- ncc-services-wg - mailman.ripe.net

Draft Agenda - NCC Services WG - RIPE 61
by Bijal Sanghani 05 Nov '10

05 Nov '10

Dear All, Please see below the draft agenda for the NCC Services Working Group - DRAFT: Services WG Agenda - RIPE 61 A. Administrative Matters Welcome Select a Scribe Distribute participants list Finalise agenda Approve minutes from RIPE 60 B. RIPE NCC Update - RIPE NCC Senior Management Team (35 min) C. RIPE NCC Processes and IPv4 Address Space End-Game - Andrea Cima (15 min) D. Update on the 2007-1 Project - Arne Kiessling (10 min) E. Resource Certification - Alex Band (15 min) F. LIR Closure and Deregistration Procedure - Athina Fragkouli (15 min) Z. AOB You can also find the agenda here - http://ripe61.ripe.net/programme/meeting-plan/services-agenda/ look forward to seeing you in Rome! Kind regards, Bijal Sanghani The information contained in this e-mail message is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you should return it to the sender immediately. Please note that while we scan all e-mails for viruses we cannot guarantee that any e-mail is virus-free and accept no liability for any damage caused by any virus transmitted by this email.

1 0

New RIPE Database Prototype - on RIPE Labs
by Mirjam Kuehne 04 Nov '10

04 Nov '10

[apologies for duplicates] Dear colleagues, The RIPE NCC is improving the RIPE Database functionality and usability by introducing a trial of an improved service. With this new service it is easier for any user to see which of the data objects they’re looking at are maintained by the RIPE NCC or an Internet resource holder. Please read more on RIPE Labs: http://labs.ripe.net/Members/Paul_P_/a-new-ripe-database-prototype Kind Regards, Mirjam Kuehne RIPE NCC

1 0

Draft Document: "Closure of LIR and Deregistration of Internet Number Resources"
by Axel Pawlik 02 Nov '10

02 Nov '10

[Apologies for duplicate emails] Dear colleagues, The RIPE NCC, in consultation with external legal experts, created the draft procedural document, "Closure of LIR and Deregistration of Internet Number Resources". A PDF of the document is available at: http://www.ripe.net/legal/Closure-of-LIR-and-deregistration-of-INRs_final-d… The text of this document is intended to replace sections in two RIPE Documents that deal with the closure of LIRs and the deregistration of resources: - Sections 3.0 and 4.0 of ripe-301, "Mergers, Acquisitions, Takeovers and Closures of Organisations Operating an LIR". These sections are entitled "Closing an LIR" and "When an LIR is Closed by the RIPE NCC", respectively. The original RIPE Document is available at: http://www.ripe.net/ripe/docs/mergers.html - Section 4.2 of ripe-475, "Independent Internet Number Resources - Contractual Relationship Changes between sponsoring LIR and End User". This section is entitled "Violation of RIPE Policy, Law or Contract". The original RIPE Document is available at: http://www.ripe.net/ripe/docs/ripe-475.html The RIPE NCC would like to receive feedback on this draft document from its members and the RIPE community. The RIPE NCC members and the RIPE community will have the opportunity to discuss the document on the mailing lists and at the RIPE NCC Services Working Group to be held on 17 November at the RIPE 61 Meeting in Rome. Best regards, Axel Pawlik Managing Director RIPE NCC

1 0

Outage Report for RIPE Database Updates
by Denis Walker 28 Oct '10

28 Oct '10

[Apologies for duplicate emails] Dear colleagues, Between approximately 14:10 and 14:40 (UTC) on 27 October 2010, we experienced an outage of the RIPE Database update service. During this period, no updates were processed. It was not possible to access the update service via any of the web-based or synchronous interfaces. Updates sent via email are queued and will be executed later. However, we recommend that users check their acknowledgement reports. We apologise for any inconvenience this may have caused. Regards, Paul Palse Database Group RIPE NCC

1 0

Independent Resource procedure and implementation
by Daniel Suchy 28 Oct '10

28 Oct '10

Hello, I would like to open discussion related to "Action Required: Contractual Relationship for Independent Resource Assignments" emails, that almost all LIRs received from RIPE NCC in the past. I have some notes from perspective of small LIR (or from perspective of person helping running multiple small LIRs). My first note points to system in general. Although RIPE NCC has many required informations in own existing databases already, it requires additional action from LIR in general. Typical small LIR has one or more PA allocations and exactly _one_ autonomous system registered. In RIPE database, there are records matching allocated PA prefix and ASN (route objects with proper origin AS and related inetnum objects, many ASNs has paired LIRs org: in aut-num object). In addition, RIS service (with history!) can be used for verification of these informations obtained automatically from database. For incomprehensible reason, RIPE NCC doesn't use these informations at all and instead of this abuses ALL LIRs with submiting simple form with exactly one record within it. I thing RIPE RCC has enough resources (financial and human) to do that automatically. My second note points to implementation of this new tool. I discovered, that I'm not able to "new" tool used for confirmation. I'm using PKI login feature and I have one identity paired with more LIRs. Although I'm able login to the LIR portal and modify everything I need with my certificate, I'm _NOT_ able to update informations on "Independent Resources" page. The main reason is, that RIPE NCC created new and separated (!) tool instead of simple integration of new feature/functionality to existing LIR portal. So, instead of reusing existing code used for LIR portal authentication, new outside code was developed for this new tool. And this new code doesn't implement all authentication features from LIR portal. In my point of view, this is quite unprofessional approach of modern application development. Aplications should be multi-layer, allowing easy new feature implementation. I reported this issue to RIPE NCC on friday last week, but first "answer" I received yesterday from RIPE NCC was initiation of audit in one LIR. Just fortuitous event? I don't believe. I have no problems with audit itself, I have all records, but this takes some additional time (and of course, money). Just because I claimed some problems to RIPE NCC staff due to problematic internal _implementation_ of new policy. Ok, I would like to open public discussions about this problem. There are some questions to answer and discuss: * why RIPE NCC just doesn't use informations from RIPE database in case of their availability and verifiability, why abuses small LIRs instead * why aren't RIS data used for automatic obtaining of requested informations, where this can be applicable * why RIPE NCC didn't integrate "confirmation" tool to existing LIR portal and why new outside application with _limited_ functionality was developed instead of reusing of existing code and functionality * what architecture is used for LIR portal in general, can be there easily implemented new features Of course, I understand, that there are large LIRs and some historic mess, where this action may be required due to lack of records in existing databases. But, I think this is NOT a case of LIRs started in past couple of years, where all required data should be available. With regards, Daniel

13 28

Active Measurements (RIPE Atlas) - Registration Open Now
by Mirjam Kuehne 22 Oct '10

22 Oct '10

[Apologies for duplicate emails] Dear colleagues, The launch date of our new active measurements network, RIPE Atlas, is close. We already received a lot of interest and offers to host such a probe. Registration is now open! In this new RIPE Labs article, we explain some more details about how to participate in this effort: http://labs.ripe.net/Members/kistel/ripe-atlas-pre-registration-is-now-open For more information, please refer to earlier articles on the same topic: 1. Active Measurements Need More Vantage Points https://labs.ripe.net/Members/dfk/active-measurements-need-more-vantage-poi… 2. Active Measurements - A Small Probe https://labs.ripe.net/Members/dfk/a-small-probe-for-active-measurements?sea… 3. Active Measurements - Hosting a Probe https://labs.ripe.net/Members/dfk/active_measurements/hosting-a-probe-for-a… 4. Wanted: Partners to Sponsor "RIPE Atlas" Effort http://labs.ripe.net/Members/dfk/active-measurements-sponsorship Kind Regards, Mirjam Kuehne RIPE NCC

1 0

Outage Report for RIPE Database Updates
by Agoston Horvath 22 Oct '10

22 Oct '10

[Apologies for duplicates] Dear colleagues, Between approximately 11:50 and 12:20 (UTC), 21 October 2010, we experienced an outage on the web server www.db.ripe.net. During this period it was not possible to connect to the syncupdates or webupdates services or use whois.cgi (the web-based GUI for whois queries). Services not depending on the HTTP protocol (whois queries, mailupdates) were not affected. We apologise for any inconvenience that this may have caused. Regards, Agoston Horvath Database Group RIPE NCC

1 0

personal data in the NCC
by Sergey Myasoedov 21 Oct '10

21 Oct '10

Hello, I would like to talk about personal data protection. After the audit process, NCC demands that we send them, together with the contract, the ID of person who signs the End User assignment contract (even if the contract is signed by a person on behalf of company). It seems strange: the CEO of company that wants IP resources signs the contract, probably stamps it and suddenly (!) RIPE NCC asks for the ID of CEO. We (LIR) have no choice on such operations - we should request ID or RIPE NCC will not assign resources for our customers. Even more, RIPE NCC requires scans of ID, and this action violates local laws in some countries (for example, CZ or RU). In Russia, personal data can be processed only after a special agreement (except some cases mentioned in the law), but we will send the ID images without any special agreements to the NCC. I tried to find some statements on data protection in the RIPE NCC or on any guarantee of confidentiality, but no such information found in the standard service agreement or any policy documents. On these grounds, I would like to initiate a change. RIPE NCC should have data protection procedures or RIPE NCC should not request personal IDs of third parties. -- Sergey

14 33

Optimize to be new LIR progress
by Shahin Gharghi 21 Oct '10

21 Oct '10

Dear Ripe NCC I am a LIR maintainer. I have a suggestion for you. would you make a checklist for peoples who are new to ripe and LIR? I mean make a checklist for all steps to be a LIR. from A to Z for example: 1. fill the First form <LINK> 2. receive a mail <when> 3. sign the papers 4. ... 5. ... 6. request a PA - by email: <sample form> - by webupdate <sample form> - by wizard <sample form> 20. ... 21. set the IPs on your machines I guess its better to understand for newbies. because they can see all of steps at first. and second suggestion: you can choose self candidate from old LIRs. and put their contact details on your website. and new users can talk to him in native language. It's allow users to exchange their experiences together. Thank you. -- Best Regards. Shahin Gharghi www.PersianAdmins.com www.Gharghi.ir Cell : +98 917 3009177

5 5

Re: Optimize to be new LIR progress (Shahin Gharghi)
by Shahin Gharghi 20 Oct '10

20 Oct '10

> Message: 5 > Date: Wed, 20 Oct 2010 11:25:35 +0200 > From: Sergey Myasoedov <sergey(a)devnull.ru> > To: ncc-services-wg(a)ripe.net > Subject: [ncc-services-wg] personal data in the NCC > > Hello, > > I would like to talk about personal data protection. After the audit proc= > ess, NCC demands > that we send them, together with the contract, the ID of person who signs= > the End User > assignment contract (even if the contract is signed by a person on behalf= > of company). > > It seems strange: the CEO of company that wants IP resources signs the co= > ntract, probably > stamps it and suddenly (!) RIPE NCC asks for the ID of CEO. We (LIR) have= > no choice on such > operations - we should request ID or RIPE NCC will not assign resources f= > or our customers. > > Even more, RIPE NCC requires scans of ID, and this action violates local = > laws in some > countries (for example, CZ or RU). In Russia, personal data can be proces= > sed only after a > special agreement (except some cases mentioned in the law), but we will s= > end the ID images > without any special agreements to the NCC. > > I tried to find some statements on data protection in the RIPE NCC or on = > any guarantee of > confidentiality, but no such information found in the standard service ag= > reement or any > policy documents. > > On these grounds, I would like to initiate a change. RIPE NCC should have= > data protection > procedures or RIPE NCC should not request personal IDs of third parties. > > > -- > Sergey > > > > > End of ncc-services-wg Digest > Hello I don't said to put all of private information of all LIRs on the web. I just mean there is some LIR maintainer in all cities that knows RIPE rules well. Some of them are free and they can answer the newbies questions in local language and condition. Thank you -- Best Regards. Shahin Gharghi www.PersianAdmins.com www.Gharghi.ir Cell : +98 917 3009177

1 0