This presentation will show early results from an ongoing collaborative open source software project to build a validator tool for the MANRS (Mutually Agreed Norms for Routing Security) project. The project demonstrates the feasibility of applying concrete, objective tests to MANRS, as well as the need for cross-organizational collaboration to develop such tools. This presentation will outline key steps so far in this pilot project for collaborative open source.

C. Recent development of the RPKI Validator project

(Mikhail Puzanov, RIPE)

RIPE NCC has been developing its own RPKI validator since 2010. The latest version 3 was started in 2017 as an attempt to address the issues found over years of usage in the RPKI validator version 2. While certain issues have been resolved, many new ones were introduced causing multiple bugs and reputation damage. The presentation mostly goes about the choice of Java-technologies and the efforts taken to change it. It also covers the progress in the latest developments and some changes between versions 3.0 and 3.1.

D. NGI0: The Next Generation Internet initiative

(Michiel Leenaars, Director of Strategy at NLnet Foundation)

The Next Generation Internet initiative is a significant new effort aimed at strengthening the internet community. NGI was bootstrapped in 2016 at the initiative of the European Commission. The ambition of NGI is “to re-imagine and re-engineer the internet” in a human-centric way. An innovative grantmaking scheme and delivery mechanism focused on open source, open standards and open hardware to make the internet more trustworthy, resilient and and sustainable, both societally, economically and environmentally. NGI Zero invites you to consider to joining over 100 others in ‘working for the internet’

E. Automating networks using Salt, without running Proxy Minions

(Mircea Ulinic, DigitalOcean)

Salt is an agent-based open source software used to automate the management and configuration of infrastructure and application at scale. It typically requires a Salt Minion service to be running on the node managed with Salt. While this is not a blocker on any server generally speaking, in the networking world, it is not possible to install custom software on the network gear you want to manage. This is why a few years ago SaltStack, the company maintaining Salt, introduced the Proxy Minion, which is a derivative of the regular Minion, just that it doesn’t need to be installed on the targeted device, as it can run anywhere. Similar to the regular Minion, you need to manage as many Proxy Minion services as network devices you have. This comes with a considerable cost - as in managing the infrastructure, operational, training of the users, and so on - not always justified. For example, there are many cases in the networking world where we need to interact with the device only once or twice a year, however those interactions must be consistent and safe, thus automation is the only way to go; but keeping a service up and running during this time is not an ideal solution

F. OpenSource Lightening Updates

These are short updates on different relevant OpenSource projects. They should be 5 mins (preferably) with a maximum of 10 mins (if space allows). No formal submission required ahead of RIPE, but please send a short message to opensource-wg-chairs@ripe.net by noon on Tuesday during the RIPE if you want to present an update. Selection of talks are done on Tuesday afternoon.