24

22 Jan '24

Dear Randy, Thank you for your report. We have investigated the reported issue. The issue is not as a result of the recent work carried out on the new ripe.net <http://ripe.net/> website. Your AS number submission receives an error due to the “AS-“ prefix which is not allowed to be used in an as-name. The “AS-“ prefix is is a reserved prefix for AS SET in accordance with RFC 2622: Routing Policy Specification Language (RPSL): https://datatracker.ietf.org/doc/html/rfc2622#section-2 RFC 2622: Routing Policy Specification Language (RPSL) datatracker.ietf.org The error message received in the request form does not properly clarify it, creating confusion, so we will look to fix it as soon as possible. Please do not hesitate to contact us if you have any questions or concerns. Kind regards, Petrit Hasani RIPE NCC > On 22 Jan 2024, at 16:12, Petrit Hasani <phasani(a)ripe.net> wrote: > > Dear Randy, > > Thank you for reporting the bug. > > We will look into it and hope to resolve it as soon as possible. > > I will contact you once a fix has been deployed. > > Please do not hesitate to contact us if you have any other questions or concerns. > > Kind regards, > > Petrit Hasani > RIPE NCC > >> On 20 Jan 2024, at 21:28, Randy Bush <randy(a)psg.com <mailto:randy@psg.com>> wrote: >> >>> Date: Fri, 19 Jan 2024 13:16:42 +0100 >>> If you visit www.ripe.net today, you might notice some changes. >> >> deploy on friday afternoon and go home for the weekend. i think that is >> covered pretty early in the textbook. >> >> <ripe-asn.jpg> >> which i can fudge past by skipping the hyphens, but then i submit the AS >> allocation form and get >> >> <ripe-ouch.jpg> >> was a show stopper. and it reproduces. with safari and firefox. and >> when i go to re-do, it has not saved the data i entered. >> >> randy-- >> >> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://lists.ripe.net/mailman/listinfo/ncc-services-wg

2 2

two-factor authentication mandatory
by Mike B 22 Jan '24

22 Jan '24

Hello, I agree completely with the use of 2FA and do agree with the spirit of this being mandatory. However the current state of RIPE NCC MFA is not suitable to be made mandatory. Namely the TOTP requires a phone (sms) or TOTP App. I would like to see support for FIDO2 keys, if this is not possible OTP via email would be a compromise. My rational for this is that some organisations do not allow phones within the office, nor have any Apps available to install on their systems. Perhaps a more generic scenario is if a phone is out of battery. I'm sure you can appreciate while I am in favour of MFA I think this must be in a different format. I'm aware this is a feature many have been keen for for a while. I see two ways forward: 1) RIPE supports another method of MFA (FIDO KEYS or emailed OTP). 2) RIPE makes Mandatory MFA the choice of the LIR admin. I would like to hear other views on this request to the RIPE NCC. I am not looking for suggestions for workarounds such as online TOTP or writing my own code for this. Regards, Michael

13 14