- opensource-wg - mailman.ripe.net

Opt-in vulnerability-finding service for OSS
by Marcos Sanz 29 Oct '26

29 Oct '26

Dear all, welcome to day 4! I was planning to prepare a lightning talk about this one for yesterday's session, but didn't find the space, so here it is: This is the announcement: https://www.anthropic.com/research/launching-opt-in-vuln-finding-service-for -open-source And the participation instructions https://red.anthropic.com/oss-scanner/ Specially thought for "established projects that have a critical impact on infrastructure" Know what? THAT'S YOU! And I really think it's worth we find the issues ourselves than being flooded externally by more or less reliable vulnerability reports. Have a nice rest of RIPE meeting! Marcos

1 0

EDIC digital commons
by Marco d'Itri 28 Oct '26

28 Oct '26

This is a new initiative by some EU member states to fund free software: https://digital-commons-edic.eu/ -- ciao, Marco

1 0

Draft agenda for RIPE93
by Sasha Romijn 02 Oct '26

02 Oct '26

Hello all, Please find below the draft agenda for our upcoming meeting during RIPE93. Our slot is Wednesday, 28 October, 09:00-10:30 local time (UTC+2). We have three presentations on a wide range of subjects. We also still have a bit of space for Lightning Talks. If you’re interested in doing one, please send a mail to opensource-wg-chairs(a)ripe.net before the Tuesday of the meeting week. If you have any doubts about whether a topic would fit, or other questions, always feel free to contact us. We're looking forward to you joining us in Sofia or online. Thank you to all speakers who submitted for this session! Best regards, Marcos Sanz, Marco d'Itri and Sasha Romijn Working group co-chairs --- 1. Administrative matters - 10 minutes - Welcome - Finalise agenda - Approval of previous minutes - Chair selection results 2. "Beyond NIS2: Software Supply Chains and the Cyber Resilience Act (CRA)" by Barry O'Donovan - 25 minutes 3. "BIRD on an Open Linux Switch: Mainline Linux, switchdev and Hardware L3 Offload" by Bruno Banelli - 25 minutes 4. "Refactoring around an open source project that goes commercial" by Tomek Mrugalski and Victoria Risk - 20 minutes 5. Lightning Talks - details to come

1 0

Draft agenda for RIPE93
by Sasha Romijn 02 Oct '26

02 Oct '26

Hello all, Please find below the draft agenda for our upcoming meeting during RIPE93. Our slot is Wednesday, 28 October, 09:00-10:30 local time (UTC+2). We have three presentations on a wide range of subjects. We also still have a bit of space for Lightning Talks. If you’re interested in doing one, please send a mail to opensource-wg-chairs(a)ripe.net before the Tuesday of the meeting week. If you have any doubts about whether a topic would fit, or other questions, always feel free to contact us. We're looking forward to you joining us in Sofia or online. Thank you to all speakers who submitted for this session! Best regards, Marcos Sanz, Marco d'Itri and Sasha Romijn Working group co-chairs --- 1. Administrative matters - 10 minutes - Welcome - Finalise agenda - Approval of previous minutes - Chair selection results 2. "Beyond NIS2: Software Supply Chains and the Cyber Resilience Act (CRA)" by Barry O'Donovan - 25 minutes 3. "BIRD on an Open Linux Switch: Mainline Linux, switchdev and Hardware L3 Offload" by Bruno Banelli - 25 minutes 4. "Refactoring around an open source project that goes commercial" by Tomek Mrugalski and Victoria Risk - 20 minutes 5. Lightning Talks - details to come

1 0

Open Source WG chair selection - Call for candidates
by Marcos Sanz 15 Sep '26

15 Sep '26

Dear all, It's two months until RIPE 93, where Sasha's current term as a co-chair would regularly end. Thus, and as per the current selection process, we hereby open a call for candidates lasting three weeks and ending 14th September (23:59:59 UTC). Interested people (including the incumbent, if she'd like to run again!) should contact Marco and me off-list expressing their interest. Thanks and regards, Marcos (for all current wg co-chairs)

1 1

Last call for Open Source WG Presentations (RIPE93, Sofia, October 28st, 2026)
by Marco d'Itri 13 Sep '26

13 Sep '26

Dear Working Group members, We now invite you to submit your proposals for the Open Source Working Group session taking place during RIPE 93. The open source working group session is currently scheduled for Wednesday, 28 October, from 09:00 to 10:30 (UTC+2) Please submit your proposals as soon as possible, and definitely by September 21st, 2026. How to submit your talk: 1. Go to the RIPE 93 Call for Presentations page and click on "Submit a proposal": https://ripe93.ripe.net/present/call-for-presentations/ . 2. Follow the instructions[1] to set up an account on Pretalx. 3. Important: When filling in the submission form, please pay attention to the dropdown menu under "Track". This is where you select which working group (track) you would like to submit your talk for, hopefully "Open Source WG". Do not forget to also fill the "duration" field with the length you have in mind. In general, each talk is 15-30 minutes including Q&A (depending on how much time is needed). If you have some idea and are not sure how/if you should present something, then feel free to contact us as well at opensource-wg-chairs(a)ripe.net to discuss the idea! Remote presentations are also possible. As always, we are planning to reserve some time at the end of the WG session for lightning talks. These short (5 to 10 minutes max) updates/talks are decided on the day before the WG session on a time/space available basis. No need to submit to us anything for lightning talks at this time, but you are welcome to do so. [1] Detailed instructions on how to use Pretalx are available here: https://ripe93.ripe.net/present/how-to-submit-a-proposal/ . Thanks, Marco, Marcos and Sasha, Your Open Source WG Chairs -- ciao, Marco

1 0

Call for Open Source WG Presentations (RIPE93, Sofia, October 28st, 2026)
by Marco d'Itri 19 Aug '26

19 Aug '26

Dear Working Group members, We now invite you to submit your proposals for the Open Source Working Group session taking place during RIPE 93. The open source working group session is currently scheduled for Wednesday, 28 October, from 09:00 to 10:30 (UTC+2) Please submit your proposals as soon as possible, and definitely by September 14th, 2026. How to submit your talk: 1. Go to the RIPE 93 Call for Presentations page and click on "Submit a proposal": https://ripe93.ripe.net/present/call-for-presentations/ . 2. Follow the instructions[1] to set up an account on Pretalx. 3. Important: When filling in the submission form, please pay attention to the dropdown menu under "Track". This is where you select which working group (track) you would like to submit your talk for, hopefully "Open Source WG". Do not forget to also fill the "duration" field with the length you have in mind. In general, each talk is 15-30 minutes including Q&A (depending on how much time is needed). If you have some idea and are not sure how/if you should present something, then feel free to contact us as well at opensource-wg-chairs(a)ripe.net to discuss the idea! Remote presentations are also possible. As always, we are planning to reserve some time at the end of the WG session for lightning talks. These short (5 to 10 minutes max) updates/talks are decided on the day before the WG session on a time/space available basis. No need to submit to us anything for lightning talks at this time, but you are welcome to do so. [1] Detailed instructions on how to use Pretalx are available here: https://ripe93.ripe.net/present/how-to-submit-a-proposal/ . Thanks, Marco, Marcos and Sasha, Your Open Source WG Chairs -- ciao, Marco

1 0

Updated WG Chair Selection process
by Marcos Sanz 07 Aug '26

07 Aug '26

Dear working group, we hope you enjoyed last week's RIPE meeting and got back home safe and sound. If you paid attention to the RIPE Chair Team Update during the Community Plenary, you heard the discussion about the WG chair selection principles and the ongoing work on the document https://www.ripe.net/publications/docs/ripe-documents/other-documents/draft… (which will become the successor of RIPE-692). After carefully considering these recommendations/guidelines, and being aware that our current documented process for the open source wg (https://www.ripe.net/community/wg/active-wg/os/open-source-wg-chair-selecti…) is -among others- short of respecting mandatory chair terms, Marco, Sasha and I have reworked that documented process. You'll find the draft of that work attached. Nothing in the attachment should surprise you: terms are now observed (which drove us to introduce the concept of staggering for the sake of continuity). Additionally, we have now documented candidate requirements, which were outspoken in e-mails in the past (e.g. https://mailman.ripe.net/archives/list/opensource-wg@ripe.net/thread/RQP4FL…) but never made it to the official doc. Still, we'd like to ask you for feedback on the attached document, before we publish it on the website. We are opening hereby a comment period of 14 days, that is, until Friday, 12th June, before we move on. Thanks in advance for contributing to shape the future of the group Marcos (for all co-chairs) [1] Number of Co-Chairs: The Open Source WG will have two or three co-chairs. Terms [T1] Length of Term: Each co-chair serves a three-year term. [T2] Term Limits: A co-chair may serve multiple consecutive terms; there is no limit on reappointment, provided the selection process is followed. [T3] Staggered Terms: Terms must be staggered to ensure continuity. * With three co-chairs, no more than two terms may end in the same year. If staggering is lost due to resignation or unexpected changes, the WG may assign an adjusted term length to restore staggering. Chair Requirements A candidate for co-chair must meet the following requirements: [R1] Prior Participation and Process Knowledge: The candidate has attended multiple physical RIPE meetings before and is familiar with RIPE processes and community expectations (e.g. by having studied the RIPE guide for new working group chairs or completing the RIPE NCC Academy working group chair course). [R2] Ongoing Participation: The candidate commits to attending as many RIPE meetings as possible in person while serving as a co-chair. [R3] Attendance at the Current Selection Meeting: The candidate will attend the upcoming autumn RIPE meeting session (either physically or virtually) where the selection process occurs. Selection Process [2] Call for Co-Chair Candidates: Two months before every autumn RIPE meeting there will be a call for candidates for any co-chair position whose term ends that year. The nomination period will be 14 days. Candidates must confirm that they satisfy the Chair Requirements listed in section [R1]-[R3]. [3] New Term for an Existing Co-Chair: Should an existing co-chair whose term ends want to candidate, the incumbent should follow the same process as any other candidates. [4] No Applications: If there are no applications, the current co-chair whose term is ending will continue for the next term, provided the availability and willing to do so. [5] Only One Co-Chair Can Be Replaced Per Year: Only one co-chair position may be filled per year, regardless of the total number of co-chairs, to preserve stability and continuity. Candidate Discussion & Selection [6] If There Is One or More Applications: If there is at least one candidate (other than the incumbent): 1. The current co-chair whose term is ending and the candidate(s) will discuss among themselves who should serve the next term. 2. If consensus among them is reached before 14 days prior to the RIPE meeting, that person is appointed. 3. If no consensus is reached, this is publicly announced in the list and a selection process will take place within the WG at the RIPE meeting. Unforeseen Circumstances [7] Unexpected Resignation: If a co-chair resigns before their term expires: * The WG may appoint an interim co-chair by consensus until the next regular autumn selection process. * The interim period does not count as a full term. * When the position is formally filled at the next autumn cycle, the WG may assign an adjusted term length to preserve staggering (see rule [T3]). [8] Issues Not Covered Any issues relating to the selection, replacement, term management, or staggering of co-chairs not covered by the above rules will be decided by WG consensus during the RIPE meeting. When the WG is unable to reach consensus, the matter will be referred to the RIPE Chair (or their deputy), whose decision shall be final.

2 2

BondingShouldBeFree Open-source Network Aggregation & Redundancy Solution
by Chester A. Unal 21 May '26

21 May '26

Hello everyone. I have written an open-source network bonding solution with intent to have it become the gold standard of network bonding using MPTCP. This post includes all the details: https://forum.openwrt.org/t/bondingshouldbefree-open-source-network-aggrega… I'm looking for ISPs and any other parties interested to deploy it and give me feedback. Cheers. Chester Arinc

2 1

Open Source funding
by Pieter Lexis 20 May '26

20 May '26

Hello folks, As mentioned during the session at RIP92, there are several organizations Open Source projects can request funding from for many aspects of their development process. A few that come to mind are the NLNet Foundation[1], the Sovereign Tech Fund[2], and the GitHub Secure Open Source Fund[3]. As Barry O'Donovan said suting his talk at RIPE92 (as interpreted by my), don't be shy or scared to ask for help with asking for help with security and penetration testing. Should you know more sources of low-bureaucracy Open Source funding, don't hesitate to send a follow-up email to this mailing-list. Best regards, Pieter Lexis 1 - https://nlnet.nl/funding.html 2 - https://www.sovereign.tech/programs/fund 3 - https://github.com/open-source/github-secure-open-source-fund

1 0

Draft agenda for RIPE92
by Sasha Romijn 20 Apr '26

20 Apr '26

Hello all, Please find below the draft agenda for our upcoming meeting during RIPE92. Our slot is Wednesday, 20 May, 09:00-10:30 local time. We have a little space for Lightning Talks, and some submissions for this already. If you’re interested in doing one, please send a mail to opensource-wg-chairs(a)ripe.net <mailto:opensource-wg-chairs@ripe.net> before the Tuesday of the meeting week. If you have any doubts about whether a topic would fit, or other questions, always feel free to contact us. We're looking forward to you joining us in Edinburgh or online. Thank you to all speakers who submitted for this session! Best regards, Marcos Sanz, Marco d'Itri and Sasha Romijn Working group co-chairs --- 1. Administrative matters - 5 minutes - Welcome - Finalise agenda - Approval of previous minutes 2. "Web Application Security - an IXP Manager Perspective" by Barry O'Donovan - 20 minutes 3. "Nominet DNS Fund - how are we adapting to what we have learnt?" by Amy O'Donnell and Dave Knight - 20 minutes 4. "Developing Containerlab - an open-source success story" by Gordon Gidofalvy - 20 minutes 5. "How much of BIRD is vibecoded" by Maria Matejka - 15 minutes 6. Lightning Talks - details to come

1 0

Call for agenda items for RIPE92 in Edinburgh
by Sasha Romijn 02 Mar '26

02 Mar '26

Dear Working Group members, We invite you to submit your proposals for the Open Source Working Group session taking place during RIPE92 in Edinburgh, Scotland, and online, 18-22 May 2026. The open source working group session is currently scheduled for Wednesday, 20 May, from 09:00-10:30 (UTC+1). The deadline for proposals for our session is April 13. But we encourage you to submit your proposal earlier if possible. How to submit your talk: 1. Go to the RIPE 92 Call for Presentations page and click on "Submit a topic": https://ripe92.ripe.net/present/call-for-presentations/ . 2. Follow the instructions to set up an account on Pretalx. [1] 3. Important: When filling in the submission form, please pay attention to the dropdown menu under "Track". This is where you select "Open Source WG". Second, please fill in the "duration" field with the length you have in mind - that helps our planning. In general, each talk is 15-30 mins including Q&A (depending on how much time is needed). If you have an idea for the agenda and are not sure how/if you should do something, then feel free to contact us on opensource-wg-chairs(a)ripe.net to discuss the idea! Remote presentations are also possible. As always, we are planning to reserve some time at the end of the WG session for lightning talks. These short (5 to 10 minutes max) updates/talks are decided on the day before the WG session on a time/space available basis. No need to submit to us anything for lightning talks at this time, but you are welcome to do so. [1] Detailed instructions on how to use Pretalx are available here: https://ripe92.ripe.net/present/how-to-submit-a-talk/ Thanks, Marco, Marcos and Sasha, Your Open Source WG Chairs

1 0

Re: Launch of The Internet Ecosystem Book
by Peter Anderson 09 Feb '26

09 Feb '26

*(Apologies for cross-posting)* As a researcher, I have never come across a highly intensive and inclusive book like "The Internet Ecosystem". The book englobes the whole Internet Ecosystem with the correct information compared to misleading information from blogs/wikipedia on the Internet. This book was reviewed by Vint Cerf. I have just completed the reading, I will highly recommend it and it is nice to have a copy to keep for reference. Professor Peter Anderson Head of Research ------------------------------ *From:* Nikesh B. Simmandree <nikeshbs(a)outlook.com> *Sent:* Monday, August 18, 2025 1:35 PM *To:* alac-announce(a)icann.org <alac-announce(a)icann.org>; alac(a)icann.org < alac(a)icann.org>; at-large(a)icann.org <at-large(a)icann.org>; afri-discuss(a)icann.org <afri-discuss(a)icann.org> *Subject:* Launch of The Internet Ecosystem Book Dear Community, I am thrilled to announce the launch of my book, *The Internet Ecosystem* — a comprehensive exploration of the history, architecture, governance, and future of the Internet. This book distills decades of technological evolution — from ARPANET and packet switching, to AI, Web3, quantum networks, and beyond — into a clear, engaging narrative accessible to both technical and non-technical readers *What the Book Covers* - *The Past:* How Cold War research, ARPANET, and packet switching gave birth to the Internet we know today. - *The Present:* The intricate roles of ISPs, backbone providers, cloud infrastructure, AI, cybersecurity, and global governance shaping our daily online experiences. - *The Future:* Insights into 5G/6G, blockchain, immersive technologies, quantum security, and the Internet in 2050. With *49 detailed chapters*, the book provides a definitive yet approachable reference for students, professionals, policymakers, and curious readers alike. My mission with *The Internet Ecosystem* is to make the Internet’s complexity understandable — showing not only *how* the Internet works, but also *why* it matters and has become one of the most transformative human inventions — while sparking dialogue on how we build a secure, inclusive, and sustainable digital future. In the 21st century, understanding the Internet is not optional — it’s essential. Whether you’re a business leader, policymaker, educator, student, or everyday Internet user, this book provides the context and clarity you need to navigate the opportunities and challenges of our connected world. *Get Your Copy* *The Internet Ecosystem* is now available: https://payhip.com/b/hfvYg Thank you, Best Regards, Nikesh B. Simmandree +230-5-907-3413 nikeshbs(a)outlook.com This message and its attachments are intended only for the person or entity to which it is addressed and are strictly confidential. If you have received this in error, please delete it from any devices after having informed the sender.

2 1

Draft Minutes of RIPE 91 OSS wg meeting
by Marcos Sanz 02 Dec '25

02 Dec '25

Dear all, the draft minutes of our last wg meeting are online now https://www.ripe.net/community/wg/active-wg/os/minutes/open-source-working-g roup-minutes-ripe-91/ Thanks to Alun Davies for scribing, any errors/omissions are on the chairs: please contact us if you find any. Have a nice evening, Marcos

1 0

Call for Open Source WG Presentations (RIPE91, Bucharest, October 21st, 2025)
by Marco d'Itri 20 Oct '25

20 Oct '25

Dear Working Group members, We now invite you to submit your proposals for the Open Source Working Group session taking place during RIPE 91. From RIPE 91 onwards, all plenary and working group proposals can be submitted through the same system, Pretalx. Please submit your proposals by 25 September 2025. How to submit your talk: 1. Go to the RIPE 91 Call for Presentations page and click on "Submit a topic": https://ripe91.ripe.net/present/call-for-presentations/ . 2. Follow the instructions to set up an account on Pretalx. [1] 3. Important: When filling in the submission form, please pay attention to the dropdown menu under "Track". This is where you select which working group (track) you would like to submit your talk for. In general, each talk is 15-30 mins including Q&A (depending on how much time is needed). If you have some idea and are not sure how/if you should present something, then feel free to contact us as well to discuss the idea! Remote presentations are also possible. As always, we are planning to reserve some time at the end of the WG session for lightning talks. These short (5 to 10 minutes max) updates/talks are decided on the day before the WG session on a time/space available basis. No need to submit to us anything for lightning talks at this time, but you are welcome to do so. [1] Detailed instructions on how to use Pretalx are available here: https://ripe91.ripe.net/present/how-to-submit-a-talk/ Thanks, Marco, Marcos and Sasha, Your Open Source WG Chairs -- ciao, Marco

2 1

RIPE 91 OSS wg draft agenda online
by Marcos Sanz 11 Oct '25

11 Oct '25

Dear all, our draft agenda is now online and we hope it can convince you to join us at 9am in the morning of a Wednesday <https://ripe91.ripe.net/programme/meeting-plan/sessions/28/> https://ripe91.ripe.net/programme/meeting-plan/sessions/28/ Looking forward to meeting you all in Bucharest, Marcos

1 0

Draft minutes RIPE 90
by Marcos Sanz 10 Oct '25

10 Oct '25

Dear all, here follow the minutes of our last wg session in Lisbon: https://www.ripe.net/community/wg/active-wg/os/minutes/open-source-working-g roup-minutes-ripe-90/ Please read them and let us know about any wished corrections. Best regards and have a nice weekend, Marcos

1 0

Measuring CRA awareness across OS community
by Romain Bosc 06 Oct '25

06 Oct '25

Colleagues, Something I spotted that could be of interest to this group: FYI, the Open Source Security Foundation, LF Europe, and LF Research are fielding a survey to measure awareness about the recently adopted EU Cyber Resilience Act on a worldwide scale. The survey should take between 5 and 10 minutes, and closes at the end of this week with the goal being to publish the survey data and related report by mid-March. Link: https://www.research.net/r/MR35RMF All best Romain -- Romain Bosc Sr Public Policy & Governance Officer RIPE NCC E: rbosc(a)ripe.net

2 2

Nominet DNS Fund
by Lizzie Griffiths 03 Oct '25

03 Oct '25

Hello, Nominet have launched a fund designed to support both the innovation and maintenance of open source DNS projects. We have identified your publication/newsletter as a valuable opportunity to help us reach our intended audience of applicants. We wondered whether you would consider posting some information on our behalf please. We have included some basic information below but please do let us know if you prefer a different format or need more from us. Applications are open to The Nominet DNS Fund, an initiative designed to support both the innovation and maintenance of open source projects that are vital to the internet’s infrastructure. If you or your team are working on projects that strengthen the backbone of the web, we invite you to apply for funding. Key Details * Primary goal: Fund and improve the security, long-term sustainability, and resilience of DNS open source projects. * Focus: Open source critical infrastructure components relevant to the development, deployment, and operation of the global DNS. * Funding available: £370,000 available in this round, with a maximum of £100k per applicant. * Key dates: applications open on 17th September and will close 26th October. The Nominet DNS Fund is committed to responsible, transparent support for the open source community and welcomes applications from a diverse range of contributors. Nominet operate the UK’s national domain name registry for the millions of individuals and businesses who rely on it every single day. As a public benefit company, we run .UK for the greater good, and work with our members to help bring the benefits of the internet to all. Learn more and apply here: https://nominet.uk/nominet-<https://nominet.uk/?page_id=71982>dns-fund/<https://nominet.uk/?page_id=71982> Please feel free to share this with anyone who might be interested!

1 0

Open Source WG Chair selection - Looking for candidates
by Marcos Sanz 20 Sep '25

20 Sep '25

Dear all, it's two months until the next fall RIPE meeting - and this means it's time again for a Working Group Chair Selection. Our working group has currently 3 chairs: * Marco d'Itri (Since RIPE 90) * Sasha Romjin (Since RIPE 88) * Marcos Sanz (Since RIPE 84) None of us is currently considering stepping down as a WG chair, however we would like to hear from the community if there are any candidates willing to step up. Depending on the resonance and on the specific candidate(s), I personally (as the longest standing chair) would consider either withdrawing from further terms or standing myself for re-selection against the new candidate(s). Criteria/Expectations of a WG chair: - You have attended multiple physical RIPE meetings before (and are familiar with how RIPE works) - You will be attending most RIPE meetings while serving as a chair in person - You will attend this Fall meeting session (Physical or Virtual) For more details, see the Guide for New RIPE Working Group Chairs ( <https://www.ripe.net/publications/docs/ripe-765/> https://www.ripe.net/publications/docs/ripe-765/) or the RIPE Working Group Chair e-learning course ( <https://academy.ripe.net/course/info.php?id=16> https://academy.ripe.net/course/info.php?id=16) If you are interested in serving as a WG chair: Nomination period is until Sept 19th, 2025, 23:59 UTC. Send an email to <mailto:opensource-wg-chairs@ripe.net> opensource-wg-chairs(a)ripe.net to make us aware of your candidacy before this deadline. In the email, please include a short biography and a statement about why you are interested in this position. The day after the aforementioned deadline we will send an email to the list with all candidates, their submitted bio and with a summary of previous RIPE attendance. Then we will open a discussion thread on the list for feedback, statement of support for specific candidates and any other feedback in regard to them. In parallel, the working group chairs will conduct interviews with all candidates (and would politely ask them to make time for these calls and get back to us in a timely manner). Time is short and we need to be prepared before the meeting! Please be aware, these are not elections, but selections. The ultimate decision is taken by the remaining WG chairs as all the chairs need to work together. Marcos (for all current WG co-chairs)

1 1

Re: Interested in CRA standards for network management systems?
by Valerie Aurora 21 Jul '25

21 Jul '25

On 7/12/25 16:53, Paul Menzel wrote: > Dear Marcos, dear Valery, > Am 11.07.25 um 08:35 schrieb Marcos Sanz: >>> Am 07.07.25 um 18:15 schrieb Valerie Aurora via opensource-wg: >>>> I'm part of the team that is developing the CRA vertical standard >>>> for network management systems. >>> Excuse my ignorance, but what is CRA? >> Cyber Resilience Act. Valerie seems to be involved in this (which I admire): >> https://www.etsi.org/newsroom/press-releases/2545-etsi-leverages- global-technical-expertise-to-support-the-eu-cyber-resilience-act That's the one. :) Thanks for replying and for the compliment! > Thank you. I didn’t make the connection, that from that low a standardization progress follows. > Being ignorant about standards, I wonder what the difference between a server and switch is supposed to be, and why “network management systems” and servers should be treated differently. The short version is, "because the people who wrote the legislation thought they should be." :) More seriously, these categories are being clarified and redefined, and part of the work is using our technical expertise to define things better. They are also trying to distinguish different types and levels of risk. If someone compromises a single router, they can misroute or sniff traffic or MiM or inject garbage at that point. If someone compromises a network management system, they can order all the network devices it manages to update their config to trust and route through a malicious router, or simply go offline. Speaking of, I could still use someone with open source NMS experience interested in sitting in on a 2 hour meeting every 2 weeks for the next few months. Let me know if you are interested and I will tell you more. :) Valerie

1 0

Interested in CRA standards for network management systems?
by Valerie Aurora 12 Jul '25

12 Jul '25

Hi all, I'm part of the team that is developing the CRA vertical standard for network management systems. One thing we would find really valuable is having an expert in at least one open source NMS participating in the NMS standards meetings. Normally, you would have to be an employee of a company that is a member of ETSI to do this. But we have a way that we can make an open source community member an ETSI delegate. Do you know anyone who has this expertise and would be interested in improving the CRA standard for NMS? Thanks, Valerie

3 3

Project Maintenance Terms project
by Valerie Aurora 21 Jun '25

21 Jun '25

I thought this was an interesting project: This repository is an effort to create a short snippet of text to add to a README or other file making it explicit that the creators or maintainers of software provided free and as-is will not accept any further burdens or impositions with respect to responsiveness, maintenance or updates, particularly any attempts to impose obligations, schedules, or to define any other terms of engagement. https://github.com/mhoye/maintenance-terms More discussion from the author here: https://mastodon.social/@mhoye/114705202798599910 I'm curious if the folks here who sell support contracts already have some language around not providing free maintenance, or other related thoughts? Valerie

1 0

Draft minutes of RIPE 89
by Marcos Sanz 14 May '25

14 May '25

Dear all, we realized yesterday, and we are a bit ashamed to admit, that we forgot to publish/announce the minutes of our last meeting in Prague. Here they are: <https://www.ripe.net/community/wg/active-wg/os/minutes/open-source-working- group-minutes-ripe-89/> https://www.ripe.net/community/wg/active-wg/os/minutes/open-source-working-g roup-minutes-ripe-89/ Please read them and send any corrections, if need be, because we'd like to declare them final during our Thursday session (tomorrow!) We apologize for this last minute rush, Marcos (for all co-chairs)

1 0

Agenda opensource-wg RIPE90
by Sasha Romijn 22 Apr '25

22 Apr '25

Hello all, We received a number of interesting proposals for the open source working group at RIPE90, and are excited to share our draft agenda: 1. Administrative Matters • Welcome • Finalise agenda • Approval of previous minutes 2. Money and Open Source Sustainability - Victoria Risk (ISC) 3. BIND 9 fast(er) - Ondřej Sury (ISC) 4. Growing a team - Maria Matejka (CZ.NIC) 5. goSDN - Martin Stiemerling (da/net) 6. AOB Our session is on Thursday, May 15, at 11:00, in the side room. As usual, you can also participate remotely. Marcos, Marco and Sasha Working group chairs

1 0