- opensource-wg - mailman.ripe.net

Opt-in vulnerability-finding service for OSS
by Marcos Sanz 29 Oct '26

29 Oct '26

Dear all, welcome to day 4! I was planning to prepare a lightning talk about this one for yesterday's session, but didn't find the space, so here it is: This is the announcement: https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for -open-source And the participation instructions https://red.anthropic.com/oss-scanner/ Specially thought for "established projects that have a critical impact on infrastructure" Know what? THAT'S YOU! And I really think it's worth we find the issues ourselves than being flooded externally by more or less reliable vulnerability reports. Have a nice rest of RIPE meeting! Marcos

1 0

EDIC digital commons
by Marco d'Itri 28 Oct '26

28 Oct '26

This is a new initiative by some EU member states to fund free software: https://digital-commons-edic.eu/ -- ciao, Marco

1 0

Draft agenda for RIPE93
by Sasha Romijn 02 Oct '26

02 Oct '26

Hello all, Please find below the draft agenda for our upcoming meeting during RIPE93. Our slot is Wednesday, 28 October, 09:00-10:30 local time (UTC+2). We have three presentations on a wide range of subjects. We also still have a bit of space for Lightning Talks. If you’re interested in doing one, please send a mail to opensource-wg-chairs(a)ripe.net before the Tuesday of the meeting week. If you have any doubts about whether a topic would fit, or other questions, always feel free to contact us. We're looking forward to you joining us in Sofia or online. Thank you to all speakers who submitted for this session! Best regards, Marcos Sanz, Marco d'Itri and Sasha Romijn Working group co-chairs --- 1. Administrative matters - 10 minutes - Welcome - Finalise agenda - Approval of previous minutes - Chair selection results 2. "Beyond NIS2: Software Supply Chains and the Cyber Resilience Act (CRA)" by Barry O'Donovan - 25 minutes 3. "BIRD on an Open Linux Switch: Mainline Linux, switchdev and Hardware L3 Offload" by Bruno Banelli - 25 minutes 4. "Refactoring around an open source project that goes commercial" by Tomek Mrugalski and Victoria Risk - 20 minutes 5. Lightning Talks - details to come

1 0

Draft agenda for RIPE93
by Sasha Romijn 02 Oct '26

02 Oct '26

Hello all, Please find below the draft agenda for our upcoming meeting during RIPE93. Our slot is Wednesday, 28 October, 09:00-10:30 local time (UTC+2). We have three presentations on a wide range of subjects. We also still have a bit of space for Lightning Talks. If you’re interested in doing one, please send a mail to opensource-wg-chairs(a)ripe.net before the Tuesday of the meeting week. If you have any doubts about whether a topic would fit, or other questions, always feel free to contact us. We're looking forward to you joining us in Sofia or online. Thank you to all speakers who submitted for this session! Best regards, Marcos Sanz, Marco d'Itri and Sasha Romijn Working group co-chairs --- 1. Administrative matters - 10 minutes - Welcome - Finalise agenda - Approval of previous minutes - Chair selection results 2. "Beyond NIS2: Software Supply Chains and the Cyber Resilience Act (CRA)" by Barry O'Donovan - 25 minutes 3. "BIRD on an Open Linux Switch: Mainline Linux, switchdev and Hardware L3 Offload" by Bruno Banelli - 25 minutes 4. "Refactoring around an open source project that goes commercial" by Tomek Mrugalski and Victoria Risk - 20 minutes 5. Lightning Talks - details to come

1 0

Open Source WG chair selection - Call for candidates
by Marcos Sanz 15 Sep '26

15 Sep '26

Dear all, It's two months until RIPE 93, where Sasha's current term as a co-chair would regularly end. Thus, and as per the current selection process, we hereby open a call for candidates lasting three weeks and ending 14th September (23:59:59 UTC). Interested people (including the incumbent, if she'd like to run again!) should contact Marco and me off-list expressing their interest. Thanks and regards, Marcos (for all current wg co-chairs)

1 1

Last call for Open Source WG Presentations (RIPE93, Sofia, October 28st, 2026)
by Marco d'Itri 13 Sep '26

13 Sep '26

Dear Working Group members, We now invite you to submit your proposals for the Open Source Working Group session taking place during RIPE 93. The open source working group session is currently scheduled for Wednesday, 28 October, from 09:00 to 10:30 (UTC+2) Please submit your proposals as soon as possible, and definitely by September 21st, 2026. How to submit your talk: 1. Go to the RIPE 93 Call for Presentations page and click on "Submit a proposal": https://ripe93.ripe.net/present/call-for-presentations/ . 2. Follow the instructions[1] to set up an account on Pretalx. 3. Important: When filling in the submission form, please pay attention to the dropdown menu under "Track". This is where you select which working group (track) you would like to submit your talk for, hopefully "Open Source WG". Do not forget to also fill the "duration" field with the length you have in mind. In general, each talk is 15-30 minutes including Q&A (depending on how much time is needed). If you have some idea and are not sure how/if you should present something, then feel free to contact us as well at opensource-wg-chairs(a)ripe.net to discuss the idea! Remote presentations are also possible. As always, we are planning to reserve some time at the end of the WG session for lightning talks. These short (5 to 10 minutes max) updates/talks are decided on the day before the WG session on a time/space available basis. No need to submit to us anything for lightning talks at this time, but you are welcome to do so. [1] Detailed instructions on how to use Pretalx are available here: https://ripe93.ripe.net/present/how-to-submit-a-proposal/ . Thanks, Marco, Marcos and Sasha, Your Open Source WG Chairs -- ciao, Marco

1 0

Call for Open Source WG Presentations (RIPE93, Sofia, October 28st, 2026)
by Marco d'Itri 19 Aug '26

19 Aug '26

Dear Working Group members, We now invite you to submit your proposals for the Open Source Working Group session taking place during RIPE 93. The open source working group session is currently scheduled for Wednesday, 28 October, from 09:00 to 10:30 (UTC+2) Please submit your proposals as soon as possible, and definitely by September 14th, 2026. How to submit your talk: 1. Go to the RIPE 93 Call for Presentations page and click on "Submit a proposal": https://ripe93.ripe.net/present/call-for-presentations/ . 2. Follow the instructions[1] to set up an account on Pretalx. 3. Important: When filling in the submission form, please pay attention to the dropdown menu under "Track". This is where you select which working group (track) you would like to submit your talk for, hopefully "Open Source WG". Do not forget to also fill the "duration" field with the length you have in mind. In general, each talk is 15-30 minutes including Q&A (depending on how much time is needed). If you have some idea and are not sure how/if you should present something, then feel free to contact us as well at opensource-wg-chairs(a)ripe.net to discuss the idea! Remote presentations are also possible. As always, we are planning to reserve some time at the end of the WG session for lightning talks. These short (5 to 10 minutes max) updates/talks are decided on the day before the WG session on a time/space available basis. No need to submit to us anything for lightning talks at this time, but you are welcome to do so. [1] Detailed instructions on how to use Pretalx are available here: https://ripe93.ripe.net/present/how-to-submit-a-proposal/ . Thanks, Marco, Marcos and Sasha, Your Open Source WG Chairs -- ciao, Marco

1 0

Updated WG Chair Selection process
by Marcos Sanz 07 Aug '26

07 Aug '26

Dear working group, we hope you enjoyed last week's RIPE meeting and got back home safe and sound. If you paid attention to the RIPE Chair Team Update during the Community Plenary, you heard the discussion about the WG chair selection principles and the ongoing work on the document https://www.ripe.net/publications/docs/ripe-documents/other-documents/draft… (which will become the successor of RIPE-692). After carefully considering these recommendations/guidelines, and being aware that our current documented process for the open source wg (https://www.ripe.net/community/wg/active-wg/os/open-source-wg-chair-selecti…) is -among others- short of respecting mandatory chair terms, Marco, Sasha and I have reworked that documented process. You'll find the draft of that work attached. Nothing in the attachment should surprise you: terms are now observed (which drove us to introduce the concept of staggering for the sake of continuity). Additionally, we have now documented candidate requirements, which were outspoken in e-mails in the past (e.g. https://mailman.ripe.net/archives/list/opensource-wg@ripe.net/thread/RQP4FL…) but never made it to the official doc. Still, we'd like to ask you for feedback on the attached document, before we publish it on the website. We are opening hereby a comment period of 14 days, that is, until Friday, 12th June, before we move on. Thanks in advance for contributing to shape the future of the group Marcos (for all co-chairs) [1] Number of Co-Chairs: The Open Source WG will have two or three co-chairs. Terms [T1] Length of Term: Each co-chair serves a three-year term. [T2] Term Limits: A co-chair may serve multiple consecutive terms; there is no limit on reappointment, provided the selection process is followed. [T3] Staggered Terms: Terms must be staggered to ensure continuity. * With three co-chairs, no more than two terms may end in the same year. If staggering is lost due to resignation or unexpected changes, the WG may assign an adjusted term length to restore staggering. Chair Requirements A candidate for co-chair must meet the following requirements: [R1] Prior Participation and Process Knowledge: The candidate has attended multiple physical RIPE meetings before and is familiar with RIPE processes and community expectations (e.g. by having studied the RIPE guide for new working group chairs or completing the RIPE NCC Academy working group chair course). [R2] Ongoing Participation: The candidate commits to attending as many RIPE meetings as possible in person while serving as a co-chair. [R3] Attendance at the Current Selection Meeting: The candidate will attend the upcoming autumn RIPE meeting session (either physically or virtually) where the selection process occurs. Selection Process [2] Call for Co-Chair Candidates: Two months before every autumn RIPE meeting there will be a call for candidates for any co-chair position whose term ends that year. The nomination period will be 14 days. Candidates must confirm that they satisfy the Chair Requirements listed in section [R1]-[R3]. [3] New Term for an Existing Co-Chair: Should an existing co-chair whose term ends want to candidate, the incumbent should follow the same process as any other candidates. [4] No Applications: If there are no applications, the current co-chair whose term is ending will continue for the next term, provided the availability and willing to do so. [5] Only One Co-Chair Can Be Replaced Per Year: Only one co-chair position may be filled per year, regardless of the total number of co-chairs, to preserve stability and continuity. Candidate Discussion & Selection [6] If There Is One or More Applications: If there is at least one candidate (other than the incumbent): 1. The current co-chair whose term is ending and the candidate(s) will discuss among themselves who should serve the next term. 2. If consensus among them is reached before 14 days prior to the RIPE meeting, that person is appointed. 3. If no consensus is reached, this is publicly announced in the list and a selection process will take place within the WG at the RIPE meeting. Unforeseen Circumstances [7] Unexpected Resignation: If a co-chair resigns before their term expires: * The WG may appoint an interim co-chair by consensus until the next regular autumn selection process. * The interim period does not count as a full term. * When the position is formally filled at the next autumn cycle, the WG may assign an adjusted term length to preserve staggering (see rule [T3]). [8] Issues Not Covered Any issues relating to the selection, replacement, term management, or staggering of co-chairs not covered by the above rules will be decided by WG consensus during the RIPE meeting. When the WG is unable to reach consensus, the matter will be referred to the RIPE Chair (or their deputy), whose decision shall be final.

2 2

BondingShouldBeFree Open-source Network Aggregation & Redundancy Solution
by Chester A. Unal 21 May '26

21 May '26

Hello everyone. I have written an open-source network bonding solution with intent to have it become the gold standard of network bonding using MPTCP. This post includes all the details: https://forum.openwrt.org/t/bondingshouldbefree-open-source-network-aggrega… I'm looking for ISPs and any other parties interested to deploy it and give me feedback. Cheers. Chester Arinc

2 1

Open Source funding
by Pieter Lexis 20 May '26

20 May '26

Hello folks, As mentioned during the session at RIP92, there are several organizations Open Source projects can request funding from for many aspects of their development process. A few that come to mind are the NLNet Foundation[1], the Sovereign Tech Fund[2], and the GitHub Secure Open Source Fund[3]. As Barry O'Donovan said suting his talk at RIPE92 (as interpreted by my), don't be shy or scared to ask for help with asking for help with security and penetration testing. Should you know more sources of low-bureaucracy Open Source funding, don't hesitate to send a follow-up email to this mailing-list. Best regards, Pieter Lexis 1 - https://nlnet.nl/funding.html 2 - https://www.sovereign.tech/programs/fund 3 - https://github.com/open-source/github-secure-open-source-fund

1 0