April 2005 - address-policy-wg

IPv6 Policy Clarification - Initial allocation criteria "c)"
by Laura Cobley 19 Jul '05

19 Jul '05

Dear Colleagues, As explained in the email sent on Mon, 14 Jun 2004: http://www.ripe.net/ripe/mail-archives/address-policy-wg/2004/msg00240.html This is the second mail request for clarification of the IPv6 Address Allocation and Assignment Policy. Below is an excerpt from the IPv6 Address Allocation and Assignment Policy: 5.1.1. Initial allocation criteria "c)" "To qualify for an initial allocation of IPv6 address space, an organisation must [...] plan to provide IPv6 connectivity to organisations to which it will assign /48s by advertising that connectivity through its single aggregated address allocation" LIRs who operate closed/private networks appear not to qualify because the address space in these networks will not be advertised. Was this the community's intention? Best Regards, Laura Cobley Registration Services RIPE NCC

9 12

Policy proposal: #gamma IPv6 Initial Allocation Criteria
by Hans Petter Holen 11 Jul '05

11 Jul '05

Dear all, Please find enclosed a policy proposal from Andy Furnell. My proposal is to enter this proposal into the Discussion Phase with a time line of 4 weeks ending on May 9the allowing the discusssion to continue over the RIPE meeting. 1. Number #gamma 2. Policy Proposal Name: IPv6 Initial Allocation Criteria 3. Author a. name: Andy Furnell b. e-mail: andy(a)linx.net c. telephone: +44 (0) 20 7645 3519 d. organisation: London Internet Exchange (LINX) 4. Proposal Version: 1 5. Submission Date: 4/4-2005 6. Suggested WG for discussion and publication: Address Policy WG 7. Proposal type: modify a. new, modify, or delete 8. Policy term: renewable a. temporary, permanent, or renewable. 9. Summary of proposal: The proposal is to change the IPv6 Initial Allocation criteria outlined in the "IPv6 Address Allocation and Assignment Policy" (http://www.ripe.net/ripe/docs/ipv6policy.html). The proposed change is to remove "have a plan for making at least 200 /48 assignments to other organisations within two years" and to remove the reference to "/48s" as the assignment size. 10. Policy text a. Current (if modify): 5.1.1. Initial allocation criteria To qualify for an initial allocation of IPv6 address space, an organisation must: a) be an LIR; b) not be an End Site; c) plan to provide IPv6 connectivity to organisations to which it will assign /48s by advertising that connectivity through its single aggregated address allocation; and d) have a plan for making at least 200 /48 assignments to other organisations within two years. b. New: 5.1.1. Initial allocation criteria To qualify for an initial allocation of IPv6 address space, an organisation must: a) be an LIR; b) not be an End Site; c) plan to provide IPv6 connectivity to organisations and customers to which it will make assignments by advertising that connectivity through its single aggregated address allocation. 11. Rationale: a. Arguments supporting the proposal Many LIRs' networks do not have 200 customers to make assignments to but still maintain autonomous network and addressing policies. These require address space that is both aggregatable and independent from that of their peers. In addition, a /48 assignment is not always appropriate; ISPs might have different plans for the size of the assignments they will make and the policy should not stand as an obstacle for them. Such a change in the policy will also make IPv6 allocations more accessible and could result in the acceleration of IPv6 development. b. Arguments opposing the proposal With such a change in the policy, every LIR operating an autonomous network would be able to receive an IPv6 allocation. The worst case scenario would be a number of allocations equal to the number of LIRs in the RIPE region. ---------------------------------------------------------------------------

23 115

Policy proposal: #alpha: TLD Anycast Allocation Policy
by Hans Petter Holen 11 Jul '05

11 Jul '05

Dear all, Please find enclosed a policy proposal. As per my previous message I will "beta-test" the new PDP on this proposal. The current proposal has been discussed previously and has now been re-formulated after that discussion. My proposal is to enter this proposal into the Discussion Phase with a time line of 2 weeks ending on April 4th. Best Regards, Hans Petter 1.Number (assigned by the RIPE NCC) alpha 2.Policy Proposal Name: TLD Anycast Allocation Policy 3.Author a.name: Andreas Baess b.e-mail: baess(a)denic.de c.telephone: +49 69 27235 0 d.organisation: DENIC e.G. 4.Proposal Version: 1 5.Submission Date: 6.Suggested WG for discussion and publication: Address Policy Working Group 7.Proposal type: new 8.Policy term: renewable 9.Summary of proposal To enable ccTLD and gTLD nameserver operators to provide their DNS service using shared unicast technology, RIPE NCC is able to assign one IPv4 and IPv6 prefix per operator that is not likely to be filtered by common practise for anycast-operation of their DNS services. 10. Policy text a.Current: N/A b.New: "If the nameserverset of a TLD without anycasting technology applied would not pass the IANA Administrative Procedure for Nameserver Delegation and Glue Data (http://www.iana.org/procedures/delegation-data.html) may receive dedicated network prefixes for the sole purpose of anycasting name servers, as described in RFC 3258. These shall be: one /24 IPv4 prefix and/or one /32 IPv6 prefix per operator. The prefixes shall be tagged as 'ASSIGNED ANYCAST' in the RIPE database and MUST be returned to the RIPE NCC if not in use for anycast DNS any longer." 11. Rationale: PROS A. Acceptance of DNS for special treatment Studies like http://www.ripe.net/ripe/meetings/ripe-45/presentations/ripe45-eof-rickard.… shows clearly that ccTLD and gTLD nameservers are a critical network infrastructure that justify special policies to guarantee operability of Internet applications. B. Policy Harmonization Three out of four RIRs (APNIC, ARIN and LACNIC) have policies allowing assignments to network critical infrastructure. All three policies classify TLDs as critical infrastructure. Extracts from these policies can be found in Appendices I through III. C. Scalability of DNS To serve the projected increase of DNS queries and to ensure sufficient network topological coverage and diversity TLD managers need to deploy an increasing number of nameservers. D. Resilience Internet has become part of the daily life and their availabilty is as important as the availability of all public services. Anycasting is currently the state-of-the-art solution to lower the impact of DDoS attacks. E. IPv6 Support As the world starts exploiting IPv6, the DNS infrastructure should support IPv6 natively. However it is not yet possible to reduce the number of nameservers in the IPv4 cloud. CONS F. Waste of Address Space Accepting a number of IPv4/24 and IPv6/32 allocations for critical network infrastructures does not align with the traditional address conservation efforts. With anycasting it is very likely that only a few addresses from the entire assignment would be used. 2. Root DNS are special, others are not RIPE document 233 dated from 24th May 2002 says: "Although it is undesirable to give special status to any IP (IPv4 or IPv6) address block, it was agreed by the community that the particular need defined in this document is the only justifiable exception to that general principle." 3. Assigning an own network prefix is just a workaround to ensure global reachability which could also be achieved by adjusting currently deployed route filter practices. Appendix I APNIC Policy (Following section is taken from http://www.apnic.net/docs/policy/add-manage-policy.html - 11.3) 11.3 Critical infrastructure The following critical infrastructure networks, if operating in the Asia Pacific region, are eligible to receive a portable assignment: * root domain name system (DNS) server; * global top level domain (gTLD) nameservers; * country code TLD (ccTLDs) nameservers; * IANA; * Regional Internet Registry (RIRs); and * National Internet Registry (NIRs). Assignments to critical infrastructure are available only to the actual operators of the network infrastructure performing such functions. Registrar organisations which do not actually host the network housing the registry infrastructure, will not be eligible for an assignment under this policy. The minimum assignment made under these terms is /24. Appendix II ARIN Policy (Following section taken from http://ww2.arin.net/policy/index.html#four4) 4.4. Micro-allocation - ARIN will make micro-allocations to critical infrastructure providers of the Internet, including public exchange points, core DNS service providers (e.g. ICANN-sanctioned root, gTLD, and ccTLD operators) as well as the RIRs and IANA. These allocations will be no longer than a /24 using IPv4 or a /48 using IPv6. Multiple allocations may be granted in certain situations. Appendix III LACNIC (Following section is taken from http://lacnic.net/policy-en.pdf) 3.3.3 Micro Allocations Micro allocation is the name given to those allocations that imply blocks smaller than /20 but always larger than or equal to /24. LACNIC can grant this type of allocation in case of projects and infrastructure for networks that are key or critical for the region, such as IXPs (Internet Exchange Points), NAPs (Network Access Points), RIRs, ccTLDs, among others. In the case of IXPs or NAPs, in order to be able to apply for this type of allocation, organizations shall meet the following requirements: 1. Duly document the following aspects: 1. 1Prove by means of their bylaws their capacity of IXP or NAP. The organization shall have at least three members and an open policy in relation to the association of new members. 1. 2Submit a company structure organizational diagram. 1. 3Document the numbering plan to be implemented. 2. Provide a usage plan for the following three and six months. The rest of the applications shall be studied based on the analysis of the documentation justifying the critical and/or key aspects of the project. Organizations receiving micro allocations are not authorized to suballocate these addresses.

8 12

Policy Proposal: #epsilon Policy text modifications to take account of,ICANN recognition of AfriNIC as a fully functioning RIR.
by Hans Petter Holen 01 Jul '05

01 Jul '05

Dear All, With the formal recognition of AfriNIC as a fully functioning RIR there is no need to still have special policy provisions for the AfriNIC region in the RIPE NCC region. http://www.nro.net/archive/news/20050411-afrinic-final-recognition.html As I do not expect much discussion on this Item I propose to end the discussion period by May 1st. 1.Number (assigned by the RIPE NCC) #epsilon 2.Policy Proposal Name: Policy text modifications to take account of ICANN recognition of AfriNIC as a fully functioning RIR. 3.Author a.name: Adiel Akplogan b.e-mail: adiel(a)afrinic.net c.telephone:+230 259 2409 d.organisation: AfriNIC 4.Proposal Version: 1.0 5.Submission Date: 6.Suggested WG for discussion and publication Address Policy Working Group 7.Proposal type: modify a.new, modify, or delete. 8.Policy term: renewable a.temporary, permanent, or renewable. 9.Summary of proposal To modify the policy document text to reflect full recognition of AfriNIC as a functioning RIR. 10. Policy text a.Current (if modify): "1.0 Introduction The RIPE NCC is an independent association and serves as one of four Regional Internet Registries (RIRs). Its service region incorporates Europe, the Middle East, Central Asia and African countries located north of the equator." b.New: "1.0 Introduction The RIPE NCC is an independent association and serves as one of /five/ Regional Internet Registries (RIRs). Its service region incorporates Europe, the Middle East, and Central Asia." a.Current (if modify): "5.1 First Allocation The RIPE NCC's minimum allocation size is /21. The minimum allocation size for countries in Africa is /22." b.New: "5.1 First Allocation The RIPE NCC's minimum allocation size is /21." 11. Rationale: a.Arguments supporting the proposal With the recognition of AfriNIC as a fully functioning and independant RIR there is a need to modify this document reflecting this change. b.Arguments opposing the proposal None.

1 1

HD ratio policy proposal
by BIDRON Alain ROSI/DAS 01 Jul '05

01 Jul '05

Dear Colleagues Referring to the minutes of the last RIPE Policy Working Group meeting and to the action list as updated during that meeting, I have to make a formal proposal on use of HD ratio for IPV4. Here is this policy proposal. In order to be consistent with the PDP Draft proposal coming from Rob Blokzijl I have used the template provided in the new PDP proposal. Best regards. Alain _________________________________________________________ 1. Policy Proposal Name: IPv4-HD-Ratio 2. Author a. name: Alain Bidron b. e-mail: alain.bidron(a)francetelecom.com c. telephone: +33 1 44 44 27 75 d. organisation: France Telecom 3. Proposal Version: V0 4. Submission Date: 02/02/2005 5. Suggested WG for discussion and publication: Address Policy WG 6. Proposal type: modify 7. Policy term: permanent 8. Summary of proposal: Internet address space is managed hierarchically: - IANA allocates space to Regional Internet Registries (RIRs). - RIRs allocate space to Local Internet Registries (LIRs). - LIRs assign space to End Users. At each level, some address space may be reserved for future expansion and/or efficient aggregation. As more hierarchical levels are introduced, the overall efficiency of the address space usage decreases. The HD ratio (Host-Density ratio) is a way to measure address space usage [RFC 3194]. The HD ratio value can relate to a percentage of usage, which decreases as the amount of address space grows. This allows for the decreasing efficiency that occurs with more hierarchical levels. The HD ratio is currently used to measure IPv6 address space usage [ipv6-address-policy]. The IPv6 Address Allocation and Assignment Policy considers a block of IPv6 address space to be ‘used’ when its HD ratio reaches 0.80. This is a manageable figure ("values of 80% or less correspond to comfortable trade-offs between pain and efficiency" [RFC 3194]). This document proposes using the HD ratio to measure IPv4 usage. The proposed value of the HD ratio for IPv4 is 0.96. 9. Policy text: a. Current: "An LIR may receive an additional allocation when about eighty percent (80%) of all the address space currently allocated to it is used in valid assignments or sub-allocations." b. New: "An LIR may receive an additional allocation when its total allocated address space usage meets the HD-Ratio value of 0.96." 10. Rationale: a. Background The current document, “IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region” [ipv4-address-policy], considers a block of IPv4 addresses to be ‘used’ when 80% of the addresses within the block have been sub-allocated or assigned. This is applied to all address blocks, regardless of size. Current policies assume a hierarchical system of address space delegation. However, they do not make any allowance for hierarchical management within allocated address space. For LIRs in particular, a hierarchical approach is often required for assignment of address space to service elements such as customer networks, individual Points of Presence (PoPs), regionalised topologies, and even distinct ISP products. Small network infrastructures may require simple hierarchies, but large infrastructures can require several levels of address space subdivision. These levels of hierarchy are not recognised by the current policy framework and are highly restricted by the "80% rule". As a result, managing large blocks is often difficult, requiring large internal routing tables and/or frequent renumbering of internal address blocks. One of the goals of the RIR system is to avoid unnecessary depletion of IPv4 address space. However, address management policies must also be practical in terms of how much management overhead they cause. When large amounts of address space are involved, the "80% rule" can result in more work for an LIR. Basing usage on the HD ratio should lead to equal levels of management overhead across the board, rather than penalising the holders of large address blocks. b.Impact To see a rough estimation of the immediate impact of this proposal, an HD Ratio value of 0.96 was applied to the average amount of address space held by an LIR in the RIPE NCC Service Region. This showed that on average, LIRs would qualify for an additional allocation block when they have assigned or sub-allocated about 59% of their allocated address space. c.Arguments supporting the proposal. This proposal fairly takes into account addressing hierarchies used in large and extra-large registries and introduces a useful level of flexibility for those registries The local Internet registries using the 80% criteria may continue to do so and will not be impacted by the new policy. The RIPE NCC will provide support to minimise complicated calculations or administrative burden to LIRs. d. Arguments opposing the proposal. This proposal will have some limited impact on IPV4 address consumption. Appendix A. The HD ratio The HD ratio is calculated as follows [RFC 3194]: HD = log(U)/log(S) Where: S is the size of the address block concerned, and U is the number of addresses used. Note: The current IPv4 policy considers addresses to be ‘used’ once they are assigned or sub-allocated by the LIR. Appendix B. Selection of HD ratio value We should decide an appropriate HD ratio value on a rational basis. To do this, we make certain assumptions about the number of "hidden" hierarchical levels involved in managing address blocks of various sizes. If we assume there is 80% usage at each level, we can easily calculate the overall usage. The following table proposes a set of hierarchical levels which we can reasonably expect within different amounts of address space. If a usage of 80% is achieved at each hierarchical level, then the overall usage will be (0.80 to the power of "n"). It is then possible to calculate HD ratio values from this value. Size range Level Utilisation HD ratio (prefix) (n) (0.80**n) (calculated) /24 to /20 1 80% .960 to .973 /20 to /16 1.5 72% .961 to .970 /16 to /12 2 64% .960 to .968 /12 to /8 2.5 57.2% .960 to .966 /8 to /4 3 51.20% .960 to .966 The levels of hierarchy listed above are based on assumptions about the likely size and structure of LIRs holding address blocks of these sizes. A reasonable HD ratio value may be 0.96 (a round figure which occurs within most of these ranges) from the table above. The following table gives the usage requirements for IPv4 address blocks from /24 to /8 for this value. IPv4 Addresses Addresses Util% prefix total used 24 256 205 80.11% 23 512 399 77.92% 22 1024 776 75.79% 21 2048 1510 73.71% 20 4096 2937 71.70% 19 8192 5713 69.74% 18 16384 11113 67.83% 17 32768 21619 65.98% 16 65536 42055 64.17% 15 131072 81811 62.42% 14 262144 159147 60.71% 13 524288 309590 59.05% 12 1048576 602249 57.43% 11 2097152 1171560 55.86% 10 4194304 2279048 54.34% 9 8388608 4433455 52.85% 8 16777216 8624444 51.41% Note: This table provides values for CIDR blocks, but the same calculations can be made for non-CIDR blocks. As an example, an LIR holding a total amount of address space equal to a /16 would be able to receive more address space when they had sub-allocated or assigned 64.17% of that space; while an LIR holding a /9 would be able to receive more space when they had sub-allocated or assigned 52.85% of their address space. Appendix C. References [RFC 3194] "The Host-Density ratio for address assignment efficiency: An update on the H ratio", A. Durand, C.Huitema, November 2001. [ipv6-address-policy] RIPE NCC document: "IPv6 Address Allocation and Assignment Policy" http://www.ripe.net/ripe/docs/ipv6policy.html [ipv4-address-policy] RIPE NCC document: "IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region" http://www.ripe.net/ripe/docs/ipv4-policies.html

2 2

Policy Proposal: #Zeta Adding Regional Boundaries to policy documents
by Hans Petter Holen 01 Jul '05

01 Jul '05

Dear Address Policy WG, This policy proposal is nothing more than an editorial change - but we still feel it is fair to run it trough the PDP. As I do not expect much discussion I propose the discussion phase to end by May 1st. While I am voicing this proposal the suggestion actualy comes from our excellent RIPE NCC staff. Thanks leo for pointing this out. Best Regards Hans Petter Holen Address Policy 1. Number Zeta 2. Policy Proposal Name: Adding Regional Boundaries to policy documents 3. Author a. name: Hans Petter Holen b. e-mail: hpholen(a)tiscali.no c. telephone: +47 45066054 d. organisation: Visma IT AS 4. Proposal Version: 5. Submission Date: 16/4-2005 6. Suggested WG for discussion and publication Address policy type 7. Proposal type: a. modify 8. Policy term: a. permanent 9. Summary of proposal Our AS assignment policy has the following statement in it: "The RIPE NCC assigns AS Numbers for Autonomous Systems located in the RIPE NCC service region" Neither the IPv4 nor the IPv6 policy documents have such a clear statement in them. It might be a good idea to add a similar statement to those documents when they are updated. 10. Policy text a. Current (if modify): b. New: 11. Rationale: a. Arguments supporting the proposal Clearification of the scope of the documents b. Arguments opposing the proposal n/a

1 2

New Draft Document: RIPE Whois Registration in 2005: What should be in Whois and Why?
by leo vegoda 02 May '05

02 May '05

Dear Colleagues, At RIPE 49, Eva Ericsson Rabete (TeliaSonera) made a presentation to the Address Policy Working Group in which she asked some questions about the state of the RIPE Whois Database. Following the discussion at the meeting, Eva was asked to take the discussion onto this list (Action Point 49.4). A draft document discussing the uses of the RIPE Whois Database, and detailing questions to consider, has been published in the "Latest Draft Documents" section of the RIPE Document Store. The purpose of this draft document is to encourage discussion about what elements should be in the Whois Database and why they should be there. This draft document is available at: http://www.ripe.net/ripe/draft-documents/whois2005.html Regards, -- leo vegoda Registration Services Manager RIPE NCC

2 1

Summary TLD Anycast Allocation Policy
by Patrick Arkley 28 Apr '05

28 Apr '05

Hi WG. We at MCI are requesting a /24 PI-range to use for an anycast service (DNS) but the request has been rejected in accordance to the current assignment policy. We need PI-space belonging to a separate AS so we can't use existing MCI space. The need for this range is if course routing reasons which is prohibited by the policy. I've been reading Andreas Baess e-mail on this issue and I hope this issue will be addressed on the RIPE 50 and rule in favour of changing the policy. I don't judge on the routability aspects but more on the fact that we need a change in the policy to accomodate a setup for anycast services. Myself I can't attend the WG meeting on Thursday 5/5 due to other engagements so this e-mail is my support for the proposal. Best regards Patrick Arkley Supervisor IP/DNS-team SKSC/SKRC MCI - Powered by UUNET Armégatan 38 S-171 04 Solna, Sweden Web: www.se.mci.com <http://www.se.mci.com/> Phone direct: +46 (0)8 5661 7075 Fax: +46 (0)8 5661 7236 Mobile: +46 (0)733 11 20 75 VNET: 915-7075 E-mail: patrick.arkley(a)se.mci.com <mailto:patrick.arkley@se.mci.com>

1 0

Policy proposal: #beta: IPv4-HD-Ratio
by Guido Roeskens 28 Apr '05

28 Apr '05

Hello, we from Bluewin fully support the proposal Policy proposal: #beta: IPv4-HD-Ratio LIR: ch.bluewindow Vote: YES Comment: ISP's providing access services to many customers face several problems - Usage in different PoP's changes; at one time you have many customers in one PoP, at another time in others. You need to supply enough adresses to all PoPs even though they aren't needed all the time. - Assymetric usage of pools and redundancy To provide redundancy you overallocate some IP addresses to be able to handle the failure of single devices The pool usage on the devices and device groups are not balanced - RFC 3194 is as true for IPv4 as for IPv6 - consistency between IPv4 and IPv6 policies Kind regards, Guido Roeskens Swisscom Fixnet AG Bluewin

6 8

Mega-allocations
by Iljitsch van Beijnum 25 Apr '05

25 Apr '05

Hi, It seems there is a new trend in RIR-land: mega-allocations. This year APNIC, ARIN and the RIPE NCC have made the following allocations: # whois -h whois 126.0.0.0 whois.apnic.net inetnum: 126.0.0.0 - 126.255.255.255 netname: BBTEC descr: Japan Nation-wide Network of Softbank BB Corp. country: JP status: ALLOCATED PORTABLE # whois -h whois.arin.net 73.0.0.0 NetRange: 73.0.0.0 - 73.191.255.255 CIDR: 73.0.0.0/9, 73.128.0.0/10 NetName: CABLE-1 NetType: Direct Allocation # whois -h whois.ripe.net 86.192.0.0 inetnum: 86.192.0.0 - 86.255.255.255 netname: FR-TELECOM-20050302 descr: France Telecom status: ALLOCATED PA That's a total of 33 million IP addresses in 3 allocations (and as many months). The total population for these three countries is 127 + 293 + 60 = 480 million, so that's an IP address for nearly 7% of those country's inhabitants. If I were a conspiracy theorist I would think that IPv6 proponents are trying to burn up the remaining IPv4 space as fast as they can so we'll all be running IPv6 at the end of the decade. If that's the case: good job! :-) Seriously: what's going on here?

3 3