October 2010 - ncc-services-wg

New RIPE NCC Procedural Document Available
by Andrea Cima 28 Feb '11

28 Feb '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [Apologies for duplicate emails] Dear Colleagues, The RIPE NCC has published a new RIPE NCC procedural document: ripe-475, "Independent Internet Number Resources – Contractual Relationship Changes between sponsoring LIR and End User" This document describes the steps to be taken when there are changes in the contractual relationship between the End User of independent Internet number resources and the sponsoring Local Internet Registry (LIR). It also describes the scenarios in which the RIPE NCC may de-register independent Internet number resources and what happens to those resources once they are de-registered. The new document is available at: http://www.ripe.net/ripe/docs/ripe-475.html Kind regards, Andrea Cima RIPE NCC -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkpfPukACgkQXOgsmPkFrjNlEwCcDtE364DhQCU0USBoK3kJhord yBgAoMbRsLFCStkXfvEaV6Mtm5b2sfxW =fKC3 -----END PGP SIGNATURE-----

8 11

RIPE NCC Membership Statistics published on RIPE Labs
by Mirjam Kuehne 17 Feb '11

17 Feb '11

[apologies for duplicates] Dear colleagues, With the year 2009 behind us, we looked at RIPE NCC membership growth and demographics over time. You can find some interesting statistics on RIPE Labs: http://labs.ripe.net/content/ripe-ncc-membership-growth Next we will look at the distribution of number resources among the membership. Stay tuned! Kind Regards, Mirjam Kuehne

1 1

New and Improved RIPE Registry Global Resource Service
by Mirjam Kuehne 12 Jan '11

12 Jan '11

[Apologies for duplicate emails] Dear colleagues, We have redesigned and improved the way we mirror other databases (Thanks to the RIPE NCC Database staff!). We now have a method of translating the operational data from other registries (for instance from other RIRs or the RADb) into the RIPE Database structure. This means the RIPE Database will contain the most complete set of operational data in (RIPE) RPSL format that has ever been available in one place. Read more on RIPE Labs: http://labs.ripe.net/Members/Paul_P_/ripe-registry-global-resource-service Kind Regards, Mirjam Kuehne RIPE NCC

3 3

Outage Report for RIPE Database Updates
by Denis Walker 28 Oct '10

28 Oct '10

[Apologies for duplicate emails] Dear colleagues, Between approximately 14:10 and 14:40 (UTC) on 27 October 2010, we experienced an outage of the RIPE Database update service. During this period, no updates were processed. It was not possible to access the update service via any of the web-based or synchronous interfaces. Updates sent via email are queued and will be executed later. However, we recommend that users check their acknowledgement reports. We apologise for any inconvenience this may have caused. Regards, Paul Palse Database Group RIPE NCC

1 0

Independent Resource procedure and implementation
by Daniel Suchy 28 Oct '10

28 Oct '10

Hello, I would like to open discussion related to "Action Required: Contractual Relationship for Independent Resource Assignments" emails, that almost all LIRs received from RIPE NCC in the past. I have some notes from perspective of small LIR (or from perspective of person helping running multiple small LIRs). My first note points to system in general. Although RIPE NCC has many required informations in own existing databases already, it requires additional action from LIR in general. Typical small LIR has one or more PA allocations and exactly _one_ autonomous system registered. In RIPE database, there are records matching allocated PA prefix and ASN (route objects with proper origin AS and related inetnum objects, many ASNs has paired LIRs org: in aut-num object). In addition, RIS service (with history!) can be used for verification of these informations obtained automatically from database. For incomprehensible reason, RIPE NCC doesn't use these informations at all and instead of this abuses ALL LIRs with submiting simple form with exactly one record within it. I thing RIPE RCC has enough resources (financial and human) to do that automatically. My second note points to implementation of this new tool. I discovered, that I'm not able to "new" tool used for confirmation. I'm using PKI login feature and I have one identity paired with more LIRs. Although I'm able login to the LIR portal and modify everything I need with my certificate, I'm _NOT_ able to update informations on "Independent Resources" page. The main reason is, that RIPE NCC created new and separated (!) tool instead of simple integration of new feature/functionality to existing LIR portal. So, instead of reusing existing code used for LIR portal authentication, new outside code was developed for this new tool. And this new code doesn't implement all authentication features from LIR portal. In my point of view, this is quite unprofessional approach of modern application development. Aplications should be multi-layer, allowing easy new feature implementation. I reported this issue to RIPE NCC on friday last week, but first "answer" I received yesterday from RIPE NCC was initiation of audit in one LIR. Just fortuitous event? I don't believe. I have no problems with audit itself, I have all records, but this takes some additional time (and of course, money). Just because I claimed some problems to RIPE NCC staff due to problematic internal _implementation_ of new policy. Ok, I would like to open public discussions about this problem. There are some questions to answer and discuss: * why RIPE NCC just doesn't use informations from RIPE database in case of their availability and verifiability, why abuses small LIRs instead * why aren't RIS data used for automatic obtaining of requested informations, where this can be applicable * why RIPE NCC didn't integrate "confirmation" tool to existing LIR portal and why new outside application with _limited_ functionality was developed instead of reusing of existing code and functionality * what architecture is used for LIR portal in general, can be there easily implemented new features Of course, I understand, that there are large LIRs and some historic mess, where this action may be required due to lack of records in existing databases. But, I think this is NOT a case of LIRs started in past couple of years, where all required data should be available. With regards, Daniel

13 28

Active Measurements (RIPE Atlas) - Registration Open Now
by Mirjam Kuehne 22 Oct '10

22 Oct '10

[Apologies for duplicate emails] Dear colleagues, The launch date of our new active measurements network, RIPE Atlas, is close. We already received a lot of interest and offers to host such a probe. Registration is now open! In this new RIPE Labs article, we explain some more details about how to participate in this effort: http://labs.ripe.net/Members/kistel/ripe-atlas-pre-registration-is-now-open For more information, please refer to earlier articles on the same topic: 1. Active Measurements Need More Vantage Points https://labs.ripe.net/Members/dfk/active-measurements-need-more-vantage-poi… 2. Active Measurements - A Small Probe https://labs.ripe.net/Members/dfk/a-small-probe-for-active-measurements?sea… 3. Active Measurements - Hosting a Probe https://labs.ripe.net/Members/dfk/active_measurements/hosting-a-probe-for-a… 4. Wanted: Partners to Sponsor "RIPE Atlas" Effort http://labs.ripe.net/Members/dfk/active-measurements-sponsorship Kind Regards, Mirjam Kuehne RIPE NCC

1 0

Outage Report for RIPE Database Updates
by Agoston Horvath 22 Oct '10

22 Oct '10

[Apologies for duplicates] Dear colleagues, Between approximately 11:50 and 12:20 (UTC), 21 October 2010, we experienced an outage on the web server www.db.ripe.net. During this period it was not possible to connect to the syncupdates or webupdates services or use whois.cgi (the web-based GUI for whois queries). Services not depending on the HTTP protocol (whois queries, mailupdates) were not affected. We apologise for any inconvenience that this may have caused. Regards, Agoston Horvath Database Group RIPE NCC

1 0

personal data in the NCC
by Sergey Myasoedov 21 Oct '10

21 Oct '10

Hello, I would like to talk about personal data protection. After the audit process, NCC demands that we send them, together with the contract, the ID of person who signs the End User assignment contract (even if the contract is signed by a person on behalf of company). It seems strange: the CEO of company that wants IP resources signs the contract, probably stamps it and suddenly (!) RIPE NCC asks for the ID of CEO. We (LIR) have no choice on such operations - we should request ID or RIPE NCC will not assign resources for our customers. Even more, RIPE NCC requires scans of ID, and this action violates local laws in some countries (for example, CZ or RU). In Russia, personal data can be processed only after a special agreement (except some cases mentioned in the law), but we will send the ID images without any special agreements to the NCC. I tried to find some statements on data protection in the RIPE NCC or on any guarantee of confidentiality, but no such information found in the standard service agreement or any policy documents. On these grounds, I would like to initiate a change. RIPE NCC should have data protection procedures or RIPE NCC should not request personal IDs of third parties. -- Sergey

14 33

Optimize to be new LIR progress
by Shahin Gharghi 21 Oct '10

21 Oct '10

Dear Ripe NCC I am a LIR maintainer. I have a suggestion for you. would you make a checklist for peoples who are new to ripe and LIR? I mean make a checklist for all steps to be a LIR. from A to Z for example: 1. fill the First form <LINK> 2. receive a mail <when> 3. sign the papers 4. ... 5. ... 6. request a PA - by email: <sample form> - by webupdate <sample form> - by wizard <sample form> 20. ... 21. set the IPs on your machines I guess its better to understand for newbies. because they can see all of steps at first. and second suggestion: you can choose self candidate from old LIRs. and put their contact details on your website. and new users can talk to him in native language. It's allow users to exchange their experiences together. Thank you. -- Best Regards. Shahin Gharghi www.PersianAdmins.com www.Gharghi.ir Cell : +98 917 3009177

5 5

Re: Optimize to be new LIR progress (Shahin Gharghi)
by Shahin Gharghi 20 Oct '10

20 Oct '10

> Message: 5 > Date: Wed, 20 Oct 2010 11:25:35 +0200 > From: Sergey Myasoedov <sergey(a)devnull.ru> > To: ncc-services-wg(a)ripe.net > Subject: [ncc-services-wg] personal data in the NCC > > Hello, > > I would like to talk about personal data protection. After the audit proc= > ess, NCC demands > that we send them, together with the contract, the ID of person who signs= > the End User > assignment contract (even if the contract is signed by a person on behalf= > of company). > > It seems strange: the CEO of company that wants IP resources signs the co= > ntract, probably > stamps it and suddenly (!) RIPE NCC asks for the ID of CEO. We (LIR) have= > no choice on such > operations - we should request ID or RIPE NCC will not assign resources f= > or our customers. > > Even more, RIPE NCC requires scans of ID, and this action violates local = > laws in some > countries (for example, CZ or RU). In Russia, personal data can be proces= > sed only after a > special agreement (except some cases mentioned in the law), but we will s= > end the ID images > without any special agreements to the NCC. > > I tried to find some statements on data protection in the RIPE NCC or on = > any guarantee of > confidentiality, but no such information found in the standard service ag= > reement or any > policy documents. > > On these grounds, I would like to initiate a change. RIPE NCC should have= > data protection > procedures or RIPE NCC should not request personal IDs of third parties. > > > -- > Sergey > > > > > End of ncc-services-wg Digest > Hello I don't said to put all of private information of all LIRs on the web. I just mean there is some LIR maintainer in all cities that knows RIPE rules well. Some of them are free and they can answer the newbies questions in local language and condition. Thank you -- Best Regards. Shahin Gharghi www.PersianAdmins.com www.Gharghi.ir Cell : +98 917 3009177

1 0