- ncc-services-wg - mailman.ripe.net

Mailing Lists Migration from Mailman 2 to Mailman 3
by Timour Bakeev 02 Jul '24

02 Jul '24

Dear colleagues, In response to the community concerns regarding using the outdated Mailman 2 software for the RIPE mailing lists, RIPE NCC is starting the migration process to the Mailman 3 software suite. This upgrade will enhance the user interface and message archives for these lists. We expect to complete this work by 14 July 2024. Previously, we successfully updated our internal mailing lists to Mailman 3 and the ASO and NRO mailing lists, containerising them in the process. This latest migration extends those improvements to these external mailing lists as well. What will change? Mailman 2 and Mailman 3 are entirely different products, which brings some changes in the observed behaviour. - The location of the email archives. The new address of the archive will be: https://mailman.ripe.net/archives/list/{list-name}@ripe.net/ - The subscription address will be changed to {list-name}-join(a)ripe.net - To maintain historical links to the archives, we’re planning to turn this into a static website at: https://lists.ripe.net/ The mail delivery process for the existing subscribers will not change, so they will continue to receive emails from the lists as usual, with a potential one-time delay of up to four hours during the actual transition. The interaction with the server is also going to remain the same. Thank you for your understanding and cooperation. Kind regards, Timour Bakeev Senior System Engineer RIPE NCC

1 0

Changes to the Navigation on www.ripe.net
by Ulka Athale 01 Jul '24

01 Jul '24

Dear colleagues, Following the redesign of ripe.net, we are also working on improving the ease of access to our content. We have made some changes to the navigation menus of the website. The main changes are: - "Events" has been added as a section to the top-level navigation of the menu - "Participate" has been renamed "Membership" - The Policy Development and Internet Governance pages can now be found under "Community" You can read about these changes and other improvements planned for the website in more detail on RIPE Labs: https://labs.ripe.net/author/ulka_athale_1/a-click-away-improving-navigatio… All existing links and URLs should continue to work. If you do see any broken links, please let us know. We also welcome your input about content that you would like to access more easily or other improvements via the forum: https://forum.ripe.net/t/improving-the-navigation-on-ripe-net/1026 Kind regards, Ulka Athale -- Ulka Athale Senior Communications Officer RIPE NCC www.ripe.net

1 0

RIPE NCC Quarterly Planning Q3 2024
by Adonis Stergiopoulos 27 Jun '24

27 Jun '24

Dear colleagues, We have now published the Q3 2024 quarterly plans for our development teams: https://www.ripe.net/support/documentation/quarterly-planning These plans include the work items that will be carried out over the next quarter and give you the chance to provide your feedback and suggestions that the RIPE NCC should be working on going forward. The plans cover the following areas: - RIPE Database - Business Applications, including the LIR Portal, Registry Services and other applications. - DNS and K-root - RIPE Atlas - RIPEstat - Resource Public Key Infrastructure (RPKI) - Routing Information Service (RIS) - Information Security, Risk, and Compliance - Training and Certification Please share your suggestions on this list or the RIPE NCC Forum: https://forum.ripe.net/ Kind regards, Adonis Stergiopoulos Senior Marketing & Communications Officer RIPE NCC

1 0

Two-Factor Authentication for RIPE NCC Access Using Passkeys
by Felipe Silveira 31 May '24

31 May '24

Dear colleagues, Two-factor authentication (2FA) was made mandatory for all RIPE NCC Access accounts in March earlier this year, and we received many requests to use security keys as an authentication method. You can now use passkeys as a two-factor authentication method for RIPE NCC Access accounts, in addition to authenticator apps. Passkeys can be stored on an hardware security key (FIDO2 compatible) or in a password manager, potentially synced across devices. They are supported on mobile devices (iOS, Android) and by most browsers on computers. If you have any feedback, please contact us at ncc(a)ripe.net Kind regards, Felipe Victolla Silveira Chief Technology Officer RIPE NCC

2 1

Exit Strategy for Cloud Services
by Felipe Silveira 31 May '24

31 May '24

Dear colleagues, First of all, I would like to thank you all for the engaged discussions and feedback received during RIPE 88 last week. Following up on some of the questions raised during my presentation last week, I would like to clarify a couple of points, mostly around RIPE NCC’s exit strategy for our cloud providers. First point raised was concerning the exit cost for AWS S3 should we decide to move to a different provider, potentially at very short notice. As part of the AWS S3 pricing model, a certain amount is charged for egress costs. Due to the large amount of data we have stored in AWS (in the order of petabytes of uncompressed data), this could potentially lead to a large bill. However, following the direction set by the European Data Act, AWS decided to waive all egress fees for customers migrating their data to a competitor (or to on-premise): https://aws.amazon.com/blogs/aws/free-data-transfer-out-to-internet-when-mo… However, even in a partial exit scenario, where we decide to stay with AWS but move only one service out, and thus egress costs waiving would not apply, the S3 exit cost for the Atlas historical data would be in the order of a few thousand euros. The other point raised was about our exit strategy in general, not only referring to egress costs. Our strategy is to use industry standards (e.g. Kubernetes) as a way to mitigate switching costs, as many providers offer alternative solutions. That is true for both AWS S3 and Kubernetes, having similar solutions offered by other companies. We also pay very close attention to our backup strategy (e.g. having the data stored elsewhere) and diversifying our suppliers. If you have any questions, please do not hesitate to contact me. Kind regards, Felipe Victolla Silveira Chief Technology Officer RIPE NCC

1 0

RIPE Labs: Reflections on Six Months as Chief Registry Officer
by James Kennedy 17 May '24

17 May '24

Dear colleagues, I have published a new RIPE Labs article reflecting on my first six months as Chief Registry Officer: https://labs.ripe.net/author/james-kennedy/reflections-on-six-months-as-chi… In the article, I explore the changing environment and how some of the associated pressures are affecting our Registry Department. I also look at the impact of the increased volume of End User ASN requests and provide some numbers on our overall workload. Any feedback or questions are welcome. However, please note that ASN related discussions are probably best held on the Address Policy WG mailing list, where I have also shared this article. Kind regards, James Kennedy Chief Registry Officer RIPE NCC

1 0

RIPE NCC Registry Investigation Report Published
by James Kennedy 16 May '24

16 May '24

Dear colleagues, We have published a report detailing the findings of an investigation into an attempt to defraud the registry. The report is available at: https://www.ripe.net/support/documentation/disclosures-and-reports/ripe-ncc… In recent months, we have uncovered an unusual pattern of incidents concerning unauthorised access to certain LIR accounts. Attempts were made to gain access to resources through fraud and to transfer resources without authorisation from the legitimate holders. Following an investigation, the unauthorised transfers were reverted and the membership of the party submitting fraudulent documents has been terminated. We, therefore, encourage our members to work with us to ensure the security of your resources and to report any suspicious activity concerning your accounts. We recommend the following measures: - Be vigilant about the validity of your email domains and email security. - Ensure that all contacts in your LIR account are valid and kept up to date. - Report any suspicious activity to us immediately. - Store account credentials in a secure manner, and stop using shared accounts. Kind regards, James Kennedy Chief Registry Officer RIPE NCC

1 0

Agenda for the NCC Services WG meeting at RIPE 88
by Rob Evans 13 May '24

13 May '24

Hi, This is the agenda for our meeting during RIPE 88 in three weeks’ time. Cheers, Rob (on behalf of the WG co-chairs) RIPE NCC Services Working Group May 22, 2024, 14:00 - 15:30 CEST. Krakow, PL, and virtually. A. Welcome, admin. [5 minutes] B. Update from the RIPE NCC, Hans Petter Holen [30 minutes] C. Technology Update, Felipe Victolla Silveira [25 minutes] D. Registry Update, James Kennedy [20 minutes] Z. Open Mic [10 minutes]

1 1

Retiring ns.ripe.net
by Paul de Weerd 02 May '24

02 May '24

Dear colleagues, We have published a RIPE Labs article on how we believe it is now time to retire the secondary DNS service for member’s reverse DNS delegations, ns.ripe.net: https://labs.ripe.net/author/anandb/retiring-nsripenet/ We are proposing to retire the secondary DNS service by the end of 2024 and we're asking for your input and feedback on this proposal. Please share any feedback on the DNS Working Group mailing list by 16 May 2024. Once we’ve collected your feedback, we will discuss this topic in the DNS Working Group session at RIPE 88 on Wednesday, 22 May 2024. Paul de Weerd Manager Global Information Infrastructure team RIPE NCC

1 0

RIPE NCC Access Security Investigation Report Published
by Hans Petter Holen 24 Apr '24

24 Apr '24

Dear colleagues, We have published a report on our findings and actions taken following an investigation into a security breach concerning RIPE NCC Access, our Single Sign-On system. This report follows the last update that we shared with you in January this year [1]. Since the launch of the investigation, we have made two-factor authentication mandatory for all RIPE NCC Access accounts, strengthened password requirements, improved monitoring for leaked credentials and automated the process of resetting passwords for any credentials found in data breaches. Read the full report at: https://www.ripe.net/support/documentation/disclosures-and-reports/ripe-ncc… We further recommend that members follow our security recommendations: - Please restrict account access to necessary personnel only - Follow password security best practices - Actively monitor data breaches for your own credentials If you have any concerns about the security of your RIPE NCC Access account, please contact us at ncc(a)ripe.net. Regards, Hans Petter Holen, CEO and Managing Director RIPE NCC [1] https://www.ripe.net/ripe/mail/archives/ncc-announce/2024-January/001695.ht…

1 0