- ncc-services-wg - mailman.ripe.net

Re: [ncc-services-wg] 2012-07 New Draft Document and Impact Analysis Published (RIPE NCC Services to Legacy Internet Resource Holders)
by Jarle Greipsland 25 Oct '13

25 Oct '13

"Marco Schmidt" <mschmidt(a)ripe.net> writes: > You can find the full proposal and impact analysis at: > https://www.ripe.net/ripe/policies/proposals/2012-07 > > And the draft document at: > https://www.ripe.net/ripe/policies/proposals/2012-07/draft > We encourage you to read the draft document text and send any > comments to ncc-services-wg(a)ripe.net before 8 November 2013. I think this a sound policy proposal, and I support its adaption as RIPE policy. -jarle -- Of course there's no reason for it, it's just our policy.

6 6

IP Analyser for Android Pilot - Proposed Discontinuation
by Alex Band 24 Oct '13

24 Oct '13

Dear colleagues, In 2012, the RIPE NCC introduced the IP Analyser mobile client for Android pilot to gauge interest from the membership. After careful evaluation of the usage, feedback and available resources to maintain or expand this pilot, we propose to discontinue the pilot from 20 November 2013. The IP Analyser for Android was a very lightweight trial to see if members would be interested in having IP Analyser information available on the go. Considering the amount of active installations and queries from mobile clients, it is apparent that spending the available resources on expanding the web interface and API is more valuable. For example, we plan to develop IPv6 functionality in the near future. By removing this service, the RIPE NCC would be in a position to focus its resources on the remaining services that provide the most value to members. If you have any questions or comments, please do not hesitate to contact us. Kind regards, Alex Band Product Manager RIPE NCC

3 2

Implementation of Resource Certification (RPKI) for PI End User Resources
by Alex Band 23 Oct '13

23 Oct '13

Dear colleagues, In March of this year, the RIPE NCC held a community consultation about the certification of Internet number resources held by non-RIPE NCC members. The discussion that unfolded led to RIPE Policy Proposal 2013-04, "Resource Certification for non-RIPE NCC Members". This proposal reached consensus on 16 October 2013. Now that the Community has decided that certification of non-member resources should be a RIPE NCC service, we would once again like to summarise the three possible implementation options for PI End User resources: 1) A PI End User becomes a RIPE NCC member 2) A PI End User requests a resource certificate through their sponsoring LIR and gets access to the Route Origin Access (ROA) management system themselves, or they delegate management to the sponsoring LIR 3) A PI End User requests a resource certificate directly from the RIPE NCC, without becoming a member, and obtains access to the ROA management system It became apparent from the discussion that PI End Users fall into two groups: - Those who use the sponsoring LIR solely to request the PI resources but manage everything else themselves - Those who rely on the sponsoring LIR for everything, ranging from BGP routing to RIPE Database updates In order to cater to both groups, the feedback so far suggests we facilitate options 2 and 3, while option 1 will continue to remain available at all times. For option 2 (going through the sponsoring LIR) and option 3 (going to the RIPE NCC directly), there is the possibility to provide an automated solution for which only PI End Users who have submitted a 2007-01 End User Assignment Agreement are eligible. This means the RIPE NCC will need to develop a solution where the following informational elements are cross-referenced with each other: a) The authoritative control over the address space (i.e. the ability to authenticate against the relevant objects in the RIPE Database) b) The End User Assignment Agreement that was submitted and verified by the RIPE NCC c) The RIPE NCC Access credentials for accessing the certification management interface In order to offer insight into the resources required for the implementation, the RIPE NCC has provided a cost estimate. One of the clarifications that was given during the discussion is the fact that there is a lot of overlap in the implementation of option 2 and 3, meaning that building both would not result in a significantly higher cost than offering just one of them. The only aspect that remained a discussion point were the requirements that the RIPE NCC should impose on PI End Users when they would like to request a resource certificate directly from the RIPE NCC (option 3). We would like to ask you to provide further feedback on this topic. The issue is: A PI End user must prove to the RIPE NCC that they truly are the legitimate holder of the resources they would like to have a certificate for. What proof do they need to give to the RIPE NCC before we grant them access to the system? While this discussion is ongoing, we would like to propose to start building the framework to offer this functionality, and deliver option 2 as soon as it is ready. We look forward to your feedback. Kind regards, Alex Band Product Manager RIPE NCC P.S. The RIPE NCC has explained the implementation options and associated cost at the following locations: http://www.ripe.net/ripe/mail/archives/ncc-services-wg/2013-March/002145.ht… http://www.ripe.net/ripe/mail/archives/ncc-services-wg/2013-March/002149.ht… http://www.ripe.net/ripe/mail/archives/ncc-services-wg/2013-March/002252.ht… http://www.ripe.net/ripe/mail/archives/ncc-services-wg/2013-March/002256.ht…

5 7

Re: [ncc-services-wg] 2012-07 New Draft Document and Impact Analysis Published (RIPE NCC Services to Legacy Internet Resource Holders)
by Rob Evans 23 Oct '13

23 Oct '13

Hi, > We encourage you to read the draft document text and send any comments to ncc-services-wg(a)ripe.net before 8 November 2013. I (personally, of course) support this proposal. In the interests of discussion, though, I'll note that my interpretation of 'Registry Service Elements' in section 1.1 was any single service provided by the RIR, either current or future. However, in the impact analysis the RIPE NCC has interpreted it as only any one of the specific existing services mentioned in 1.1. Does that match with the authors' intention? (If not, does it matter?) Not knowing how the RIPE NCC performs checks on the holder of legacy resources, the onus appears to be on the holder to submit appropriate documentation. Is it safe to assume that the NCC also has a record of relevant InterNIC records to match who the resources were originally assigned to, and so if the holder hasn't changed then the documentation could be along the lines of just checking the organisations match? I'll also note that we had a brief discussion in last week's routing working group session relevant to the part of section 'D' of the impact analysis relating to adding an attribute to the aut-num object. Most of the comments tended to suggest that as long as the RFC says unknown attributes should be ignored, then there should be little problem. However, sufficient notice will need to be given so that tools that work off local copies of the aut-num will submit it with the relevant fields (or given that it isn't something the holder can change, the update software can add the correct line in if it is missing in an update). Cheers, Rob

8 7

policy proposal 2012-07, "RIPE NCC Services to Legacy Internet Resource Holders"
by Dimitri I Sidelnikov 23 Oct '13

23 Oct '13

Hi. Let me express my support for policy proposal 2012-07. -- Kind regards, --- D.Sidelnikov

2 1

Re: [ncc-services-wg] 2012-07 New Draft Document and Impact Analysis Published (RIPE NCC Services to Legacy Internet Resource Holders)
by Carsten Schiefner 23 Oct '13

23 Oct '13

Dear colleagues - On 10.10.2013 16:07, Marco Schmidt wrote: > - An amendment to the existing policy document ripe-592 ...which is the following: Replace section 5.5 of ripe-592, currently: "Any LIR is allowed to re-allocate complete or partial blocks of IPv4 address space that were previously allocated to them by either the RIPE NCC or the IANA." with "Any LIR is allowed to re-allocate complete or partial blocks of IPv4 address space that were previously allocated to them by the RIPE NCC or otherwise through the Regional Internet Registry System." Shall my understanding be that the rationale for replacing "the IANA" by "otherwise through the Regional Internet Registry System" is that the former - implying Legacy Internet Resources - would be in contradiction with the second paragraph: "Any existing or future RIPE policy referring to resources shall not apply to legacy resources unless the policy explicitly includes legacy resources in its scope." of section 1.2 "Scope" of the proposal? If not, what else is the rationale for this side effect on ripe-592 then? Anhow: the proposal gets my support - I'd like to see it becoming policy. Best, -C.

1 0

RIPE Policy Proposal 2012-07 "RIPE NCC Services to Legacy Internet Resource Holders"
by herve.clement＠orange.com 23 Oct '13

23 Oct '13

As this policy proposal brings clarification on management of Legacy Internet Resources, Orange supports its adoption as RIPE policy. Best regards [cid:image001.gif@01CECFE1.24CB7D70]<http://www.orange.com/> Hervé CLEMENT Naming, Addressing and Numbering Project Manager Orange/IMT/OLN/AQS/NAN tél. +33 (0)1 57 36 17 97 mob. +33 (0)6 78 91 39 38 herve.clement(a)orange.com<mailto:herve.clement@orange.com> _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.

1 0

Re: [ncc-services-wg] 2012-07 New Draft Document and Impact Analysis Published (RIPE NCC Services to Legacy Internet Resource Holders)
by Wilfried Woeber 22 Oct '13

22 Oct '13

Marco Schmidt wrote: > Dear colleagues, > > The draft document for version 4.0 of the policy proposal 2012-07, > "RIPE NCC Services to Legacy Internet Resource Holders" has now been > published, along with an impact analysis conducted by the RIPE NCC. While working through the Impact Analysis I am somewhat at a loss how Option 1 and Option 3 are to be handled. In particular, going for Option 1: would the Legacy Resource lose its status: LEGACY and be relabelled to PI or PA? If this is the case, I do not see the rationale for the text in Option 3: In the latter case, however, it should be made clear that the RIPE NCC will not allow the Legacy Resource Holder to become the sponsoring LIR for its own Legacy Internet Resources. In case the status: LEGACY for Option 1 is preserved, then I can agree to the restriction as quoted. Any clarification would be appreciated. Thanks, Wilfried

2 2

2012-08 Publication of Sponsoring LIR for Independent Number Resources Moved to Last Call
by Lindqvist Kurt Erik 17 Oct '13

17 Oct '13

All, following the discussions regarding policy proposal 2012-08 in the NCC-Services WG the chairs have decided a consensus for moving forward exists and thus the proposal is moved to Last Call. Kurtis & Bijal NCC Services WG chairs

8 15

2013-04 Proposal Accepted (Resource Certification for non-RIPE NCC Members)
by Marco Schmidt 16 Oct '13

16 Oct '13

Dear colleagues, Consensus has been reached, and the proposal described in 2013-04 has been accepted by the RIPE community. You can find the full proposal at: https://www.ripe.net/ripe/policies/proposals/2013-04/ The new RIPE document is ripe-596 and it is available at: https://www.ripe.net/ripe/docs/ripe-596 An announcement regarding the implementation will follow. Thank you for your input. Regards Marco Schmidt Policy Development Office RIPE NCC

1 0