- address-policy-wg - mailman.ripe.net

Registry - not a policy proposal
by Rob Blokzijl 03 Jun '10

03 Jun '10

[apologies for duplicate mails] Dear RIPE, soon there will be no more IPv4. However, we still have a registry of these addresses. Daniel Karrenberg and myself have produced a document (attached to this mail) which describes what we think the role of this registry should be after the runout of the unallocated IPv4 address space. We will present this document in the Address Policy WG, and would like to invite you to let us know your thoughts. The place for further discussion will be <address-policy-wg(a)ripe.net>. Thank you for your attention, Rob Blokzijl

10 10

2010 IPv6 Deployment Monitoring Survey Now Underway
by Paul Rendek 02 Jun '10

02 Jun '10

[Apologies for duplicates] Dear Colleagues, As announced at RIPE 60 in Prague, GNKS Consult and TNO are working with the RIPE NCC to repeat the 2009 survey on the current and future use of IPv6 throughout the RIPE NCC service region. The IPv6 Deployment Monitoring Survey is now online, and we encourage all members of the RIPE community to participate: http://www.surveymonkey.com/s/IPv6deploymentmonitoring2010 The purpose of the survey is to better understand where the community is moving, and what can be done to ensure the Internet community is ready for the widespread adoption of IPv6. As it is mostly the same as the survey carried out in 2009, comparison of progress will be possible. In addition, RIPE community participation will contribute to a better understanding of the global situation, as APNIC, AfriNIC and LACNIC will also send out the request to participate to their communities. We encourage all organisations in the RIPE NCC service region to participate in this survey, which we hope will establish a comprehensive view of present IPv6 penetration and future plans for IPv6 deployment. The survey is composed of 23 questions and can be completed in about 15 minutes. For those without IPv6 allocations or assignments, or who have not yet deployed IPv6, the questions will be fewer in number. The survey will close on 1 July 2010. Results of the IPv6 Deployment Monitoring Survey will be presented and discussed at RIPE 61, which will be held 15-19 November in Rome, Italy. Results will also be published on IPv6 Act Now: http://ipv6actnow.org Please provide your name and contact information on the survey form if you wish to receive the draft survey analysis when available. Please also indicate whether you are willing to share additional data with the TNO and GNKS Consult IPv6 Deployment Monitoring team. We appreciate your time and interest in completing this survey. If you have any questions concerning the survey, please send an email to <info(a)gnksconsult.com >. Regards, Paul Rendek Head of External Relations and Communications RIPE NCC

1 0

2009-01 New Draft Document and Impact Analysis Published (Global Policy for the Allocation of IPv4 blocks to Regional Internet Registries)
by Filiz Yilmaz 02 Jun '10

02 Jun '10

PDP Number: 2009-01 Global Policy for the Allocation of IPv4 blocks to Regional Internet Registries Dear Colleagues, The draft document for the proposal described in 2009-01 has been published. The impact analysis that was conducted for this proposal has also been published. You can find the full proposal and the impact analysis for it at: http://www.ripe.net/ripe/policies/proposals/2009-01.html and the draft document at: http://www.ripe.net/ripe/draft-documents/2009-01-draft.html We encourage you to read the draft document text and send any comments to address-policy-wg(a)ripe.net before 9 June 2010. Regards Filiz Yilmaz Policy Development Manager RIPE NCC

1 0

Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Sander Steffann 11 May '10

11 May '10

Hello working group, A document was distributed today at the RIPE 60 meeting in Prague. The document highlights the differences between IPv4 PI and IPv6 PI and the trends that have been observed. The document provides food for thought, and there will be a discussion in the second slot (11:00 - 12:30) of the Address Policy Working Group session tomorrow. Facilities for remote participation are available at http://www.ripe.net/ripe/meetings/ripe-60/index.php?home=remote. This discussion will of course be followed up on this mailing list. Sander Steffann APWG co-chair

11 30

New IPv4 blocks allocated to RIPE NCC
by Andrea Cima 11 May '10

11 May '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [Apologies for duplicate mails] Dear Colleagues, The RIPE NCC received the IPv4 address ranges 31/8 and 176/8 from the IANA in May 2010. We will begin allocating from these ranges in the near future. The minimum allocation size for these two /8s has been set at /21. You may wish to adjust any filters you have in place accordingly. More information on the IP space administered by the RIPE NCC can be found on our web site at: <https://www.ripe.net/ripe/docs/ripe-ncc-managed-address-space.html> Additionally, please note that three "pilot" prefixes will be announced from each /8. The prefixes are: 31.0.0.0/16 31.1.0.0/21 31.1.24.0/24 176.0.0.0/16 176.1.0.0/21 176.1.24.0/24 They all originate in AS12654. More information on this "pilot" activity is available in the draft document "De-Bogonising New Address Blocks" which can be found at: <http://www.ripe.net/ripe/docs/ripe-351.html> Kind regards, Andrea Cima Registration Services Manager RIPE NCC -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkvpJ1QACgkQXOgsmPkFrjMChQCgxw7pxH6OgI0nQuwdhdOIWRp7 ig4An0QaM80yGTPN603EvW7dXkrUNQ/g =4M3X -----END PGP SIGNATURE-----

1 0

AW: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Marcus.Gerdon 06 May '10

06 May '10

Richard, > A /64 in IPv6 is what a single address is for IPv4. I don't agree on this when talking about connecting servers. Place a server in a segment and assign it's interface an IPv4 address 192.168.0.1/24 and an IPv6 address FC00::1/64. Will you (be able to) address another server in the same segment using addresses within those prefixes? Can you get that server connected in IPv4 deploying 192.168.0.0/32 onto its interface? The relevant part here what I meant by 'single address' is the number of addresses configured onto those customers server. Indepent of doing v4 oder v6 you'll configured 'a single address' at the server to get it connected. I agree with you when talking i.e. about DSL lines. Instead of the typical /32 assigned for IPv4 you'll put a /64 on the line. But that's another topic talking about lines instead of servers. As said this were quickly noted items that came to my mind. For the last case of a /64 segment dedicated to one customer I'm not sure but might agree with you that as this would be the equivalent to the DSL line's example. As long as you don't route another /64 (or whatever size) onto customer equipment addressed in this segment. But it's definitely hard to tell where to draw the line. regards, Marcus ----------------------------------------------------------------------------------------- Engineering IP Services Versatel West GmbH Unterste-Wilms-Strasse 29 D-44143 Dortmund Fon: +49-(0)231-399-4486 | Fax: +49-(0)231-399-4491 marcus.gerdon(a)versatel.de | www.versatel.de Sitz der Gesellschaft: Dortmund | Registergericht: Dortmund HRB 21738 Geschäftsführer: Dr. Hai Cheng, Joachim Bellinghoven ----------------------------------------------------------------------------------------- AS8881 / AS8638 / AS13270 / AS29610 | MG3031-RIPE ----------------------------------------------------------------------------------------- > -----Ursprüngliche Nachricht----- > Von: Richard Hartmann [mailto:richih.mailinglist@gmail.com] > Gesendet: Donnerstag, 6. Mai 2010 10:50 > An: Marcus.Gerdon > Cc: address-policy-wg(a)ripe.net > Betreff: Re: [address-policy-wg] Discrepancy Between RIPE > Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > > On Thu, May 6, 2010 at 08:42, Marcus.Gerdon > <Marcus.Gerdon(a)versatel.de> wrote: > > > - single address for connecting a customers server > > => PI > > - contained /64 (!) segment (i.e. dedicated vlan for a > customers rack) > > => I think somewhat of a border case, but tend to *no* PI > > A /64 in IPv6 is what a single address is for IPv4. > This is obviously a _very_ reduced view for the sake of my > argument, but > I think doing this is valid, in this case. > > > Richard >

4 3

RE: 2010-01 New Policy Proposal (Temporary Internet Number Assignment Policies)
by Jamie Stallwood 06 May '10

06 May '10

Hi RIPE, Today's discussion was interesting and concern was raised about commercials being able to get all or most of the address space set aside in the proposal, and about unfair commercial advantage. My thoughts as a paragraph, which I know is rushed and woolly and only intended as a discussion point: 3.5 Use by Commercial Organizations Temporary address space will not be assigned by the RIPE NCC to any commercial organization where such an allocation: * Is not shown to be for a research, development or testing project relevant to an operational business of that organization * Does not seek to provide a "benefit", e.g. through published work in academic or industrial journals, or * Is unable to demonstrate a fair inclusion policy for other commercial organizations to contribute to, or benefit from, the project. [Address allocation is at the RIPE NCCs discretion, but subject to the RIPE NCC Conflict Arbitration Procedure.] Kind regards Jamie Stallwood -- Jamie Stallwood Security Specialist Imerja Limited Tel: 07795 840385 jamie.stallwood(a)imerja.com -- Imerja Limited Tel: 0870 8611488 | Fax: 0870 8611489 | 24x7 ISOC: 0870 8611490 | Web: www.imerja.com Registered Office: Paragon House, Paragon Business Park, Chorley New Road, Horwich, Bolton BL6 6HG Registered in England and Wales No. 5180119 VAT Registered No. 845 0647 22 ISO Registered Firm No. GB2001527 This email is confidential and intended solely for the person or organisation to which it is addressed. It may contain privileged and confidential information. If you are not the intended recipient(s) you should not use, copy, distribute or take any action or reliance on it, since to do so is strictly prohibited and may be unlawful. If you have received this transmission in error please notify the sender immediately by email reply and delete it from your system. E-mail messages are not secure and attachments could contain software viruses which may damage your system. Whilst every reasonable precaution has been taken to minimise this risk, Imerja Limited cannot accept any liability for any damage sustained as a result of these factors. You are advised to carry out your own virus checks before opening any attachment. Any views or opinions expressed in this e-mail are solely those of the author and do not represent those of Imerja Limited unless otherwise stated.

3 4

FW: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Stream Service 06 May '10

06 May '10

-----Original Message----- From: Mark Scholten [mailto:mark@streamservice.nl] Sent: Thursday, May 06, 2010 11:21 AM To: 'Marcus.Gerdon'; 'address-policy-wg(a)ripe.net' Subject: RE: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > -----Original Message----- > From: address-policy-wg-admin(a)ripe.net [mailto:address-policy-wg- > admin(a)ripe.net] On Behalf Of Marcus.Gerdon > Sent: Thursday, May 06, 2010 8:43 AM > To: address-policy-wg(a)ripe.net > Subject: AW: [address-policy-wg] Discrepancy Between RIPE Policies on > IPv4 and IPv6 Provider Independent (PI) Address Space > > In the scenario described here I'd tend to think the colocation/housing > provider imho is going for ISP bussiness. > > Handing out chunks of address space to customers, which are supposedly > going to be single-homed, documenting them etc. sounds like LIR > business. Multi-homing these chunks independent of wether they are PI > or PA gets to the 'sub-allocation' topic - which isn't supposed to be > done using parts of a PI space *assigned* to another party. Who's going > to handle abuse and what ever else might come from the address usage? > > My opinion I'm led to by this scenario is that there's someone who > wants to circumvent the administrative tasks and save a few $$$ by > doing ISP/LIR bussiness within PI space. > > Accordingly I think the policy should be kept at (noted at a quick) > > - single address for connecting a customers server > => PI > - prefix routed onto customers server > => *no* PI - go for LIR > - prefix/range further distributed by customer himself > => *no* PI - go for LIR > - contained /64 (!) segment (i.e. dedicated vlan for a customers rack) > => I think somewhat of a border case, but tend to *no* PI > > Surely everyone wanting to can become a LIR, and everyone wanting to > hand out chunks of address space to other parties is able to request an > allocation, or did I miss something? > > @Mark: > >>PA IPv6 address space is currently not available for us > Why's that? Sorry for asking a possibly obvisous question, but going > over the PA policies now I'm simply to lazy. :) Becoming a LIR is from a business economics view not good for us and the network we use doesn't offer IPv6 PA, so the only option left without moving to another network is to use IPv6 PI. But if we are required to be a LIR we will also require more IPv4 IP space so we have enough for the future. Is it a target by preventing us to use IPv6 PI to use the last IPv4 IPs as fast as possible? We currently not even use a /22 IPv4 space, but when we need to become a LIR we will look for ways to get more IPv4 space. Regards, Mark > > I can remember that there's been a discussion quite some time ago where > someone stated he's not able/allowed the LIR contracts with RIPE due to > regulatory/legal issue or something like that. In case something like > this is the underlying reason why PI is used for ISP/LIR bussiness then > imho RIPE/NCC should look into solving this 'organizational' problem > directly instead of bending policies around making PI into PA lite. > > Just my 2c. > > regards, > > Marcus > > ----------------------------------------------------------------------- > ------------------ > Engineering IP Services > > Versatel West GmbH > Unterste-Wilms-Strasse 29 > D-44143 Dortmund > > Fon: +49-(0)231-399-4486 | Fax: +49-(0)231-399-4491 > marcus.gerdon(a)versatel.de | www.versatel.de > > Sitz der Gesellschaft: Dortmund | Registergericht: Dortmund HRB 21738 > Geschäftsführer: Dr. Hai Cheng, Joachim Bellinghoven > ----------------------------------------------------------------------- > ------------------ > AS8881 / AS8638 / AS13270 / AS29610 | MG3031-RIPE > ----------------------------------------------------------------------- > ------------------ > > > > -----Ursprüngliche Nachricht----- > > Von: address-policy-wg-admin(a)ripe.net > > [mailto:address-policy-wg-admin@ripe.net] Im Auftrag von > > michael.dillon(a)bt.com > > Gesendet: Mittwoch, 5. Mai 2010 14:47 > > An: address-policy-wg(a)ripe.net > > Betreff: RE: [address-policy-wg] Discrepancy Between RIPE > > Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > > > > > > > - With IPv6 we would like to offer a client (collocation) at > > > least a /112 (with PI this isn't allowed if I'm correctly informed) > > > > This points out a material difference between IPv6 and IPv4. > > > > IPv6 is classful. Normally, ISPs get a /32 class allocation and > > give their customers /48 class assignments. Currently the PI policy > > comes from wanting to allow organizations to get a /48 class > > assignment from RIPE directly. But if the organization is involved > > in the hosting business, it is conceivable that customers will > > expect to receive a /48 class block from the data centre operator. > > > > Forget whether this is allowed or not because that is irrelevant. > > The point is that in the IPv6 world there is the expectation that > > no network will ever get less than a /64. In a data centre > environment > > one would expect that people renting a server or even a rack, would > > be satisfied with a /64. But people renting a room, or a row of > racks, > > might justifiably demand a /48 for their own internal subnetting and > > routing, even if much of it happens on virtual routers and switches. > > With the increasing number of cores per chip, even an organization > > renting a full rack might need more than a /64 because they need > > to have a network hierarchy within their rack. > > > > The problem is that /48 class blocks can't be stretched. In IPv4, > > there are no classes and everyone allocates according to strict needs > > now and in the very near future. But IPv6 has classes and allocates > > so that 99% of allocations can be permanent and never have to be > > expanded. > > > > We would not want organizations asking for a /40 PI allocation this > > year, then returning next year for another /40, and the year > > after that. > > > > The only way out that I can see is to treat a data centre like an ISP > > and offer organizations one /32 for each data centre that > > they operate. > > This would not apply to WAN operators since they can ask RIPE > > for a /30 > > or a /28 to cover all of their WAN and all data centres, then > allocate > > internally at whatever bit boundary is appropriate. > > > > One thing that RIPE should never accept is any plan that assigns less > > than > > /64 to a network. If such a plan is submitted, it should be > > returned and > > the applicant should be requested to expand any longer prefixes to a > > full > > /64, then resubmit. In other words, if you ask for too few addresses, > > RIPE > > should deny the request, because it is not in line with IPv6 > > architecture. > > > > > > --Michael Dillon > > > >

1 0

AW: [address-policy-wg] Discrepancy Between RIPE Policies on IPv4 and IPv6 Provider Independent (PI) Address Space
by Marcus.Gerdon 06 May '10

06 May '10

In the scenario described here I'd tend to think the colocation/housing provider imho is going for ISP bussiness. Handing out chunks of address space to customers, which are supposedly going to be single-homed, documenting them etc. sounds like LIR business. Multi-homing these chunks independent of wether they are PI or PA gets to the 'sub-allocation' topic - which isn't supposed to be done using parts of a PI space *assigned* to another party. Who's going to handle abuse and what ever else might come from the address usage? My opinion I'm led to by this scenario is that there's someone who wants to circumvent the administrative tasks and save a few $$$ by doing ISP/LIR bussiness within PI space. Accordingly I think the policy should be kept at (noted at a quick) - single address for connecting a customers server => PI - prefix routed onto customers server => *no* PI - go for LIR - prefix/range further distributed by customer himself => *no* PI - go for LIR - contained /64 (!) segment (i.e. dedicated vlan for a customers rack) => I think somewhat of a border case, but tend to *no* PI Surely everyone wanting to can become a LIR, and everyone wanting to hand out chunks of address space to other parties is able to request an allocation, or did I miss something? @Mark: >>PA IPv6 address space is currently not available for us Why's that? Sorry for asking a possibly obvisous question, but going over the PA policies now I'm simply to lazy. :) I can remember that there's been a discussion quite some time ago where someone stated he's not able/allowed the LIR contracts with RIPE due to regulatory/legal issue or something like that. In case something like this is the underlying reason why PI is used for ISP/LIR bussiness then imho RIPE/NCC should look into solving this 'organizational' problem directly instead of bending policies around making PI into PA lite. Just my 2c. regards, Marcus ----------------------------------------------------------------------------------------- Engineering IP Services Versatel West GmbH Unterste-Wilms-Strasse 29 D-44143 Dortmund Fon: +49-(0)231-399-4486 | Fax: +49-(0)231-399-4491 marcus.gerdon(a)versatel.de | www.versatel.de Sitz der Gesellschaft: Dortmund | Registergericht: Dortmund HRB 21738 Geschäftsführer: Dr. Hai Cheng, Joachim Bellinghoven ----------------------------------------------------------------------------------------- AS8881 / AS8638 / AS13270 / AS29610 | MG3031-RIPE ----------------------------------------------------------------------------------------- > -----Ursprüngliche Nachricht----- > Von: address-policy-wg-admin(a)ripe.net > [mailto:address-policy-wg-admin@ripe.net] Im Auftrag von > michael.dillon(a)bt.com > Gesendet: Mittwoch, 5. Mai 2010 14:47 > An: address-policy-wg(a)ripe.net > Betreff: RE: [address-policy-wg] Discrepancy Between RIPE > Policies on IPv4 and IPv6 Provider Independent (PI) Address Space > > > > - With IPv6 we would like to offer a client (collocation) at > > least a /112 (with PI this isn't allowed if I'm correctly informed) > > This points out a material difference between IPv6 and IPv4. > > IPv6 is classful. Normally, ISPs get a /32 class allocation and > give their customers /48 class assignments. Currently the PI policy > comes from wanting to allow organizations to get a /48 class > assignment from RIPE directly. But if the organization is involved > in the hosting business, it is conceivable that customers will > expect to receive a /48 class block from the data centre operator. > > Forget whether this is allowed or not because that is irrelevant. > The point is that in the IPv6 world there is the expectation that > no network will ever get less than a /64. In a data centre environment > one would expect that people renting a server or even a rack, would > be satisfied with a /64. But people renting a room, or a row of racks, > might justifiably demand a /48 for their own internal subnetting and > routing, even if much of it happens on virtual routers and switches. > With the increasing number of cores per chip, even an organization > renting a full rack might need more than a /64 because they need > to have a network hierarchy within their rack. > > The problem is that /48 class blocks can't be stretched. In IPv4, > there are no classes and everyone allocates according to strict needs > now and in the very near future. But IPv6 has classes and allocates > so that 99% of allocations can be permanent and never have to be > expanded. > > We would not want organizations asking for a /40 PI allocation this > year, then returning next year for another /40, and the year > after that. > > The only way out that I can see is to treat a data centre like an ISP > and offer organizations one /32 for each data centre that > they operate. > This would not apply to WAN operators since they can ask RIPE > for a /30 > or a /28 to cover all of their WAN and all data centres, then allocate > internally at whatever bit boundary is appropriate. > > One thing that RIPE should never accept is any plan that assigns less > than > /64 to a network. If such a plan is submitted, it should be > returned and > the applicant should be requested to expand any longer prefixes to a > full > /64, then resubmit. In other words, if you ask for too few addresses, > RIPE > should deny the request, because it is not in line with IPv6 > architecture. > > > --Michael Dillon > >

3 2

Re: [address-policy-wg] Registry - not a policy proposal
by Toni Stoev 05 May '10

05 May '10

On Wednesday 05 May 2010 at 11:15:36 Rob Blokzijl sent: > > [apologies for duplicate mails] > > Dear RIPE, > > soon there will be no more IPv4. However, we still have a registry > of these addresses. Perhaps you mean "no more unallocated IPv4 addresses". > > Daniel Karrenberg and myself have produced a document (attached to > this mail) which describes what we think the role of this registry > should be after the runout of the unallocated IPv4 address space. > > We will present this document in the Address Policy WG, and would > like to invite you to let us know your thoughts. The place for > further discussion will be <address-policy-wg(a)ripe.net>. > > Thank you for your attention, > > Rob Blokzijl

1 0