July 2004 - Ris-int - mailman.ripe.net

bgpd dies
by James Aldridge 31 Aug '04

31 Aug '04

http://bugzilla.quagga.net/show_bug.cgi?id=103 We seem to be seeing this bug too. Don't know whether it's a Linux thing or a Quagga version 0.96.5 thing... worth keeping an eye on the quagga-users and quagga-dev lists. James

2 2

new features
by Alexis Yushin 05 Aug '04

05 Aug '04

Hi, I finished xml.html please try it out, the templates are now provided in the form. I also have an experimental version of retromatch but it still needs some premission granting action from Arife. Everything else that was on the wish-list is finished, plus some extra's like myasn-admin delete to delete an entire registry and deleting all alarms in a group. I'm pretty much done. Since the project is finished, as far as my contract is concerned, I'd like to invite everybody to have a Columbus beer with me at 't IJ brewery. Suggestions for a specific date? Alexis

4 12

myASn admin doc draft
by Alexis Yushin 02 Aug '04

02 Aug '04

Hi, This is a draft of the admin doc. Any comments/suggestions/critique or unrelated remarks are welcome :) Alexis 1. Overview This overview implies that the reader has familirized her/himself with the myASn user documentation and frequently asked questions. http://www.ris.ripe.net/myasn/help.html http://www.ris.ripe.net/myasn/faq.html myASn system internally consists basically of three parts: - frontend (web interface presently running on halfweg.ripe.net ) - backend (two perl demon scripts running on weesp.ripe.net ) - database (presently resided on weesp.ripe.net) Frontend consist of collection of Mason enabled web pages and help files that use perl libraries to access myASn database to configure the system and view the results of the processing done by backend. There are two versions of frontend: standalone and LIR Portal. The LIR Portal version of the frontend is not deployed at this moment and will be documented elsewhere. Everything below applies to the standalone version. Backend consist of two perl demon scripts: myasn-scan - that does the processing of the data and generates alarms that are stored in the myasn database myasn-send - that send the email notifications of the alarms that are generated by myasn-scan Both frontend and backend use the same set of perl modules. 2. myASn Installation pre-required modules: Alzabo::MethodMaker Alzabo::Runtime::Schema Apache::DBI DBI Exception::Class IO::Socket Lingua::EN::Inflect Mail::RFC822::Address Net::IP Socket Text::ASCIITable URI XML::Parser myASn installation on both frontend and backend servers should be as simple as checking the myASn package out of master CVS repository. export CVS_RSH=ssh export CVSROOT :ext:cow.ripe.net:/ncc/cvsroot cvs co myasn Further updates of myasn system can be simply done by issuing cvs up in the myasn directory. (use cvs -n up first, to see what's about to happen :) myASn system should be installed on both frontend and backend server into /home/risops/myasn directory. This directory is hard-coded into use lib statements of the following files in the distribution: ./backend/myasn-scan.perl ./backend/myasn-send.perl ./lib/RIPE/NCC/myASn.pm ./www/syshandler as long as it might be specified in myasn.conf configuration file. Once myasn check out the following symbolic links should be made on frontend server (halfweg.ripe.net): ln -s /home/risops/myasn/www /home/risops/www/ris/myasn ln -s /home/risops/myasn/alzabo/schemas/myasn /var/www/alzabo/schemas/myasn XXX Arife might want to add here comments about ris.rc file she made. 3. Configuring myASn Once myASn is installed the configuration of myasn is done via master configuration file, /home/risops/myasn/etc/myasn.conf It basically consists of line with name = value, where in most cases name is the same as a command line arguement of myasn scripts without leading dashes. For example, one could put risdb-username = myasn which would be similar to issuing myasn-scan --risdb-username myasn There are a number of variables that are common to all myASn components, example values are given: risdb_hostname = 193.0.0.210 Hostname or ip address of the RIS database. risdb_username = myasn Username to use for connecting to RIS database. risdb_password = ticvdkjw Password to go with the username above. myasn_database = myasn Hostname or ip address of the myASn database. myasn_hostname = 193.0.0.210 myasn_username = myasn Username to use for connecting to myASn database. myasn_password = tiablkdfd;akj The password to use to connect to myASn datbase. myasn_port = 3306 Port to use to connect to myASn database. pidfile_dir = /home/risops/myasn/log The directory where all the pid/lockfiles will be created. Must be writable to myasn-scan and myasn-send invoking users. The pid files will be created in the format of: $pidfile_dir/myasn-scan.$rrc.pid $pidfile_dir/myasn-send.pid This option can be overwritten with pidfile option that doesnt do rrc name expansion like shown above. The same rules apply to logfile_dir and logfile variables. logfile_dir = /home/risops/myasn/log The directory where all the logfiles will be stored. Same requirement as above. rrc_list = rrc00 rrc01 rrc02 rrc03 rrc04 rrc05 rrc06 rrc07 rrc08 rrc10 rrc11 White-space separated list of the route collectors. Once a new RRC is added it should be added here as well and myasn related tables should be created. XXX Arife more on this? # wait these many seconds for myasn-send loop wait = 900 This one is myasn-send specific. myasn-send will wait this many seconds before starting sending a new serious of alarm notifications by email. # wait these many seconds for myasn-scan loop loop-wait = 300 This is a similar variable for myasn-scan. myasn-scan will wait this many seconds before processing new series of bgp updates. # delay this many seconds before forking next child fork-delay = 30 myasn-scan will wait this many seconds before forking another child process. This is done to desyncronize processing of rrc to avoid peak mysql workloads. To configure the frontend, the Apache's httpd.conf needs the following lines added: <Location /myasn> AuthType Basic AuthName "MyASN Login" AuthUserFile /home/risops/myasn/etc/myasn-passwords Require valid-user SetHandler perl-script PerlHandler HTML::Mason::ApacheHandler PerlSetVar MasonAllowGlobals $User PerlSetVar MasonAutohandlerName autohandler.html </Location> The first section is responsible for authenticating users, and the second one makes sure that the myASn files are handled by Mason. 4. Accounts and users myASn account in standalone version is the same thing as LIR registry in the original LIR portal version. myASn account might have a number of users that share the same alarm configuration and have access to the same information. As a matter of fact myASn doesn't know anything about users, it only cares about the accounts or registries. Usernames are used solely for access authorization purposes and welcome text. As far as user accounts are concerned they are created automatically based on the $User->username and $User->regid global variables. These variables are either initialized by LIR Portal (for LIR Portal version) or by syshandler in the standalone version. In standalone version $User->username and $User->regid are produced by splitting Apache username into username@regid parts. Therefore Apache username alexis@55555 will result in $User->username = 'alexis' and $User->regid = '55555' If myasn account 55555 does not exist yet, it will be created automatically. Therefore to create a new myasn account a new user should be added into /home/risops/myasn/etc/myasn-passwords file. It can be done with htpasswd /home/risops/myasn/etc/myasn-passwords username@accountname password, for example: htpasswd /home/risops/myasn/etc/myasn-passwords alexis@55555 alexis123 will create an account 55555 with username alexis that will have password 123 To change user password the same command as above should be used. XXX - User management, put e-mail template of user request XXX I'm not sure what kind of template I must provide?!? 5. Logging myASn logfiles go into the location specified by --logfile or --logfile-dir options specified either in myasn.conf configuration file or at command line. When myasn-scan is invoked with --logfile-dir, logfile name expansion is being made in a form of: $logfile_dir/myasn-scan.$rrc.log So ig logfile_dir is /home/risops/myasn/log, then for every rrc there will be a separate logfile created. For example for rrc05: /home/risops/myasn/log/myasn-scan.rrc05.log The same applies to --pidfile and --pidfile-dir directives. 6. Backend demon's invokation As mentioned above, two myasn demons are running on weesp.ripe.net (or whatever backend server is in use): myasn-scan myasn-send myasn-scan needs to know to which databases to connect and which credentials to use, location of its logfile and pidfile directory, and loop-wait, fork-delay. All of which is normally specified in myasn.conf file. The only command line myasn-scan should require if myasn.conf is properly setup is: myasn-scan.perl --fork --loop This command tells that myasn-scan should loop, that is keep on waiting on an processing incoming data, and that it should fork a separate process for every rrc. It is important that fork-delay variable is configured, so that not all the processes will be accessing the database exactly at the same time, but with some offset. myasn-send will fork by default so it doesn't require any command line. 7. Maintenance XXX To be developed

2 1

RE: RIS Info Page
by Matthew Williams 29 Jul '04

29 Jul '04

This looks fine. Please link the rrc12 news flash to http://www.ripe.net/ris/risintro.html (page edited) Cheers, Matthew > -----Original Message----- > From: Adrian Bedford [mailto:adrian@ripe.net] > Sent: 29 July 2004 14:56 > To: Matthew Williams > Cc: webmaster(a)ripe.net > Subject: RIS Info Page > > > Hey Matthew > > Sorry for not getting back sooner. I'm really snowed under > right now again. > > The RIS Page text will be used on the new website, which is > supposed to be > launching at the end of August, but in the meantime, if you > want to use the > text we talked about, I've taken on board your comments and > this is the > definitive text...can you create/edit the page you talked > about. When the > new site goes live, we will be able to easily edit it anyway > and save you > the hassle.... > > > > The Routing Information Service (RIS) started as a RIPE NCC > project in > 1999. Currently there are over 300 IPv4 and IPv6 peers at 12* data > collection points in Europe, Japan and North America > > The project aims to collect and store Border Gateway Protocol > (BGP) routing > information and make it publicly available for the Internet > community. > Network operators troubleshoot routing problems by looking at data > collected over time without being limited to a single BGP > view. Archived > raw RIS data is also available, which can be used for > research purposes. > > You can support the RIS by providing a BGP feed. You can find > a list of RIS > peering locations at: > http://www.ris.ripe.net/cgi-bin/rrcstatus.cgi Peering requests can be sent to <rispeering(a)ripe.net> or through a web form, you can find at: http://www.ris.ripe.net/cgi-bin/peerreg.cgi * RRC09 was decommissioned in May, 2004

1 0

RIS contact addresess
by Arife Vural 29 Jul '04

29 Jul '04

Hi guys, What about changing RIS contact info from The contact persons for RIS Project are: * Arife Vural <arife(a)ripe.net> * Daniel Karrenberg <dfk(a)ripe.net> * Henk Uijterwaal <henk(a)ripe.net> * James Aldridge <james(a)ripe.net> * Matthew Williams <matthew(a)ripe.net> To mail the whole group, please use ris(a)ripe.net. to something like that: Contact address for RIS Project: Peering: rispeering(a)ripe.net Questions/feedback/comments: ris(a)ripe.net Arife

2 1

myASN handover meeting
by Arife Vural 29 Jul '04

29 Jul '04

Hi all, This is the summary of our meeting today: - Alexis will prepare the system maintenance documentation. This doc will include the following items, - User management, put e-mail template of user request - How to installation of myASN - Adding new RRC - Log files - Deamons that are running Alexis will get back to Ziya and Arife today about timeline, after his talk with Henk and Matthew. - Developers documentation will be written by Alexis and Ziya. It's a half-day work. This will be scheduled after system maintenance doc is ready. - Arife will look at the myASN SQLs, all in myasn-scan code. Beyond those issues, today Alexis gave Ziya and me introduction to myASN code, and also we created the master copy of the source and put into CVS. Arife

2 1

Re: FW: [ris-int] Draft minutes from Monday's RIS meeting (apologies for the delay)
by James Aldridge 29 Jul '04

29 Jul '04

"Matthew Williams" wrote: > Hi James, > > > - Recent RRCs have been specified as: > > > > Dell PowerEdge 1750 (1U server) > > 1 GByte RAM > > 3 x 73 GByte Disk (configured as RAID5) > > 2.4 GHz Xeon CPU > > Please send me a spec from Dell's web site that's intelligible for MSK-IX fol k (should also give us an estimate on price excl BTW). Below. I'm not sure this is any more intelligible though ;-) James ---------- cut here ---------- ------------------------------------------------------------------------------- Dell Computer Corporation Limited - De Dell Store Samenvatting van het mandje gedownload op 7/29/2004 ------------------------------------------------------------------------------- De prijzen zijn alleen geldig tot en met het einde van de werkdag op de dag dat de samenvatting van het mandje was gedownload. ------------------------------------------------------------------------------- =============================================================================== Dell raadt Microsoft^® Windows^® XP Professional aan =============================================================================== -* PowerEdge? 1750 August Promotion *- ====================================== Aantal : 1 Totaal excl. : 2319.00 EUR Totaal incl. : 2759.61 EUR Standard Features ================= Serverworks Grand Champion LE chipset with 2:1 memory interleaving and a five peer PCI bus architecture for excellent I/O throughput Up to two Intel® Xeon Processors with NetBurst Micro-architecture with Hyper-Threading support. Up to 8GB ECC DDR SDRAM for expandable performance. Chipkill support Online Spare Row capabilities provide improved memory availability. Optional activation of PERC 4/di embedded dual channel Ultra 320 RAID controller with 128MB of battery backed cache to protect your data. Hot-plug hard drives, optional hot-plug redundant power supplies and hot plug non-redundant fans for high availability. Support for 3 hard drives, giving 438GB maximum internal data storage. Embedded dual channel Ultra320 SCSI controllers Tool-less chassis and cable-less motherboard design for ease of maintenance & upgrade Dual embedded Copper Gigabit NIC Rapid rack rail design for fast deployment in a rack. The Dell OpenManage suite to enable automated/rapid operating system installation, and complete network management with IT Assistant. Special Promotion ================= Promotion : 300- special promotional discount Premier Enterprise Support ========================== 3 Years Bronze On-Site Service with Next Business Day Response (-EUR - 700.00 EUR) Packaged Installation Services ============================== No installation Chassis ======= 3rd Party Rack Rails Kit (+ EUR 20.00 EUR) Processor ========= Single Intel® Xeon processor 2.4GHz with 512K cache, 533MHz Front Side Bus Memory - Special Promotion ========================== 1GB DDR SDRAM (2x512MB 266MHz DIMMs) - including promotional saving Hot-Plug Power Supplies ======================= One Non-Redundant Power Supply Riser ===== Riser 2X64-Bit/133MHz PCIX included Bezel ===== PE1750 Bezel Assembly Monitor ======= Not Included Storage Device and Recordable Media =================================== 24x Max IDE CD-ROM Keyboard ======== Not Included Mouse ===== Not Included 1st Hard Drive ============== 73GB 10,000rpm 1" U320 SCSI hard drive (+ EUR 100.00 EUR) 2nd Hard Drive ============== 73GB 10,000rpm 1" U320 SCSI hard drive (+ EUR 290.00 EUR) 3rd Hard Drive ============== 73GB 10,000rpm 1" U320 SCSI hard drive (+ EUR 290.00 EUR) 1st RAID or SCSI Controller Card ================================ PERC 4/Di embedded RAID (with 128MB of battery backed Cache). 2 channels (1 internal and 1 external) (+ EUR 220.00 EUR) 2nd RAID or SCSI Controller Card ================================ Not Included Internal Hard Drive RAID Configuration ====================================== RAID 5 - hard drives connected to PERC4/Di RAID controller (requires 3 identical drives) (+ EUR 50.00 EUR) External PowerVault Tape Backup enclosures ========================================== Not Included Tape BackUp Software ==================== None 2nd Network Card ================ Not Included Communications ============== Not Included Network PowerConnect Switch =========================== Not Included Uninterruptible Power Supplies (UPS) ==================================== Not Included OpenManage Subscription Service =============================== No OpenManage Subscription Factory Installed Operating System ================================== Not Included System Documentation ==================== Paper documents not included (electronic version on Dell OpenManage CD) Software & Storage Support ========================== No Software & Storage support included ------------------------------------------------------------------------------- System ====== Prijs excl. : 2319.00 EUR BTW tarief : 19% Prijs incl. : 2759.61 EUR Levering ======== Prijs excl. : 82.00 EUR BTW tarief : 19% Prijs incl. : 97.58 EUR =============================================================== Totaal excl. : 2401.00 EUR Totaal incl. : 2857.19 EUR Prijs exclusief B.T.W. : 2401.00 EUR Prijs inclusief B.T.W. : 2857.19 EUR =============================================================== Inhoud uitsluitend ontworpen en juist voor Nederland klanten en gebruikers. De voorwaarden van Dell zijn van toepassing. Alle systeemprijzen en -specificaties kunnen zonder voorafgaande vermelding worden gewijzigd. Afgebeelde foto's van producten kunnen afwijken van de op deze webpagina genoemde specificaties. Systemen getoond met optionele extra's. WEERGEGEVEN PRIJZEN BEVATTEN NIET DE CORRECTE LOKALE BTW, VRACHTKOSTEN, IMPORTHEFFINGEN EN BELASTINGEN VOOR LUXEMBURG en worden opnieuw bevestigd nadat uw internet order is ontvangen. Language : nl Currency : eur Store : nlpad

1 0

FYI: RISwhois usage statistics
by Rene Wilhelm 28 Jul '04

28 Jul '04

RISwhois was announced early december 2003 and presented in the january 2004 RIPE47 meeting. After that we didn't do any marketing (other than provide pointers on ris webpages) I just had a rough look at the access statistics (as logged to /var/log/local.log and archived in /var/log/ARCHIVE/local.log*.gz) and found it nice to see there's continued intereset for RISwhois from external users. Excluding any of the RIPE NCC and RIPE meeting addresses (193.0.[0-9].*) RISwhois had 2,325,338 connections[*] from 815 distinct hosts. Top 10 users: IP #connections 213.19.146.13 932354 145.89.193.200 478159 128.223.6.40 363763 207.172.7.46 345502 213.186.35.102 58583 212.126.218.123 45000 202.12.29.252 37448 210.25.133.26 21005 146.115.9.21 15348 212.126.218.122 14242 halfweg.ripe.net made 16150 connections, which I take should all be attributed to the CGI web interface on www.ris.ripe.net So although started from a perspective of improving TTM's IP<>AS mapping, it seems we did add something useful/interesting to the RIS service portfolio. -- Rene [*] like whois.ripe.net, riswhoisd can keep a connection open on user request, thus #connections is not necessarily equal to #queries answered.

2 1

Three things...
by Matthew Williams 28 Jul '04

28 Jul '04

Hi Dave, 1. Flashing RIS (~we need peers etc etc) in K-anycast peering ack (SED do RIS peering reqs) 2. myASn accounts (also by SED in the future) sync w/ K-anycast peering requests (monitor no-export compliance) 3. When will you announce me to contacts ? ;) Cheers, Matthew --- > Matthew Williams (MW243-RIPE) > Customer Liaison Engineer > RIPE NCC - http://www.ripe.net/np/

2 4

[arife@ripe.net: [ris-int] myASN handover meeting]
by Arife Vural 28 Jul '04

28 Jul '04

Alexis, Could you also add which modules are required for myASN in system maintenance doc? Just remembered. Arife ----- Forwarded message from Arife Vural <arife(a)ripe.net> ----- From: Arife Vural <arife(a)ripe.net> To: Matthew Williams <matthew(a)ripe.net>, Ziya Suzen <ziya(a)ripe.net>, Alexis Yushin <alexis(a)ripe.net> Subject: [ris-int] myASN handover meeting Date: Wed, 28 Jul 2004 17:06:31 +0200 Cc: ris-int(a)ripe.net Hi all, This is the summary of our meeting today: - Alexis will prepare the system maintenance documentation. This doc will include the following items, - User management, put e-mail template of user request - How to installation of myASN - Adding new RRC - Log files - Deamons that are running Alexis will get back to Ziya and Arife today about timeline, after his talk with Henk and Matthew. - Developers documentation will be written by Alexis and Ziya. It's a half-day work. This will be scheduled after system maintenance doc is ready. - Arife will look at the myASN SQLs, all in myasn-scan code. Beyond those issues, today Alexis gave Ziya and me introduction to myASN code, and also we created the master copy of the source and put into CVS. Arife ----- End forwarded message -----

2 3