- ncc-services-wg - mailman.ripe.net

Outage Report for RIPE Database Updates
by Denis Walker 28 Oct '10

28 Oct '10

[Apologies for duplicate emails] Dear colleagues, Between approximately 14:10 and 14:40 (UTC) on 27 October 2010, we experienced an outage of the RIPE Database update service. During this period, no updates were processed. It was not possible to access the update service via any of the web-based or synchronous interfaces. Updates sent via email are queued and will be executed later. However, we recommend that users check their acknowledgement reports. We apologise for any inconvenience this may have caused. Regards, Paul Palse Database Group RIPE NCC

1 0

Independent Resource procedure and implementation
by Daniel Suchy 28 Oct '10

28 Oct '10

Hello, I would like to open discussion related to "Action Required: Contractual Relationship for Independent Resource Assignments" emails, that almost all LIRs received from RIPE NCC in the past. I have some notes from perspective of small LIR (or from perspective of person helping running multiple small LIRs). My first note points to system in general. Although RIPE NCC has many required informations in own existing databases already, it requires additional action from LIR in general. Typical small LIR has one or more PA allocations and exactly _one_ autonomous system registered. In RIPE database, there are records matching allocated PA prefix and ASN (route objects with proper origin AS and related inetnum objects, many ASNs has paired LIRs org: in aut-num object). In addition, RIS service (with history!) can be used for verification of these informations obtained automatically from database. For incomprehensible reason, RIPE NCC doesn't use these informations at all and instead of this abuses ALL LIRs with submiting simple form with exactly one record within it. I thing RIPE RCC has enough resources (financial and human) to do that automatically. My second note points to implementation of this new tool. I discovered, that I'm not able to "new" tool used for confirmation. I'm using PKI login feature and I have one identity paired with more LIRs. Although I'm able login to the LIR portal and modify everything I need with my certificate, I'm _NOT_ able to update informations on "Independent Resources" page. The main reason is, that RIPE NCC created new and separated (!) tool instead of simple integration of new feature/functionality to existing LIR portal. So, instead of reusing existing code used for LIR portal authentication, new outside code was developed for this new tool. And this new code doesn't implement all authentication features from LIR portal. In my point of view, this is quite unprofessional approach of modern application development. Aplications should be multi-layer, allowing easy new feature implementation. I reported this issue to RIPE NCC on friday last week, but first "answer" I received yesterday from RIPE NCC was initiation of audit in one LIR. Just fortuitous event? I don't believe. I have no problems with audit itself, I have all records, but this takes some additional time (and of course, money). Just because I claimed some problems to RIPE NCC staff due to problematic internal _implementation_ of new policy. Ok, I would like to open public discussions about this problem. There are some questions to answer and discuss: * why RIPE NCC just doesn't use informations from RIPE database in case of their availability and verifiability, why abuses small LIRs instead * why aren't RIS data used for automatic obtaining of requested informations, where this can be applicable * why RIPE NCC didn't integrate "confirmation" tool to existing LIR portal and why new outside application with _limited_ functionality was developed instead of reusing of existing code and functionality * what architecture is used for LIR portal in general, can be there easily implemented new features Of course, I understand, that there are large LIRs and some historic mess, where this action may be required due to lack of records in existing databases. But, I think this is NOT a case of LIRs started in past couple of years, where all required data should be available. With regards, Daniel

13 28

Active Measurements (RIPE Atlas) - Registration Open Now
by Mirjam Kuehne 22 Oct '10

22 Oct '10

[Apologies for duplicate emails] Dear colleagues, The launch date of our new active measurements network, RIPE Atlas, is close. We already received a lot of interest and offers to host such a probe. Registration is now open! In this new RIPE Labs article, we explain some more details about how to participate in this effort: http://labs.ripe.net/Members/kistel/ripe-atlas-pre-registration-is-now-open For more information, please refer to earlier articles on the same topic: 1. Active Measurements Need More Vantage Points https://labs.ripe.net/Members/dfk/active-measurements-need-more-vantage-poi… 2. Active Measurements - A Small Probe https://labs.ripe.net/Members/dfk/a-small-probe-for-active-measurements?sea… 3. Active Measurements - Hosting a Probe https://labs.ripe.net/Members/dfk/active_measurements/hosting-a-probe-for-a… 4. Wanted: Partners to Sponsor "RIPE Atlas" Effort http://labs.ripe.net/Members/dfk/active-measurements-sponsorship Kind Regards, Mirjam Kuehne RIPE NCC

1 0

Outage Report for RIPE Database Updates
by Agoston Horvath 22 Oct '10

22 Oct '10

[Apologies for duplicates] Dear colleagues, Between approximately 11:50 and 12:20 (UTC), 21 October 2010, we experienced an outage on the web server www.db.ripe.net. During this period it was not possible to connect to the syncupdates or webupdates services or use whois.cgi (the web-based GUI for whois queries). Services not depending on the HTTP protocol (whois queries, mailupdates) were not affected. We apologise for any inconvenience that this may have caused. Regards, Agoston Horvath Database Group RIPE NCC

1 0

personal data in the NCC
by Sergey Myasoedov 21 Oct '10

21 Oct '10

Hello, I would like to talk about personal data protection. After the audit process, NCC demands that we send them, together with the contract, the ID of person who signs the End User assignment contract (even if the contract is signed by a person on behalf of company). It seems strange: the CEO of company that wants IP resources signs the contract, probably stamps it and suddenly (!) RIPE NCC asks for the ID of CEO. We (LIR) have no choice on such operations - we should request ID or RIPE NCC will not assign resources for our customers. Even more, RIPE NCC requires scans of ID, and this action violates local laws in some countries (for example, CZ or RU). In Russia, personal data can be processed only after a special agreement (except some cases mentioned in the law), but we will send the ID images without any special agreements to the NCC. I tried to find some statements on data protection in the RIPE NCC or on any guarantee of confidentiality, but no such information found in the standard service agreement or any policy documents. On these grounds, I would like to initiate a change. RIPE NCC should have data protection procedures or RIPE NCC should not request personal IDs of third parties. -- Sergey

14 33

Optimize to be new LIR progress
by Shahin Gharghi 21 Oct '10

21 Oct '10

Dear Ripe NCC I am a LIR maintainer. I have a suggestion for you. would you make a checklist for peoples who are new to ripe and LIR? I mean make a checklist for all steps to be a LIR. from A to Z for example: 1. fill the First form <LINK> 2. receive a mail <when> 3. sign the papers 4. ... 5. ... 6. request a PA - by email: <sample form> - by webupdate <sample form> - by wizard <sample form> 20. ... 21. set the IPs on your machines I guess its better to understand for newbies. because they can see all of steps at first. and second suggestion: you can choose self candidate from old LIRs. and put their contact details on your website. and new users can talk to him in native language. It's allow users to exchange their experiences together. Thank you. -- Best Regards. Shahin Gharghi www.PersianAdmins.com www.Gharghi.ir Cell : +98 917 3009177

5 5

Re: Optimize to be new LIR progress (Shahin Gharghi)
by Shahin Gharghi 20 Oct '10

20 Oct '10

> Message: 5 > Date: Wed, 20 Oct 2010 11:25:35 +0200 > From: Sergey Myasoedov <sergey(a)devnull.ru> > To: ncc-services-wg(a)ripe.net > Subject: [ncc-services-wg] personal data in the NCC > > Hello, > > I would like to talk about personal data protection. After the audit proc= > ess, NCC demands > that we send them, together with the contract, the ID of person who signs= > the End User > assignment contract (even if the contract is signed by a person on behalf= > of company). > > It seems strange: the CEO of company that wants IP resources signs the co= > ntract, probably > stamps it and suddenly (!) RIPE NCC asks for the ID of CEO. We (LIR) have= > no choice on such > operations - we should request ID or RIPE NCC will not assign resources f= > or our customers. > > Even more, RIPE NCC requires scans of ID, and this action violates local = > laws in some > countries (for example, CZ or RU). In Russia, personal data can be proces= > sed only after a > special agreement (except some cases mentioned in the law), but we will s= > end the ID images > without any special agreements to the NCC. > > I tried to find some statements on data protection in the RIPE NCC or on = > any guarantee of > confidentiality, but no such information found in the standard service ag= > reement or any > policy documents. > > On these grounds, I would like to initiate a change. RIPE NCC should have= > data protection > procedures or RIPE NCC should not request personal IDs of third parties. > > > -- > Sergey > > > > > End of ncc-services-wg Digest > Hello I don't said to put all of private information of all LIRs on the web. I just mean there is some LIR maintainer in all cities that knows RIPE rules well. Some of them are free and they can answer the newbies questions in local language and condition. Thank you -- Best Regards. Shahin Gharghi www.PersianAdmins.com www.Gharghi.ir Cell : +98 917 3009177

1 0

New Resource Certification
by Mirjam Kuehne 15 Oct '10

15 Oct '10

[Apologies for duplicate emails] Dear colleagues, We just announced a new release of the RIPE NCC Resource Certification system. We are gearing up for the production release on 1 January 2011 and have implemented some critical changes and new features. Please find more details on RIPE Labs: http://labs.ripe.net/Members/AlexBand/new-release-of-the-resource-certifica… If you have any comments or questions, please do not hesitate to leave them under the article. Kind Regards, Mirjam Kuehne RIPE Labs

1 0

Mandatory maintainer on PERSON and ROLE objects
by Denis Walker 13 Oct '10

13 Oct '10

[Apologies for duplicate emails] Dear Colleagues Some time ago, the RIPE Data Protection Task Force recommended that all RIPE Database objects should have a mandatory "mnt-by:" attribute. This is to prevent easy corruption of data, either accidentally or maliciously. There were three object types where this attribute was optional. DOMAIN objects have already been changed to make this attribute mandatory. The RIPE NCC is now ready to deploy mandatory "mnt-by:" attributes on PERSON and ROLE objects. A test server was made available in February with this feature. Details can be found in the mail archive at: http://www.ripe.net/ripe/maillists/archives/db-wg/2010/msg00084.html This feature will be deployed during the week commencing 18 October 2010. Initially, the only impact on maintainers of data in the RIPE Database will be when PERSON or ROLE objects are created or modified. These operations will fail if the data is not maintained. Additional warning messages will be generated when other objects are modified that reference unmaintained data. These warnings will not cause any database operations to fail. For new users of the RIPE Database, there is a start-up application to create the first pair of PERSON/MNTNER objects available at: http://apps.db.ripe.net/startup/ This is now the only way to create the first set of data objects in the RIPE Database. Note the URL is different to the one in the mail archive message above. Regards Denis Walker Business Analyst RIPE NCC Database Group

1 0

Active Measurements Network - Call for Sponsors
by Mirjam Kuehne 11 Oct '10

11 Oct '10

[Apologies for duplicate emails] Dear colleagues, The next article in the Active Measurements series has been published on RIPE Labs: Wanted: Partners to Sponsor "RIPE Atlas" Effort http://labs.ripe.net/Members/dfk/active-measurements-sponsorship It describes sponsorship benefits, but also some more details about the measurement network, including a time line. Please also note the three related articles published earlier: - Active Measurements Need More Vantage Points https://labs.ripe.net/Members/dfk/active-measurements-need-more-vantage-poi… - Active Measurements - A Small Probe https://labs.ripe.net/Members/dfk/a-small-probe-for-active-measurements?sea… - Active Measurements - Hosting a Probe https://labs.ripe.net/Members/dfk/active_measurements/hosting-a-probe-for-a… Kind Regards, Mirjam Kuehne https://labs.ripe.net

1 0