February 2022 - address-policy-wg

ripe-587, Temporary Internet Number Assignment Policies
by Randy Bush 08 Mar '22

08 Mar '22

ok, i did it again, tried to fit a square peg in a round hole. while the immediate problem is past, thanks to the ncc reg folk, i fear that we could benefit from thinking a bit more about $subject. for a research experiment, we wanted eight or a dozen routable, i.e. /24, prefixes which we would announce from various places in the topology. each /24 would have one pingable address, let's assume .42. because this is ops based research, we have to o go through the ncc bureaucrazy o actually deploy and test o run the measurements for a few months o do the analysis o possibly tune or vary the experiment o write the paper and submit it o wait three months for the accept/reject o if rejected, retune and submit to a different venue o the reviewers may ask for us to re-run to get fresh data for publication o whine whine this takes six to twelve months. if you are familiar with $subject, you will sense there are two problems here. 587 is designed for a much shorter time window, and it kind of assumes more that 1:256 utilisation. you can imagine that my request to registration services generated a bit of discussion :). as our social environment has become less tolerant, reg services understandably wants simple rules they can follow and which clearly justify their actions. and geeks such as i just want our mtv :). i suspect we may be able to wordsmith conditions to deal with the time length issue. but i suspect that codification of guidelines covering the needs & justifications for research experiments, folk qualifying strange devices, and those doing other weird things will not be so easy. i am considering a policy proposal in this space; but want to learn what others see and think, and to see if it is worth the time and effort. and can we please keep discussion focused on temporary address space assignments? thanks. randy

13 27

RU goverment IP revoke
by Den 01 Mar '22

01 Mar '22

Hi Jan, Thanks for your time, looks like other's are too busy or already at the basement / under attack.. Here's what I've found: AS8291 The Federal Guard Service of the Russian Federation / Main Division of Informations Resources / kremlin.ru, etc. AS43797 The Federal Guard Service of the Russian Federation AS42121 The Federal Guard Service of the Russian Federation AS48552 OJSC The Russian Armed Forces Broadcasting Company ZVEZDA AS57767 Federal State-owned Enterprise Russian Television and Radio Broadcasting Network AS57352 Federal State Unitary Enterprise Rossiya Segodnya International Information Agency AS57107 Federal State Unitary Enterprise "Russian Satellite Communication Company" AS57767 Federal State-owned Enterprise Russian Television and Radio Broadcasting Network AS59541 Federal State-owned Enterprise "Russian Television and Radio Broadcasting Network" AS44479 Federal State Unitary Enterprise Rossiya Segodnya International Information Agency AS25292 Federal State Unitary Enterprise "The Russian Television and Radio Broadcasting Company" AS211382 Federal State Unitary Enterprise of the Order of the Red Banner of Labour "Russian Broad-casting and AS208075 Federal State Unitary Enterprise of the Order of the Red Banner of Labour "Russian Broad-casting and AS201030 Federal state unitary enterprise "Public corporation for organisation of air traffic in Russian Fede AS198372 Federal State Unitary Enterprise "Television Technical Center "Ostankino" AS197969 Federal State Unitary Enterprise "Morsviazsputnik" AS197553 Federal state unitary enterprise 'State Research Institute of Aviation Systems' AS197150 Federal State Unitary Enterprise of the Order of the Red Banner of Labour "Russian Broad-casting and AS196641 Federal Unitary State Enterprise General Radio Freqency Centre AS57724 DDOS-GUARD THAT HIDES RT.COM and others russian's broadcasting companies .... (This list can be much longer, it's from my quick research) Guys, who read, please help us, please make some unexpected failures, anyway you know what to do. *Let's make our work Now!* Thanks for all of you guys, we all want Internet with freedom and without dictatorship! Love and peace for all of you guys! -- Cheers, Den

4 5

RU goverment IP revoke
by Den 28 Feb '22

28 Feb '22

Hi Taras, Leo, Jordi, Kurt, Saludos, Max, Sergey, Jan, Gert, Thomas, Stary! from recent posts we can see that the problem persists and it can be just ignored, and from the recent post, a very detailed explanation: > The problem is that Russia is under the control of a criminal dictator and a crazy one. He is just looking for a worldwide nuclear conflict, clearly. According to the news, now he just threatened Finland and Sweden. the keyword is "news", i mean fake news, and broadcasting agencies, television and related government structures should be suspended from the whole internet. It's a kind of abuse, but you know if you will send them, they'll just ignore. The ones who can do such things is only our community, community of thinking people that wants freedom in the Internet without such dictatorship resources. Guys I'm asking you to help real thinking russian people to prevent dictator's media posting and broadcasting fake news to the Internet! And here we, our community can help a lot, because we are the core of the Internet, actually we have rights! In case you do not want to officially suspend or freeze their peering/ASNs/routes you know how to create some technical incidents and fix them for a long time.. :)

2 1

Block/Suspend sanctions on address space.
by Alexey Shkittin 26 Feb '22

26 Feb '22

*Block/Suspend sanctions on address space.* Based on events with Russian aggression on Ukrain. Policy Proposal for discussion. Update RIPE NCC policy in according to be able suspend management of internet resource numbers in RIPE NCC database of the countries under Sanctions in EU/US. This is necessary for direct influence on the side subjected to sanctions. This applies in particular to governmental and related organizations. For these purposes, for example, government and related companies of the state subject to sanctions are limited to control and access to Lirportal and Maintainers, and forcefully remove all objects operating under the ASN of these institutions. This will entail the impossibility of the state to carry out activities related to the use of IT technology, the Internet, the spread of propaganda and fakes, including (armies of bots from different IPs, cyber attacks initiated by the state, and much more) Since the RIPE NCC implements the decisions of the RIPE community, it is proposed to introduce a change in the Ripe policy related to the implementation of global and European sanctions. This policy can only be applied to states under sanctions. These states should not be able to obtain and use ASNs and IP addresses for government purposes. Ripe sanctions should not apply to ordinary users, since the total shutdown of all LIRs located inside the state under sanctions will lead to the inevitable transition to an internal network controlled by government services and deprive the population of communication with the outside world and information. *Alexey Shkittin*

6 7

RU goverment IP revoke
by Max Tulyev 26 Feb '22

26 Feb '22

Hello All, let's think about sanctions against Russia. What do you think about revoking all IPs/ASNs used by Russian goverment?

9 9

RU goverment IP revoke
by JORDI PALET MARTINEZ 26 Feb '22

26 Feb '22

The problem is that Russia is under the control of a criminal dictator and a crazy one. He is just looking for a worldwide nuclear conflict, clearly. According to the news, now he just threatened Finland and Sweden. If the rest of the world keeps surrendering to his wishes, as we did many times, many governments, even when he perpetrated criminal actions outside his own territory (for example, poisoning in UK, invasion of Crimea, etc.), he will never stop. The Russian population has "accepted" him; they are somehow responsible. If they really wished hard to take him down, there are 150 million of people in the country to take an action and they had many years to do so. I know is very easy to say, not so easy to act, but I'm not talking about a single person acting. He is precisely knowing that we will think "we can't do this because the poor population". People from Russia has been connected to Internet and they know sufficiently how their dictator is acting inside their country and towards the rest of the world. Situation has not changed across the years, and they haven´t reacted. Is time for a strong action from all the possible sides. We have a new "Bin Laden", which is million times much more powerful and if the rest of the world is not acting, we will suffer it sooner or later. If we think twice, economic sanctions will also be bad for the population, and just dust for the dictator. Those economic sanctions will also be bad for the rest of the world. I agree with them. I disagree with offensive military actions, but at the same time we must find as many possible ways to isolate the country and unless in his craziness he pushes the nuclear buttons first (as an offensive action), sooner or later that will create sufficient internal country reactions to topple him. Unfortunately, I don't think there is any other path forward and it will be ideal that voluntarily, until governments that the decision, carriers and ISPs, filter all their traffic, which also could at least in some %, avoid some of the cyber-attacks that are coming from there, which can target not just Ukraine, but any other country. Hi, On Fri, Feb 25, 2022 at 06:07:32PM +0100, Kurt Kayser wrote: > Internet is the fasted and most efficient way to show what happens and > who is responsible for it. > > Let's all work together that this stay this way. My initial toughts were similar to what was proposed ("let's just cut off ALL Internet to .RU! That will hurt them!") I have reconsidered, and now share the opinion that Kurt voiced - cutting off Internet access will hurt the russian people more, and benefit the spreading of misinformation. So, make sure Information can flow. Gert Doering -- just a concerned user -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.theipv6company.com The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.

3 3

IPv6 - Geolocation concerns
by Michalak, Damian 01 Feb '22

01 Feb '22

Hi there, This is a follow-up question to the older thread ("IPv6 - Using RIPE acquired prefix in other regions") Situation: I have acquired /32 IPv6 prefix from RIPE NCC. Prefix is registered for country: DE. I'm going to create /48 subnets and advertise them from various locations all around the globe. Question: Do I have to be concerned about geo-location issues? For example someone in US opening Google and getting Google.de? If so - what's the best way to address this? P.S. That's certainly a concern in IPv4 - I do advertise in US a subnet of a bigger supernet (registered in Poland) and Apple.com thinks I'm in Poland. Thanks

4 4