2013-03 New Draft Document and Impact Analysis Published (No Need - Post-Depletion Reality Adjustment and Clean up)
Dear colleagues, The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC. Noteworthy changes in this version include: - Text that suggested contractual requirements are only "recommended" for PI space (section 7.0) has been removed. This text was dependent on previously established context discussing PI vs PA space. As version 1.0 of the proposal removed the PI discussion in the preceding paragraphs, the resulting lack of context made the sentence confusing. The statement was also incorrect, as contractual requirements have been mandatory for PI space since 2007-01 was accepted. - Additional wording has been added to explicitly state that PI space cannot be reassigned or further assigned to other parties (see section 7.0 for ASSIGNED PI). - The third point from the last /8 policy (section 5.1) has been removed, as this is considered a meaningless circular reference by the author. - General re-wording in some sections for improved readability. - The policy proposal 2012-03 has been withdrawn, so the related argument against the proposal has been removed from the rationale. You can find the full proposal and the impact analysis at: https://www.ripe.net/ripe/policies/proposals/2013-03 The draft document can be found at: https://www.ripe.net/ripe/policies/proposals/2013-03/draft We encourage you to read the draft document text and send any comments to <address-policy-wg@ripe.net> before 30 July 2013. Regards Emilio Madaio Policy Development Officer RIPE NCC
Hello APWG, I would like to stress that version 2.0 of the proposal brings no substantial changes. The effective proposed policy remains the exact same. The changes since version 1.0 are all either editorial (language improvements, etc.), further removal of "dead"/obsolete policy text that was overlooked in version 1.0, and ensuring that the proposal does not accidentally create ambiguities. I elaborate on some of those individual changes below. I'd like to thank (in alphabetical order) the following people for providing the feedback that lead to these changes: Alex Le Heux, Marco Schmidt, and Richard Hartmann. I'd also like to remind the working group that the start of the Review Phase means that any feedback given during the Discussion Phase is voided. In other words: If you voiced an opinion on the proposal during the Discussion Phase, you will need to repeat your opinion again during the Review Phase in order for your voice to be counted.
- Additional wording has been added to explicitly state that PI space cannot be reassigned or further assigned to other parties (see section 7.0 for ASSIGNED PI).
The wording that prohibits PI space from being reassigned of or further assigned is already present in the current policy. However it is "buried" within a larger block text that discusses whether an operator should choose PA or PI space. Following the implementation of the last /8 policy, this choice does no longer exist, and 2013-03 therefore removed the entire block of text. It was pointed out to me that this caused the "reassignability" of PI space to be undefined, which was never an intended consequence of the proposal. Therefore version 2.0 adds back this particular wording.
- The third point from the last /8 policy (section 5.1) has been removed, as this is considered a meaningless circular reference by the author.
Actually it was Marco Schmidt from the RIPE NCC's Policy Development Office that made this observation. I concur, though. The last /8 policy is currently a weird "odd man out" policy, located all by itself in section 5.6 and partially superseding the "normal" allocation policy (sections 5.0 through 5.5). The third bullet point of the last /8 policy essentially made sure that the (non-superseded) provisions from the "normal" allocation policy were imported into the last /8 policy. 2013-03 merges the last /8 policy into the "normal" allocation policy, ensuring there is only one unified allocation policy. Therefore there is no need for such an "import provisions from the normal policy" statement, as this would essentially be a circular, and thus meaningless, reference. Best regards, -- Tore Anderson
Hi again, I was asked off-list if I could provide a unified diff showing the changes between version 1.0 and 2.0 of the proposed policy text. Attached! Tore * Tore Anderson
I would like to stress that version 2.0 of the proposal brings no substantial changes. The effective proposed policy remains the exact same. The changes since version 1.0 are all either editorial (language improvements, etc.), further removal of "dead"/obsolete policy text that was overlooked in version 1.0, and ensuring that the proposal does not
Sent by mobile; excuse my brevity. On Jul 4, 2013 1:48 AM, "Tore Anderson" <tore@fud.no> wrote:
I was asked off-list if I could provide a unified diff showing the changes between version 1.0 and 2.0 of the proposed policy text. Attached!
Thanks! Richard
On Thu, Jul 4, 2013 at 1:48 AM, Tore Anderson <tore@fud.no> wrote:
Hi again,
I was asked off-list if I could provide a unified diff showing the changes between version 1.0 and 2.0 of the proposed policy text. Attached!
Excellent, that made it much easier to see the changes. I support this version. -- Jan
tore, you did not succeed in making the proposal unappealing. so i still support it. randy
Hi, I also support it. Regards, Elvis Excuse the briefness of this mail, it was sent from a mobile device. On 12 jul. 2013, at 02:20, Randy Bush <randy@psg.com> wrote:
tore,
you did not succeed in making the proposal unappealing. so i still support it.
randy
Me either. 12.07.2013 05:01, Elvis Daniel Velea пишет:
Hi,
I also support it.
Regards, Elvis +1
-- Regards, D.Sidelnikov
Support this wholeheartedly. // Andreas Med vänlig hälsning Andreas Larsen IP-Only Telecommunication AB| Postadress: 753 81 UPPSALA | Besöksadress: S:t Persgatan 6, Uppsala | Telefon: +46 (0)18 843 10 00 | Direkt: +46 (0)18 843 10 56 www.ip-only.se Den 2013-07-12 02:19 skrev Randy Bush <randy@psg.com>:
tore,
you did not succeed in making the proposal unappealing. so i still support it.
randy
On Tue, Jul 2, 2013 at 3:28 PM, Emilio Madaio <emadaio@ripe.net> wrote:
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Support. Thanks to all involved, Richard
Den 2. juli 2013 kl. 16:28 skrev "Emilio Madaio" <emadaio@ripe.net>:
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Support. BR Ragnar Anfinsen Altibox AS
On 7/13/13 7:11 AM, Anfinsen, Ragnar wrote:
Den 2. juli 2013 kl. 16:28 skrev "Emilio Madaio" <emadaio@ripe.net>:
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Support.
+1 Jan
On Tue, Jul 2, 2013 at 3:28 PM, Emilio Madaio <emadaio@ripe.net> wrote:
Dear colleagues,
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
still supported -- Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no
Support On 2 Jul 2013, at 14:28, Emilio Madaio wrote:
Dear colleagues,
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Regards
Emilio Madaio Policy Development Officer RIPE NCC
Dear colleagues,
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Support. D. Airspeed Telecom
On Mon, 15 Jul 2013, Donal Cunningham wrote:
Dear colleagues,
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Support.
D.
+1. Daniel Stolpe _________________________________________________________________________________ Daniel Stolpe Tel: 08 - 688 11 81 stolpe@resilans.se Resilans AB Fax: 08 - 55 00 21 63 http://www.resilans.se/ Box 13 054 556741-1193 103 02 Stockholm
While I expressed support for this proposal at the last RIPE meeting, and still have some sympathy for the proposal, I think valid objectionsn were raised at the last meeting. . As the free pool is gone - and there are no more 'unused addresses' to preserve - there is still a need for responsibe use of the IPv4 pool. Conserving the public resource of v4 is important to make the Internet work while migrating to v6. It was unfortunate that this discussion was cut short at the last meeting - as the original meeting plan allowed ample time for discussing this. So I do belive further duiscussion and carefull reflection of the consequences of this proposal at the next meeting is needed. Moving forward and concluding over summer holidays on such an important matter is not appealing to me. Hans Petter On Tuesday, July 16, 2013, Daniel Stolpe wrote:
On Mon, 15 Jul 2013, Donal Cunningham wrote:
Dear colleagues,
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Support.
D.
+1.
Daniel Stolpe
______________________________**______________________________** _____________________ Daniel Stolpe Tel: 08 - 688 11 81 stolpe@resilans.se Resilans AB Fax: 08 - 55 00 21 63 http://www.resilans.se/ Box 13 054 556741-1193 103 02 Stockholm
-- Hans Petter Holen Mobile +47 45 06 60 54 | hph@oslo.net | http://hph.oslo.net
Hi, On Wed, Jul 17, 2013 at 12:57:04PM +0200, Hans Petter Holen wrote:
While I expressed support for this proposal at the last RIPE meeting, and still have some sympathy for the proposal, I think valid objectionsn were raised at the last meeting. .
As the free pool is gone - and there are no more 'unused addresses' to preserve - there is still a need for responsibe use of the IPv4 pool. Conserving the public resource of v4 is important to make the Internet work while migrating to v6.
I agree with you, but how does this proposal change this in your view? The "allocations from the last /8" policy is only slightly changed, as "need" does not need to be documented anymore - but then, the policy always assumed that every single RIPE member would eventually call up on their last /22 allocation, and that every new RIPE member would also ask for that, so the effective difference is small (some members would be able to ask for the /22 before reaching 80% on their previous allocation, but they would still only get a single /22, so the estimation "how long is the last /8 going to last" still mainly depends on the number of new LIRs created). On the LIR-to-customer level, LIRs should be well aware now that the IPv4 space they have might be all they will reasonably get in the foreseeable time, so they have a strong incentive already to give only those addresses to their customers that are really needed - but forcing them to stick to some arbitrary time scale and specific forms for that is really "needless bureaucracy" today.
It was unfortunate that this discussion was cut short at the last meeting - as the original meeting plan allowed ample time for discussing this.
So I do belive further duiscussion and carefull reflection of the consequences of this proposal at the next meeting is needed.
As we do not do decisions at meetings, I'm not convinced that this is a useful excercise. Meetings are good to quickly get feedback, and some discussion going, but if objections are not raised here on the list, they do not exist (of course we listen to reasonable objections raised at the meeting, but the main feedback we got *from the RIPE region* was "go ahead!"). If there's a worry that this proposal is not getting enough scrutiny due to holiday time, I'm willing to extend the review period somewhat - but given the amount of explicit "support" and "+1" statements it already got, compared to the typical amount of participation in the review period, I can't say that it looks like everybody is on vacation... Gert Doering -- APWG chair -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
Emilio As previously stated, I do NOT support the "no need" policy and cannot support this document. IP addresses are a finite resource, as we all know, and obliging people to provide some level of justification makes sense. The argument for "conservation" may no longer be valid, but there will always be a compelling argument in favour of good resource management, which I believe the policy covers. RIPE should not remove the requirement to provide justification. Regards Michele On 2 Jul 2013, at 14:28, Emilio Madaio <emadaio@ripe.net> wrote:
Dear colleagues,
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC.
Noteworthy changes in this version include:
- Text that suggested contractual requirements are only "recommended" for PI space (section 7.0) has been removed. This text was dependent on previously established context discussing PI vs PA space. As version 1.0 of the proposal removed the PI discussion in the preceding paragraphs, the resulting lack of context made the sentence confusing. The statement was also incorrect, as contractual requirements have been mandatory for PI space since 2007-01 was accepted.
- Additional wording has been added to explicitly state that PI space cannot be reassigned or further assigned to other parties (see section 7.0 for ASSIGNED PI).
- The third point from the last /8 policy (section 5.1) has been removed, as this is considered a meaningless circular reference by the author.
- General re-wording in some sections for improved readability.
- The policy proposal 2012-03 has been withdrawn, so the related argument against the proposal has been removed from the rationale.
You can find the full proposal and the impact analysis at: https://www.ripe.net/ripe/policies/proposals/2013-03
The draft document can be found at: https://www.ripe.net/ripe/policies/proposals/2013-03/draft
We encourage you to read the draft document text and send any comments to <address-policy-wg@ripe.net> before 30 July 2013.
Regards
Emilio Madaio Policy Development Officer RIPE NCC
Mr Michele Neylon Blacknight Solutions ♞ Hosting & Domains ICANN Accredited Registrar http://www.blacknight.co http://blog.blacknight.com/ Intl. +353 (0) 59 9183072 US: 213-233-1612 Locall: 1850 929 929 Direct Dial: +353 (0)59 9183090 Facebook: http://fb.me/blacknight Twitter: http://twitter.com/mneylon ------------------------------- Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,Ireland Company No.: 370845
* Michele Neylon - Blacknight
As previously stated, I do NOT support the "no need" policy and cannot support this document.
IP addresses are a finite resource, as we all know, and obliging people to provide some level of justification makes sense.
The argument for "conservation" may no longer be valid, but there will always be a compelling argument in favour of good resource management, which I believe the policy covers.
RIPE should not remove the requirement to provide justification.
Hi Michele, I doubt you'll find anyone in the working group who is against good resource management. I am convinced that the proposed policy is not in conflict with good resource management, otherwise I would never have proposed it. While I can obviously only speak with certainty for myself, I assume that the people who support the proposal feel the same way. While it appears you believe that the proposal will bring about poor resource management, your message neglected to explain why or how. This makes it rather difficult for me to try to alleviate your concerns. As Gert also pointed out recently, the main reason I believe that IPv4 would continue to be consumed responsibly under the proposed policy, is that the LIRs in the region are painfully aware that there is no more IPv4 to be had from the RIPE NCC. Should an LIR anyway decide to go on a "spending spree" with its remaining inventory, it would only end up hurting itself by expediting its own depletion date. The community will not be impacted - without a Common, there can be no Tragedy. Best regards, Tore Anderson
Hello Tore, While I am curious for Michele's response to your mail too, here is my bit, as I feel I agree with him in terms of principles. First of all, I am not totally against your proposal; it cleans up the policy text reflecting today's circumstances to some extent and it makes a long document way more readable. This is also why I am writing back because I've read the draft policy document from the beginning to the end. My observation is that the new document proposed is not exactly a "registration" policy document. It more looked to me like a description of how address space management is done within RIPE NCC region "by the RIPE NCC". If I am not missing anything crucial, the main points described are: - The language is English, - How big an allocation can be, - That there is no PI anymore to be assigned directly from the NCC pools to End users (except for the IXPs) so all resources will only goto LIRs - And these blocks can be transferred between LIRs. The only bit about registration I see in the new text is section 4.0 Registration Requirements and it does not go more than saying details should be recorded in the database. So it does not contain any substantial information for registration or address management on the LIR's side. This is interesting as now with this proposed policy any End user's chance to get any IPv4 address space will be through an LIR and hope that these LIRs are responsible and know what they are doing. I would like to see some guidelines or at least principles mentioned in this document so the LIRs know their responsibility in terms of fair address management as well as the End Users so they know what to expect from these LIRs. This is what I would be expecting from a transparent documentation of a set of policies and principles that are still in place. We may not have too many specific policies to set for the few left-over resources but I would like to believe we still have "principles" towards the responsible management of these resources. In that sense Michele has a point and I argue that LIRs need to be guided for "good address management" even without the "conservation" principle as the top priority in the new IP world. This is missing in the proposed policy text for it to be considered as a helpful "registration" policy in my opinion. In practice, I can set up a new LIR now and ask for a new allocation and I may be someone who does not have any previous RIPE or RIPE NCC experience. If all I have is this document, I am not sure if it tells me enough about my responsibilities, while I will be a critical token in the EU address management and registration system by just becoming an LIR. My other concern is in regards to the transfers. As neatly put by the NCC Board in the Impact Analysis: --- As mentioned in previous sections, the policy proposal would negatively affect the ability of LIRs to engage in inter-RIR transfers, as the RIPE NCC’s service region would be the only one without a needs-based requirement for transfers. Implementation of the policy could expose LIRs to legal challenges under EU competition law. --- I think singling out the RIPE NCC region in the world of transfers may not be the best idea at this stage. Kind regards Filiz Yilmaz On 24 Jul 2013, at 10:52, Tore Anderson <tore@fud.no> wrote:
* Michele Neylon - Blacknight
As previously stated, I do NOT support the "no need" policy and cannot support this document.
IP addresses are a finite resource, as we all know, and obliging people to provide some level of justification makes sense.
The argument for "conservation" may no longer be valid, but there will always be a compelling argument in favour of good resource management, which I believe the policy covers.
RIPE should not remove the requirement to provide justification.
Hi Michele,
I doubt you'll find anyone in the working group who is against good resource management. I am convinced that the proposed policy is not in conflict with good resource management, otherwise I would never have proposed it. While I can obviously only speak with certainty for myself, I assume that the people who support the proposal feel the same way.
While it appears you believe that the proposal will bring about poor resource management, your message neglected to explain why or how. This makes it rather difficult for me to try to alleviate your concerns.
As Gert also pointed out recently, the main reason I believe that IPv4 would continue to be consumed responsibly under the proposed policy, is that the LIRs in the region are painfully aware that there is no more IPv4 to be had from the RIPE NCC. Should an LIR anyway decide to go on a "spending spree" with its remaining inventory, it would only end up hurting itself by expediting its own depletion date. The community will not be impacted - without a Common, there can be no Tragedy.
Best regards, Tore Anderson
* Filiz Yilmaz
My observation is that the new document proposed is not exactly a "registration" policy document. It more looked to me like a description of how address space management is done within RIPE NCC region "by the RIPE NCC".
If I am not missing anything crucial, the main points described are:
- The language is English, - How big an allocation can be, - That there is no PI anymore to be assigned directly from the NCC pools to End users (except for the IXPs) so all resources will only goto LIRs - And these blocks can be transferred between LIRs.
The only bit about registration I see in the new text is section 4.0 Registration Requirements and it does not go more than saying details should be recorded in the database.
So it does not contain any substantial information for registration or address management on the LIR's side.
Hello Filiz, The proposal is a modification of the existing policy document (ripe-592), it is not a brand new document written from scratch. The language regarding registration requirements is not changed, so the proposal does not change anything - it merely upholds the status quo. We can certainly discuss amending the current registration requirements, but to me this topic does not seem germane to the discussion of 2013-03.
This is interesting as now with this proposed policy any End user's chance to get any IPv4 address space will be through an LIR and hope that these LIRs are responsible and know what they are doing. I would like to see some guidelines or at least principles mentioned in this document so the LIRs know their responsibility in terms of fair address management as well as the End Users so they know what to expect from these LIRs. This is what I would be expecting from a transparent documentation of a set of policies and principles that are still in place.
We may not have too many specific policies to set for the few left-over resources but I would like to believe we still have "principles" towards the responsible management of these resources.
In that sense Michele has a point and I argue that LIRs need to be guided for "good address management" even without the "conservation" principle as the top priority in the new IP world. This is missing in the proposed policy text for it to be considered as a helpful "registration" policy in my opinion.
I have no problems being sympathetic towards a "good address management" principle, but the simple fact is that this is not written down in our current policy. What constitutes "good address management" is something left to the LIRs to decide for themselves. Example: As a LIR, you are today free to assign your last free IPv4 block to a group of spammers at the expense of having to turn down the Red Cross, perhaps because the spammers were willing to pay you more. Is that "good"? I'd say quite the opposite, but yet it is perfectly allowed by today's policy. So while I'm all for discussing the codification of a set of principles in our policies telling our community to be "good", I'd rather not weigh down this proposal with the addition of a brand-new "principles" section, which I suspect would require a lot of back-and-forth word-smithing to make everyone happy. So if we do want such a section, let's add it in a separate proposal.
In practice, I can set up a new LIR now and ask for a new allocation and I may be someone who does not have any previous RIPE or RIPE NCC experience. If all I have is this document, I am not sure if it tells me enough about my responsibilities, while I will be a critical token in the EU address management and registration system by just becoming an LIR.
As a new LIR, all the IPv4 address space you are going to get from the RIPE NCC is a /22, or 1024 addresses - hardly a «critical token in the EU address management and registration system» by any stretch of the imagination. This is the status quo today, and this proposal merely upholds it. I also find it rather hard to believe that an organisation willingly joins the NCC to become a new LIR, acquires an IPv6 allocation, and finally requests its first and only IPv4 /22 - only to find itself confused about how to go about using it in a sensible manner and end up assigning it away to an end user without any actual operational need.
* As mentioned in previous sections, the policy proposal would negatively affect the ability of LIRs to engage in inter-RIR transfers, as the RIPE NCC’s service region would be the only one without a needs-based requirement for transfers.
I feel this statement is somewhat disingenuous. The "odd RIR out" here is really ARIN, who is the only one to have a inter-RIR transfer policy that has a needs-based requirement that is also applied to the other region involved in the transfer. The RIPE region does not have a inter-RIR transfer policy *at all*. The same goes for LACNIC and AfriNIC, AFAIK. So as things stand today, 2013-03 cannot possibly "negatively affect the ability of LIRs to engage in inter-RIR transfers" because such transfers are completely verboten in the first place. That said, there has been an inter-RIR proposal (2012-02) on the table for a while now, but the community does not seem to want or care much about it. I think that this is important to keep that in mind when deciding on how much weight to give this argument against 2013-03. APNIC does have a inter-RIR transfer policy, but it does not require the other region to have a needs-based requirement. It explicitly states in section 4.3 that for transfers where the recipient is in another region, any conditions on the recipient is up to the recipient's region to define. So (assuming for a second that 2012-02 has passed) 2013-03 will not have any negative impact on transfers between the APNIC and RIPE regions. Another quite interesting thing to consider here is that APNIC initially had a transfer policy that did not require any need evaluation. It was only after the ARIN community changed their inter-RIR policy to explicitly require the other region to have "needs-based" policies APNIC added the need evaluation requirement to their general transfer policy. I think it is interesting to consider if yielding to the ARIN demand would actually be worth it, and APNIC actually provided some relevant data in this regard - on May 15th 2013, one of their reps explained to the APWG session at RIPE66 that there had been 11 inter-RIR transfers between ARIN and APNIC. APNIC depleted their IPv4 pool on the 19th of April 2011. Contrast this to the number of assignments that are being made in our region: The NCC reported that between depletion on the 14th of September 2012 and May 10th 2013, 251,254 assignments had been registered in the RIPE database. If we do linear extrapolation of the above to get "per year" numbers, what this boils down to is that we ask the entire RIPE community to fill out, validate, and archive 386,327 ripe-583 forms per year to allow 5 LIRs to engage in inter-RIR transfers with the ARIN region. You be the judge if this passes your idea of a basic cost-benefit analysis. It certainly doesn't pass mine. I'm not at all principally opposed to inter-RIR transfers, so if the author of 2012-02 would add a "need compatibility clause" to the proposed inter-RIR policy, I would have nothing against that. In other words, if it would be possible to make the need evaluation a voluntary thing that you only had to do if transferring addresses from the ARIN region - fine. Then those 5 LIRs, and those 5 only, could subject themselves to whatever demands the ARIN community might have, while the rest of us would be free of the IPv4 bureaucracy. Win-win.
* Implementation of the policy could expose LIRs to legal challenges under EU competition law.
If an LIR is willing to engage in unlawful anti-competitive practises, it will of course be exposed to legal challenges. This is certainly nothing new brought on by 2013-03 - the law trumps *any* address policy we can produce here, and that's how it's always been and always will be. Furthermore, it makes absolutely no sense to me for the community to demand that every single LIR and End User in the community uphold the "need" bureaucracy in an attempt to somehow shield or indemnify "bad" members of the community engaged in anti-competitive practises from legal repercussions.
I think singling out the RIPE NCC region in the world of transfers may not be the best idea at this stage.
This "world of transfers" has failed to materialise. The actual statistics show that the second-hand IPv4 transfer market is at most supplying 3-4% of last year's (pre-depletion) demand in our region. If we had completely removed the entire transfer policy today, I think that as far as the internet is concerned, tomorrow would have been business as usual. It seems that for most folks dealing with IPv4 depletion, CGN is the solution, not transfers. I think Rob Blokzijl hit the nail straight on the head when he in the RIPE66 APWG session warned against getting bogged down with discussing the ins and outs of «little add-on policies like transfer». After all, this proposal is a large and rough clean-up - it will be much easier to fine-tune and polish the remaining policy afterwards (transfers, PI/PA merging, etc.). Like I've said before, this proposal is essentially the amputation of the policy limbs that died following IPv4 depletion, and any following cosmetic surgery is best left for later. Best regards, Tore Anderson
Hello Tore, Thank you for your detailed e-mail. In order not to have people get lost between our inline comments, I will only attempt to respond to you taking quotes from your mail. Apologies if this distorts the logical thought process you had put in.
The language regarding registration requirements is not changed, so the proposal does not change anything - it merely upholds the status quo.
Those principle based registration and address management requirements were in the old policy between the lines, pointing to people notions like anti-hoarding practices through "need based" requirements. They may not ensure certain things 100% (policy is a policy, some abide some work around…) but surely they serve as gate-keepers for good behaviour and reflect the principles that this community engaged itself so far. So once you take those bits out, you also take those notions and principles out of the policy. That was my point and so I disagree that your proposal does not change anything. In fact it is bringing a big change, changing address delegation from "I want it because I need it on a network" to just "I want it and I am a member of the RIPE NCC so I can get it and maybe i won't even use it on a network".
What constitutes "good address management" is something left to the LIRs to decide for themselves.
I tend to disagree with this too. LIRs are members of the RIPE NCC but policies are developed by the entire RIPE Community, which is a bigger stakeholder. Those views should be reflected in the policy to be remembered and documented by the LIRs.
Example: As a LIR, you are today free to assign your last free IPv4 block to a group of spammers at the expense of having to turn down the Red Cross, perhaps because the spammers were willing to pay you more. Is that "good"? I'd say quite the opposite, but yet it is perfectly allowed by today's policy.
I see your point but policy does not mean "policing". To my knowledge, RIPE NCC never sent agents to LIR premises to check if the justification they documented fit with the reality or not. Besides that the address space is assigned to Red Cross or to a spammer (so who the recipient is) is irrelevant and has always been in the eyes of the RIPE policy. But whether or not either of these networks really needed these resources was the main idea. And this still does not mean that policy is not going to be there to remind people that this is a common pool of resources we are dealing with and its management requires some degree of responsibility. We might as well then not have a policy document at all and just have a click, pay and get your resource button on the RIPE NCC website.
So while I'm all for discussing the codification of a set of principles in our policies telling our community to be "good", I'd rather not weigh down this proposal with the addition of a brand-new "principles" section
These are not brand new principles, need base was there and your proposal is taking this away. I agreed with you when you presented your proposal in Dublin and noted it is not efficient to request someone to breakdown their need in such detail as 3 months to 1 yr or so. Yes, agreed, this is bureaucratic, admin resource hogging etc and this needs a change. But the same policy should still make some sense in a region why an LIR would go request some resource from their RIR and would be given that in the first place. If I am an LIR and I go to the RIPE NCC and ask for a resource I should be needing it on *some* network, not to put in my IP collection drawer. Policy should be the guard, gate-keeper for this at the least, in my opinion.
* Implementation of the policy could expose LIRs to legal challenges under EU competition law.
If an LIR is willing to engage in unlawful anti-competitive practises, it will of course be exposed to legal challenges. This is certainly nothing new brought on by 2013-03 - the law trumps *any* address policy we can produce here, and that's how it's always been and always will be.
I am not a lawyer, but hypothetically speaking, if your proposal gets accepted there is some (again totally hypothetical…) potential that some LIRs may chose to rush and get whatever is left in the NCC pool (which is the rest of the last /8…) without really needing them, simply because they do not need to show any justification after all. They want it, they will get it and probably RIPE NCC will have to deal with some very serious First in First Out (granted) service scheme... And then these LIRs who were lucky to get all the space they wanted and the RIPE NCC could provide to them at the time, may chose to put these resources back in the market for others, end users or other LIRs. I would find this quiet an unfortunate environment for new entrants who are not LIRs yet at the time of your proposal gets accepted, but who really need the space and is left to get the resources from an LIR instead of an RIR whose job was the allocation of the resources in the first place. I believe thinking about the impact here in the light of competition laws like this may in fact have some ground. Kind regards Filiz Yilmaz On 24 Jul 2013, at 15:21, Tore Anderson <tore@fud.no> wrote:
* Filiz Yilmaz
My observation is that the new document proposed is not exactly a "registration" policy document. It more looked to me like a description of how address space management is done within RIPE NCC region "by the RIPE NCC".
If I am not missing anything crucial, the main points described are:
- The language is English, - How big an allocation can be, - That there is no PI anymore to be assigned directly from the NCC pools to End users (except for the IXPs) so all resources will only goto LIRs - And these blocks can be transferred between LIRs.
The only bit about registration I see in the new text is section 4.0 Registration Requirements and it does not go more than saying details should be recorded in the database.
So it does not contain any substantial information for registration or address management on the LIR's side.
Hello Filiz,
The proposal is a modification of the existing policy document (ripe-592), it is not a brand new document written from scratch. The language regarding registration requirements is not changed, so the proposal does not change anything - it merely upholds the status quo.
We can certainly discuss amending the current registration requirements, but to me this topic does not seem germane to the discussion of 2013-03.
This is interesting as now with this proposed policy any End user's chance to get any IPv4 address space will be through an LIR and hope that these LIRs are responsible and know what they are doing. I would like to see some guidelines or at least principles mentioned in this document so the LIRs know their responsibility in terms of fair address management as well as the End Users so they know what to expect from these LIRs. This is what I would be expecting from a transparent documentation of a set of policies and principles that are still in place.
We may not have too many specific policies to set for the few left-over resources but I would like to believe we still have "principles" towards the responsible management of these resources.
In that sense Michele has a point and I argue that LIRs need to be guided for "good address management" even without the "conservation" principle as the top priority in the new IP world. This is missing in the proposed policy text for it to be considered as a helpful "registration" policy in my opinion.
I have no problems being sympathetic towards a "good address management" principle, but the simple fact is that this is not written down in our current policy. What constitutes "good address management" is something left to the LIRs to decide for themselves. Example: As a LIR, you are today free to assign your last free IPv4 block to a group of spammers at the expense of having to turn down the Red Cross, perhaps because the spammers were willing to pay you more. Is that "good"? I'd say quite the opposite, but yet it is perfectly allowed by today's policy.
So while I'm all for discussing the codification of a set of principles in our policies telling our community to be "good", I'd rather not weigh down this proposal with the addition of a brand-new "principles" section, which I suspect would require a lot of back-and-forth word-smithing to make everyone happy. So if we do want such a section, let's add it in a separate proposal.
In practice, I can set up a new LIR now and ask for a new allocation and I may be someone who does not have any previous RIPE or RIPE NCC experience. If all I have is this document, I am not sure if it tells me enough about my responsibilities, while I will be a critical token in the EU address management and registration system by just becoming an LIR.
As a new LIR, all the IPv4 address space you are going to get from the RIPE NCC is a /22, or 1024 addresses - hardly a «critical token in the EU address management and registration system» by any stretch of the imagination. This is the status quo today, and this proposal merely upholds it.
I also find it rather hard to believe that an organisation willingly joins the NCC to become a new LIR, acquires an IPv6 allocation, and finally requests its first and only IPv4 /22 - only to find itself confused about how to go about using it in a sensible manner and end up assigning it away to an end user without any actual operational need.
* As mentioned in previous sections, the policy proposal would negatively affect the ability of LIRs to engage in inter-RIR transfers, as the RIPE NCC’s service region would be the only one without a needs-based requirement for transfers.
I feel this statement is somewhat disingenuous. The "odd RIR out" here is really ARIN, who is the only one to have a inter-RIR transfer policy that has a needs-based requirement that is also applied to the other region involved in the transfer.
The RIPE region does not have a inter-RIR transfer policy *at all*. The same goes for LACNIC and AfriNIC, AFAIK. So as things stand today, 2013-03 cannot possibly "negatively affect the ability of LIRs to engage in inter-RIR transfers" because such transfers are completely verboten in the first place.
That said, there has been an inter-RIR proposal (2012-02) on the table for a while now, but the community does not seem to want or care much about it. I think that this is important to keep that in mind when deciding on how much weight to give this argument against 2013-03.
APNIC does have a inter-RIR transfer policy, but it does not require the other region to have a needs-based requirement. It explicitly states in section 4.3 that for transfers where the recipient is in another region, any conditions on the recipient is up to the recipient's region to define. So (assuming for a second that 2012-02 has passed) 2013-03 will not have any negative impact on transfers between the APNIC and RIPE regions.
Another quite interesting thing to consider here is that APNIC initially had a transfer policy that did not require any need evaluation. It was only after the ARIN community changed their inter-RIR policy to explicitly require the other region to have "needs-based" policies APNIC added the need evaluation requirement to their general transfer policy. I think it is interesting to consider if yielding to the ARIN demand would actually be worth it, and APNIC actually provided some relevant data in this regard - on May 15th 2013, one of their reps explained to the APWG session at RIPE66 that there had been 11 inter-RIR transfers between ARIN and APNIC. APNIC depleted their IPv4 pool on the 19th of April 2011. Contrast this to the number of assignments that are being made in our region: The NCC reported that between depletion on the 14th of September 2012 and May 10th 2013, 251,254 assignments had been registered in the RIPE database.
If we do linear extrapolation of the above to get "per year" numbers, what this boils down to is that we ask the entire RIPE community to fill out, validate, and archive 386,327 ripe-583 forms per year to allow 5 LIRs to engage in inter-RIR transfers with the ARIN region. You be the judge if this passes your idea of a basic cost-benefit analysis. It certainly doesn't pass mine.
I'm not at all principally opposed to inter-RIR transfers, so if the author of 2012-02 would add a "need compatibility clause" to the proposed inter-RIR policy, I would have nothing against that. In other words, if it would be possible to make the need evaluation a voluntary thing that you only had to do if transferring addresses from the ARIN region - fine. Then those 5 LIRs, and those 5 only, could subject themselves to whatever demands the ARIN community might have, while the rest of us would be free of the IPv4 bureaucracy. Win-win.
* Implementation of the policy could expose LIRs to legal challenges under EU competition law.
If an LIR is willing to engage in unlawful anti-competitive practises, it will of course be exposed to legal challenges. This is certainly nothing new brought on by 2013-03 - the law trumps *any* address policy we can produce here, and that's how it's always been and always will be.
Furthermore, it makes absolutely no sense to me for the community to demand that every single LIR and End User in the community uphold the "need" bureaucracy in an attempt to somehow shield or indemnify "bad" members of the community engaged in anti-competitive practises from legal repercussions.
I think singling out the RIPE NCC region in the world of transfers may not be the best idea at this stage.
This "world of transfers" has failed to materialise. The actual statistics show that the second-hand IPv4 transfer market is at most supplying 3-4% of last year's (pre-depletion) demand in our region. If we had completely removed the entire transfer policy today, I think that as far as the internet is concerned, tomorrow would have been business as usual. It seems that for most folks dealing with IPv4 depletion, CGN is the solution, not transfers.
I think Rob Blokzijl hit the nail straight on the head when he in the RIPE66 APWG session warned against getting bogged down with discussing the ins and outs of «little add-on policies like transfer». After all, this proposal is a large and rough clean-up - it will be much easier to fine-tune and polish the remaining policy afterwards (transfers, PI/PA merging, etc.). Like I've said before, this proposal is essentially the amputation of the policy limbs that died following IPv4 depletion, and any following cosmetic surgery is best left for later.
Best regards, Tore Anderson
Hi again Filiz,
In order not to have people get lost between our inline comments, I will only attempt to respond to you taking quotes from your mail. Apologies if this distorts the logical thought process you had put in.
No problem, I'll do the same. :-)
Those principle based registration and address management requirements were in the old policy between the lines, pointing to people notions like anti-hoarding practices through "need based" requirements.
Actually, you don't have to read between the lines to find the reason for "need based"/"anti-hoarding". It is explicitly stated in the policy, specifically section 3.0.3: «To maximise the lifetime of the public IPv4 address space». And this of course made perfect sense. If the LIRs had been free to grab as much as they pleased with no checks and bounds, that would in all likelihood have caused the NCC's public pool of IPv4 space, and by extension the IANA's, to deplete many many years ago. It was all about delaying the Tragedy of the Commons as much as possible. Had we as a community done a much better job with IPv6, we could have avoided it from happening altogether, but that ship has sailed - the Tragedy occurred last September.
So once you take those bits out, you also take those notions and principles out of the policy. That was my point and so I disagree that your proposal does not change anything. In fact it is bringing a big change, changing address delegation from "I want it because I need it on a network"
There is a difference between a Service Provider and an Internet Registry. The former operates networks, the latter delegates numbers. Often a single organisation fills both roles, but this is not a requirement, just a convenience. You could easily run an LIR from your laptop or tablet in the local coffee shop - all you need is an e-mail account, really (and money to pay the membership fee). So when it comes to allocations, "need" isn't borne from "I need it on a network", but rather "I need it so I can assign it to an End User".
"I want it and I am a member of the RIPE NCC so I can get it
Get it from *where* and *who*, exactly?
What constitutes "good address management" is something left to the LIRs to decide for themselves.
I tend to disagree with this too. LIRs are members of the RIPE NCC but policies are developed by the entire RIPE Community, which is a bigger stakeholder. Those views should be reflected in the policy to be remembered and documented by the LIRs.
Clearly, if the RIPE Community makes a policy that says X, then the LIRs must do X. But *as of right now*, the policy does not define any principles of "good address management", hence, LIRs are free to do what they wish.
I see your point but policy does not mean "policing". To my knowledge, RIPE NCC never sent agents to LIR premises to check if the justification they documented fit with the reality or not.
Indeed, the whole "needs-based" system is entirely built on trust. The NCC is not the IPv4 Police (and I wouldn't want them to be either for simple cost/benefit reasons).
And this still does not mean that policy is not going to be there to remind people that this is a common pool of resources we are dealing with and its management requires some degree of responsibility. We might as well then not have a policy document at all and just have a click, pay and get your resource button on the RIPE NCC website.
Again, get that resource from *where* and *who*?
If I am an LIR and I go to the RIPE NCC and ask for a resource [...]
...the RIPE NCC necessarily say "sorry, we're fresh out". (Except if you didn't pick up your last /22 yet, see below.)
I am not a lawyer, but hypothetically speaking, if your proposal gets accepted there is some (again totally hypothetical…) potential that some LIRs may chose to rush and get whatever is left in the NCC pool [...] And then these LIRs who were lucky to get all the space they wanted
No, this is completely impossible, and to be honest I am starting to wonder if you are familiar with the "last /8 policy" at all, or if you are under the impression that 2013-03 proposes to remove it (it does not). In a nutshell, it is the following: An LIR can get one (1) /22, no more, no less. Sizing according to "need" has *already been abandoned*; it doesn't matter one bit if the LIR's actual need is for 1 address or 1.000.000.000.000 addresses - the only thing you'll get, ever, is 1.024. The only way an LIR could possibly get "all the space they wanted", is if they wanted 1.024 addresses or less. But in that case, they would be able to get it under today's policy, too. Best regards, Tore Anderson
Hello Tore and Gert, According to the current policy your main reason to request an IP address must be that you need it to use on a network. As soon as you remove this, that the IP address is actually needed on a "network" (network can be LIR's or End Users, does not matter), you make them a commodity. As soon as you do that within your policy, you stamp that they actually are money making assets to be turned into some value now or later and this practice is all fine according to the policy too. This means an LIR can request these resources to do whatever they want to do with them including requesting them not to be used on any network of their own or an End Users' at all but for some other reason. One of these reasons will be deliberately passing them on to a paying 3rd party who may or may not use them on any other network either. I think we all see this happening as one scenario. I do not think this is good practice or responsible address management. This is how I see this proposal will have an impact. I believe with this we are moving far away from a core principle; that we, as the RIPE Community, are dealing with networks and resources for networks. If you take the network notion from the address management policy, you are then dealing with some numbers separated with few dots with monetary value only. Rest assured I am aware of the developments in the industry and yes I know how the last /8 policy works too. In fact I was working at the RIPE NCC when it was at its earliest proposal stage and worked on it at various levels, from proposal, Impact analysis and resulting policy documentation within and across RIR regions. I remember there was also a strong argument in these circles, not too long ago, that as we reach the end of IPv4 pool, the more policy changes we make the more it will be disruptive to the system overall. And so in fact I am curious what is the rush of this proposal now that RIPE NCC is allocating from the last /8 and that soon it will be exhausted anyways and what is wrong with keeping what we have as policy as long as this last bit of /8 lasts. Maybe your proposal will be more suitable once everything has ran out and RIPE NCC does not have anything more to provide other than few recycled/returned (hard to imagine if that will be ever happen…) space. Finally Gert seems to get my point with his example of someone going through the effort of opening 5000 new LIRs. I am not saying this will happen but even someone going to through the effort of opening maybe 2 or three just to get more address space for the wrong reasons should be telling us something that our policy is missing some core notion, that notion being IP addresses are mainly there to be used on networks as soon as they leave an RIR pool. Kind regards Filiz Yilmaz On 24 Jul 2013, at 18:50, Tore Anderson <tore@fud.no> wrote:
Hi again Filiz,
In order not to have people get lost between our inline comments, I will only attempt to respond to you taking quotes from your mail. Apologies if this distorts the logical thought process you had put in.
No problem, I'll do the same. :-)
Those principle based registration and address management requirements were in the old policy between the lines, pointing to people notions like anti-hoarding practices through "need based" requirements.
Actually, you don't have to read between the lines to find the reason for "need based"/"anti-hoarding". It is explicitly stated in the policy, specifically section 3.0.3: «To maximise the lifetime of the public IPv4 address space».
And this of course made perfect sense. If the LIRs had been free to grab as much as they pleased with no checks and bounds, that would in all likelihood have caused the NCC's public pool of IPv4 space, and by extension the IANA's, to deplete many many years ago. It was all about delaying the Tragedy of the Commons as much as possible. Had we as a community done a much better job with IPv6, we could have avoided it from happening altogether, but that ship has sailed - the Tragedy occurred last September.
So once you take those bits out, you also take those notions and principles out of the policy. That was my point and so I disagree that your proposal does not change anything. In fact it is bringing a big change, changing address delegation from "I want it because I need it on a network"
There is a difference between a Service Provider and an Internet Registry. The former operates networks, the latter delegates numbers. Often a single organisation fills both roles, but this is not a requirement, just a convenience. You could easily run an LIR from your laptop or tablet in the local coffee shop - all you need is an e-mail account, really (and money to pay the membership fee). So when it comes to allocations, "need" isn't borne from "I need it on a network", but rather "I need it so I can assign it to an End User".
"I want it and I am a member of the RIPE NCC so I can get it
Get it from *where* and *who*, exactly?
What constitutes "good address management" is something left to the LIRs to decide for themselves.
I tend to disagree with this too. LIRs are members of the RIPE NCC but policies are developed by the entire RIPE Community, which is a bigger stakeholder. Those views should be reflected in the policy to be remembered and documented by the LIRs.
Clearly, if the RIPE Community makes a policy that says X, then the LIRs must do X. But *as of right now*, the policy does not define any principles of "good address management", hence, LIRs are free to do what they wish.
I see your point but policy does not mean "policing". To my knowledge, RIPE NCC never sent agents to LIR premises to check if the justification they documented fit with the reality or not.
Indeed, the whole "needs-based" system is entirely built on trust. The NCC is not the IPv4 Police (and I wouldn't want them to be either for simple cost/benefit reasons).
And this still does not mean that policy is not going to be there to remind people that this is a common pool of resources we are dealing with and its management requires some degree of responsibility. We might as well then not have a policy document at all and just have a click, pay and get your resource button on the RIPE NCC website.
Again, get that resource from *where* and *who*?
If I am an LIR and I go to the RIPE NCC and ask for a resource [...]
...the RIPE NCC necessarily say "sorry, we're fresh out". (Except if you didn't pick up your last /22 yet, see below.)
I am not a lawyer, but hypothetically speaking, if your proposal gets accepted there is some (again totally hypothetical…) potential that some LIRs may chose to rush and get whatever is left in the NCC pool [...] And then these LIRs who were lucky to get all the space they wanted
No, this is completely impossible, and to be honest I am starting to wonder if you are familiar with the "last /8 policy" at all, or if you are under the impression that 2013-03 proposes to remove it (it does not). In a nutshell, it is the following:
An LIR can get one (1) /22, no more, no less. Sizing according to "need" has *already been abandoned*; it doesn't matter one bit if the LIR's actual need is for 1 address or 1.000.000.000.000 addresses - the only thing you'll get, ever, is 1.024.
The only way an LIR could possibly get "all the space they wanted", is if they wanted 1.024 addresses or less. But in that case, they would be able to get it under today's policy, too.
Best regards, Tore Anderson
Filiz,
According to the current policy your main reason to request an IP address must be that you need it to use on a network.
This is only the true for *assignments*, not *allocations*. This is a subtle, but important, difference.
As soon as you remove this, that the IP address is actually needed on a "network" (network can be LIR's or End Users, does not matter), you make them a commodity. As soon as you do that within your policy, you stamp that they actually are money making assets to be turned into some value now or later and this practice is all fine according to the policy too.
We have *today*, under our current policy: - An allocation transfer policy that has no restrictions on monetary compensation being exchanged between the parties to a transaction; - A list of «Recognised IPv4 Transfer Brokers» published by the NCC; - A NCC-operated "lightweight self-service IPv4 broker" or "bulletin board" aimed at helping LIRs interested in trading find each other. 2013-03 takes no position whether or not all of this is a "good thing", nor do I. But let's face the facts, it's *already there*.
This means an LIR can request these resources to do whatever they want to do with them including requesting them not to be used on any network of their own or an End Users' at all but for some other reason. One of these reasons will be deliberately passing them on to a paying 3rd party who may or may not use them on any other network either.
This is *already possible* today; in fact, what you're describing above is pretty much the core function of an LIR. Let me try to explain by making an hypothetical example: Background: John Q. Public wants to make money on IPv4. He has a laptop and and e-mail account, but no networking equipment, nor an internet connection of his own; in fact, he's leeching off his local coffee shop gratis WiFi in order to get online. John then does the following: 1) Incorporates "JQP IPv4 Leasing Company" in his local jurisdiction. 2) Joins the NCC and pays the membership fee, thus becoming an LIR. 3) Requests and receives an IPv6 allocation, ignores it. 4) Requests and receives his "last /8" /22. 5) Sets up an auction or something like it, and finds the end user(s) willing to pay the most for [parts of] the /22. 6) Gets a completed ripe-583 form from the auction winner(s), forwards it to the RIPE NCC (if he does not yet have an AW), and saves a copy in an archive folder. 7) Assigns the address space over to the new end user(s) (i.e., registering ASSIGNED PA inetnum objects in the RIPE database). So, again, this would be *already possible* and completely legitimate under our current policy. If John manages to get higher income from his customers then what he's paying the NCC in membership fees, then voila! John is making money off IPv4, without having ever forwarded a single IPv4 packet on behalf of his customers. Again, 2013-03 takes no position whether or not this is a "good thing", but it is the status quo today, so when discussing the proposal, I think we should try to keep on-topic, i.e. discussing what the proposal actually *changes*, which in the above case is the removal of point #6 and nothing else: John's customer won't have to fill out the ripe-583 form anymore. This is a good thing at least in one way, because it removes a bureaucratic overhead that would otherwise impose a work load on John, John's customer, and the RIPE NCC. I think you referred to it as "admin hogging" in an earlier message and I couldn't agree more. Your concern is that by removing point #6, it becomes possible that the winner(s) of John's auction does not "need" the space, yet are able to receive it. I concede that this is theoretically possible. But I remain unconvinced that this is an *realistic* problem - I simply don't see why someone would bid on address space that they don't "need", especially when they have to outbid a bunch of others who *do* have potentially quite desperate "need". And even if such actors do exist and do outbid all the folks that do "need", keep in mind that *today* 1) the entire system is trust-based and that 2) John has absolutely no incentive to undertake a deep investigation into whether or not his customer's ripe-583 form is truthfully filled out or not - if it looks credible enough, his job is done. He could also make a habit of forwarding the forms to the NCC to get "official" stamps of approval.
I do not think this is good practice or responsible address management.
Maybe, maybe not - but it is what we have today. If we want to ban paid IPv4 allocation transfers and assignments because it's these do not constitute "good practice or responsible address management", then we as a community can do that, but please let's keep that discussion in a separate proposal.
And so in fact I am curious what is the rush of this proposal now that RIPE NCC is allocating from the last /8 and that soon it will be exhausted anyways and what is wrong with keeping what we have as policy as long as this last bit of /8 lasts.
Your definition of "soon" differs wildly from mine, or you haven't done the math. Allow me: - Number of /22s in 185.0.0.0/8 (sans the /16 for IXPs): 16320 - Number of LIRs that held allocations outside 185/8 at the time of depletion (these are the only ones who can get their last /22 as an additional allocation): 7912 - Number of reclaimed space held by the NCC as of today, in /22s: 903 - Number of reclaimed space held by the IANA as of today, divided by 5 RIRs, in /22s: 3731 In other words, there is a total of 13042 /22s to be given out to new LIRs under the last /8 policy (and this number keeps increasing as the IANA and the NCC continues to recovers space). As of today, there are 959 LIRs who hold *only* a /22 from 185/8. 314 days have passed since IPv4 depletion. So how long will the last /8 last us based on the current usage rates and available space? 13042 / (959 / 314 * 365) = 11.7 years I truly hope that we've gotten IPv6 properly out the door by then... To answer the second question, "what's wrong with keeping what we have": About half of the current policy text is describing out of date concepts, is self-contradictory or otherwise wrong, and that it imposes a bureaucracy on the community that demands that hundreds of thousands forms be filled out every year, all in the name of delaying something which has already happened. I mean, you even said it yourself in an earlier message: «Yes, agreed, this is bureaucratic, admin resource hogging etc and this needs a change» - and I could not agree more, this is *exactly* why I have proposed 2013-03.
Finally Gert seems to get my point with his example of someone going through the effort of opening 5000 new LIRs. I am not saying this will happen but even someone going to through the effort of opening maybe 2 or three just to get more address space for the wrong reasons should be telling us something that our policy is missing some core notion, that notion being IP addresses are mainly there to be used on networks as soon as they leave an RIR pool.
I believe Gert's point was that you can open 5000 LIRs in this manner *today*, under our *current* policy. 2013-03 brings no change. Therefore, this is not a valid argument against 2013-03. If you want to close this loophole, then that's food for another policy proposal. Opposing 2013-03 won't do anything about it, one way or the other (nor would supporting 2013-03). (That said, in the current data there's no evidence of someone attempting to use this loophole in the described manner. Personally I believe that the NCC's membership fee is a sufficient deterrence against it.) Tore
Dear Tore, I am aware of all the practical examples you have provided. You keep saying that everything but one thing is the status quo already but that one thing bares a whole notion and a principle (beyond maths) that I have been trying to express in my previous posts because I simply do care about it. Few points of clarification about my own thoughts so far instead of someone labelling them for me too: - Yes, I already agreed with certain things you are proposing, true. I've explained why. - I know what an allocation and assignment is. - I am not against transfers but I am against the practice of getting space now from the NCC just to be able to transfer it later. I do not call this a best practice and I would not like RIPE Policies encourage it. - But I find transfers extremely useful if they are to bring out some already allocated space out of some drawer. While the current system is based on trust, there is definitely enough of wording for what that trust is to be in the current text. It is my belief that your proposal is taking them out all together and leaving the resulting document a mere description of a system that is an IP market, removing the core essential that IPs are for networks in the first place. This is where my concern lies, not about removing the bureaucracy. You seem to say that you want to change the annoying step 6 in your John Q example, where everything else is going to stay the same anyways. ripe-583 may be an overkill today, agreed. It is just a form and a practice NCC applies though as a result of their interpretation of the policy. If it is a problem ask the NCC folks to come up with a more efficient form or a new scheme or totally have it removed even. Policy document does not talk about ripe-583 specifically anyway. But your proposal is removing way too many important principles from the policy text in order to fix an operational problem. In other words, the way it is written, the resulting text and so your proposal is taking it to the extreme, doing more than just removing the unhelpful bureaucracy in my opinion. This is not a matter of an other proposal that can be made after yours. This discussion is happening to note these about this proposal. I may be just one person who thinks we should still mention in the resulting document that RIPE Community cares about networks, that we do realise that IPs are for networks and that these are expected to be used with care and responsibility. And so this is my input to the current discussion. I hope it is now clear what I am opposing to and what not. Kind regards Filiz Yilmaz On 25 Jul 2013, at 09:32, Tore Anderson <tore@fud.no> wrote:
Filiz,
According to the current policy your main reason to request an IP address must be that you need it to use on a network.
This is only the true for *assignments*, not *allocations*. This is a subtle, but important, difference.
As soon as you remove this, that the IP address is actually needed on a "network" (network can be LIR's or End Users, does not matter), you make them a commodity. As soon as you do that within your policy, you stamp that they actually are money making assets to be turned into some value now or later and this practice is all fine according to the policy too.
We have *today*, under our current policy:
- An allocation transfer policy that has no restrictions on monetary compensation being exchanged between the parties to a transaction; - A list of «Recognised IPv4 Transfer Brokers» published by the NCC; - A NCC-operated "lightweight self-service IPv4 broker" or "bulletin board" aimed at helping LIRs interested in trading find each other.
2013-03 takes no position whether or not all of this is a "good thing", nor do I. But let's face the facts, it's *already there*.
This means an LIR can request these resources to do whatever they want to do with them including requesting them not to be used on any network of their own or an End Users' at all but for some other reason. One of these reasons will be deliberately passing them on to a paying 3rd party who may or may not use them on any other network either.
This is *already possible* today; in fact, what you're describing above is pretty much the core function of an LIR.
Let me try to explain by making an hypothetical example:
Background: John Q. Public wants to make money on IPv4. He has a laptop and and e-mail account, but no networking equipment, nor an internet connection of his own; in fact, he's leeching off his local coffee shop gratis WiFi in order to get online. John then does the following:
1) Incorporates "JQP IPv4 Leasing Company" in his local jurisdiction. 2) Joins the NCC and pays the membership fee, thus becoming an LIR. 3) Requests and receives an IPv6 allocation, ignores it. 4) Requests and receives his "last /8" /22. 5) Sets up an auction or something like it, and finds the end user(s) willing to pay the most for [parts of] the /22. 6) Gets a completed ripe-583 form from the auction winner(s), forwards it to the RIPE NCC (if he does not yet have an AW), and saves a copy in an archive folder. 7) Assigns the address space over to the new end user(s) (i.e., registering ASSIGNED PA inetnum objects in the RIPE database).
So, again, this would be *already possible* and completely legitimate under our current policy. If John manages to get higher income from his customers then what he's paying the NCC in membership fees, then voila! John is making money off IPv4, without having ever forwarded a single IPv4 packet on behalf of his customers.
Again, 2013-03 takes no position whether or not this is a "good thing", but it is the status quo today, so when discussing the proposal, I think we should try to keep on-topic, i.e. discussing what the proposal actually *changes*, which in the above case is the removal of point #6 and nothing else:
John's customer won't have to fill out the ripe-583 form anymore. This is a good thing at least in one way, because it removes a bureaucratic overhead that would otherwise impose a work load on John, John's customer, and the RIPE NCC. I think you referred to it as "admin hogging" in an earlier message and I couldn't agree more.
Your concern is that by removing point #6, it becomes possible that the winner(s) of John's auction does not "need" the space, yet are able to receive it. I concede that this is theoretically possible. But I remain unconvinced that this is an *realistic* problem - I simply don't see why someone would bid on address space that they don't "need", especially when they have to outbid a bunch of others who *do* have potentially quite desperate "need".
And even if such actors do exist and do outbid all the folks that do "need", keep in mind that *today* 1) the entire system is trust-based and that 2) John has absolutely no incentive to undertake a deep investigation into whether or not his customer's ripe-583 form is truthfully filled out or not - if it looks credible enough, his job is done. He could also make a habit of forwarding the forms to the NCC to get "official" stamps of approval.
I do not think this is good practice or responsible address management.
Maybe, maybe not - but it is what we have today. If we want to ban paid IPv4 allocation transfers and assignments because it's these do not constitute "good practice or responsible address management", then we as a community can do that, but please let's keep that discussion in a separate proposal.
And so in fact I am curious what is the rush of this proposal now that RIPE NCC is allocating from the last /8 and that soon it will be exhausted anyways and what is wrong with keeping what we have as policy as long as this last bit of /8 lasts.
Your definition of "soon" differs wildly from mine, or you haven't done the math. Allow me:
- Number of /22s in 185.0.0.0/8 (sans the /16 for IXPs): 16320 - Number of LIRs that held allocations outside 185/8 at the time of depletion (these are the only ones who can get their last /22 as an additional allocation): 7912 - Number of reclaimed space held by the NCC as of today, in /22s: 903 - Number of reclaimed space held by the IANA as of today, divided by 5 RIRs, in /22s: 3731
In other words, there is a total of 13042 /22s to be given out to new LIRs under the last /8 policy (and this number keeps increasing as the IANA and the NCC continues to recovers space). As of today, there are 959 LIRs who hold *only* a /22 from 185/8. 314 days have passed since IPv4 depletion.
So how long will the last /8 last us based on the current usage rates and available space?
13042 / (959 / 314 * 365) = 11.7 years
I truly hope that we've gotten IPv6 properly out the door by then...
To answer the second question, "what's wrong with keeping what we have": About half of the current policy text is describing out of date concepts, is self-contradictory or otherwise wrong, and that it imposes a bureaucracy on the community that demands that hundreds of thousands forms be filled out every year, all in the name of delaying something which has already happened.
I mean, you even said it yourself in an earlier message: «Yes, agreed, this is bureaucratic, admin resource hogging etc and this needs a change» - and I could not agree more, this is *exactly* why I have proposed 2013-03.
Finally Gert seems to get my point with his example of someone going through the effort of opening 5000 new LIRs. I am not saying this will happen but even someone going to through the effort of opening maybe 2 or three just to get more address space for the wrong reasons should be telling us something that our policy is missing some core notion, that notion being IP addresses are mainly there to be used on networks as soon as they leave an RIR pool.
I believe Gert's point was that you can open 5000 LIRs in this manner *today*, under our *current* policy. 2013-03 brings no change. Therefore, this is not a valid argument against 2013-03.
If you want to close this loophole, then that's food for another policy proposal. Opposing 2013-03 won't do anything about it, one way or the other (nor would supporting 2013-03).
(That said, in the current data there's no evidence of someone attempting to use this loophole in the described manner. Personally I believe that the NCC's membership fee is a sufficient deterrence against it.)
Tore
* Filiz Yilmaz
I am aware of all the practical examples you have provided.
You keep saying that everything but one thing is the status quo already but that one thing bares a whole notion and a principle (beyond maths) that I have been trying to express in my previous posts because I simply do care about it.
When I say that 2013-03 merely upholds the status quo with regards to a specific concern you have brought up, I truly believe that this is the case. So when we discuss the individual issues you raise, I would truly appreciate it very much if you would quote the relevant phrases or sections in the current policy, and that are removed or modified by 2013-03, that is responsible for causing an actual change from what we have today. This would make it much easier for me to understand exactly what it is that you are referring to in each case, and we can discuss those points specifically, and hopefully be able to find some common ground or agreement on them, one at a time. With that in mind:
I am not against transfers but I am against the practice of getting space now from the NCC just to be able to transfer it later.
Agreed in principle, but I don't see that the current policy prevents this. As has been pointed out by myself and others several times already, under the current policy each new LIR gets a /22, and the associated need evaluation ("1 address to assign to someone within a year") is merely a formality that is highly unlikely to prevent any new LIR who wants to do this from succeeding in doing so.
I do not call this a best practice and I would not like RIPE Policies encourage it.
Please quote the text in the proposed policy which encourages this kind of behaviour.
- But I find transfers extremely useful if they are to bring out some already allocated space out of some drawer.
Please quote the text in the proposed policy that would discourage LIRs from bringing out already allocated space out of some drawer.
While the current system is based on trust, there is definitely enough of wording for what that trust is to be in the current text. It is my belief that your proposal is taking them out all together and leaving the resulting document a mere description of a system that is an IP market, removing the core essential that IPs are for networks in the first place. This is where my concern lies, not about removing the bureaucracy.
To the best of my knowledge, all the text in the proposed policy that "describes a system that is an IP market" is also present in today's policy, and was by and large added by proposal 2007-08. Could you please point out to me the specific passages added by 2013-03 that you are thinking of?
ripe-583 may be an overkill today, agreed. It is just a form and a practice NCC applies though as a result of their interpretation of the policy. If it is a problem ask the NCC folks to come up with a more efficient form or a new scheme or totally have it removed even.
As it happens, you'll be delighted to learn I've recently submitted a policy proposal that does exactly this! ;-)
Policy document does not talk about ripe-583 specifically anyway. But your proposal is removing way too many important principles from the policy text in order to fix an operational problem.
Please cite the specific sentences or sections in the current policy, removed by 2013-03, that defined these important principles.
I may be just one person who thinks we should still mention in the resulting document that RIPE Community cares about networks, that we do realise that IPs are for networks and that these are expected to be used with care and responsibility.
I can tell you with absolute certainty that you are not the only one. This statement describes me, too, and for the record I operate both a network and an LIR. Best regards, Tore Anderson
* Tore Anderson
I may be just one person who thinks we should still mention in the resulting document that RIPE Community cares about networks, that we do realise that IPs are for networks and that these are expected to be used with care and responsibility.
I can tell you with absolute certainty that you are not the only one. This statement describes me, too, and for the record I operate both a network and an LIR.
Uhm, apologies, I misread your original statement there Filiz. So to clarify, I do *not* think 2013-03 needs to add a statement saying that the RIPE Community cares about networks and so forth. After all, the current document makes no such statement either. What I thought you said first was that *you* was one person in the RIPE Community that cares about networks and so forth. That was what I wanted to agree with because I care about networks too. :-) In any case, I would be quite willing to discuss a separate proposal, independent from 2013-03, that added a statement along those lines. Tore
Hi, On Thu, Jul 25, 2013 at 12:19:45AM +0200, Filiz Yilmaz wrote:
Finally Gert seems to get my point with his example of someone going through the effort of opening 5000 new LIRs. I am not saying this will happen but even someone going to through the effort of opening maybe 2 or three just to get more address space for the wrong reasons should be telling us something that our policy is missing some core notion, that notion being IP addresses are mainly there to be used on networks as soon as they leave an RIR pool.
2013-03 would not be changing that particular game. If someone wants to open extra LIRs to get extra /22s, they can do that today, and they can do that if 2013-03 is implemented. Needs justification for the /22 is already so minimal ("I need a single IPv4 address") that I can't really see how 2013-03 would make a big for these cases. If you're concerned about people gaming the system by opening extra LIRs and getting extra /22s that they should not have, opposing 2013-03 is not the right approach - we'd need a modification of the actual last /8 policy to qualify under which rules "new LIRs" might *not* be eligible to get a /22 - and I think *this* would cause much more grave problems with competition laws. Gert Doering -- APWG chair -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
I am not saying this will happen but even someone going to through the effort of opening maybe 2 or three just to get more address space for the wrong reasons should be telling us something that our policy is missing some core notion
the issue is not policy. the issue is that ipv4 is essentially gone and folk will do whatever they can to get that last pathetic little bit. we should not be writing kinky and complex policies to try and prevent every bit of stupid greed we can fantacize. ipv4 space is gone but we will get to live with the silly policies and then have to clean them up as we are having to do now. randy
On 25/07/2013 11:51, Randy Bush wrote:
the issue is that ipv4 is essentially gone
therein lies the problem: ipv4 is not essentially gone, nor do I foresee that it will be gone in my lifetime. Nor do I see that the RIR pools will ever stop garbage collection of ipv4 address space, which means that for the foreseeable future, they will continue to play a part in ipv4 address allocation. Also they can still serve a useful purpose as the registries of allocated space. With regard to 2013-03, we know that: 1. the RIRs will no longer be the dominant source for injecting liquidity into the available addressing pool 2. demand for ipv4 address space over time will continue to increase 3. there will be a market for ipv4 address space. The ipv4 address market will work if the market stays liquid, but 2013-03 creates an environment for full deregulation of the addressing market with almost no control mechanisms for handling problems [There is a 24-month reallocation freeze, but I don't think this is going to work because it will not affect the reality of real world allocation transfers. Consequently, people will flout it, and then we will need to remove it from the policy mechanism because it's causing the registry function to break down.] Liquidity will be generated almost entirely by existing address space holders releasing existing address space into the market. So the interesting question is: just how much slack space is there out there? Answering this will give us a good idea how much potential future liquidity there is, and consequently whether full deregulation is likely or not to run into liquidity constraints, given historical addressing demands over the last several years. This will give us a better perspective to decide on whether 2013-03 is actually a good idea. Nick
On Jul 25, 2013, at 6:42 AM, Nick Hilliard <nick@inex.ie> wrote:
Also they can still serve a useful purpose as the registries of allocated space.
Well, assuming they don't shoot themselves in the head by attempting to use their registries as a weapon against their customers.
With regard to 2013-03, we know that:
1. the RIRs will no longer be the dominant source for injecting liquidity into the available addressing pool
Agreed.
2. demand for ipv4 address space over time will continue to increase
Demand for IPv4 will increase as long as the price is competitive relative to the alternatives. Right now, the price of IPv4 is wildly distorted by the regulatory regime imposed by the RIRs so stuff like CGN and IPv6 is (seen to be) too expensive. At some point, the regulatory regime that is 'injecting liquidity' _IS_ going to be unable to do so, and the price of IPv4 is going to skyrocket with a corresponding decrease in demand as alternatives become more appealing. The only question is when.
3. there will be a market for ipv4 address space.
There already is.
The ipv4 address market will work if the market stays liquid, but 2013-03 creates an environment for full deregulation of the addressing market with almost no control mechanisms for handling problems
AFAICT, 2013-03 simply says "get out of the way and let the market work." The main concern appears to be that Evil Greedy Speculators will descend upon RIPE like locusts, gobbling up the remaining RIPE IPv4 free pool in a blink of an eye, and not putting that address space into actual use. I tend to agree that is a risk. However, as has been pointed out, there is little stopping that now (well, other than penalizing honesty). Regards, -drc
* David Conrad
2013-03 simply says "get out of the way and let the market work."
For what it's worth, the motivation behind 2013-03 has nothing to do with "the market" whatsoever. What I'm gunning for, is the bureaucratic overhead surrounding IPv4 LIR->End User assignments, and obviously incorrect/obsoleted self-contradictory policy statements. The reason it makes a "no need" change for allocations (and by extension for allocation transfers), is that the "need" for allocations are determined exclusively by an LIRs intention to register assignments. Once we've removed need evaluation for assignments, there is no point in maintaining it for allocations, as LIRs could trivially work around that by proclaiming to the NCC an intention to assign a /1 to their break-room gaming console. That would be a valid assignment, in turn causing a valid "need" for a correspondingly sized allocation.
The main concern appears to be that Evil Greedy Speculators will descend upon RIPE like locusts, gobbling up the remaining RIPE IPv4 free pool in a blink of an eye, and not putting that address space into actual use.
I tend to agree that is a risk. However, as has been pointed out, there is little stopping that now (well, other than penalizing honesty).
Actually, you don't even have to be dishonest in order to do this, it is perfectly possible under today's policy. Here's how: What this Evil Greedy Speculator needs to do is to register a few thousand LIRs, since each new LIR is entitled a single /22. Today, each of those LIRs must demonstrate "need", but this is merely a formality - if you have an intention of assigning one (1) IPv4 address to some End User within 12 months, you qualify. I seriously doubt that this formality is what has prevented the Evil Greedy Speculators from having done this already. A few to me more plausible reasons why it hasn't happened so far include: "too much trouble for too few addresses", "too high RIPE NCC membership fee to pay for too few addresses", "too high risk of being shunned and any obtained blocks filtered by the operator community", "too high risk of being countered by hostile policy", a combination of the preceding, or simply that "Evil Greedy Speculator is a bogeyman which doesn't really exist". Tore
On 25/07/2013 16:31, Tore Anderson wrote:
For what it's worth, the motivation behind 2013-03 has nothing to do with "the market" whatsoever.
perhaps it's not the intention, but the consequence of the proposal is full market deregulation.
What this Evil Greedy Speculator needs to do is to register a few thousand LIRs, since each new LIR is entitled a single /22. Today, each of those LIRs must demonstrate "need", but this is merely a formality - if you have an intention of assigning one (1) IPv4 address to some End User within 12 months, you qualify. I seriously doubt that this formality is what has prevented the Evil Greedy Speculators from having done this already.
the current ripe ncc pricing structure means that each IP address has a nominal capex value of €3.70 + third party costs. So the nominal residual value of the remaining .88 /8 is about €55m + a real headache when you realise that you also need to convince some company registration office that they should be ok about 15000 new company registrations if they wouldn't mind thankyouverymuch. Microsoft paid $11 per integer in 2011 for ~660k addresses. So right now, opening up bazillions of LIRs doesn't look like a particularly good option. [that said, maybe we should put forward a policy to ask RIPE to create a restful api for opening new LIRs, and to plump up Axel's medical insurance policy for when he needs to sign his name 15000 times. Just thinking out loud here...] Nick
Nick, I am detecting a contradiction in your argument: you say excessive costs associated with fees and registrations WILL stop people from hoarding under the current system, which underprices address blocks. But at the same time you are arguing that if we remove needs assessment, droves of "hoarders" will pay excessive and rising costs to buy up large quantities of number blocks they don't really need. That argument just doesn't make sense. The most reasonable way to get out of this contradiction is simply to admit that hoarding will have a very limited impact on the remnants of the IPv4 address space due to existing market conditions. The price of v4 blocks will rise as scarcity increases. People who pay that money have strong incentives to move the blocks to people who can use them to generate revenue. Possession of number blocks is widely distributed now, so no one can corner the market. The real hoarders are the legacy holders who are not releasing their addresses as widely as possible now. Why? Because needs assessment prevents them from transaction with many willing buyers. If you were really concerned about hoarding, you wouldn't be talking about some hypothetical future state, you'd be talking about the situation we are in right now. 30% of the v4 address space is hoarded. You can see a pretty good challenge to the hoary hoarding argument from Louis Sterchi here: http://blog.kalorama.com/archives/1239 Hoarding is an economic phenomenon, driven by economic incentives. If you want to argue it will take place, don't just assert it, provide a coherent economic analysis.
-----Original Message----- From: address-policy-wg-bounces@ripe.net [mailto:address-policy-wg- bounces@ripe.net] On Behalf Of Nick Hilliard Sent: Thursday, July 25, 2013 1:39 PM To: Tore Anderson Cc: David Conrad; address-policy-wg@ripe.net Subject: Re: [address-policy-wg] 2013-03 New Draft Document and Impact Analysis Published (No Need - Post-Depletion Reality Adjustment and Clean up)
On 25/07/2013 16:31, Tore Anderson wrote:
For what it's worth, the motivation behind 2013-03 has nothing to do with "the market" whatsoever.
perhaps it's not the intention, but the consequence of the proposal is full market deregulation.
What this Evil Greedy Speculator needs to do is to register a few thousand LIRs, since each new LIR is entitled a single /22. Today, each of those LIRs must demonstrate "need", but this is merely a formality - if you have an intention of assigning one (1) IPv4 address to some End User within 12 months, you qualify. I seriously doubt that this formality is what has prevented the Evil Greedy Speculators from having done this already.
the current ripe ncc pricing structure means that each IP address has a nominal capex value of €3.70 + third party costs. So the nominal residual value of the remaining .88 /8 is about €55m + a real headache when you realise that you also need to convince some company registration office that they should be ok about 15000 new company registrations if they wouldn't mind thankyouverymuch.
Microsoft paid $11 per integer in 2011 for ~660k addresses. So right now, opening up bazillions of LIRs doesn't look like a particularly good option.
[that said, maybe we should put forward a policy to ask RIPE to create a restful api for opening new LIRs, and to plump up Axel's medical insurance policy for when he needs to sign his name 15000 times. Just thinking out loud here...]
Nick
On 25/07/2013 21:50, Milton L Mueller wrote:
I am detecting a contradiction in your argument: you say excessive costs associated with fees and registrations WILL stop people from hoarding under the current system, which underprices address blocks. But at the same time you are arguing that if we remove needs assessment, droves of "hoarders" will pay excessive and rising costs to buy up large quantities of number blocks they don't really need.
I'm not arguing for/against the policy and any concern I have relates to market speculators sucking up transfers from existing holders rather than new LIR allocations - which by any reasonable analysis is currently too painful for anyone to bother abusing on a large scale.
The most reasonable way to get out of this contradiction is simply to admit that hoarding will have a very limited impact on the remnants of the IPv4 address space due to existing market conditions.
I don't believe any of us is in a position to make an assumption of this form.
The price of v4 blocks will rise as scarcity increases. People who pay that money have strong incentives to move the blocks to people who can use them to generate revenue. Possession of number blocks is widely distributed now, so no one can corner the market.
no-one can corner the market in terms of overall possession of assigned address, but my concern is about speculators reducing liquidity in the market by hoovering up transferred addresses rather than getting lots of tiny new allocations from the lirs. Because there is relatively little liquidity in the market at the moment, this probably isn't very difficult or very expensive to do, yet it could have a significant effect on pricing and availability.
The real hoarders are the legacy holders who are not releasing their addresses as widely as possible now. Why? Because needs assessment prevents them from transaction with many willing buyers. If you were really concerned about hoarding, you wouldn't be talking about some hypothetical future state, you'd be talking about the situation we are in right now. 30% of the v4 address space is hoarded.
I mentioned this as a relevant factor in one of my emails yesterday.
Hoarding is an economic phenomenon, driven by economic incentives. If you want to argue it will take place, don't just assert it, provide a coherent economic analysis.
"Please provide more convincing hand-waving". Right :-) Nick
Hi Nick,
[that said, maybe we should put forward a policy to ask RIPE to create a restful api for opening new LIRs, and to plump up Axel's medical insurance policy for when he needs to sign his name 15000 times. Just thinking out loud here...]
I think the NCC already took steps to prevent RSI with Axel and has been using a signature stamp for quite a while on the services agreements.
* Nick Hilliard
The ipv4 address market will work if the market stays liquid, but 2013-03 creates an environment for full deregulation of the addressing market with almost no control mechanisms for handling problems
Hi Nick, I'd like to know: - What kind of problems are you foreseeing? - What kind of control mechanisms exist in today's policy, that are removed by 2013-03, will forestall these problems?
[There is a 24-month reallocation freeze, but I don't think this is going to work because it will not affect the reality of real world allocation transfers. Consequently, people will flout it, and then we will need to remove it from the policy mechanism because it's causing the registry function to break down.]
s/24-month reallocation freeze/requirement to demonstrate need/ Does this argument work equally well? If no, why not?
Liquidity will be generated almost entirely by existing address space holders releasing existing address space into the market. So the interesting question is: just how much slack space is there out there?
Probably impossible to answer accurately. The best indication I could come up with is to 1) compare pre-depletion allocation rates with post-depletion transfer rates, making the assumption that the actual demand has at least not decreased, and 2) compare supply with demand at the RIPE NCC's listing site. Today's numbers: Pre-depletion IPv4 RIR->LIR allocation stats (20110914-20120725): - allocations: 1980 - addresses: 36052992 Post-depletion IPv4 LIR->LIR allocation transfer stats (20120914-20130725): - transfers: 70 (3.54% of pre-depletion) - addresses: 1189888 (3.30% of pre-depletion) RIPE NCC IPv4 Transfer Listing Service stats: - requested: 15043584 - available: 225280 (1.50% of requested) Tore
On 25/07/2013 15:44, Tore Anderson wrote:
- What kind of problems are you foreseeing?
address hoarding, leading to reduction in market liquidity, leading to profiteering.
- What kind of control mechanisms exist in today's policy, that are removed by 2013-03, will forestall these problems?
historically, two things: the presence of policies which make it difficult to transfer large amount of address space from many different sources, and secondly, the fact that IP addresses had little market value due to the fact they were effectively being dispensed for $notmuch by the rirs. I.e. lots of effort for little return.
[There is a 24-month reallocation freeze, but I don't think this is going to work because it will not affect the reality of real world allocation transfers. Consequently, people will flout it, and then we will need to remove it from the policy mechanism because it's causing the registry function to break down.]
s/24-month reallocation freeze/requirement to demonstrate need/
Does this argument work equally well? If no, why not?
it's the same argument, which means that we need to understand that it is a bad idea to put any faith in the 24-month reallocation freeze rule as a means of regulating the market, or to believe that the rule will stay there as a long term fixture.
Probably impossible to answer accurately.
that is true, but it might be useful to make some sort of estimate particularly with regard to the class A+B legacy allocations. Eyeballing, I figure there's probably quite a good chunk of unrouted legacy space or legacy space which ended up in commercial organisations who probably don't need all that space, and which could eventually come into the market - maybe 30-40 /8s as a rough estimate. Given that the RIRs ploughed through 94 /8s since the early 1990s, this represents a reasonably large amount of integers from the point of view of potential future liquidity. Nick
* Nick Hilliard
On 25/07/2013 15:44, Tore Anderson wrote:
- What kind of problems are you foreseeing?
address hoarding,
I would actually claim that this is not difficult to pull off under today's policy either. If you want to set up a LIR to hoard address space, you can team up with someone who does have "need". (There are several buyers on the Listing Service who are seeking large blocks, perhaps a good place to start looking.) Make a proposition to them to loan them any address space you are able to find and buy on the market for free. With their ripe-583 forms in hand, your "hoarder LIR" has the required need to get approval from the NCC to receive allocation transfers. When the time comes that you need the addresses yourself, terminate the loaning contracts and reassign/transfer to yourself as appropriate.
leading to reduction in market liquidity,
The numbers I posted in my previous message suggest that the market is only supplying 3-4% of actual demand (assuming last year's demand is a good indicator of this year's). I'd say that this is not a particularly liquid market to begin with, making it hard to see how any kind of further marginalisation of whatever little liquidity is there now can be a significant issue to the community when looking at the bigger picture.
leading to profiteering.
It's perfectly possible and sanctioned by today's policy for LIRs to make a profit from IPv4. I gave an example to Filiz earlier about how you can, under today's policy, set up an LIR that only exists to lease out IPv4 blocks to whatever End Users are willing to pay the most. We were talking about the /22 allocation from the "last /8" then, but the procedure would work equally well for transfers - simply line up End Users and gather their ripe-582 forms, find space on the market and buy it, assign whatever you bought to whoever is first in line (or willing to pay the most). Lather, rinse, repeat. When a certain allocation has been in your possession for 24 months, you may also choose to transfer it away, or just keep leasing it out of course. Do whatever maximises your profits. You're not in any way breaching current policy, after all, you're essentially just operating an LIR. I'm not saying this is "good" or this is "bad", all I'm saying this can be done today, it's not something new that 2013-03 brings to the table.
- What kind of control mechanisms exist in today's policy, that are removed by 2013-03, will forestall these problems?
historically, two things: the presence of policies which make it difficult to transfer large amount of address space from many different sources,
Could you point out which part/passage of the policy you're referring to here? I am under the impression that if you have approval from the NCC for, say, a /8, there's no language in the current policy that makes it more difficult to transfer 16384 /22s from 16384 different sources, compared to transferring 1 /8 from 1 source. [I have absolutely no problems seeing that performing lots of small purchases is wildly more difficult than performing one large one, but for reasons that has nothing to do with any current policy language. Locating all the sellers and striking a deal with all of them, for starters.]
secondly, the fact that IP addresses had little market value due to the fact they were effectively being dispensed for $notmuch by the rirs. I.e. lots of effort for little return.
But - this already changed when the RIPE NCC ran out of space and implemented the last /8 policy last September. I don't see what change is brought by 2013-03 in this regard? Could you point to the changed/removed policy language in question?
s/24-month reallocation freeze/requirement to demonstrate need/
Does this argument work equally well?
it's the same argument, which means that we need to understand that it is a bad idea to put any faith in the 24-month reallocation freeze rule as a means of regulating the market, or to believe that the rule will stay there as a long term fixture.
So just to make sure I have not misunderstood you here, you are also accepting the following argument to be equally valid (or invalid) as the one you wrote above? "we need to understand that it is a bad idea to put any faith in the requirement to demonstrate need rule as a means of regulating the market, or to believe that the rule will stay there as a long term fixture." Tore
I'm bewildered, confuzzled, and wide-eyed, yes, nearly astonished, that Tore's points don't seem to penetrate the fog. I've read this proposal a few times, and as far as I can tell, most if not all of the alleged counterpoints to 2013-03 are _not_ counterpoints to 2013-03, but to something else. I may have misread the proposal, and therefore I request that Filiz, Michele and Nick please point out exactly which points _introduced_ or _altered_ with 2013-03 they disagree with, so that I, and other confused people, can have a better chance of understanding your arguments. Please? -- Jan
Hi, Op 25 jul. 2013, om 21:55 heeft Jan Ingvoldstad <frettled@gmail.com> het volgende geschreven:
I'm bewildered, confuzzled, and wide-eyed, yes, nearly astonished, that Tore's points don't seem to penetrate the fog.
I've read this proposal a few times, and as far as I can tell, most if not all of the alleged counterpoints to 2013-03 are _not_ counterpoints to 2013-03, but to something else.
I may have misread the proposal, and therefore I request that Filiz, Michele and Nick please point out exactly which points _introduced_ or _altered_ with 2013-03 they disagree with, so that I, and other confused people, can have a better chance of understanding your arguments.
As chair I can only agree to this. There is a lot of discussion going on, which is a good thing: it shows that the community (which includes all of you) actually cares about this and is involved in the decision making process. This makes chairs happy :-) But I have seen lots of cases where Tore asks people to point out which part of his policy proposal causes concern, and I haven't seen any answers to that. This makes an honest discussion about 2013-03 very difficult. I realise that there are many things in the current policies that people might want to change, but trying to put everything into one policy proposal doesn't work. If you have concerns that are not directly caused by the changes that 2013-03 proposes then please discuss them in a separate thread (and change the subject line accordingly please) and we can turn them into separate policy proposals if necessary. So for the sake of an open, transparent and honest discussion about 2013-03 please include references to existing policy that is removed by 2013-03 or to specific sections of 2013-03 itself. When a need for improvement is identified providing suggestions for text would of course also be appreciated. Thank you, Sander Steffann APWG co-chair
I don't support the approval of 2013-03 "No need" at this time. Needs-based allocation is more than an operational procedure for the RIPE NCC to follow. It encapsulates a core policy objective for the management of the IPv4 address space, not only by RIPE NCC but also by LIRs. I am not convinced by the the principle argument being made in favour of abolishing the concept of "need", and concerned that we do not fully appreciate the potential consequences. The proposal adopts one particular type of "reality adjustment" in response to IPv4 address pool depletion, abandoning the core objective. There might be other types of responses, but if we abandon the core objective, as 2013-03 would do, we're basically closing the door on any discussion of what those alternatives might be. Finally, as noted by the RIPE NCC, this takes away a key message the RIRs have used to justify their independence from government. That may not be sufficient reason to oppose the policy if it is otherwise necessary, but it does seem to me to indicate caution and counsel against acting precipitously. In short, the potential downsides seem to me to be more compelling than the claimed upside, and certainly sufficient to justify an extended delay (by which I mean, broadly indefinite, or until the community feels the implications of depletion are clearly understood and well established). Let me elaborate. 1. The main argument in favour of 2013-03, as I understand it, is in the title "Post-Depletion Reality Adjustment and Clean up". It has been expressed in the summary /'The goal that precipitated the requirement to demonstrate need for delegations is explicitly stated in section 3.0.3 of the policy, which reads: Conservation: Public IPv4 address space must be fairly distributed to the End Users operating networks. To maximise the lifetime of the public IPv4 address space, addresses must be distributed according to need, and stockpiling must be prevented. Following the depletion of the IANA free pool on the 3rd of February 2011, and the subsequent depletion of the RIPE NCC free pool on the 14th of September 2012, the "lifetime of the public IPv4 address space" in the RIPE NCC region has reached zero, making the stated goal unattainable and therefore obsolete. This proposal attempts to recognise this fact by removing all policy requirements that was working exclusively towards attaining this "Conservation" goal.'/ However this argument is fallacious. The Conservation policy, even as stated, expresses *two separate* policy objectives: 'fair distribution', and maximising the lifetime of the public address pool. Depletion means that reality has superseded the second objective, but not necessarily the first. So my first question to Tore is: "Why should 'fair distribution' of addresses between users no longer be considered an overarching objective of IPv4 address management?" 2. "Fair distribution" establishes a basic goal for IPv4 address management policy. Other policies exist to pursue that goal. If we abolish the goal, we not only abolish those other, secondary policies (which may indeed be out of date) but we also deny ourselves the right to introduce new, updated policies to pursue that goal. 2A. Incidentally, I've seen comments in this thread that I read as claiming that we effectively abolished the goal of fair distribution back when we set a precise allocation size for the final /8. I can see this argument, but disagree: limiting the maximum allocation size directly relies upon the notion of fairness (we're only giving you X, even though you want Y, so that the next guy can have some at all). By limiting the minimum allocation size we made a pragmatic choice to trade off some precision for efficiency in the allocation process, rather than fundamentally abolishing the policy goal. 3. The proponents of 2013-03 have argued on this list that the existing policy is unsupportable because, in a post-depletion world, RIPE NCC has lost the means of enforcing it. It is certainly true that post-depletion it will have lost the means by which it has traditionally enforced it. But that doesn't necessarily mean that the policy should be abolished: it might alternatively suggest that the required "reality adjustment" is that the community develop new policies that would give the RIPE NCC alternative means of enforcing it in the post-depletion world, where IPv4 addresses continue to be an important resource. a) I anticipate being asked "What might such policies be?". My answer is, without shame, that I don't know. But perhaps the community should retain the ability to set such policies in the future, if they seem necessary. 2013-03 removes the basis on which such policies would be introduced. b) I anticipate being asked "Are such policies needed? Can you prove this?". My answer is again that I don't know. More than that, it may very well be that such policies are *not* needed, yet. But proof that may change in the future. I would prefer that at that time new policies could be introduced if they were proven to be needed. I would prefer that such proof were not met with the response "When we abolished needs based allocation back in 2013, we accepted that RIPE has neither the responsibility nor the legitimacy to address these issues.". I fear that the effect of passing 2013-03 will be to invite that response. c) Actually, contrary to what I seem to say in the paragraph above, I'm open to be persuaded that we should say "RIPE is not responsible for the efficient and fair management of the address space, that's a purely market process". But that's so far away from what we've had in the past, I strongly believe we should set an unusually high bar for community support for this, in determining a rough consensus, even at the cost of taking a very long time to achieve it. Extraordinary measures require extraordinary support. d) Suppose that we do end up saying "It's nothing to do with us, let the market rule". Who do we think should be responsible for clearing up the mess if this does result in a clear, unequivocal disaster? Will we take that as a failure of the new address policy, and change the policy again? Would that even be legally possible, once we've commoditised addresses? Or would we consider that a failure of the market, and leave it to government regulators, competition authorities etc? 4. For the reasons above, I don't think it's accurate to claim that 2013-03 is a mere "reality adjustment"; I think it's a fundamental change in policy. I believe the following represents a reasonable alternative "reality adjustment", that more accurately states the current reality: "It has always been the policy of RIPE to seek to ensure that IPv4 addresses are allocated fairly and efficiently. While the RIPE NCC had free IPv4 addresses to assign, this policy was implemented by requiring End Users to provide documentation to the LIR (and/or the RIPE NCC) that proved their need for address space, and the LIR need to provide similar documentation to the RIPE NCC. In all cases, the documentation had to be thoroughly vetted and archived for later auditing. After depletion of the IPv4 address pool this process is no longer an effective control. With the introduction of a transfer mechanism, it is possible that market pressures may prove adequate to ensure efficient and fair allocation of IPv4 addresses; in this transition period, the consequences of run-out are uncertain. RIPE has chosen not to act pre-emptively, to give market mechanisms a chance to succeed. However if market mechanisms prove inadequate to safeguard the fair and efficient use of IPv4 address space, RIPE stands ready to introduce new measures as necessary." 5. We have lived with "needs based allocation" for a long time, and it has served us well. "Delaying run-out" may previously have been a sufficient justification for the policy, but that doesn't mean it's the only justification for the policy. I do accept that the onus should be on those that wish to retain the policy on this basis to produce and convince the community of an alternative justification. However, given that we're talking about abolishing the core rule at the heart of allocation policy for the past many (nearly twenty?) years, I believe it would be prudent to allow quite an extended time to conduct that discussion. 6. My sixth reason for speaking out against the adoption 2013-03 at this time is the potential political fall-out. Certain governments are keen to end the independence of the RIRs and move them from being run by and on behalf the community to being made directly answerable to governments. In practice, this would mean the abolition of RIPE (or at least, its policy making function) and perhaps having the RIPE NCC board appointed by an intergovernmental body, likely the ITU. Some nation's governments remain very keen on this. Others, notably developing countries, used to be very keen on this but have subsequently been persuaded that the RIRs do a good job and that "bottom-up" / community-based policy-making just works. This change of heart has been hard won, and a key part of the message of RIRs and their defenders (myself included) has been that these governments should support the management of address space on a purely technical basis, with allocation according to need, rather than risk politicising the issue by placing it under inter-governmental control. As someone who has worked in that space for the past eight years (some of you may remember I proposed and chaired the RIPE Enhanced Cooperation Taskforce, which recommended measures to address that debate) I can say from experience that 2013-03 will be politically uncomfortable for the RIPE NCC, and will give ammunition to those governments that still want to gain intergovernmental control. The RIPE NCC impact assessment also alludes to this risk. Now, if there were a strong technical necessity for a policy to go through, I would agree that the politics would have to take second place. The NCC, and its supporters, like me, would have to justify the change as best we can. However 2013-03 doesn't seem as important as that, and certainly not urgent: it is just a "clean up" after all. So this political downside should also be taken into account. Moreover I would ask that the WG Chairs take this sixth issue into account as evidence that the community hasn't fully examined the potential consequences, and should be wary of proceeding too precipitously. I would suggest that the NCC (or perhaps another NRO member) be invited to give a presentation on this topic at the next Working Group meeting. Sorry for the long message on a long thread, and thank you for considering it. Regards, Malcolm. P.S. Direct response to specific questions for objectors from the WG Chair follow. On 25/07/2013 21:49, Sander Steffann wrote:
But I have seen lots of cases where Tore asks people to point out which part of his policy proposal causes concern, and I haven't seen any answers to that.
For me, it's not a question of a particular element of the proposal that needs improvement, it's a concern that its essence is misguided as a whole.
So for the sake of an open, transparent and honest discussion about 2013-03 please include references to existing policy that is removed by 2013-03 or to specific sections of 2013-03 itself.
My comments relate mostly to, and at the minimum to "Removes "Conservation" as a stated goal of the policy". Since this seems to be the core of the proposal, I would think that most of the rest of the proposal would fall away if this were deleted. However it's possible that I'm wrong: perhaps there may be some compromise whereby we continue to assert that that the objective of policy is fair allocation, but when considering the small assignments from the final /8 "assume" that there is need (without documentation) unless there is reason to believe otherwise. This would allow for future policies that established reasons deemed to suggest otherwise. For example, in the unlikely case where someone registers 5,000 companies just to get 5,000 allocations (as has been suggested on this thread), it would also allow the RIPE NCC to step in and say "No, that's just gaming the system and we're not fooled". It would also allow other policies to continue to require the demonstration of need for the transfer of large blocks and of intraregional transfers, if such policies were thought necessary and someone could come up with a proposal to make them enforceable. -- Malcolm Hutty | tel: +44 20 7645 3523 Head of Public Affairs | Read the LINX Public Affairs blog London Internet Exchange | http://publicaffairs.linx.net/ London Internet Exchange Ltd 21-27 St Thomas Street, London SE1 9RY Company Registered in England No. 3137929 Trinity Court, Trinity Street, Peterborough PE1 1DA
Hi Malcom, and thank you for your detailed feedback! I'll be trimming your message heavily in order to try to respond to your main points in order to avoid doubling the size of the message - if you feel I have neglected to respond to something I ought to have, please let me know.
if we abandon the core objective, as 2013-03 would do, we're basically closing the door on any discussion of what those alternatives might be.
I do not agree with this at all. The IPv4 policy document is a living thing, and anyone may suggest changes to it at any time. For example, the possible addition of a section describing "Principles" has been discussed earlier, and 2013-03 would not prevent this in any way. Indeed, such a proposal could be proposed and adopted independently of 2013-03.
Finally, as noted by the RIPE NCC, this takes away a key message the RIRs have used to justify their independence from government. That may not be sufficient reason to oppose the policy if it is otherwise necessary, but it does seem to me to indicate caution and counsel against acting precipitously.
This is one of those things where I feel the message needs to be updated to match the new realities on the ground. Regardless of any change brought by 2013-03, the RIPE NCC's role in IPv4 address distribution is pretty much over, the "last /8" policy being its final death cramp, so to speak. It was claimed earlier that the proposal would change the NCC into a "pay here to buy your IPv4 block today" type of outlet, and I don't doubt that some government could potentially make similar claims in an attempt to undermine the NCC's role in IPv4 address distribution. However I have full faith in the NCC's ability to adjust its argumentation to explain that this is simply not the case, as its role in IPv4 address distribution is pretty much unchanged by 2013-03. That said, I would be more concerned about keeping or making certain policies for the purpose of "staying in power" instead of due to a belief it is "the right thing to do". If anything would undermine the community's validity, IMHO, it would be this.
However this argument is fallacious. The Conservation policy, even as stated, expresses *two separate* policy objectives: 'fair distribution', and maximising the lifetime of the public address pool. Depletion means that reality has superseded the second objective, but not necessarily the first.
So my first question to Tore is: "Why should 'fair distribution' of addresses between users no longer be considered an overarching objective of IPv4 address management?"
For NCC->LIR and NCC->End User delegations, it has already been abandoned. For example: - LIR A requires an allocation to serve 10000000 nodes - LIR B requires an allocation to serve 1000 nodes - End User C requires an assignment to serve 1000 nodes These would (both with current and 2013-03 policy) get 1024, 1024, and 0 addresses, respectively - even though the NCC currently has enough addresses to give all three every single address they requested. In my view, this is clearly unfair to A and C, but it's what we have today. For LIR->End User delegations, I question that 'fair distribution' has ever existed, or if it ever did - if it does now. I'll demonstrate with another example: Your LIR has a /23 left of unassigned address space. Three End Users are knocking on your door, requesting a /24, a /23, and a /22. All fully justified. How does our current policy guide your LIR to be "fair", let alone *enforce* this fairness?
2. "Fair distribution" establishes a basic goal for IPv4 address management policy. Other policies exist to pursue that goal. If we abolish the goal, we not only abolish those other, secondary policies (which may indeed be out of date)
How does the secondary mechanisms (I'm guessing you're referring to things like the AW, 80% rule, and "documented need") actually ensure "fairness", these days? Going back to the previous argument with the three End Users - the only way "fairness" could work in the first place, is that your LIR could just give out everything that was asked by covering their "expenses" with fresh allocations from the NCC's free pool. But that doesn't work anymore.
but we also deny ourselves the right to introduce new, updated policies to pursue that goal.
3. The proponents of 2013-03 have argued on this list that the existing policy is unsupportable because, in a post-depletion world, RIPE NCC has lost the means of enforcing it. It is certainly true that post-depletion it will have lost the means by which it has traditionally enforced it. But that doesn't necessarily mean that the policy should be abolished: it might alternatively suggest that the required "reality adjustment" is that the community develop new policies that would give the RIPE NCC alternative means of enforcing it in the post-depletion world, where IPv4 addresses continue to be an important resource.
I just don't buy the argument that 2013-03 makes the IPv4 policy immutable. This isn't APNIC prop-103. If 2013-03 turns out to be a terrible mistake, it could even be reverted word by word. Last year, I reverted 2009-03 *precisely* in this manner (proposal 2012-06). If you believe that the current policy provisions that are responsible for enforcing "fairness" are no longer effective (if they ever were), then we might as well take them out completely. If we come up with a clever replacement, then we can discuss that in a separate proposal, but if we fail to come up with an effective replacement, what good will it do us to keep the inefficient stuff around? (Surely not the bureaucratic overhead?)
Certain governments are keen to end the independence of the RIRs and move them from being run by and on behalf the community to being made directly answerable to governments. In practice, this would mean the abolition of RIPE (or at least, its policy making function) and perhaps having the RIPE NCC board appointed by an intergovernmental body, likely the ITU.
2013-03 is specific to IPv4, and does not make any difference to other number resources such as IPv6 and ASNs. While I have no difficulty understanding that governments would have liked to have the RIR role, I guess I fail to see how they could possibly get that role in IPv4 address distribution now. I mean - what addresses would they be distributing? :-) Tore
* Malcolm Hutty
1. The main argument in favour of 2013-03, as I understand it, is in the title "Post-Depletion Reality Adjustment and Clean up". It has been expressed in the summary
/'The goal that precipitated the requirement to demonstrate need for delegations is explicitly stated in section 3.0.3 of the policy, which reads:
Conservation: Public IPv4 address space must be fairly distributed to the End Users operating networks. To maximise the lifetime of the public IPv4 address space, addresses must be distributed according to need, and stockpiling must be prevented.
Following the depletion of the IANA free pool on the 3rd of February 2011, and the subsequent depletion of the RIPE NCC free pool on the 14th of September 2012, the "lifetime of the public IPv4 address space" in the RIPE NCC region has reached zero, making the stated goal unattainable and therefore obsolete. This proposal attempts to recognise this fact by removing all policy requirements that was working exclusively towards attaining this "Conservation" goal.'/
However this argument is fallacious. The Conservation policy, even as stated, expresses *two separate* policy objectives: 'fair distribution', and maximising the lifetime of the public address pool. Depletion means that reality has superseded the second objective, but not necessarily the first.
Hi again Malcom, Having slept on it, I have a suggestion that hopefully will make us reach common ground. How about, instead of removing the old Conservation goal completely, we rewrite it as follows: «Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.» This would only remove the second "reality-superseded" objective, but not the first. It would also continue to provide the philosophical foundation on which we may build "enforcement" policies in the future, so we certainly would not be "closing the door" on any such discussion. Furthermore, it might even help the NCC in their political/government interactions, as they can truthfully maintain that their goal with regards to IPv4 is still to provide for fair distribution and fair use. Would such an amendment make the proposal more appealing to you, at least enough to make reach the "I can live with this" point? (This question goes for the others who have noted their reservation towards the proposal too, feel free to chime in!) For what it's worth, such an amendment would not make the proposal less appealing to me - the proposal's ambition was never "take away fairness", but "take away [reality-superseded] bureaucracy" - something which there seems to be little disagreement about, and which an updated proposal would continue to do just as much as before. Best regards, Tore Anderson
On Thu, Aug 1, 2013 at 8:38 AM, Tore Anderson <tore@fud.no> wrote:
Having slept on it, I have a suggestion that hopefully will make us reach common ground. How about, instead of removing the old Conservation goal completely, we rewrite it as follows:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
That looks sensible enough to me, it doesn't appear to add red tape. :) -- Jan
From my perspective it does add "red tape" How do you determine whether v4 numbers are "fairly distributed to end users operating networks" unless you do a needs assessment? I like Malcolm's idea better: Add a disclaimer at the end that says if it doesn't work or causes unforeseen problems, we will change it.
From: address-policy-wg-bounces@ripe.net [mailto:address-policy-wg-bounces@ripe.net] On Behalf Of Jan Ingvoldstad Sent: Thursday, August 1, 2013 3:48 AM To: RIPE Address Policy WG Subject: Re: [address-policy-wg] 2013-03 New Draft Document and Impact Analysis Published (No Need - Post-Depletion Reality Adjustment and Clean up) On Thu, Aug 1, 2013 at 8:38 AM, Tore Anderson <tore@fud.no<mailto:tore@fud.no>> wrote: Having slept on it, I have a suggestion that hopefully will make us reach common ground. How about, instead of removing the old Conservation goal completely, we rewrite it as follows: <Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.> That looks sensible enough to me, it doesn't appear to add red tape. :) -- Jan
On 01/08/2013 07:38, Tore Anderson wrote:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
Sounds good to me! One minor nit: can you define "fair"? Nick
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
can you define "fair"?
Well *that* is the million dollar question, isn't it. In a state of scarcity, what is "fair"? This is a question that neither I, Malcom, 2013-03, nor ripe-592, presume to have an answer for. However, I understood the crux of Malcom's objection to be that if we remove this stated objective of "fairness", then we lose our principles in the process, and it becomes hard to add it back later (presumably along with a precise definition of "fair"). Therefore I was hoping that retaining this sentence (which is there in today's policy as well) would help move the discussion forward in the direction of consensus. Tore
On Saturday, July 27, 2013, Randy Bush wrote:
http://www.ietf.org/id/draft-resnick-on-consensus-02.txt
may be of help
definitely for me the following are open issues for me -1 how it will affect inter region transfers - if this is important to the community -2 how will it affect reclamation of address space by RIRs - and is this important -3 how wil it affet the critics of the RIRs 1 - presently it will not be simple to establish an inter-RIR transfer policy with Arin. Personally - based on previous discussion at Ripe meeting and other places - I do not think the Arin communicty will change opinion on this, at least until they run out. This could be an issue as the "hidden reserves" of "legacy" assignments are in the Arin region. 2 - I think reclamation by the RIPE NCC will decay over time. 3 - the traders will be happy - he ITUs and critical governments will probably make more noice. how much of an issue is this to us? I liked the proposal initialy - but I do not buy the initial argument that since we have run out, conservation is not important. Since we have run out of unused addresses conservation is in many ways more important - unless we belive v6 can take over. Maybe this proposal will increase the number of transfers for money - thus putting more focus on conservation (all businesses tend to focus on conserving cash) It is not clear to me that theese aspects are well undrestood by the majority, but ai might be wrong. -hph -- Hans Petter Holen Mobile +47 45 06 60 54 | hph@oslo.net | http://hph.oslo.net
* Hans Petter Holen
for me the following are open issues for me
-1 how it will affect inter region transfers - if this is important to the community 1 - presently it will not be simple to establish an inter-RIR transfer policy with Arin. Personally - based on previous discussion at Ripe meeting and other places - I do not think the Arin communicty will change opinion on this, at least until they run out.
To answer the "is it important to the community" you don't have to look further than to proposal 2012-02, which, if accepted, would allow for inter-region transfers with ARIN (and APNIC). However, this proposal has gone nowhere; there appears to be practically no interest in it. Sandra Brown, the author of 2012-02, even stated in an earlier message that the proposal had been withdrawn. The www.ripe.net PDP pages does not (yet?) reflect this, but nevertheless the proposal is beyond any doubt "on ice". So the answer seems to be a resounding "NO".
This could be an issue as the "hidden reserves" of "legacy" assignments are in the Arin region.
Up until the moment of depletion, APNIC was using IPv4 faster than any other RIR by a huge margin. I think it reasonable to conclude that by now there must be a huge unmet need for IPv4 space in the APNIC region. APNIC and ARIN happens to share compatible inter-region transfer policies. Yet, the number of inter-region transfers going from the ARIN region to the APNIC region is negligible - at RIPE66 the total amount of transfers was reported to be 11 (5 per annum, if extrapolating linearly). So the notion that there is some big hidden reserve sitting around in the ARIN region, ripe for the taking and ready to transform our current our state of scarcity into one of abundance (if we only pass an inter-region transfer policy!), seems extremely implausible to me. At least it has not worked out that way for the APNIC region. That said, if having an inter-region transfer policy that is compatible with ARIN's becomes important to us at a later stage, it is quite possible to add back whatever "need basis" is necessary to placate ARIN then. APNIC prop-096 is a demonstration of exactly this being done.
-2 how will it affect reclamation of address space by RIRs - and is this important 2 - I think reclamation by the RIPE NCC will decay over time.
While I concur that the NCC's reclamation rate will likely decay over time, I doubt 2013-03 will make any difference whatsoever in this regard. There is by now enough unmet demand in our region that all addresses that are likely to be offered on the market would have no problem finding a new owner ("need" requirement notwithstanding). Or to put it another way, the notion that an LIR that wants to sell an allocation would be unable to find a *single* willing buyer strikes me as completely unrealistic. So whatever the motivation an LIR might have for voluntarily surrendering an unused allocation to the NCC instead of selling it might be - I don't see how the removal of the need requirement on the buyer's part could possibly have anything to it.
-3 how wil it affet the critics of the RIRs 3 - the traders will be happy - he ITUs and critical governments will probably make more noice. how much of an issue is this to us?
I don't doubt the ITU and "critical governments" will make whatever noise they can, on whatever grounds they can, regardless of the validity of the arguments they may muster. This is nothing new, though, it's an ongoing struggle that we'll have to deal with anyway. Put it another way, I highly doubt that *not* passing 2013-03 is likely to make the ITU and critical government cease to be a thorn in our side. (They might as well take any failure of 2013-03 to form another attack: «Your IPv4 policies are clearly out of touch with reality and your community has proven itself unable to fix them. We'll take it from here, thankyouverymuch...») Furthermore, there are plenty of other policies, services, and events that these critical entities could use to mount attacks in some way or another. Some examples: 2006-02, 2007-08, 2009-06, 2010-02, 2012-02, the IPv4 Transfer Listing Service, the Recognised IPv4 Transfer Brokers listing, Resource Certification, the IPv4 depletion event itself, and indeed 2013-03. I'm not claiming that any attacks against the NCC or the community based on argumentation stemming from any of the above would be at all valid - just that 2013-03 is not unique in this regard. In the end I don't think we should make (or not make) policies in order to kowtow to the ITU or any government entity, in the hope that they will not try to "take away our toys". If they want our toys, they'll come after them anyway, and we'll have to stand up to them. What gives us legitimacy as a community (and by extension the NCC), is that the policies we make are for the benefit of the Internet, and not in the pursuit of any political power struggle goals. Best regards, Tore Anderson
On Aug 1, 2013, at 6:00 PM, Tore Anderson <tore@fud.no> wrote:
APNIC and ARIN happens to share compatible inter-region transfer policies. Yet, the number of inter-region transfers going from the ARIN region to the APNIC region is negligible - at RIPE66 the total amount of transfers was reported to be 11 (5 per annum, if extrapolating linearly).
ARIN Inter-RIR Transfer statistics are available here: <https://www.arin.net/knowledge/statistics/transfers.html> Presently there have been 16 transfers in the period of time of that compatible policy has been in place (approximately 1 year); the blocks transferred range in size from /24 to /15, and are listed on the transfer statistics page.
So the notion that there is some big hidden reserve sitting around in the ARIN region, ripe for the taking and ready to transform our current our state of scarcity into one of abundance (if we only pass an inter-region transfer policy!), seems extremely implausible to me. At least it has not worked out that way for the APNIC region.
I am not asserting any relation between the ARIN/APNIC transfer rate to the desirability for IP transfers to those in the RIPE region, but provide the above information solely for a factual basis of the discussion since the question was raised. FYI, /John John Curran President and CEO ARIN
I liked the proposal initialy - but I do not buy the initial argument that since we have run out, conservation is not important. Since we have run out of unused addresses conservation is in many ways more important - unless we belive v6 can take over.
I don't understand why people confuse the elimination of needs assessment with the elimination of conservation. Market prices are the most systemically powerful and efficient conservation mechanism ever devised. Needs assessments are a very primitive conservation mechanism: 10,000 people can all prove that they "need" as resource but that isn't helpful when only 10 of them can have it. Let's not continue this confusion.
On 03/08/2013 15:17, Milton L Mueller wrote:
I liked the proposal initialy - but I do not buy the initial argument that since we have run out, conservation is not important. Since we have run out of unused addresses conservation is in many ways more important - unless we belive v6 can take over.
I don't understand why people confuse the elimination of needs assessment with the elimination of conservation.
Because they're linked. The requirement of justifying and documenting is a lever for us today, to get serious cooperation from our clients in ordre to get their needs correctly evaluated, and /24s (or more) not being wasted in careless (and preventive) over-subscriptions of adresses. This helps us preventing a rush to our allocation depletion and thus, from requesting the last /22. And thereafter, to create a new LIR to satisfy these needs we would let run. Am I wrong if I suspect commercial teams would happily distribute large bunches of undocumented adresses to their asking customers if the Ripe allowed it. As far as I can see, commercials do appreciate to be able to satisfy their customers requests.
But if they have to pay a price that reflects the relative scarcity of the resource they have a much stronger incentive to conserve that the alternative situation you describe. "Commercials" cannot simply provide all the addresses their customers want when they cannot replenish their stock without paying a rising price. -----Original Message-----
I don't understand why people confuse the elimination of needs assessment with the elimination of conservation.
Because they're linked. The requirement of justifying and documenting is a lever for us today, to get serious cooperation from our clients in ordre to get their needs correctly evaluated, and /24s (or more) not being wasted in careless (and preventive) over-subscriptions of adresses. This helps us preventing a rush to our allocation depletion and thus, from requesting the last /22. And thereafter, to create a new LIR to satisfy these needs we would let run. Am I wrong if I suspect commercial teams would happily distribute large bunches of undocumented adresses to their asking customers if the Ripe allowed it. As far as I can see, commercials do appreciate to be able to satisfy their customers requests.
On Sun, Aug 11, 2013 at 03:45:22PM +0000, Milton L Mueller wrote:
But if they have to pay a price that reflects the relative scarcity of the resource they have a much stronger incentive to conserve that the alternative situation you describe. "Commercials" cannot simply provide all the addresses their customers want when they cannot replenish their stock without paying a rising price.
We are talking about 1,75 € per address and per year. I guess this wouldn't stop any commercial from reselling to a client who asks for it, and certainly can pay for it, if conservation is abandonned. Best regards, Sylvain
On 01/08/2013 18:27, Tore Anderson wrote:
Well *that* is the million dollar question, isn't it. In a state of scarcity, what is "fair"?
honestly, I have no idea.
Therefore I was hoping that retaining this sentence (which is there in today's policy as well) would help move the discussion forward in the direction of consensus.
There is a balance in the current policy, which states fairness as an objective and then effectively defines the term as assignment by stated requirement. In the environment of plenty, there was broad consensus that stated requirement was probably a pretty reasonable way of handling address assignment and there were credible reasons to assign the term "fair" to it. No-one ever believed that it was perfect, but it worked well enough. We're no longer in that world: stated requirement will probably no longer work as a reassignment mechanism so we're currently thinking that maybe an open market is the best way to handle future ip assignment requirements. Is this fair? I don't think so, but I don't think it's unfair either. Probably it's unrelated to the concept of fairness. But at least we know where we stand: transfers are the business of the transferer and transferee and the RIPE NCC will merely keep a record of the old and new holders.
From this point of view, I think the policy proposal would not benefit from a statement declaring that fairness is a policy objective, because it isn't. If we pretend it is, then we are not being honest with ourselves.
Nick
On 01 Aug 2013, at 19:27, Tore Anderson <tore@fud.no> wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
can you define "fair"?
Well *that* is the million dollar question, isn't it. In a state of scarcity, what is "fair"?
I do not know it is such a million dollar question. Scarcity (remember the switch from classful delegations to CIDR…) had been a (maybe perceived) issue in the past too. Basically we dealt with it by putting our trust on the RIRs that they would ensure that through policies which bared "justification of the need". In other words, this was always the case, RIRs had been made the judge of this "fairness" through their community built policies. Now the real problem here 2013-03 is suggesting to remove this judgement of fairness role from the RIPE NCC in the RIPE region, by removing the justification of need from the policy, without coming up with a real alternative, while obviously sense of fairness is still important to various members. Filiz
This is a question that neither I, Malcom, 2013-03, nor ripe-592, presume to have an answer for.
However, I understood the crux of Malcom's objection to be that if we remove this stated objective of "fairness", then we lose our principles in the process, and it becomes hard to add it back later (presumably along with a precise definition of "fair").
Therefore I was hoping that retaining this sentence (which is there in today's policy as well) would help move the discussion forward in the direction of consensus.
Tore
* Filiz Yilmaz
Scarcity (remember the switch from classful delegations to CIDR…) had been a (maybe perceived) issue in the past too. Basically we dealt with it by putting our trust on the RIRs that they would ensure that through policies which bared "justification of the need".
In other words, this was always the case, RIRs had been made the judge of this "fairness" through their community built policies.
Now the real problem here 2013-03 is suggesting to remove this judgement of fairness role from the RIPE NCC in the RIPE region, by removing the justification of need from the policy, without coming up with a real alternative, while obviously sense of fairness is still important to various members.
The relevant community built policy that defines "fairness" at this point in time is the "last /8 policy", with its strict "one /22 per applicant" rationing. This does not go away with 2013-03, so in pragmatical terms, the implementation of "fairness" would remain. The stated philosophical goal of fairness does go away with the current version of 2013-03 though, as Malcom identified. While I think this makes little *practical* difference as long as the "last /8 policy" remains, I concede that on a philosophical level it could be considered problematic to remove the explicit fairness objective from the policy. This is why I have suggested to roll a new version of the proposal that would leave the fairness goal intact. This way we can maintain both the philosophical objective of fairness and the actual implementation of it, without conflicting with 2013-03's main goals which is to remove the LIRs' bureaucratic overhead and to clean up old and out of date policy text. Would such an amendment make the proposal more appealing or at least acceptable to you? If not, what else is needed? As Gert mentioned earlier, changing the proposal text at this stage of the PDP isn't a trivial thing to do, but if it turns out to be unavoidable, I would at the very least want to avoid having to do it more than once. Best regards, Tore Anderson
Could RIPE NCC chime in on if such a small change with no real world implications would allow for reduced, or no, re-evaluations? I agree that implications and intentions should be laid out clearly, but I agree with Gert even more that at this stage, some feedback can be.. annoyingly frustrating.. Richard Sent by mobile; excuse my brevity.
On 02/08/2013 13:47, Richard Hartmann wrote:
Could RIPE NCC chime in on if such a small change with no real world implications would allow for reduced, or no, re-evaluations?
in the year 540ad, St. Benedict wrote in his rule of monastic life "credimus eminam vini per singulos sufficere per diem", which roughly translates as "we believe that a hemina of wine daily is sufficient for each monk". Unfortunately he neglected to write down how much a hemina of wine actually was. The consequence of not defining this term was 1500 years of heated theological debate in the Benedictine order. It was a salutary lesson in being careful to provide a reasonable definition of any lofty goals which might end up as policy. Nick
Hi, On 02 Aug 2013, at 11:56, Tore Anderson <tore@fud.no> wrote:
* Filiz Yilmaz
Scarcity (remember the switch from classful delegations to CIDR…) had been a (maybe perceived) issue in the past too. Basically we dealt with it by putting our trust on the RIRs that they would ensure that through policies which bared "justification of the need".
In other words, this was always the case, RIRs had been made the judge of this "fairness" through their community built policies.
Now the real problem here 2013-03 is suggesting to remove this judgement of fairness role from the RIPE NCC in the RIPE region, by removing the justification of need from the policy, without coming up with a real alternative, while obviously sense of fairness is still important to various members.
The relevant community built policy that defines "fairness" at this point in time is the "last /8 policy", with its strict "one /22 per applicant" rationing. This does not go away with 2013-03, so in pragmatical terms, the implementation of "fairness" would remain.
Tore, i do not see how it remains. I gave the example of two new members getting each a /22 if your proposal gets accepted before: One is requesting it to use it on a network soon. The other is requesting it to sell it in 24 months because they cannot sell it before - your proposal leaves this requirement. I dont think this is fair and this will happen if NCC does not ask for justification for need or some word on that a network exists for the IPs to be used on.
The stated philosophical goal of fairness does go away with the current version of 2013-03 though, as Malcom identified. While I think this makes little *practical* difference as long as the "last /8 policy" remains, I concede that on a philosophical level it could be considered problematic to remove the explicit fairness objective from the policy.
This is why I have suggested to roll a new version of the proposal that would leave the fairness goal intact. This way we can maintain both the philosophical objective of fairness and the actual implementation of it, without conflicting with 2013-03's main goals which is to remove the LIRs' bureaucratic overhead and to clean up old and out of date policy text.
I agree with the parts of your proposal that are removing the overhead on LIR level. But I do not see it is much of an overhead to be able to say "i need a last /22 because of this network here.."
Would such an amendment make the proposal more appealing or at least acceptable to you? If not, what else is needed?
Pls see above and few previous mails. Before NCC really runs out and still providing "allocations" I advocate for keeping the justification for need or some kind of commitment from the requester that the space is to be used on a network shortly and not to be sold to a 3rd party. I am happy if the secondary market brings already allocated space to those who need it. But the space that NCC still holds should goto those in need, not to an organisation to sell it to the one in need. Again, I am fine with the other cleanup your proposal is doing: removal of txt on AWs, further allocations etc..
As Gert mentioned earlier, changing the proposal text at this stage of the PDP isn't a trivial thing to do,
I should have missed this but as far as i know a review phase can be repeated or extended with an updated text. Happy to see the new text. And for those who find some of the feedback frustrating - as the word keeps coming up and being used here and there... Well, welcome to a bottom-up process. Ideas and perspectives vary, we have the process in place to hear all those ideas so nobody here is to be hushed or discouraged to speak. From my point of view, there had been views here that I do not fully agree but I encourage them too, because an open discussion for these issues is the right tool and this is what PDP is for. Filiz
but if it turns out to be unavoidable, I would at the very least want to avoid having to do it more than once.
Best regards, Tore Anderson
On 8/1/13 12:27 , Tore Anderson wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
can you define "fair"?
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Well *that* is the million dollar question, isn't it. In a state of scarcity, what is "fair"?
Furthermore, I believe that now that everyone's operational need can no longer be meet, a state of scarcity, that fairness is doubly important. How does verified operational need provide fairness in a state of scarcity? If someone without verified operational need were to receive Internet number resources, presumably through a transfer, and you have verifiable operational need that can no longer be meet; it would add insult to injury that someone without that verifiable operational need receives Internet number resources when you can't. Therefore, verifying operational need for transfers, still provides some minimal amount of fairness to those that are not going to receive Internet number resources.
This is a question that neither I, Malcom, 2013-03, nor ripe-592, presume to have an answer for.
This is where you create a problem for me. If you propose to remove the current mechanism of fairness, verified operational need, then it is incumbent on you to propose a replacement. You are saying that "verified operational need" doesn't work in a state of a state of scarcity, I disagree, it may not be perfect, but it will do something. And, that it is no longer necessary because the free pool is gone, again I disagree. But, the crux of my issue isn't that you are removing verified operational need, it is that you seem to claim it isn't your problem to find a replacement for the fairness it provides, even if it isn't perfect fairness.
However, I understood the crux of Malcom's objection to be that if we remove this stated objective of "fairness", then we lose our principles in the process, and it becomes hard to add it back later (presumably along with a precise definition of "fair").
Therefore I was hoping that retaining this sentence (which is there in today's policy as well) would help move the discussion forward in the direction of consensus.
While this is a start, just saying fairness is necessary, is a hollow jester, without verified operational need or some other replacement mechanism to provides the fairness you are saying is necessary.
Tore
-- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
On Sun, Aug 4, 2013 at 3:41 PM, David Farmer <farmer@umn.edu> wrote:
On 8/1/13 12:27 , Tore Anderson wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
can you define "fair"?
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Uhm, if that has been the definition of fairness, then it certainly has NOT been enforced or used in the past few years. Perhaps never. It is, as you state later on, one of those hollow "jesters". Furthermore, I believe that now that everyone's operational need can no
longer be meet, a state of scarcity, that fairness is doubly important. How does verified operational need provide fairness in a state of scarcity? If someone without verified operational need were to receive Internet number resources, presumably through a transfer, and you have verifiable operational need that can no longer be meet; it would add insult to injury that someone without that verifiable operational need receives Internet number resources when you can't.
This is how Internet number resources have been handled for years; organizations without verified operational needs have received Internet number resources, some in huge quantities. One could easily argue that this is one of the root problems with former Internet number resource handling. Fortunately, IPv6 came to the rescue.
Therefore, verifying operational need for transfers, still provides some minimal amount of fairness to those that are not going to receive Internet number resources.
If the verification is going to be at the level it used to be, that fairness is so minimal that you can't poke a stick at it. It is, at best, an illusion. While this is a start, just saying fairness is necessary, is a hollow
jester, without verified operational need or some other replacement mechanism to provides the fairness you are saying is necessary.
If you want to introduce verification of the operational need, I suggest you write your own proposal to the RIPE community, so that we can discuss and handle the proposed changes accordingly. But I cannot, for the life of me, understand what this has to do with 2013-03, sorry. -- Jan
On Sun, Aug 04, 2013 at 04:35:25PM +0200, Jan Ingvoldstad wrote:
On Sun, Aug 4, 2013 at 3:41 PM, David Farmer <farmer@umn.edu> wrote:
On 8/1/13 12:27 , Tore Anderson wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
+Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.;
can you define "fair"?
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
This is how Internet number resources have been handled for years; organizations without verified operational needs have received Internet number resources, some in huge quantities.
One could easily argue that this is one of the root problems with former Internet number resource handling.
Fortunately, IPv6 came to the rescue.
Pragmatically, there is zero chance of verification of operational need for anything larger than a /96 in IPv6 space.... So the rules for v6 allocation actually are fairly close to the original v4 allocation policies. The concept of verified operational need arose in times of scarcity, when there was -no- other option. Those times have past and its not clear to me why there remains this slavish devotion to having an unlicensed regulator second guess the viability of a given operational model. As usual, YMMV. /bill
On Aug 4, 2013, at 10:59 AM, bmanning@vacation.karoshi.com wrote:
On Sun, Aug 04, 2013 at 04:35:25PM +0200, Jan Ingvoldstad wrote:
On Sun, Aug 4, 2013 at 3:41 PM, David Farmer <farmer@umn.edu> wrote:
On 8/1/13 12:27 , Tore Anderson wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
+Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.;
can you define "fair"?
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
This is how Internet number resources have been handled for years; organizations without verified operational needs have received Internet number resources, some in huge quantities.
One could easily argue that this is one of the root problems with former Internet number resource handling.
Fortunately, IPv6 came to the rescue.
Pragmatically, there is zero chance of verification of operational need for anything larger than a /96 in IPv6 space.... So the rules for v6 allocation actually are fairly close to the original v4 allocation policies.
The concept of verified operational need arose in times of scarcity, when there was -no- other option. Those times have past and its not clear to me why there remains this slavish devotion to having an unlicensed regulator second guess the viability of a given operational model.
Hi Bill, Out of curiosity, about how many Class As would you say had been assigned before that scarcity came to be widely recognized, and the concept of "verified operational need" was first articulated? At that time, was promptly doling out all of the remaining Class As on a first first-come-first served basis *not* considered an option? If not, why not? If the prospect of creating an operating environment in which critical number resources were collectively, indefinitely controlled by a relatively small minority of the total number of operators who could such resources to similarly good use (and whose commercial/existential viability would forevermore be contingent on the terms of their access to someone else's number resources) was not considered a viable option back then, what makes it any more palatable now? Granted, both the numerator (resource-haves) and the denominator (have-nots) numbers have grown several orders of magnitude over the ensuing years, but how exactly does that matter if the resulting fraction remains broadly unchanged? Curiously, TV
As usual, YMMV.
/bill
On Sun, Aug 04, 2013 at 03:35:25PM -0400, Tom Vest wrote:
On Aug 4, 2013, at 10:59 AM, bmanning@vacation.karoshi.com wrote:
On Sun, Aug 04, 2013 at 04:35:25PM +0200, Jan Ingvoldstad wrote:
On Sun, Aug 4, 2013 at 3:41 PM, David Farmer <farmer@umn.edu> wrote:
On 8/1/13 12:27 , Tore Anderson wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
> +Fair use: Public IPv4 address space must be fairly distributed to the > End Users operating networks.; > can you define "fair"?
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
This is how Internet number resources have been handled for years; organizations without verified operational needs have received Internet number resources, some in huge quantities.
One could easily argue that this is one of the root problems with former Internet number resource handling.
Fortunately, IPv6 came to the rescue.
Pragmatically, there is zero chance of verification of operational need for anything larger than a /96 in IPv6 space.... So the rules for v6 allocation actually are fairly close to the original v4 allocation policies.
The concept of verified operational need arose in times of scarcity, when there was -no- other option. Those times have past and its not clear to me why there remains this slavish devotion to having an unlicensed regulator second guess the viability of a given operational model.
Hi Bill,
Out of curiosity, about how many Class As would you say had been assigned before that scarcity came to be widely recognized, and the concept of "verified operational need" was first articulated? At that time, was promptly doling out all of the remaining Class As on a first first-come-first served basis *not* considered an option? If not, why not? If the prospect of creating an operating environment in which critical number resources were collectively, indefinitely controlled by a relatively small minority of the total number of operators who could such resources to similarly good use (and whose commercial/existential viability would forevermore be contingent on the terms of their access to someone else's number resources) was not considered a viable option back then, what makes it any more palatable now?
Granted, both the numerator (resource-haves) and the denominator (have-nots) numbers have grown several orders of magnitude over the ensuing years, but how exactly does that matter if the resulting fraction remains broadly unchanged?
Curiously,
TV
/8, pre or post classfull addressing? pre-classful, all there was were /8's. Kind of like all there are now are /64s in v6 land. when ~10% of the total v4 pool was allocated, scarcity triggered the creation of classful addressing, which gave us /16 and /24 space in v4-land. at ~40% of the total v4 pool, scarcity created CIDR and started on developing v6-land. I'd suggest that with the viablity of IPv6, that the remaining v4 pool is simply vestigal and its getting far more traction than it deserves. We are clearly not in a position of scarcity when we hand out, to individual devices, the functional equivalent of the -entire- v4 pool, raised to the 32nd power. That is the most profligate waste of address space I have ever seen and these petty "verified operational use" arguments seem farcical and almost hypocritical in comparison. /bill
On Aug 5, 2013, at 9:15 AM, bmanning@vacation.karoshi.com wrote:
On Sun, Aug 04, 2013 at 03:35:25PM -0400, Tom Vest wrote:
On Aug 4, 2013, at 10:59 AM, bmanning@vacation.karoshi.com wrote:
On Sun, Aug 04, 2013 at 04:35:25PM +0200, Jan Ingvoldstad wrote:
On Sun, Aug 4, 2013 at 3:41 PM, David Farmer <farmer@umn.edu> wrote:
On 8/1/13 12:27 , Tore Anderson wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote: > >> +Fair use: Public IPv4 address space must be fairly distributed to the >> End Users operating networks.; >> > can you define "fair"? > I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
This is how Internet number resources have been handled for years; organizations without verified operational needs have received Internet number resources, some in huge quantities.
One could easily argue that this is one of the root problems with former Internet number resource handling.
Fortunately, IPv6 came to the rescue.
Pragmatically, there is zero chance of verification of operational need for anything larger than a /96 in IPv6 space.... So the rules for v6 allocation actually are fairly close to the original v4 allocation policies.
The concept of verified operational need arose in times of scarcity, when there was -no- other option. Those times have past and its not clear to me why there remains this slavish devotion to having an unlicensed regulator second guess the viability of a given operational model.
Hi Bill,
Out of curiosity, about how many Class As would you say had been assigned before that scarcity came to be widely recognized, and the concept of "verified operational need" was first articulated? At that time, was promptly doling out all of the remaining Class As on a first first-come-first served basis *not* considered an option? If not, why not? If the prospect of creating an operating environment in which critical number resources were collectively, indefinitely controlled by a relatively small minority of the total number of operators who could such resources to similarly good use (and whose commercial/existential viability would forevermore be contingent on the terms of their access to someone else's number resources) was not considered a viable option back then, what makes it any more palatable now?
Granted, both the numerator (resource-haves) and the denominator (have-nots) numbers have grown several orders of magnitude over the ensuing years, but how exactly does that matter if the resulting fraction remains broadly unchanged?
Curiously,
TV
/8, pre or post classfull addressing? pre-classful, all there was were /8's. Kind of like all there are now are /64s in v6 land.
when ~10% of the total v4 pool was allocated, scarcity triggered the creation of classful addressing, which gave us /16 and /24 space in v4-land.
at ~40% of the total v4 pool, scarcity created CIDR and started on developing v6-land.
I'd suggest that with the viablity of IPv6, that the remaining v4 pool is simply vestigal and its getting far more traction than it deserves. We are clearly not in a position of scarcity when we hand out, to individual devices, the functional equivalent of the -entire- v4 pool, raised to the 32nd power.
That is the most profligate waste of address space I have ever seen and these petty "verified operational use" arguments seem farcical and almost hypocritical in comparison.
/bill
Hi Bill, I agree that, *once* the viability of IPv6 has been established widely, including as a stand-alone alternative to IPv4 for new entrants who have no IPv4 of their own*, IPv4 issues will indeed become vestigial. In the mean time, I interpret your use of "profligate waste" to mean something like "possessing exclusive right to use (of addresses) in quantities that vastly exceed 'operational need,' or capability to put to productive use." I could understand a general distaste for "waste" of this kind on purely aesthetic grounds, but given your visceral reaction I can only assume that you believe that such waste has a cost -- and since exclusive of possession of "profligate" quantities of number resources can be privately beneficial to the possessor under certain conditions, I'm tempted to assume that the costs of profligacy that concern you are the costs that are imposed by the "profligate" on everyone else, in the form of needlessly accelerated scarcity and/or exhaustion of resources that could otherwise be put to productive use by others... If that interpretation is not too far off-base, then I guess you must know something about the state of IPv6 usage* that I don't know -- or maybe, your definition of "waste" excludes anything that has been paid for, even if the purchased/idle stockpiles serve no other purpose than to exacerbate demand/scarcity among others... ? TV
On Tue, Aug 6, 2013 at 4:23 AM, Tom Vest <tvest@eyeconomics.com> wrote:
If that interpretation is not too far off-base, then I guess you must know something about the state of IPv6 usage* that I don't know -- or maybe, your definition of "waste" excludes anything that has been paid for, even if the purchased/idle stockpiles serve no other purpose than to exacerbate demand/scarcity among others... ?
Well, in a historic and current perspective, what do e.g. Apple, Daimler AG, DuPont, Eli Lilly, Ford, Halliburton, HP (twice!), IBM, Prudential Securities, UK Ministry of Defence, UK Work & Pensions need millions of public IP addresses for, each? Perhaps there are one or few others, who in historic times got huge blocks, but which don't need them. -- Jan
On 8/4/13 09:35 , Jan Ingvoldstad wrote:
On Sun, Aug 4, 2013 at 3:41 PM, David Farmer <farmer@umn.edu <mailto:farmer@umn.edu>> wrote:
On 8/1/13 12:27 , Tore Anderson wrote:
* Nick Hilliard
On 01/08/2013 07:38, Tore Anderson wrote:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
can you define "fair"?
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Uhm, if that has been the definition of fairness, then it certainly has NOT been enforced or used in the past few years. Perhaps never.
There has allows been a need component, prior to IPv4 each network "needed" a network identifier, equivalent to a /8 today. With IPv4 pre-CIDR, this changed to three class of network identifiers; classes A, B, and C, /8s, /16s, and /24s today. You had to meet additional criteria to get a class A or B, otherwise you got a C. This is still based on need, but a little more granularity. By today's standards were most of those class As or Bs needed, maybe not, but there were needed by the standards of the day. RFCs 1366, 1466, 2050, document the criteria used and its evolution, until the RIR policy process take over.
It is, as you state later on, one of those hollow "jesters".
They may have also been hollow gestures, but not a hollow as saying that fairness is necessary without and kind of mechanism providing it. (Sorry, I can't spell for shirt :) , see http://tinyurl.com/l3cop8b )
Furthermore, I believe that now that everyone's operational need can no longer be meet, a state of scarcity, that fairness is doubly important. How does verified operational need provide fairness in a state of scarcity? If someone without verified operational need were to receive Internet number resources, presumably through a transfer, and you have verifiable operational need that can no longer be meet; it would add insult to injury that someone without that verifiable operational need receives Internet number resources when you can't.
This is how Internet number resources have been handled for years; organizations without verified operational needs have received Internet number resources, some in huge quantities.
If you mean address were handed out without need by today's standards, sure, but hind sight is allows 20-20. But, if you mean addresses were handed out without need by the standards of the day then I have to disagree.
One could easily argue that this is one of the root problems with former Internet number resource handling.
Fortunately, IPv6 came to the rescue.
I sure hope IPv6 comes to the rescue, but I'm not sure we have been rescued just yet. I'm only able to get ~40% of my traffic via IPv6, this is moving the the right direction but, we're not rescued yet.
Therefore, verifying operational need for transfers, still provides some minimal amount of fairness to those that are not going to receive Internet number resources.
If the verification is going to be at the level it used to be, that fairness is so minimal that you can't poke a stick at it. It is, at best, an illusion.
While this is a start, just saying fairness is necessary, is a hollow jester, without verified operational need or some other replacement mechanism to provides the fairness you are saying is necessary.
If you want to introduce verification of the operational need, I suggest you write your own proposal to the RIPE community, so that we can discuss and handle the proposed changes accordingly.
I'm not introducing anything new, I'm objecting to the removal of something that has always been there, as are others.
But I cannot, for the life of me, understand what this has to do with 2013-03, sorry.
It is in the very title of the proposal "No Need - Post-Depletion Reality Adjustment".
-- Jan
-- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
On Sun, Aug 4, 2013 at 6:48 PM, David Farmer <farmer@umn.edu> wrote:
I'm not introducing anything new, I'm objecting to the removal of something that has always been there, as are others.
As I understand it, there has "always" been a requirement for need. I don't disagree that this is nothing new. However, you used the phrase "verified operational need", which is something different. I am a n00b in the RIPE community, so I have certainly not read everything there is, but from what I have seen, read and understand, this verification thing is new. -- Jan
On 8/4/13 12:15 , Jan Ingvoldstad wrote:
On Sun, Aug 4, 2013 at 6:48 PM, David Farmer <farmer@umn.edu <mailto:farmer@umn.edu>> wrote:
I'm not introducing anything new, I'm objecting to the removal of something that has always been there, as are others.
As I understand it, there has "always" been a requirement for need. I don't disagree that this is nothing new.
However, you used the phrase "verified operational need", which is something different.
I am a n00b in the RIPE community, so I have certainly not read everything there is, but from what I have seen, read and understand, this verification thing is new.
If you wanted more than the minimum it was always necessary to provide a story that passed a smell test. Also, if you wanted another batch of numbers you always had to explain what did with the old ones you were given, usually providing some data, much of the "bureaucracy" 2013-3 wants to eliminate. Verified: 1. Make sure or demonstrate that (something) is true, accurate, or justified. 2. Swear to or support (a statement) by affidavit. Justified: 1. Having, done for, or marked by a good or legitimate reason. 2. Declared or made righteous in the sight of God. So, please tell me how "verified operational need" is that different. If you would prefer justified or validated operational need. OK, what ever. -- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
On Sun, Aug 4, 2013 at 7:52 PM, David Farmer <farmer@umn.edu> wrote:
If you wanted more than the minimum it was always necessary to provide a story that passed a smell test.
Yes, and that story was, typically, "I'm a new service provider and need an IP address for my service", or "I want to provide addresses for others by becoming a LIR". It may have been written in more words, but it's not like you had to show that you had contracts with others or whatnot. You said you had a need, and that was sufficient.
Also, if you wanted another batch of numbers you always had to explain what did with the old ones you were given, usually providing some data, much of the "bureaucracy" 2013-3 wants to eliminate.
Yep, you had to say "I've used them all up, I need more to expand my operations."
Verified: 1. Make sure or demonstrate that (something) is true, accurate, or justified. 2. Swear to or support (a statement) by affidavit.
Justified: 1. Having, done for, or marked by a good or legitimate reason. 2. Declared or made righteous in the sight of God.
So, please tell me how "verified operational need" is that different. If you would prefer justified or validated operational need. OK, what ever.
You have already demonstrated that it is that different, by having to bang my head with cherry-picked dictionary definitions to explain how I and others should understand what "verified" might mean, and by suggesting different adjectives. Others have already pointed out why innocuous-seeming changes like these can have an impact in how documents are read, also off-list. If what you really want is to stick with the old phrase and old meaning, then I think it's better to say that you don't want to change the old phrase and meaning, instead of introducting a third option. When we get too many different suggestions for minute, superficial changes to the proposal to discuss, we quickly lose track of what the proposed change is about. And that's bad. But maybe that's just me. -- Jan
Jan Ingvoldstad <frettled@gmail.com> schrieb:
On Sun, Aug 4, 2013 at 7:52 PM, David Farmer <farmer@umn.edu> wrote:
If you wanted more than the minimum it was always necessary to
provide a
story that passed a smell test.
Yes, and that story was, typically, "I'm a new service provider and need an IP address for my service", or "I want to provide addresses for others by becoming a LIR". It may have been written in more words, but it's not like you had to show that you had contracts with others or whatnot.
Actually this is not true, I had to send copies of contacts and approvals that customers are returning space to other LIRs ... BR Jens
On Sun, Aug 04, 2013 at 12:52:13PM -0500, David Farmer wrote:
On 8/4/13 12:15 , Jan Ingvoldstad wrote:
On Sun, Aug 4, 2013 at 6:48 PM, David Farmer <farmer@umn.edu <mailto:farmer@umn.edu>> wrote:
I'm not introducing anything new, I'm objecting to the removal of something that has always been there, as are others.
As I understand it, there has "always" been a requirement for need. I don't disagree that this is nothing new.
However, you used the phrase "verified operational need", which is something different.
I am a n00b in the RIPE community, so I have certainly not read everything there is, but from what I have seen, read and understand, this verification thing is new.
If you wanted more than the minimum it was always necessary to provide a story that passed a smell test. Also, if you wanted another batch of numbers you always had to explain what did with the old ones you were given, usually providing some data, much of the "bureaucracy" 2013-3 wants to eliminate.
Verified: 1. Make sure or demonstrate that (something) is true, accurate, or justified. 2. Swear to or support (a statement) by affidavit.
Justified: 1. Having, done for, or marked by a good or legitimate reason. 2. Declared or made righteous in the sight of God.
So, please tell me how "verified operational need" is that different. If you would prefer justified or validated operational need. OK, what ever.
persuant to your comments and David Conrads contribution, I'd suggest that the "smell test" criteria has changed dramatically over the years. Nearly all the IPv4 space I have requested has passed the "verified operational need" using the Warren Buffet test. (he's a man of good character) These days it sometimes goes as far as explaining a business model, showing signed contracts, bank statements, customer lists and credit reports on clients. There is a argument to be made that RIRs have gone too far into delving into a request... boardering on harrassment and restraint of trade. Not saying that the Buffet test alone is good either. /bill
On Mon, Aug 05, 2013 at 01:00:37PM +0000, bmanning@vacation.karoshi.com wrote:
persuant to your comments and David Conrads contribution, I'd suggest that the "smell test" criteria has changed dramatically over the years. Nearly all the IPv4 space I have requested has passed the "verified operational need" using the Warren Buffet test. (he's a man of good character) These days it sometimes goes as far as explaining a business model, showing signed contracts, bank statements, customer lists and credit reports on clients.
Interesting. I've never experienced anything like that, but I've not made applications since "Last /8" came in. I should think that asking for bank statements and credit reports would be a data protection issue to say the least. If this is the case (and again, I've not experienced such requests myself) it is all the more reason to strongly support 2013-03... rgds, Sascha Luck
Dear Jan, Sent from my iPad On 4 Aug 2013, at 19:15, Jan Ingvoldstad <frettled@gmail.com> wrote:
On Sun, Aug 4, 2013 at 6:48 PM, David Farmer <farmer@umn.edu> wrote:
I'm not introducing anything new, I'm objecting to the removal of something that has always been there, as are others.
As I understand it, there has "always" been a requirement for need. I don't disagree that this is nothing new.
However, you used the phrase "verified operational need", which is something different.
I am a n00b in the RIPE community, so I have certainly not read everything there is, but from what I have seen, read and understand, this verification thing is new.
It is not really new. I've quoted from the current policy document before and some others too: "Conservation: Public IPv4 address space must be fairly distributed to the End Users operating networks..." "Operating networks" is not there for no reason and normally an LIR's network is considered as an end network in the context of having a piece of their overall allocation too. Also note that this was written at a time when it was all thought that only those people into operational networks (as an LIR helping end users or for their own need..) would become LIRs and ask for space from the NCC. Otherwise if you did not have a network or if you did not have a customer with a network, why would you want to get those IPs in the first place... Accordingly, what you may be calling as a fuss currently is a deep understanding for a lot of people even if it was not articulated with certain words in the policy text because the policy of the time was written with a certain understanding who the readers of the policy were. Now there is a proposal to change it, and the proposal takes big chunks of that text out and does not bring alternatives, all these subtle, distributed within the text details are to be lost too, while they were there since the beginning. Filiz
Jan
* David Farmer
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Do you have a link or reference? (Tried Google, no hits.)
Furthermore, I believe that now that everyone's operational need can no longer be meet, a state of scarcity, that fairness is doubly important. How does verified operational need provide fairness in a state of scarcity? If someone without verified operational need were to receive Internet number resources, presumably through a transfer, and you have verifiable operational need that can no longer be meet; it would add insult to injury that someone without that verifiable operational need receives Internet number resources when you can't. Therefore, verifying operational need for transfers, still provides some minimal amount of fairness to those that are not going to receive Internet number resources.
Let me get this straight, are you saying here that our current goal of fairness in our current state of scarcity is to protect the *feelings* of the LIRs who return home from the second-hand market empty-handed? (Currently 96-97% of them.) In a similar vein, and somewhat tongue in cheek: If you're trying to buy an apartment, but get outbid by someone, do you get upset unless you can see some proof that guy did buy it plans on moving in there? Or do you assume that's probably the case and move on? Tore
On 8/4/13 09:48 , Tore Anderson wrote:
* David Farmer
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Do you have a link or reference? (Tried Google, no hits.)
Try goal #1 in section #1 of RFC 2050. See https://tools.ietf.org/html/rfc2050#section-1 And in slightly different words, try goal #1 in section #2 of RFC 2050-bis. See http://tools.ietf.org/html/draft-housley-rfc2050bis-02#section-2
Furthermore, I believe that now that everyone's operational need can no longer be meet, a state of scarcity, that fairness is doubly important. How does verified operational need provide fairness in a state of scarcity? If someone without verified operational need were to receive Internet number resources, presumably through a transfer, and you have verifiable operational need that can no longer be meet; it would add insult to injury that someone without that verifiable operational need receives Internet number resources when you can't. Therefore, verifying operational need for transfers, still provides some minimal amount of fairness to those that are not going to receive Internet number resources.
Let me get this straight, are you saying here that our current goal of fairness in our current state of scarcity is to protect the *feelings* of the LIRs who return home from the second-hand market empty-handed? (Currently 96-97% of them.)
You always have to look at fairness from the perspective of those who don't get what they want. Fairness isn't usually an issue raised by those that get what they want. And, as I said I'm not saying operational need is perfect, in the current situation, but it is something and you are proposing to take even that little bit away without saying what replaces it. Personally, I'm not fundamentally opposed to operational need going away, especially the current overly bureaucratic way it is determined, if you can find something that replaces it that provides some sense of fairness that you seem to agree is necessary. -- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
* David Farmer
On 8/4/13 09:48 , Tore Anderson wrote:
* David Farmer
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Do you have a link or reference? (Tried Google, no hits.)
Try goal #1 in section #1 of RFC 2050. See https://tools.ietf.org/html/rfc2050#section-1
Written in a time of abundance long ago, where the fairness of the RIRs' "all you can eat buffet" worked as there was enough for everyone. That's not the world we live in today, and besides the document is about to be superseded by the 2050-bis:
And in slightly different words, try goal #1 in section #2 of RFC 2050-bis. See http://tools.ietf.org/html/draft-housley-rfc2050bis-02#section-2
...which happens to contain exactly 0 occurrences of the string "fair".
Let me get this straight, are you saying here that our current goal of fairness in our current state of scarcity is to protect the *feelings* of the LIRs who return home from the second-hand market empty-handed? (Currently 96-97% of them.)
You always have to look at fairness from the perspective of those who don't get what they want. Fairness isn't usually an issue raised by those that get what they want.
Yes, I'm sure that the LIRs that didn't get the resources they wanted (and "needed") feel it's a great consolation to know that their competitors with deeper pockets also "needed" the resources in order to absorb the customer growth they now are unable to take on themselves. Or how starving folks around the globe surely must feel that their situation is "fair", as Tore and David managed to finish all the food on their dinner plates today. (We "needed" it, after all.) Sorry. I just don't at all buy the argument that the unprivileged are treated "fair" just because the privileged happened to "need". Everyone "needs", yet not everyone gets. The way I see it, the scarcity situation is going to result in unfairness no matter what and there's nothing our current policy nor 2013-03 can do about it.
Personally, I'm not fundamentally opposed to operational need going away, especially the current overly bureaucratic way it is determined, if you can find something that replaces it that provides some sense of fairness that you seem to agree is necessary.
Personally I don't think it is at all necessary to keep the philosophical "fairness" goal in the policy, as we have no working mechanism in the policy that actually ensure any form of fair distribution in this time of scarcity. That's my pragmatic view. However there were a couple of other WG participants who felt that it should be left in there for high-level philosophical and political reasons, and to ensure the door is kept open for a potential future discussion of "what is fair nowadays and how do we go about enforcing it exactly"? I have no problem with that per se, hence my offer to leave it in there. Tore
On 8/4/13 14:11 , Tore Anderson wrote:
* David Farmer ]
And in slightly different words, try goal #1 in section #2 of RFC 2050-bis. See http://tools.ietf.org/html/draft-housley-rfc2050bis-02#section-2
...which happens to contain exactly 0 occurrences of the string "fair".
No the string "fair" isn't there any longer, but the string "operational need" didn't go any where, and you asked about "operational need" not "fairness"; 1) Allocation Pool Management: Due to the fixed lengths of IP addresses and AS numbers, the pools from which these resources are allocated are finite. As such, allocations must be made in accordance with the *operational needs* of those running the networks that make use of these number resources and by taking into consideration pool limitations at the time of allocation. Furthermore, from now on I will just use "operational need", since people are getting stuck on the issue of verified/justified/valid as something that is supposedly new. -- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
* David Farmer
you asked about "operational need" not "fairness";
[citation needed] I seem to remember my question being: «In a state of scarcity, what is "fair"?» While discussing the amendment: «Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.» And finally asking you to provide a reference to the «primary definition of fairness the RIR communities have been using». So the discussion was never about "fairness"? Hmm. English is only a secondary language of mine, so I guess I must have misunderstood you. Apologies.
1) Allocation Pool Management: Due to the fixed lengths of IP addresses and AS numbers, the pools from which these resources are allocated are finite. As such, allocations must be made in accordance with the *operational needs* of those running the networks that make use of these number resources and by taking into consideration pool limitations at the time of allocation.
So depending on how you look at it, either: A (if ignoring the "last /8 pool"): The RIPE NCC's allocation pool is empty. No point in talking about the Management of an Allocation Pool that does not exist. B (if including the "last /8 pool"): I've proposed to retain the current requirement that LIRs must use the last /22 allocation for making assignments to its End Users. Either way, case closed? Tore
On 8/4/13 14:56 , Tore Anderson wrote:
* David Farmer
you asked about "operational need" not "fairness";
[citation needed]
Gladly, --- On 8/4/13 13:01 , David Farmer wrote:> On 8/4/13 09:48 , Tore Anderson wrote:
* David Farmer
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Do you have a link or reference? (Tried Google, no hits.)
Try goal #1 in section #1 of RFC 2050. See https://tools.ietf.org/html/rfc2050#section-1
And in slightly different words, try goal #1 in section #2 of RFC 2050-bis. See http://tools.ietf.org/html/draft-housley-rfc2050bis-02#section-2
I seem to remember my question being:
«In a state of scarcity, what is "fair"?»
While discussing the amendment:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
And finally asking you to provide a reference to the «primary definition of fairness the RIR communities have been using».
I said, "I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources"
So the discussion was never about "fairness"? Hmm. English is only a secondary language of mine, so I guess I must have misunderstood you. Apologies.
By asking me for a quotation, I interpreted that as to not only being about "fairness", but also about my tie of "fairness" to "operational need". The concept of "operational need" still remains in RFC 2050-bis even though the "fairness" was dropped. But I think RFC 2050-bis and "operational need" remains relevant.
1) Allocation Pool Management: Due to the fixed lengths of IP addresses and AS numbers, the pools from which these resources are allocated are finite. As such, allocations must be made in accordance with the *operational needs* of those running the networks that make use of these number resources and by taking into consideration pool limitations at the time of allocation.
So depending on how you look at it, either:
A (if ignoring the "last /8 pool"): The RIPE NCC's allocation pool is empty. No point in talking about the Management of an Allocation Pool that does not exist.
B (if including the "last /8 pool"): I've proposed to retain the current requirement that LIRs must use the last /22 allocation for making assignments to its End Users.
Either way, case closed?
I believe you are incorrectly equating "Allocation Pool" with "Free Pool", there is nothing that says the "Allocation Pool" doesn't include resources that are available for "Re-Allocation". Now, I'll grant you that there is nothing that says it includes resources that are available for "Re-Allocation" either. So, I would suggest that is an open question for the community to decide, and you can't necessarily say case closed. Furthermore, the statements in 2050-bis apply are intended to apply to the whole Internet Registry System, IANA, the RIRs, and LIRs, so even if you consider RIPE's Allocation Pool empty, the LIR's Allocation Pool isn't empty and operational need should still apply to the LIR making the Re-allocation of resources. -- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
* David Farmer
By asking me for a quotation, I interpreted that as to not only being about "fairness", but also about my tie of "fairness" to "operational need". The concept of "operational need" still remains in RFC 2050-bis even though the "fairness" was dropped. But I think RFC 2050-bis and "operational need" remains relevant.
I wanted to know where you'd seen this "primary definition of fairness". I don't dispute that 2050-bis mentions "operational need", but I do dispute that it says it is the "definition of fairness". If you didn't mean to make that claim I suppose we were talking past each other.
I believe you are incorrectly equating "Allocation Pool" with "Free Pool", there is nothing that says the "Allocation Pool" doesn't include resources that are available for "Re-Allocation".
If already allocated resources are to be considered as part of the allocation pool, then the pool would essentially be infinite and limitless as you can re-allocate the same addresses over and over and over and over again. So IMHO this is quite a stretch.
Furthermore, the statements in 2050-bis apply are intended to apply to the whole Internet Registry System, IANA, the RIRs, and LIRs, so even if you consider RIPE's Allocation Pool empty, the LIR's Allocation Pool isn't empty and operational need should still apply to the LIR making the Re-allocation of resources.
In the RIPE region LIRs don't allocate, they assign. (Sub-allocations being the extremely rarely used exception.) Tore
On 8/4/13 17:17 , Tore Anderson wrote:
* David Farmer
Furthermore, the statements in 2050-bis apply are intended to apply to the whole Internet Registry System, IANA, the RIRs, and LIRs, so even if you consider RIPE's Allocation Pool empty, the LIR's Allocation Pool isn't empty and operational need should still apply to the LIR making the Re-allocation of resources.
In the RIPE region LIRs don't allocate, they assign.
(Sub-allocations being the extremely rarely used exception.)
RIPE-582, section 5.5 specifically refers to Transfers to another LIR as a Re-Allocation. -- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
Hi, On Aug 4, 2013, at 3:17 PM, Tore Anderson <tore@fud.no> wrote:
I don't dispute that 2050-bis mentions "operational need", but I do dispute that it says it is the "definition of fairness".
Just to be clear: "operational need" has absolutely nothing to do with "fairness". The former is, at least in theory, objectively verifiable by, e.g., measuring requester utilization efficiency, customer growth patterns, etc. (ignoring this has never been done and the IANA/RIR system is not capable of doing this -- the entire system relies on trust and passing the giggle test). The latter is a purely subjective value judgement. The intent of goal #1 in 2050bis is to encourage people to look at the free pool availability when considering allocation policies. In cases where the allocation pool is tightly constrained, I believe it safe to say it was the consensus opinion of the authors that "the operational needs of those running the networks that make use of the number resources" should be a key consideration. In my personal view, this should true even if it is considered "unfair" by some.
I believe you are incorrectly equating "Allocation Pool" with "Free Pool", there is nothing that says the "Allocation Pool" doesn't include resources that are available for "Re-Allocation".
If already allocated resources are to be considered as part of the allocation pool, then the pool would essentially be infinite and limitless as you can re-allocate the same addresses over and over and over and over again. So IMHO this is quite a stretch.
An "allocation pool" is the source from which resources are taken. Once a resource is allocated, it is removed from the allocation pool. As mentioned in 2050bis, "the pools from which these resources are allocated are finite." It is, of course, true that the allocation pool can be replenished, e.g., when someone returns a block of addresses to some part of the Internet registry system, however that is a relatively rare occurrence. AFAICT, the question 2013-03 revolves around is whether or not the RIPE community considers the free ("allocation") pool exhausted. If it is exhausted, questions of "fairness" or "operational need" are irrelevant in allocation pool management -- the allocation pool size is zero so there is nothing to consider.
Furthermore, the statements in 2050-bis apply are intended to apply to the whole Internet Registry System, IANA, the RIRs, and LIRs, so even if you consider RIPE's Allocation Pool empty, the LIR's Allocation Pool isn't empty and operational need should still apply to the LIR making the Re-allocation of resources.
The statements in 2050bis are goals and recommendations of a small number of people interested in address allocation policy, not laws or axioms. One of my reasons for helping with 2050bis was to get away from the "quotations from holy text" approach of address policy making that has infected the community as a result of 2050 and instead, encourage people to evolve policies through "an open, transparent, and broad multi-stakeholder manner". I would personally be distressed to see the Old Testament replaced by the New Testament. Regards, -drc
David, Thank you for sharing this very informative message. * David Conrad
Just to be clear: "operational need" has absolutely nothing to do with "fairness".
The former is, at least in theory, objectively verifiable by, e.g., measuring requester utilization efficiency, customer growth patterns, etc. (ignoring this has never been done and the IANA/RIR system is not capable of doing this -- the entire system relies on trust and passing the giggle test).
[...]
An "allocation pool" is the source from which resources are taken. Once a resource is allocated, it is removed from the allocation pool. As mentioned in 2050bis, "the pools from which these resources are allocated are finite."
It is, of course, true that the allocation pool can be replenished, e.g., when someone returns a block of addresses to some part of the Internet registry system, however that is a relatively rare occurrence.
AFAICT, the question 2013-03 revolves around is whether or not the RIPE community considers the free ("allocation") pool exhausted. If it is exhausted, questions of "fairness" or "operational need" are irrelevant in allocation pool management -- the allocation pool size is zero so there is nothing to consider.
The old "all you can eat; unlimited second servings" allocation pool is without question exhausted and sized zero. This condition is permanent, as any returns/reclaims are absorbed by the "last /8" allocation pool. The last /8 pool has a very blunt definition of "operational need"; it equates it to 1024 addresses. The "giggle test" applied to this pool is essentially «do you need anything at all? yes/no». The current version of 2013-03 proposes to remove this giggle test (but not the one-size-fits-all definition of "operational need"). A few folks pointed out that it is desirable to retain the "giggle test" for philosophical and political reasons, and I've offered to amend the proposal accordingly. Based on your explanations above, I'd say that this amendment would make 2013-03 "compliant" with 2050-bis' Allocation Pool Management goal (assuming the same could be said for our current policy as well). Tore
Hi, Since I did not mention it clearly so far, please let me state *i do not support 2013-3*. Unfortunately the late amendments proposed here to reach a consensus look like cosmetics to me, and do not address many of the objections that were raised here. On 05/08/2013 07:56, Tore Anderson wrote:
An "allocation pool" is the source from which resources are taken. Once a resource is allocated, it is removed from the allocation pool. As mentioned in 2050bis, "the pools from which these resources are allocated are finite."
Aren't allocation transfers to be considered as part of this pool, since they are (so far) supposed to be made of empty allocs, and subject to the same conditions than direct allocations from the Ripe NCC ?
The last /8 pool has a very blunt definition of "operational need"; it equates it to 1024 addresses. The "giggle test" applied to this pool is essentially «do you need anything at all? yes/no». The current version of 2013-03 proposes to remove this giggle test (but not the one-size-fits-all definition of "operational need").
That "one-size-fits-all" is a myth because of allocation transfer mechanism in my opinion. And also because of the PI to PA migration projet, BTW. But also 2013-3 does not apply to such a small space, since, as Tore said, in another mail in this thread the "few" returns to the pool since "depletion" amount to about 4,600 /22s (to be compared to the 16,000 remaining ones in the Ripe's pool). Last /8 policy being set in order to deal with scarcity of the public ressource I guess the importance of the ressource is a point everyone admits (and no one knows how long it will remain vital). However when I read through discussions here I feel like a "come on, IPv4 is over, let's just stop the administrative burden", which reminds me the last days at school before holidays when nobody was minding about being still nor teaching or learning since it was the end anyway... Which makes me ask two questions 1. why should Ripe NCC consider *now* that these rare ressources need less attention and protection than previous ones, and not to be treated in respect to previous conservation principles, since these quite free and subject-to-be-returned addresses do not represent a ridiculous pool ? Turned another way : when did reducing charges become more important than the conservation goal ? 2. why, if IPv4 free pools were completely depleted, would Ripe NCC be discharged of the responsability to supervise assignments for what still is a vital and public ressource (yes they are, despite AW made it much easier for everyone) ? It might be a wrong impression really, and sorry for that but I feel like if Ripe NCC would not really want to mind with IPv4 anymore, and just wanted to turn away, being OK to just drop responsability to the market, whatever happens. Hope I'm wrong. Best regards, Sylvain
Hi,
It might be a wrong impression really, and sorry for that but I feel like if Ripe NCC would not really want to mind with IPv4 anymore
Just making one important point here: the RIPE NCC doesn't want anything here. The community / this working group sets the policies, not the RIPE NCC. They only implement them once this working group declares consensus on the proposed policy. Cheers, Sander APWG co-chair
On 12/08/2013 23:03, Sander Steffann wrote:
Hi,
It might be a wrong impression really, and sorry for that but I feel like if Ripe NCC would not really want to mind with IPv4 anymore
Just making one important point here: the RIPE NCC doesn't want anything here. The community / this working group sets the policies, not the RIPE NCC. They only implement them once this working group declares consensus on the proposed policy.
Agreed. But since I do not want to project my perceptions as intents on someone in particular either... Please replace subject "Ripe NCC" by a subject "the proposal".
An "allocation pool" is the source from which resources are taken. Once a resource is allocated, it is removed from the allocation pool. As mentioned in 2050bis, "the pools from which these resources are allocated are finite."
Aren't allocation transfers to be considered as part of this pool,
No. While you incorrectly attributed the above quote to me, it was actually written by one of the authors of 2050bis. Tore
On Sunday, August 4, 2013, David Farmer wrote:
On 8/4/13 09:48 , Tore Anderson wrote:
* David Farmer
I believe the primary definition of fairness the RIR communities have
been using is, "only those that have *verified operational need* get Internet number resources".
Do you have a link or reference? (Tried Google, no hits.)
Try goal #1 in section #1 of RFC 2050. See https://tools.ietf.org/html/**rfc2050#section-1<https://tools.ietf.org/html/rfc2050#section-1>
since this is going to be replaced we should probably make sure we are in line with:
And in slightly different words, try goal #1 in section #2 of RFC 2050-bis. See http://tools.ietf.org/html/**draft-housley-rfc2050bis-02#**section-2<http://tools.ietf.org/html/draft-housley-rfc2050bis-02#section-2>
another question is if rfc2050 is "binding" and "limiting" for the RIRs and if draft-housley is going to be it may have go go trough some RIR processes too? -hph -- Hans Petter Holen Mobile +47 45 06 60 54 | hph@oslo.net | http://hph.oslo.net
* Hans Petter Holen
since this is going to be replaced we should probably make sure we are in line with [goal #1 in section #2 of RFC 2050-bis].
As I explained in my reply to David Conrad, I believe the amendment I'll be proposing in version 3.0 of the proposal will ensure that we are. (In a nutshell: Keep "Need" around in its current form for the final /22 allocations issued by the NCC to its members.)
another question is if rfc2050 is "binding" and "limiting" for the RIRs and if draft-housley is going to be it may have go go trough some RIR processes too?
I think David Conrad answered this already by clearly stating that draft-housley is not intended to be "the New Testament". Tore
On 8/6/13 10:20 , Hans Petter Holen wrote:
On Sunday, August 4, 2013, David Farmer wrote:
On 8/4/13 09:48 , Tore Anderson wrote:
* David Farmer
I believe the primary definition of fairness the RIR communities have been using is, "only those that have *verified operational need* get Internet number resources".
Do you have a link or reference? (Tried Google, no hits.)
Try goal #1 in section #1 of RFC 2050. See https://tools.ietf.org/html/__rfc2050#section-1 <https://tools.ietf.org/html/rfc2050#section-1>
since this is going to be replaced we should probably make sure we are in line with:
And in slightly different words, try goal #1 in section #2 of RFC 2050-bis. See http://tools.ietf.org/html/__draft-housley-rfc2050bis-02#__section-2 <http://tools.ietf.org/html/draft-housley-rfc2050bis-02#section-2>
another question is if rfc2050 is "binding" and "limiting" for the RIRs and if draft-housley is going to be it may have go go trough some RIR processes too?
I never said RFC 2050 is binding on the RIR's. I've been saying it articulates fairness and why operational need is important. RIPE and any other RIRs can and have ignored many parts of it, and are fee to continue to do so. However, RFC 2050 and the upcoming 2050-bis are the only common statement of goals or principles other than ICP-2 that there is for the Internet Registry System and the RIRs as a whole. If we ignore those goals and principles, without careful consideration, bad things are likely to happen. If you are suggesting it would be a good thing for there to be a common set of goals and/or principles for all the RIRs that have gone through the RIR's policy processes or maybe the global policy process, that may not be a bad idea. Note: Within the ARIN Region there is such a discussion going one see ARIN-2013-4, right now the scope is intended to be within the ARIN region only. https://www.arin.net/policy/proposals/2013_4.html I believe that operational need is one of the few useful concept of fairness we have from a Internet number resources policy perspective. Impartiality and community consensus supporting policy being the only others I can think of as useful concepts of fairness. -- ================================================ David Farmer Email: farmer@umn.edu Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 1-612-626-0815 Minneapolis, MN 55414-3029 Cell: 1-612-812-9952 ================================================
On Aug 6, 2013, at 8:09 PM, David Farmer wrote:
On 8/6/13 10:20 , Hans Petter Holen wrote:
another question is if rfc2050 is "binding" and "limiting" for the RIRs and if draft-housley is going to be it may have go go trough some RIR processes too?
I never said RFC 2050 is binding on the RIR's. I've been saying it articulates fairness and why operational need is important. RIPE and any other RIRs can and have ignored many parts of it, and are fee to continue to do so.
However, RFC 2050 and the upcoming 2050-bis are the only common statement of goals or principles other than ICP-2 that there is for the Internet Registry System and the RIRs as a whole. If we ignore those goals and principles, without careful consideration, bad things are likely to happen.
I always think that 2050 is just reflect current situation and don't define any goals and principles If you will insist that it should be policy document it will break the whole RIR PDP bottom-up system.
If you are suggesting it would be a good thing for there to be a common set of goals and/or principles for all the RIRs that have gone through the RIR's policy processes or maybe the global policy process, that may not be a bad idea.
It is how existing system works. Dmitry
On 04/08/2013 16:48, Tore Anderson wrote:
In a similar vein, and somewhat tongue in cheek: If you're trying to buy an apartment, but get outbid by someone, do you get upset unless you can see some proof that guy did buy it plans on moving in there? Or do you assume that's probably the case and move on?
We got something in France that is called the right to housing. The question is not, of course, but is not fully disconnected of knowing if does Ripe wants to tend to protect the public right of weaks to get a place. You asked repetedly here for precise statements to explain how 2013-03 would, on its own, make things worse. And you explained many times that wrong things could already be done independantly from 2013-03 being accepted or not. Things cannot be split that way in my mind. My point is, that 2013-03 is part of a much larger evolution that is progressively making the deal completely different. I cannot help but consider thinks together and observe a general move that breaches yesterday's principles : - the ability to resell IPv4 allocations - the proposal to allow v4 PI changed to PA (aggregation breach) - the suppression of the conservation goal - the documentation need removal To me, the general picture looks like is that considerable ground is given to a fully commercial hand over the public ressource management. This seems to be motivated by kind of a hurry to get rid of the burden of the IPv4 administrative work. Which I feel hard to understand since lots of operators still need a proper and fair ressource attribution to continue or to start their business today (which is being more critical because of scarcity) and also because Ripe members still pay membership fees to finance it. Sorry I went quite far from simple 2013-03 discussion here. However reducing the discussion field does not allow to build a global policy that is consistent and has a coherent philosophy, I think. Best regards, Sylvain
Tore
-- http://www.opdop.fr - mutualiser et interconnecter en coopérative -- ManyOnes.COM SARL - RCS Paris B 449 031 574 - TVA n°FR56449031574 en cours de mutation comme Société Coopérative d'Interêt Collectif -- ManyOnes, c/o Sylvain Vallerot, 3 rue Erckmann Chatrian, 75018 Paris
On 01/08/2013 18:24, Nick Hilliard wrote:
On 01/08/2013 07:38, Tore Anderson wrote:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
Sounds good to me! One minor nit: can you define "fair"?
Fair means with equity, and our measure for equity is need (e.g. the contrary of waste). Which implies a need should be evaluated. Once this evaluation is done should it be dropped to the next trash ? Writing it down in a file is easy, simple, and almost an evidence. This file being organised with sections and filled with a bit of explanations and contexts looks like an evidence also. This is ripe-583. So what is the problem with this file ? To me, this form is not a burocratic overhead, it is a tool is use as a guideline when making a new assignment.
On 01/08/2013 07:38, Tore Anderson wrote:
* Malcolm Hutty
However this argument is fallacious. The Conservation policy, even as stated, expresses *two separate* policy objectives: 'fair distribution', and maximising the lifetime of the public address pool. Depletion means that reality has superseded the second objective, but not necessarily the first.
Hi again Malcom,
Having slept on it, I have a suggestion that hopefully will make us reach common ground. How about, instead of removing the old Conservation goal completely, we rewrite it as follows:
«Fair use: Public IPv4 address space must be fairly distributed to the End Users operating networks.»
This would only remove the second "reality-superseded" objective, but not the first. It would also continue to provide the philosophical foundation on which we may build "enforcement" policies in the future, so we certainly would not be "closing the door" on any such discussion.
Furthermore, it might even help the NCC in their political/government interactions, as they can truthfully maintain that their goal with regards to IPv4 is still to provide for fair distribution and fair use.
Would such an amendment make the proposal more appealing to you, at least enough to make reach the "I can live with this" point? (This question goes for the others who have noted their reservation towards the proposal too, feel free to chime in!)
Tore, Firstly, thank you for being so willing to engage with a view to meeting objections, rather than just defending your proposal. I hope my answer meets you in the same spirit. That amendment would *definitely* make the proposal more appealing to me. To my mind, this moves us from "2013-03 looks bad" to "2013-03 seems broadly OK but needs thought to see whether a little further wordsmithing is needed". Which is, I think you'll agree, major progress. How long do we reasonably have to think about that wording? I realise we're at a late stage, but I would welcome introducing more eyeballs to this problem. In particular, I'm not sure I like limiting fairness to End Users, as you have done. Referring back to your other comments on fairness, to the effect that "fairness" has already been abandoned in the last /8 for NCC->LIR, I don't necessarily agree or think it should be presented like that. On the contrary, we could assert the fairness of the current policy, something like: "In order to ensure fair access to IPv4 address space, and in particular that as many parties have access to IPv4 address space as possible, no LIR shall be assigned more than 1024 addresses from the last /8. For the purpose of efficiency, any LIR [with a legitimate need for IPv4 address space][for their own use] shall be deemed to need 1024 addresses." The text in the first set of square brackets represents that bit of the current policy that an unaltered 2013-03 would remove. The text in the second set set of square brackets represents something that isn't currently policy, but perhaps should be (or perhaps not), and which couldn't be policy unless we retain the principle. I suspect if we adopted the text above without alteration the effect would be to still require a documented need for at least a single IP address. We could further refine it to remove even that - but it has already been mentioned that this is a negligible requirement; how would you feel about leaving it in, given that it's so little? Taken together with the bit in the second set of square brackets, this policy would exclude those that apply simply in order to re-sell, but nobody else. I would think that a simple checkbox "Do you intend to use at least one of these IP addresses on a network you operate?" should satisfy the documentation requirement. Now, you're fully entitled to think that the above policy isn't really all that fair. But it asserts a community view of what is fair, and provides a suitable hook for the community to debate and amend its view by changing the policy in the future. Meanwhile, the NCC will be able to continue to claim that the community aims at fair and efficient distribution, maximising the availability of resources where needed, despite the challenging circumstances - and to carry on saying the same thing if the definition of what is fair changes again. Malcolm. -- Malcolm Hutty | tel: +44 20 7645 3523 Head of Public Affairs | Read the LINX Public Affairs blog London Internet Exchange | http://publicaffairs.linx.net/ London Internet Exchange Ltd 21-27 St Thomas Street, London SE1 9RY Company Registered in England No. 3137929 Trinity Court, Trinity Street, Peterborough PE1 1DA
* Malcolm Hutty
Firstly, thank you for being so willing to engage with a view to meeting objections, rather than just defending your proposal. I hope my answer meets you in the same spirit.
Yep, and thank you for being constructive as well!
That amendment would *definitely* make the proposal more appealing to me. To my mind, this moves us from "2013-03 looks bad" to "2013-03 seems broadly OK but needs thought to see whether a little further wordsmithing is needed". Which is, I think you'll agree, major progress.
Absolutely!
How long do we reasonably have to think about that wording? I realise we're at a late stage, but I would welcome introducing more eyeballs to this problem.
Since we're still discussing, the review period will be extended with another couple of weeks, so there is some time. Hopefully we've have a text we're happy with by then, which will then as I understand it be sent to the NCC which will have to re-do the Impact Analysis. The first IA took 11 weeks to complete, so I *really* hope that we only have to ask them to re-do it once. (As you probably can imagine my first preference would be not to do it at all, as I consider myself a pragmatist and I think these changes have minimal *practical* impact, but oh well...)
In particular, I'm not sure I like limiting fairness to End Users, as you have done.
Actually, those words aren't mine, they are there in the current policy document (ripe-592) as well. This was 100% intentional, as I would strongly prefer for the proposal to not change previously established consensus on any topic that is not "core" to the proposal itself, or to introduce any new lofty principles/goals/ambitions. Nick's cautionary "a hemina of wine" example is highly relevant here. If we try to define *new* principles, we'll probably need further wordsmithing, which may in turn lead to bikeshedding and thus grinding the progress of the proposal to a standstill. Another risk is that even though we find agreement on a new text, the NCC may say in its IA that they interpret this to mean X, while our intention was Y - and we'll have to start over again. So while I have no desire whatsoever to stifle any discussion on any new goals and principles and any tools or mechanisms that would enforce those, I would strongly prefer if this discussion could be done in another policy proposal independent of 2013-03. With that in mind - can you live with simply retaining the "fairness goal" as stated in our current policy document and nothing more? I'm not necessarily asking for your *support* of the proposal here (although that would of course be very welcome too!); "I no longer have any objections" or "I abstain" is sufficient. (BTW: I don't think it is a problem limiting fairness to the End Users. The whole point of the Internet Registries is to get the resources into the hands of the End Users. Internet Registries aren't using the resources themselves, so they have no need for "fairness". Of course, often a single organisation will be both an Internet Registry and an End User, but in that case it will be covered by the fairness goal anyway.)
Referring back to your other comments on fairness, to the effect that "fairness" has already been abandoned in the last /8 for NCC->LIR, I don't necessarily agree or think it should be presented like that.
That's fortunately just my personal and pragmatic opinion, and not something I have any intention of putting into the policy. :-)
I suspect if we adopted the text above without alteration the effect would be to still require a documented need for at least a single IP address. We could further refine it to remove even that - but it has already been mentioned that this is a negligible requirement; how would you feel about leaving it in, given that it's so little? Taken together with the bit in the second set of square brackets, this policy would exclude those that apply simply in order to re-sell, but nobody else. I would think that a simple checkbox "Do you intend to use at least one of these IP addresses on a network you operate?" should satisfy the documentation requirement.
(Filiz: I understood that this is essentially the same issue you described in your last post to the list. Therefore I'm CC-ing you in here rather than replying to your message directly, hope that's OK.) I have no strong feelings against this, no, the amount of red tape is minimal and in any case something an LIR will have to deal with at most *once*. The main reason I have resisted this is that in practical terms it is nearly meaningless as a barrier against those who would abuse it, and asking the NCC to re-do the IA just to get it in there would IMHO be a waste of time and effort. However, if we need to change the proposal and re-do the IA anyway, might as well do this one too. So here's my suggested text. In the proposed section 5.1 (http://www.ripe.net/ripe/docs/other-documents/draft-v2-ipv4-address-allocati...) we add a new point: «4. In order to qualify for receiving the allocation, the LIR must state an intent to use it for making assignments to one or more End Users.» I think this describes the current status quo pretty well, and should result in a check-box like the one you described in the request form (something I'll try to confirm with Andrea *before* the whole updated proposal is sent back to the NCC). Would this be sufficient to remove your concerns? Best regards, Tore Anderson
On 03/08/2013 11:47, Tore Anderson wrote:
So here's my suggested text. In the proposed section 5.1 (http://www.ripe.net/ripe/docs/other-documents/draft-v2-ipv4-address-allocati...) we add a new point:
«4. In order to qualify for receiving the allocation, the LIR must state an intent to use it for making assignments to one or more End Users.»
I may be wrong, but this seems to be quite a substantial shift away from v1 and v2. The previous two versions completely removed any requirement for stated intent, but this change would partially bring it back. This isn't a complaint, btw - just an observation. As an aside, I don't think it will make too much practical difference whether this statement is included or not, at least from the point of view of speculation. The language is vague enough that any respectable lawyer could easily side-step it. If the intent is to ensure that the LIR transferee makes the assignments, then the language could be tightened up. Nick
* Nick Hilliard
«4. In order to qualify for receiving the allocation, the LIR must state an intent to use it for making assignments to one or more End Users.»
I may be wrong, but this seems to be quite a substantial shift away from v1 and v2. The previous two versions completely removed any requirement for stated intent, but this change would partially bring it back. This isn't a complaint, btw - just an observation.
If you "zoom in" on the last /8 policy, I suppose you could say that. On the other hand, changing the last /8 policy isn't an objective of 2013-03. v1 and v2 only did so via a layer of indirection; the "need" requirement isn't part of the last /8 policy, but the "pre-depletion" policy, which the last /8 policy in turn partially "imports". So when 2013-03 cleaned away the "pre-depletion" policy, this had some ramifications on the last /8 policy too. (When writing the proposal I didn't see these ramifications as problematic because, from a practical point of view, the remaining "need requirement" is just a formality that anyone could satisfy.) The main objectives of 2013-03 is to reduce LIR/EU bureaucracy and clean away obsoleted policy, and the above statement doesn't run counter to this. So when looking at the proposal as a whole, the change wouldn't be a "significant shift", IMHO.
As an aside, I don't think it will make too much practical difference whether this statement is included or not, at least from the point of view of speculation. The language is vague enough that any respectable lawyer could easily side-step it.
Fully agreed, it would be trivial for an LIR to side-step the requirement if it runs counter to their ulterior motives for obtaining the /22. But then again, the same is true for today's policy. As I understood Filiz and Malcom, it would be more about "sending a message" than anything else. Not only to the applicant LIR, but also something the NCC could use to counter hostile arguments from the ITU/governments. Both of which is fine by me.
If the intent is to ensure that the LIR transferee makes the assignments, then the language could be tightened up.
Definitively not the intention. Anyone wanting to transform the NCC into an enforcing "IPv4 Police" will have to make their own proposal to that effect. Tore
Hi, On Wed, Jul 31, 2013 at 02:26:31PM +0100, Malcolm Hutty wrote:
I don't support the approval of 2013-03 "No need" at this time.
While you're free to do so, I'm just so slightly annoyed that you're doing this *again* - wait until the very last second, and then state fundamental objections. Generally speaking, this sort of blunt "the fundamental principle is wrong" statement of opposition at the very end of the review phase is wasting lots of effort that has gone into making the policy text, creating the impact analysis (lots of time spent at the NCC), and in the preceding discussions. Fundamental opposition really should be voiced in the intitial phase of a proposal, where we try to find common ground to then build the specific text that is then evaluated for the impact analysis. (Technically speaking, your opposition was actually voiced *after the end* of the review phase - which was on July 30. But since we intended to extend the review phase anyway, based on the ongoing discussion, this point is somewhat moot) Gert Doering -- APWG chair -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01/08/2013 08:25, Gert Doering wrote:
While you're free to do so, I'm just so slightly annoyed that you're doing this *again* - wait until the very last second, and then state fundamental objections.
I understand, and sympathise with your situation, but I'm not intentionally "waiting until the very last second". I think your criticism is a touch unfair. FWIW, on RPKI I had been raising concerns *for years* in WG meetings. It was only "at the very last second" that anybody explained to me that I was being deliberately ignored on the grounds that "if it's not said on the list, I didn't happen". Without such explanation, I had assumed the meetings were authoritative and the mailing list was merely supplementary co-ordination - which is how a many/most organisations work. Once I was informed of the procedure, I followed it immediately. As for this, well I don't read the APWG mailing list normally. I simply don't have time, it's not central to my job, and for most of its work I would have nothing useful to contribute. A LINX member told me about 2013-03 just a couple of weeks ago, and asked me to consider speaking up against it. I did so as soon as I had sanity checked what I intended to say. So I'm sorry the issue didn't come to my attention sooner, but I can't really apologise for doing my own job. But to be honest, there's no need to focus on me. Whereas my input on RPKI did stir up a whole load of new issues, and prompted entirely new objections from others, on this you've already had most of the points I raised mentioned in some form by other people. I just lent my support to their concerns, and collated and marshalled some of them into a unified argument. If you hadn't realised these "fundamental objections" were already lying in the way of achieving rough consensus, because you hadn't realised that those comments touched upon something at the heart of the proposal, well I'm glad I was able to assist. - -- Malcolm Hutty | tel: +44 20 7645 3523 Head of Public Affairs | Read the LINX Public Affairs blog London Internet Exchange | http://publicaffairs.linx.net/ London Internet Exchange Ltd 21-27 St Thomas Street, London SE1 9RY Company Registered in England No. 3137929 Trinity Court, Trinity Street, Peterborough PE1 1DA -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlH7s2oACgkQJiK3ugcyKhS4+gCeNmvaq5c0wVRmfxJ6dCxVprhq qY0AmQHhqubKw2GKN5okt+Msb7zz8GpZ =tVwD -----END PGP SIGNATURE-----
Malcolm: I find your arguments against 2013-3 to be unusually off target. Let's begin with this: -----Original Message-----
I am not convinced by the the principle argument being made in favour of abolishing the concept of "need"
The policy change does not "abolish the concept of need" it only removes it for the remaining scraps of the last /8 in IPv4, and for transfers of that space. My understanding is that some kind of demonstrated need would still be in place for IPv6.
Finally, as noted by the RIPE NCC, this takes away a key message the RIRs have used to justify their independence from government. That may not be sufficient reason to oppose the policy if it is otherwise necessary, but it does seem to me to indicate caution and counsel against acting precipitously.
This argument I simply don't understand. The presence or absence of needs assessment has absolutely nothing to do with the status of RIRs as independent membership nonprofit who administer a shared private resource space. Waving the bloody flag of the ITU really doesn't cut it here. As a private organization, RIRs have to be very careful about competition policy considerations. In this respect, needs assessment, which is completely nontransparent and could in some respects be considered more easily manipulated than a market, puts RIRs in much more danger of external scrutiny than an open and uncontrolled market for IPv4 transfers. When you say there are governments out there who want to take over number allocation, you are correct. But as someone who is as familiar with that environment as you are, I can tell you with complete confidence that these governments don't care a whit whether RIRs eliminate needs assessment or not: they want power in the hands of states, and neither passing nor not passing this policy will have any impact on the course of that debate. Indeed, your view could backfire. It would not be difficult to make a case that continued controls on allocations keep the price of number blocks artificially low for buyers, and by the same token suppress the market for sellers by eliminating many potential buyers from the market. Since most of the dues-paying members of RIRs are ISPs/buyers, it would not be too hard to paint a picture of this situation as a buyers' cartel, which would be actionable under antitrust law. If you think needs assessments are protecting RIRs from external interest and possible intervention, you are 180 degrees off the mark.
The Conservation policy, even as stated, expresses *two separate* policy objectives: 'fair distribution', and maximising the lifetime of the public address pool. Depletion means that reality has superseded the second objective, but not necessarily the first. So my first question to Tore is: "Why should 'fair distribution' of addresses between users no longer be considered an overarching objective of IPv4 address management?"
The simple answer to your question is that needs assessment are not "fairness assessments." If there are 50 ISPs contending for the same number block, needs assessment only tells you whether they cross some threshold (largely theoretical and unenforced) of operational justification. It may be the case that 2 or 3 of those ISPs have far greater merit in their claim than the other 47 or 48. Current practice doesn't care about that. Your argument falls on this simple fact alone.
2. "Fair distribution" establishes a basic goal for IPv4 address management policy. Other policies exist to pursue that goal.
Your second statement here is an unjustified logical leap. There is nothing in the current policy that either defines what "fairness" is or that makes it the overriding concern, more important than efficiency and conservation. One could argue that when there is scarcity it is more fair for people willing to pay the highest price to get the resource. I know that that logic doesn't always work, and doesn't always seem fair, but it does work for about 90% of the economy as a whole. My view is that when we are dealing with the final scraps of the v4 space and thousands of claimants can all claim that they "need" numbers, it is indeed the most fair option to give it to the person who bids the highest. Not that this is a wonderful option, only that it is better than the alternatives, including arbitrary, nontransparent, bureaucratically demanding needs assessments.
limiting the maximum allocation size directly relies upon the notion of fairness (we're only giving you X, even though you want Y, so that the next guy can have some at all).
Yes, we still have the one /22 restriction. Indeed, the last /8 policy giving one small block to a customer is based on a fairness principle. That policy is not fundamentally changed by the elimination of needs assessment; the most important aspect of the policy is the limitation of one block per customer. Absence of needs assessment will not have much impact on that basic operation of that policy. And so you have completely refuted your own argument that there is no "fairness" left in the system if 2013-3 passes.
With the introduction of a transfer mechanism, it is possible that market pressures may prove adequate to ensure efficient and fair allocation of IPv4 addresses; in this transition period, the consequences of run-out are uncertain. RIPE has chosen not to act pre-emptively, to give market mechanisms a chance to succeed. However if market mechanisms prove inadequate to safeguard the fair and efficient use of IPv4 address space, RIPE stands ready to introduce new measures as necessary."
So, you are suggesting that we pass 2013-3 with this language added? The idea is not an entirely bad one, but as currently drafted the statement is unclear. It should read something more like this:
With the introduction of a transfer mechanism and the elimination of needs assessments for IPv4, we are assuming that market pressures will prove adequate to ensure efficient and fair allocation of IPv4 addresses. However if market mechanisms prove inadequate to safeguard the fair and efficient use of IPv4 address space, RIPE stands ready to introduce new measures as necessary."
Such a disclaimer may not be necessary, because RIPE can always change its policies. But if it gains more support to put it that way, go ahead! --MM
* Milton L Mueller
[...] But if it gains more support to put it that way, go ahead!
Exactly. I'm sure we all could discuss these topics for decades without finding full agreement. Fortunately we don't have to, all we have to do is to converge on a text that has consensus as acceptable (or better). It's to that end I proposed the two amendments, which I hope will bring Malcom and Filiz on board with the proposal: 1) retain the philosophical "fairness" goal from our current policy, and 2) make LIRs that want to obtain their "last /8" /22 pledge to use it for their End Users (a continuation of current practice). I understand that you're mostly interested in the second-hand transfer market, so I'd like to point out that 2013-03's impact on the transfer policy will not change due to these two amendments. Even though you may find them unnecessary, I hope you'll also find them acceptable, and not something that would prevent you from continuing to support the overall proposal. Best regards, Tore Anderson
Yes, it would be acceptable to me if acceptable to Malcolm and Filiz -----Original Message----- From: Tore Anderson [mailto:tore@fud.no] Sent: Saturday, August 3, 2013 11:59 AM To: Milton L Mueller Cc: Malcolm Hutty; Sander Steffann; address-policy-wg@ripe.net Subject: Re: [address-policy-wg] 2013-03 New Draft Document and Impact Analysis Published (No Need - Post-Depletion Reality Adjustment and Clean up) * Milton L Mueller
[...] But if it gains more support to put it that way, go ahead!
Exactly. I'm sure we all could discuss these topics for decades without finding full agreement. Fortunately we don't have to, all we have to do is to converge on a text that has consensus as acceptable (or better). It's to that end I proposed the two amendments, which I hope will bring Malcom and Filiz on board with the proposal: 1) retain the philosophical "fairness" goal from our current policy, and 2) make LIRs that want to obtain their "last /8" /22 pledge to use it for their End Users (a continuation of current practice). I understand that you're mostly interested in the second-hand transfer market, so I'd like to point out that 2013-03's impact on the transfer policy will not change due to these two amendments. Even though you may find them unnecessary, I hope you'll also find them acceptable, and not something that would prevent you from continuing to support the overall proposal. Best regards, Tore Anderson
On 03/08/2013 14:11, Milton L Mueller wrote:
This argument I simply don't understand. The presence or absence of needs assessment has absolutely nothing to do with the status of RIRs as independent membership nonprofit who administer a shared private resource space. Waving the bloody flag of the ITU really doesn't cut it here.
With due respect, our lawyers (specifically expert in EU competition law) disagree with you. I'd prefer to give *some* credence to their opinions, which is why the impact analysis specifically passed on their comments. It is, of course, up to the RIPE community to take this opinion into account, or not, as they wish. Nigel
Nigel, Thanks, interesting. I had not read the full analysis before With due respect, I think the legal analysis in the impact statement is confused or at least unconvincing. The analysis says: "From an EU competition point of view, it is important that IPv4 allocations and transfers are conducted in a way that cannot be seen as discriminatory or exclusionary." This I agree with. And a no-need policy, which eliminates the RIPE-NCC's judgment from the picture, also eliminates the possibility that RIPE-NCC's judgment could be construed as discriminatory or exclusionary. But the statement goes on to say: "The fact that the allocation of IP addresses by the RIPE NCC occurred on the basis of the proof of objective need, rather than purely economic considerations, has protected the RIPE NCC from competition law claims." First, I would ask for evidence. Has anyone ever threatened NCC with competition law claims before and had their case thrown out based on th existence of needs assessment? I strongly suspect not, but if so, let us know. It seems obvious to me that RIPE-NCC is more likely to be challenged legally if it is directly responsible for making the decision as to who gets and does not get addresses. A court might uphold their methods of assessing need, but this does not tell us anything about whether they would be more or less subject to such challenges if needs assessment goes away. Second, the statement says "Removing the needs-based requirement would create an exposure to competition law claims based on discriminatory treatment or refusal to supply." This is just wrong. If RIPE is not involved in a transfer of number blocks, it simply cannot be accused of discriminatory treatment. It offers no "treatment" whatsoever. Indeed, the legal analysis suggests the correct conclusion: "Competition law claims would be mainly addressed to LIRs that could be seen as coordinating in stockpiling and applying discriminatory practices." In other words, a more market-based allocation regime might involve competition policy claims against individual buyers of IP numbers who are stockpiling addresses for anti-competitive purposes. But RIPE would not be liable. The statement adds, "Such claims may also be addressed to the RIPE NCC, if only in order to make more publicity for the claim." In other words, these claims would have no legal merit and might be filed only for publicity purposes. But if publicity is the object, then the existence of needs assessment will not protect RIPE either - a litigant could sue RIPE-NCC to gain publicity either way. QED -----Original Message----- From: address-policy-wg-bounces@ripe.net [mailto:address-policy-wg-bounces@ripe.net] On Behalf Of Nigel Titley Sent: Sunday, August 4, 2013 9:28 AM To: address-policy-wg@ripe.net Subject: Re: [address-policy-wg] 2013-03 New Draft Document and Impact Analysis Published (No Need - Post-Depletion Reality Adjustment and Clean up) On 03/08/2013 14:11, Milton L Mueller wrote:
This argument I simply don't understand. The presence or absence of needs assessment has absolutely nothing to do with the status of RIRs as independent membership nonprofit who administer a shared private resource space. Waving the bloody flag of the ITU really doesn't cut it here.
With due respect, our lawyers (specifically expert in EU competition law) disagree with you. I'd prefer to give *some* credence to their opinions, which is why the impact analysis specifically passed on their comments. It is, of course, up to the RIPE community to take this opinion into account, or not, as they wish. Nigel
Nigel, Thanks, interesting. I had not read the full analysis before With due respect, I think the legal analysis in the impact statement is confused or at least unconvincing.
The analysis says: "From an EU competition point of view, it is important that IPv4 allocations and transfers are conducted in a way that cannot be seen as discriminatory or exclusionary."
This I agree with. And a no-need policy, which eliminates the RIPE-NCC's judgment from the picture, also eliminates the possibility that RIPE-NCC's judgment could be construed as discriminatory or exclusionary. But the statement goes on to say:
"The fact that the allocation of IP addresses by the RIPE NCC occurred on the basis of the proof of objective need, rather than purely economic considerations, has protected the RIPE NCC from competition law claims."
First, I would ask for evidence. Has anyone ever threatened NCC with competition law claims before and had their case thrown out based on th existence of needs assessment? I strongly suspect not, but if so, let us know. It seems obvious to me that RIPE-NCC is more likely to be challenged legally if it is directly responsible for making the decision as to who gets and does not get addresses. A court might uphold their methods of assessing need, but this does not tell us anything about whether they would be more or less subject to such challenges if needs assessment goes away. I'm always wary of statements about legal matters that start "it seems obvious to me". Whilst it might seem, to the layman, that the law is an ass, we unfortunately have to deal with it in its own strange twilight zone, with its own rules. As a layman, I agree with you. Unfortunately in the twilight zone we have to rely on the guides that we have engaged. Second, the statement says "Removing the needs-based requirement would create an exposure to competition law claims based on discriminatory treatment or refusal to supply." This is just wrong. If RIPE is not involved in a transfer of number blocks, it simply cannot be accused of discriminatory treatment. It offers no "treatment" whatsoever.
Indeed, the legal analysis suggests the correct conclusion:
"Competition law claims would be mainly addressed to LIRs that could be seen as coordinating in stockpiling and applying discriminatory practices."
In other words, a more market-based allocation regime might involve competition policy claims against individual buyers of IP numbers who are stockpiling addresses for anti-competitive purposes. But RIPE would not be liable.
The statement adds, "Such claims may also be addressed to the RIPE NCC, if only in order to make more publicity for the claim." In other words, these claims would have no legal merit and might be filed only for publicity purposes. But if publicity is the object, then the existence of needs assessment will not protect RIPE either - a litigant could sue RIPE-NCC to gain publicity either way. Our twilight zone guides think not, and I personally wouldn't presume to have an opinion one way or the other. All the impact analysis says is "if this proposal goes through then you *may* wish to think about
On 05/08/2013 11:41, Milton L Mueller wrote: putting aside a small additional pot to pay your lawyers". The RIPE NCC will almost certainly be doing so in the next budget, if this proposal goes through. It probably won't be a huge amount, but we'll do it because we run the RIPE NCC in an extremely conservative manner.
QED
Remember that the Romans met their final fate at the hands of the barbarian hordes. Nigel
* Milton L Mueller
"Competition law claims would be mainly addressed to LIRs that could be seen as coordinating in stockpiling and applying discriminatory practices."
That's a feature, not a bug. :-) I'd much rather have LIRs that would engage in stockpiling and applying discriminatory practices in breach of competition laws *not* be able to defend themselves with «don't look at us, the RIPE NCC said it was OK!» Tore
"Competition law claims would be mainly addressed to LIRs that could be seen as coordinating in stockpiling and applying discriminatory practices."
That's a feature, not a bug. :-) I'd much rather have LIRs that would engage in stockpiling and applying discriminatory practices in breach of competition laws *not* be able to defend themselves with <don't look at us, the RIPE NCC said it was OK!>
MM: Exactly my point! The existence of a needs assessment, which gives RIPE-NCC's imprimatur to the outcome, is much more likely to entangle the NCC in these things than its absence. The staff's legal assessment needs to be re-thought. Addressing also Nigel Titley's argument, it's unfortunate that he has seized on the existence of a single phrase ("it seems obvious to me"), a phrase not at all essential to the point being made, to avoid the real discussion. Take that phrase out and the same refutations apply to your lawyers' statement. They need to explain a) whether there is any REAL litigation in which the existence of needs assessment has actually shielded RIPE-NCC from a claim; b) how the use of needs assessments make any less likely claims made purely for "publicity" purposes; c) why RIPE-NCC's involvement in allocations of a highly scarce and increasingly contested resource via needs assessment wouldn't make it _more_ likely to be entangled in litigation
On 5 Aug 2013, at 12:24, Milton L Mueller <mueller@syr.edu> wrote:
They [NCC's lawyers? - JR] need to explain a) whether there is any REAL litigation in which the existence of needs assessment has actually shielded RIPE-NCC from a claim; b) how the use of needs assessments make any less likely claims made purely for "publicity" purposes; c) why RIPE-NCC's involvement in allocations of a highly scarce and increasingly contested resource via needs assessment wouldn't make it _more_ likely to be entangled in litigation
Not quite. None of us here are practising lawyers AFAIK, far less lawyers who understand Dutch/EU law on this particular topic. It would be wise to defer to the experts -- presumably the NCC engaged a law firm who know this field -- instead of continuing our amateur speculations. If further clarifications and explanations are needed, I suggest we start at the beginning by asking the NCC to publish the brief given to its legal advisers and their response. This way we will know if the right questions were asked at the outset. Everyone can then choose to hire their own lawyers to advise on the correctness and completeness of the reply. Or do some research of their own in a law library, assuming people do that sort of thing these days. Or we could just take the advice of the NCC's lawyers on trust: that's what they get paid to do after all. I have no idea if the things on your wish list above are necessary or sufficient to address the issues (excuse the pun). For this non-lawyer, they do seem to be putting the cart before the horse.
On 05/08/2013 12:24, Milton L Mueller wrote:
MM: Exactly my point! The existence of a needs assessment, which gives RIPE-NCC's imprimatur to the outcome, is much more likely to entangle the NCC in these things than its absence. The staff's legal assessment needs to be re-thought.
Just for the record and to be pedantic, the legal assessment was made by external legal consultants. We do not have an expert in EU competition law on the staff.
Addressing also Nigel Titley's argument, it's unfortunate that he has seized on the existence of a single phrase ("it seems obvious to me"), a phrase not at all essential to the point being made, to avoid the real discussion. Take that phrase out and the same refutations apply to your lawyers' statement.
I'm sorry, I'd forgotten that you seem to have little or no sense of humour. My apologies, I'll try and remember in future.
They need to explain a) whether there is any REAL litigation in which the existence of needs assessment has actually shielded RIPE-NCC from a claim;
No, we have never seen any REAL litigation. This is a feature and not a bug. It would be perfectly possible to argue that the existence of needs assessment has meant that we have seen no litigation at all. We prefer it this way.
b) how the use of needs assessments make any less likely claims made purely for "publicity" purposes; This wasn't what the legal advice said. It said that needs assessment would likely result in fewer claims, full stop. And in the event of fewer claims there is a lower probability that the the RIPE NCC would be involved "for publicity purposes" or indeed for any purposes whatsoever.
c) why RIPE-NCC's involvement in allocations of a highly scarce and increasingly contested resource via needs assessment wouldn't make it _more_ likely to be entangled in litigation
because we have a different legal environment in the EU to the US. Frivolous claims tend to be dismissed much earlier in the process and the existence of a well documented and well established process which has worked well in the past tends to act as a deterrent. Milton, I'm happy to listen to you argue as an economist, but you are neither a lawyer nor an expert in EU legal practice. Neither am I and I would expect those listening to me to take whatever I say on legal issues with a shovelful of salt. I've stepped way outside my area of expertise in this matter, which is why the RIPE NCC pays lawyers to give legal advice and not me. My initial posting in this thread was merely to bring the details of the advice to your attention. You now have actually read the impact assessment and I'm happy that you are now better informed. I'll now step back again. Nigel Chairman, RIPE NCC board
On Mon, Aug 05, 2013 at 01:13:14PM +0200, Tore Anderson wrote:
That's a feature, not a bug. :-) I'd much rather have LIRs that would engage in stockpiling and applying discriminatory practices in breach of competition laws *not* be able to defend themselves with �don't look at us, the RIPE NCC said it was OK!�
I think this discussion has come off the rails a wee bit. As I read the proposal, it is (correct me if I'm wrong) simply about removing a phrase -and associated bureaucratic process that causes work and delay for operators- that has become meaningless in practice even before IPv4 depletion. All the "needs assessment" consists of is a check that the application conforms somewhat to the letter of the policy (the aforementioned "giggle test"). There is even a specialised skill in creating assignment/allocation requests that will pass the "needs assessment" with minimum hassle. (Full disclosure: This skill has paid my bills a few times) Since there is no point in keeping around a meaningless procedure, there are, in my opinion, two options: 1) implement 2013-03 and give policy standing to a situation that obtains anyway. 2) actually assess the needs of each application on its merits, as some participants in this debate seem to be hinting at. This is something that not many network architects are qualified to do, let alone RAs (with no offence to RAs intended). Even assuming the NCC hired highly qualified networkers to perform these assessments, the process would still be largely arbitrary (ask any two networkers about the "right" way to build a network and you will get three opinions), expensive and totally disproportional in effort, especially considering that there is not that much IPv4 space left to distribute in whichever way. As far as hoarding and speculation is concerned, I'm not sure this is such a massive problem. IPv4 space is a risky speculative investment, as soon as IPv6 usage gains significant traction, it is likely to become progressively worthless and the effort and cost to obtain large amounts for speculation (remember, 1024 IPs per LIR) should make it unattractive. [Caveat: IANAEconomist] For the avoidance of doubt, in case this wasn't clear from the above, I hereby restate my support for 2013-03. rgds, Sascha Luck
And by the way, with my personal hat on, and with Tore's "operational use" amendment I'm reasonably happy with this proposal. Nigel
Hello, On 25 Jul 2013, at 21:55, Jan Ingvoldstad <frettled@gmail.com> wrote:
I'm bewildered, confuzzled, and wide-eyed, yes, nearly astonished, that Tore's points don't seem to penetrate the fog.
I can say the same thing. I did not really think what I was saying was so confusing…
I've read this proposal a few times, and as far as I can tell, most if not all of the alleged counterpoints to 2013-03 are _not_ counterpoints to 2013-03, but to something else.
I may have misread the proposal, and therefore I request that Filiz, Michele and Nick please point out exactly which points _introduced_ or _altered_ with 2013-03 they disagree with, so that I, and other confused people, can have a better chance of understanding your arguments.
Please?
Just because you asked nicely :).. I am not going to go through a very detailed word smithing or referencing, sorry, in my case I do not believe this will be helpful. But I will try to put my point of view in a different way again, using some different words and then I will stop because I feel I am repeating myself and some of the members of this list may already feel overwhelmed about the discussion. Here it is my main point: "Justification for need" and "evaluation of justification for need" are two different things. First one, "Justification for need", is perfectly a policy matter and I believe IPv4 policy should still mention this, as long as RIPE NCC continues allocating space to its members and the last /8 is totally exhausted. Say something along the lines, "LIRs requesting address space from the RIPE NCC should have a need for the requested space for a network of their own or their customer". So that we at least put a barrier in front of those who would just ask for an allocation to immediately turn it into an asset. But those who really are in need are primarily highlighted by the policy. Current policy has the following text: "Members can receive an initial IPv4 allocation when they have demonstrated a need for IPv4 address space." Tore's proposal is removing this totally and I do not agree with it. The latter, "evaluation of justification for need" is totally an operational matter that is performed by the RIPE NCC. Neither the current policy nor Tore's proposal has any significant text on this but this is one of his arguments for his proposal. In my opinion, real solution to this procedural problem of evaluation is on procedural level, not on the policy level. RIPE NCC may be asked to change their evaluation tools/systems/mechanisms. This does not require to remove the entire "need" notion from the policy text. Kind regards Filiz Yilmaz
-- Jan
On Thu, Jul 25, 2013 at 10:59 PM, Filiz Yilmaz <koalafil@gmail.com> wrote:
Just because you asked nicely :)..
Thanks :)
I am not going to go through a very detailed word smithing or referencing, sorry, in my case I do not believe this will be helpful.
But I will try to put my point of view in a different way again, using some different words and then I will stop because I feel I am repeating myself and some of the members of this list may already feel overwhelmed about the discussion.
Here it is my main point:
"Justification for need" and "evaluation of justification for need" are two different things.
First one, "Justification for need", is perfectly a policy matter and I believe IPv4 policy should still mention this, as long as RIPE NCC continues allocating space to its members and the last /8 is totally exhausted. Say something along the lines, "LIRs requesting address space from the RIPE NCC should have a need for the requested space for a network of their own or their customer".
So that we at least put a barrier in front of those who would just ask for an allocation to immediately turn it into an asset.
That barrier is a paper tiger, unfortunately.
But those who really are in need are primarily highlighted by the policy.
Current policy has the following text: "Members can receive an initial IPv4 allocation when they have demonstrated a need for IPv4 address space."
Tore's proposal is removing this totally and I do not agree with it.
The latter, "evaluation of justification for need" is totally an operational matter that is performed by the RIPE NCC. Neither the current policy nor Tore's proposal has any significant text on this but this is one of his arguments for his proposal.
In my opinion, real solution to this procedural problem of evaluation is on procedural level, not on the policy level. RIPE NCC may be asked to change their evaluation tools/systems/mechanisms. This does not require to remove the entire "need" notion from the policy text.
So, in essence, what you state is that: a) There is no need to change or remove the "need" statement in the policy. b) The RIPE NCC should decide how "need" is determined as a matter of procedure. Given what appears to be the majority view here, the NCC may just as well decide to interpret the community's view on "need" as something that does not need to be documented in itself, other than placing a request for a network block. Altering this particular part of the policy document as Tore suggests will change very little in practice and procedure. The way I see it, if you want for this to be a barrier, you should propose new wording in the relevant policy documents, which stresses that a need should be present, that there should be a justification for it, and _what justification_ is sufficient. PS I'm aware of organizations becoming LIRs because of a claimed need for IP addresses for end users, just to ensure that they get IPv4 space they may not _actually_ need – and that this happened just because of the current policies. The "need" is fictional and/or hypothetical, and there is little way for the RIPE NCC and the community to know whether this is the case or not. Speaking as someone working for someone who currently uses both IPv4 and IPv6, the "need" requirement always seemed a bit out of place. If it is to have a place, it needs a clear policy for that. -- Jan
On Thursday, July 25, 2013, Jan Ingvoldstad wrote:
Here it is my main point:
"Justification for need" and "evaluation of justification for need" are two different things.
First one, "Justification for need", is perfectly a policy matter and I believe IPv4 policy should still mention this, as long as RIPE NCC continues allocating space to its members and the last /8 is totally exhausted. Say something along the lines, "LIRs requesting address space from the RIPE NCC should have a need for the requested space for a network of their own or their customer".
So that we at least put a barrier in front of those who would just ask for an allocation to immediately turn it into an asset.
That barrier is a paper tiger, unfortunately.
and has been so since the beginning.The amount of paper have changed over times. If the policy states "need" then NCC feels obliged to figure out how to determine "need"
But those who really are in need are primarily highlighted by the policy.
Current policy has the following text: "Members can receive an initial IPv4 allocation when they have demonstrated a need for IPv4 address space."
Tore's proposal is removing this totally and I do not agree with it. (...)
So, in essence, what you state is that:
a) There is no need to change or remove the "need" statement in the policy. b) The RIPE NCC should decide how "need" is determined as a matter of procedure.
Given what appears to be the majority view here, the NCC may just as well decide to interpret the community's view on "need" as something that does not need to be documented in itself, other than placing a request for a network block.
Be careful here - we are not operating by majority but by consensus - so we need to get everybody - or at least most - to understand and not object.
Altering this particular part of the policy document as Tore suggests will change very little in practice and procedure.
That is still not clear to me. Hans Petter -- Hans Petter Holen Mobile +47 45 06 60 54 | hph@oslo.net | http://hph.oslo.net
On Fri, Jul 26, 2013 at 6:31 PM, Hans Petter Holen <hph@oslo.net> wrote:
Given what appears to be the majority view here, the NCC may just as well
decide to interpret the community's view on "need" as something that does not need to be documented in itself, other than placing a request for a network block.
Be careful here - we are not operating by majority but by consensus - so we need to get everybody - or at least most - to understand and not object.
Yes, we do operate by consensus, but let's say that we can't get everybody to not object to the change, and therefore the sentence in question remains (as an oddity, IMHO, but nevertheless). The majority has then given pretty clear signals about how important that "need" is, which is to say "not at all", while a vocal few have said it _is_ important, and apparently more important than current and former practice has been handled by the RIPE NCC. Now, what is the RIPE NCC to make of that? There are three options: 1) Carry on as before. 2) Loosen up on the "need" interpretation. 3) Become more strict with how "need" must be documented. Additionally, this will lead to new proposals for changes to other policy texts to ensure harmony with the remaining requirement for some sort of "need". This is what I'm getting at. -- Jan
http://www.ietf.org/id/draft-resnick-on-consensus-02.txt may be of help
On Sat, Jul 27, 2013 at 11:32 AM, Randy Bush <randy@psg.com> wrote:
http://www.ietf.org/id/draft-resnick-on-consensus-02.txt
may be of help
Actually, it was. And it is sane. Thanks. -- Jan, perhaps less silly now.
Hi, On Sat, Jul 27, 2013 at 11:32:29AM +0200, Randy Bush wrote:
Thanks for the pointer. While this is an IETF draft, the principles by which Sander and I try to assert consensus are similar - so while we certainly prefer to reach unanimous agreement (or at least, abstention instead of opposition from those that do not support a proposal), we've had proposals in the past where single individuals very strongly opposed the proposal, but nobody else agreed to their reasoning, and it wasn't possible to convince them that their argument does not hold - so we went ahead nevertheless. For this particular proposal here, Sander and I are reading and listening carefully, and will write a very detailed summary at the end of the review phase... Of course it helps us enormously if those that post their concerns about things, for example, "abuse of the last /8 policy" or "unrestricted trading of addresses", clearly state whether they see this as a consequence of 2013-03 and actually object to 2013-03 because of that (and if yes, which parts of 2013-03, so Tore can answer to that). If we can't see specific opposition to changes brought by 2013-03, we tend to evaluate such statements as "neutral as far as the proposal at hand goes". Gert Doering -- APWG chair -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
we certainly prefer to reach unanimous agreement
and i prefer cash to fall from the sky. can we now return to the real world? for any issue of substance, there will usually be honest disagreement. what we are not good at is saying is o you three people are the ones not moving from disagreement. o can you live with what everyone else seems to be able to live with? o if not, well, sometimes life is tough. it would be *really* nice is the few in disagreement could live with the general consensus. and we certainly need to pay good attention to their points. but sometimes we need to move ahead with there still being a (very few) folk in disagreement. randy
On Sun, Jul 28, 2013 at 1:34 PM, Randy Bush <randy@psg.com> wrote:
it would be *really* nice is the few in disagreement could live with the general consensus. and we certainly need to pay good attention to their points. but sometimes we need to move ahead with there still being a (very few) folk in disagreement.
I think this is where the point about having a mutual understanding is important: - what the proposition changes and does not change - what the opposing arguments are, to which points of the proposition … because, as someone aptly noted earlier, the number of ayes and nays do not necessarily reflect the opinions of a majority or minority of the members. It seems to me that we are just about there, now, and that any unclear statements, suggestions and criticisms can probably be considered "neutral". Then again, this is merely my personal opinion. :) -- Jan
* Filiz Yilmaz
So that we at least put a barrier in front of those who would just ask for an allocation to immediately turn it into an asset. But those who really are in need are primarily highlighted by the policy.
Current policy has the following text: "Members can receive an initial IPv4 allocation when they have demonstrated a need for IPv4 address space."
Tore's proposal is removing this totally and I do not agree with it.
Hi Filiz, and thanks for pointing out the specific text! I'll just reply with my reasons for removing this text and why I think it is the right thing to do, given 2013-03's ambition. I understand that ultimately, we might just have to agree to disagree on this. :-/ First, on a higher philosophical level, the only reason for the above sentence's existence, is the "Conservation" goal in section 3.0 ("..To maximise the lifetime of the public IPv4 address space, addresses must be distributed according to need..."). 2013-03 removes the "Conservation" goal, which means it also removes the only rationale for requiring the demonstration of need for initial IPv4 allocations. Hence, it makes sense to remove this part of the policy text as well. Second, on a more pragmatic level, when we hit IPv4 depletion last year, the requirement to demonstrate need in order to receive initial allocations changed. It is no longer "specify how many addresses do you need?", but a boolean "do you need more than 0 addresses? yes/no". Demonstrating the need for 1 IPv4 address is, in my opinion, merely a formality - anyone could do that with almost no effort. So I do not believe that the current requirement to demonstrate need in order to receive an initial allocation could be considered a "barrier", as you put it. If an organisation is determined enough to join the NCC and pay its membership fees, it will be able to receive its initial (and last) IPv4 /22 as well, regardless of what its ulterior intentions for its use are, including "assetification". Also, we do need to make a cost/benefit analysis here and look at the proposal as a whole - i.e., does it make sense to maintain the entire IPv4 assignment bureaucracy, in order to keep this completely inefficient barrier around? Third, referring more to ensuring the policy text forms a complete whole: Let's say I agreed to add this particular sentence back into the proposed policy, in order to alleviate your concerns and make you support the proposal. (Pragmatically, I wouldn't mind - I don't particularly care if the NCC asks the new LIRs "do you need at least 1 IPv4 address?" before handing out the initial /22 allocation as I see this as a mere formality.) This would cause a headache for the NCC, as we're telling them to demand a "need demonstration" from new LIRs, without telling them what that actually means. So the exchange could very well be "NCC: do you need it? LIR: yes, I plan on selling it." - which is pretty much exactly what you'd wanted a barrier against, right? So in order to prevent that, we'd need to add back more and more "need" text, and sooner or later we'd be end up back where we started. So I don't really want to go down that road, especially when the potential upside from doing so is a totally inefficient deterrence in the first place.
The latter, "evaluation of justification for need" is totally an operational matter that is performed by the RIPE NCC. Neither the current policy nor Tore's proposal has any significant text on this but this is one of his arguments for his proposal.
In my opinion, real solution to this procedural problem of evaluation is on procedural level, not on the policy level. RIPE NCC may be asked to change their evaluation tools/systems/mechanisms. This does not require to remove the entire "need" notion from the policy text.
I actually tried something like this during the discussion of 2012-05. At this point, the service requested from the NCC was something that was not mentioned in the policy at all, and for which there had been no previous established practice. My point of view was pretty much the same as yours above: "Do we need to put this in policy? Can't we just ask the NCC first?" However, the answer given by the NCC was that they preferred this to be a clear request coming out of the PDP. Evaluation of need, on the other hand, is deeply entrenched in our current policy document, and we have years of previously established practice. In light of this, and also my experiences in this approach failing for 2012-05, I highly doubt that me withdrawing 2013-03 and instead simply asking the NCC to stop evaluating need and expecting the LIRs to do so is likely to get anywhere. (I'm sure Andrea will correct me if I'm wrong!) Best regards, Tore Anderson
On 26 July 2013 07:32, Tore Anderson <tore@fud.no> wrote:
Second, on a more pragmatic level, when we hit IPv4 depletion last year, the requirement to demonstrate need in order to receive initial allocations changed. It is no longer "specify how many addresses do you need?", but a boolean "do you need more than 0 addresses? yes/no". Demonstrating the need for 1 IPv4 address is, in my opinion, merely a formality - anyone could do that with almost no effort.
<specific bit> However, I know of several organisations who refer to the requirement to require IP address when asking for them from customers using the line: "We have to be able to justify the needs basis to get address space from RIPE and they require us to make sure that you have a need for the address space too" By removing a need at the LIR/RIR boundary you will create a problem at the Customer/LIR boundary. So keeping the text about need but removing the conservation goal bit is actually a desirable outcome. <general bit> I think the goal of making life easier is nice but I fear we are rearranging deck chairs again :) J -- James Blessing 07989 039 476
Hi James,
"We have to be able to justify the needs basis to get address space from RIPE and they require us to make sure that you have a need for the address space too"
Euhm, you do realise that the "to get address space from RIPE" part has ended last year, right? ;-)
By removing a need at the LIR/RIR boundary you will create a problem at the Customer/LIR boundary.
I have heard that argument multiple times, but I don't understand it. What is wrong with: "There is a very limited amount of IPv4 address space left, so I have to be able to justify the needs basis to get address space for this project from my boss/manager/etc and he/she requires us to make sure that you have a need for the address space too" Cheers, Sander
Hi, On Fri, Jul 26, 2013 at 11:40:43AM +0100, James Blessing wrote:
I think the goal of making life easier is nice but I fear we are rearranging deck chairs again :)
IPv4 is going to be with us for a long time, and the specific bits that Tore is attacking with 2013-03 are going to cause work for LIR network admins for the next 10 years, or so. So there is more benefit to this than mere deck chairs... Gert Doering -- APWG chair -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
On 26/07/2013 14:23, Gert Doering wrote:
Hi,
I think the goal of making life easier is nice but I fear we are rearranging deck chairs again :) IPv4 is going to be with us for a long time, and the specific bits that Tore is attacking with 2013-03 are going to cause work for LIR network admins for the next 10 years, or so. So there is more benefit to this
On Fri, Jul 26, 2013 at 11:40:43AM +0100, James Blessing wrote: than mere deck chairs...
And if we are going to go down with the ship, then at least the deckchairs will be pleasingly arranged and the band will be playing a heartwarming selection from the shows. Nigel
On Thursday, July 25, 2013, Jan Ingvoldstad wrote:
I'm bewildered, confuzzled, and wide-eyed, yes, nearly astonished, that Tore's points don't seem to penetrate the fog.
I've read this proposal a few times, and as far as I can tell, most if not all of the alleged counterpoints to 2013-03 are _not_ counterpoints to 2013-03, but to something else.
Well, it could be the title: "No need - Post-Depletion" -hph
-- Hans Petter Holen Mobile +47 45 06 60 54 | hph@oslo.net | http://hph.oslo.net
On 25/07/2013 20:49, Tore Anderson wrote:
I would actually claim that this is not difficult to pull off under today's policy either.
no, indeed. btw, I'm not trying to imply that 2013-03 will cause hoarding and market skew - I'm just thinking out loud here and trying to understand how the proposal might affect the address market in the future.
leading to reduction in market liquidity,
The numbers I posted in my previous message suggest that the market is only supplying 3-4% of actual demand
on face value, this is not good but it's also interesting to note that ipv4 address demand is not so furious that people are desperate enough to go out and register large quantities of LIRs. This suggests that the cost of €4/address + hassle is too high for people to want to bother doing it in bulk.
to pay the most). Lather, rinse, repeat.
yep, agreed.
historically, two things: the presence of policies which make it difficult to transfer large amount of address space from many different sources,
Could you point out which part/passage of the policy you're referring to here?
the two things I pointed out are artefacts of current policy, not features of 2013-03.
So just to make sure I have not misunderstood you here, you are also accepting the following argument to be equally valid (or invalid) as the one you wrote above?
"we need to understand that it is a bad idea to put any faith in the requirement to demonstrate need rule as a means of regulating the market, or to believe that the rule will stay there as a long term fixture."
yes, correct. As I said, I'm not arguing in favour or against 2013-03 here, but just trying to understand its potential consequences. Broadly speaking, I think it's probably a rather good policy, but as it's such a fundamental shift away from all previous policy and practices, it's important to have discussions like this so that we understand the changes we're making. Nick
On Jul 25, 2013, at 10:20 AM, Nick Hilliard <nick@inex.ie> wrote:
that is true, but it might be useful to make some sort of estimate particularly with regard to the class A+B legacy allocations. Eyeballing, I figure there's probably quite a good chunk of unrouted legacy space or legacy space which ended up in commercial organisations who probably don't need all that space, and which could eventually come into the market - maybe 30-40 /8s as a rough estimate. Given that the RIRs ploughed through 94 /8s since the early 1990s, this represents a reasonably large amount of integers from the point of view of potential future liquidity.
Nick - It's probably best to look at the last 2 or 3 years of IANA->RIR allocations as an estimator of demand, rather than averaging across the entire period, e.g. reference Geoff Huston's recent blog entry for some very interesting pre-runout statistics (including APNIC numbers in excess of 12 /8's per year) - http://www.potaroo.net/ispcol/2013-08/when.html In terms of available space that may come to market, I'll note that many of these address blocks are actually in use by organizations, but in terms of routing hidden behind various firewall/nat combinations. Taking both the recent burn rate and in-use-but-not-routed factors into consideration, it's likely that (at a high enough price) that there are several years of additional IPv4 liquidity that could be obtained, but rather uncertain as to whether it could provide, say, 10 more years of continued IPv4 Internet growth... FYI, /John
Hi, On Wed, Jul 24, 2013 at 05:27:06PM +0200, Filiz Yilmaz wrote:
I am not a lawyer, but hypothetically speaking, if your proposal gets accepted there is some (again totally hypothetical?) potential that some LIRs may chose to rush and get whatever is left in the NCC pool (which is the rest of the last /8?) without really needing them, simply because they do not need to show any justification after all. They want it, they will get it and probably RIPE NCC will have to deal with some very serious First in First Out (granted) service scheme...
Uh, Filiz, there is no real difference between "old policy" and "with 2013-03 in place" in that regard. Both limit the address space that a single LIR can "rush and get whatever is left" to a *single /22*. So if you want to hoard, you need to open 5000 LIRs today, each of them applying for a /22, and documenting the need for a *single* IPv4 address (as the /22 allocation is not sized based on the difference between "I need a single address" vs. "I need a /8" - need is need) and a single IPv4 address is easier documented than a new corporation opened to become LIR. If you want it after 2013-03 is in place, you need to open 5000 LIRs, each of them applying for a /22, and not documenting the need for a single IPv4 address anymore. But you still need to incoprorate 5000 companies. The only place where "document need" makes a difference is if a LIR already has allocated space, which needs to be filled to 80% today, and that would go away with 2013-03 - but there is just no way a single LIR can "grab the rest of the last /8 pool". But maybe I'm misunderstanding your point? (The /22 in the "last /8 policy" was chosen to ensure that every single LIR in existence today can get their /22, and we'll still have some left - the /8 will last for 16.000 /22s, and the number of active LIR is still below 9000 today) Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
* Gert Doering
(The /22 in the "last /8 policy" was chosen to ensure that every single LIR in existence today can get their /22, and we'll still have some left - the /8 will last for 16.000 /22s, and the number of active LIR is still below 9000 today)
It's last much longer, actually. Since depletion, the NCC has recovered 922,824 IPv4 addresses (outside of 185/8), and the NCC's one-fifth share of the IANA Recovered IPv4 Pool currently numbers 3,820,953 addresses. Put together, this gives us another 4,632 /22s to give to new LIRs. When taking these not-185/8 (yet still covered by the last /8 policy) pools into account, it is actually the case that the "last /8" pool has seen a net *growth* since the NCC hit IPv4 depletion. :-) Tore
Hi, On Wed, Jul 24, 2013 at 08:16:35PM +0200, Tore Anderson wrote:
When taking these not-185/8 (yet still covered by the last /8 policy) pools into account, it is actually the case that the "last /8" pool has seen a net *growth* since the NCC hit IPv4 depletion. :-)
Interesting, I was not aware of that. I take this as a success of our policy framework as it is now(*): ensure that there is some IPv4 left for new market entrants, for the years to come. ( (*) and not significally changed by 2013-03 ) Gert -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
Filiz, Michele When number blocks are traded by companies in a market, the price of number blocks reflects their scarcity - i.e., the relationship between supply and demand - and thus companies have very strong incentives to allocate and conserve. These incentives are at once both more effectively enforced and more flexible than a regime in which a central bureaucratic authority looks at some technical indicators submitted to them on pieces of paper (or digital forms) and tries to assess "need." So there are still strong incentives for responsible management without needs assessment. And since v4 is depleting, the idea that the price would rise and people would over time be discouraged from using it, ought to be seen as a good thing. Administrative needs assessment is not the ONLY method that could EVER be used to allocate resources. There are a variety of tools and mechanisms and the authors of 2013-3 are correct that the conditions that led to traditional needs assessments for numbers are gone, and not applicable to the current situation. I've always asked the religious believers in needs assessment whether they think their rental of office space should be subject to a needs assessment. It's not meant to be a challenge, just something to make you think. The economic characteristics of the resources are not that different (space, like number blocks, are occupied but not consumed, and there is a short-term fixity in supply). So let me volunteer to do a needs assessment on Michele's offices, and his home, and perhaps a few other belongings. I just want to see if he is wasting any resources. ;-) Or would Michele prefer to just pay for what he thinks he needs? From: address-policy-wg-bounces@ripe.net [mailto:address-policy-wg-bounces@ripe.net] On Behalf Of Filiz Yilmaz Sent: Wednesday, July 24, 2013 6:53 AM To: Tore Anderson Cc: address-policy-wg@ripe.net Subject: Re: [address-policy-wg] 2013-03 New Draft Document and Impact Analysis Published (No Need - Post-Depletion Reality Adjustment and Clean up) Hello Tore, While I am curious for Michele's response to your mail too, here is my bit, as I feel I agree with him in terms of principles. First of all, I am not totally against your proposal; it cleans up the policy text reflecting today's circumstances to some extent and it makes a long document way more readable. This is also why I am writing back because I've read the draft policy document from the beginning to the end. My observation is that the new document proposed is not exactly a "registration" policy document. It more looked to me like a description of how address space management is done within RIPE NCC region "by the RIPE NCC". If I am not missing anything crucial, the main points described are: - The language is English, - How big an allocation can be, - That there is no PI anymore to be assigned directly from the NCC pools to End users (except for the IXPs) so all resources will only goto LIRs - And these blocks can be transferred between LIRs. The only bit about registration I see in the new text is section 4.0 Registration Requirements and it does not go more than saying details should be recorded in the database. So it does not contain any substantial information for registration or address management on the LIR's side. This is interesting as now with this proposed policy any End user's chance to get any IPv4 address space will be through an LIR and hope that these LIRs are responsible and know what they are doing. I would like to see some guidelines or at least principles mentioned in this document so the LIRs know their responsibility in terms of fair address management as well as the End Users so they know what to expect from these LIRs. This is what I would be expecting from a transparent documentation of a set of policies and principles that are still in place. We may not have too many specific policies to set for the few left-over resources but I would like to believe we still have "principles" towards the responsible management of these resources. In that sense Michele has a point and I argue that LIRs need to be guided for "good address management" even without the "conservation" principle as the top priority in the new IP world. This is missing in the proposed policy text for it to be considered as a helpful "registration" policy in my opinion. In practice, I can set up a new LIR now and ask for a new allocation and I may be someone who does not have any previous RIPE or RIPE NCC experience. If all I have is this document, I am not sure if it tells me enough about my responsibilities, while I will be a critical token in the EU address management and registration system by just becoming an LIR. My other concern is in regards to the transfers. As neatly put by the NCC Board in the Impact Analysis: --- * As mentioned in previous sections, the policy proposal would negatively affect the ability of LIRs to engage in inter-RIR transfers, as the RIPE NCC's service region would be the only one without a needs-based requirement for transfers. * Implementation of the policy could expose LIRs to legal challenges under EU competition law. --- I think singling out the RIPE NCC region in the world of transfers may not be the best idea at this stage. Kind regards Filiz Yilmaz On 24 Jul 2013, at 10:52, Tore Anderson <tore@fud.no<mailto:tore@fud.no>> wrote: * Michele Neylon - Blacknight As previously stated, I do NOT support the "no need" policy and cannot support this document. IP addresses are a finite resource, as we all know, and obliging people to provide some level of justification makes sense. The argument for "conservation" may no longer be valid, but there will always be a compelling argument in favour of good resource management, which I believe the policy covers. RIPE should not remove the requirement to provide justification. Hi Michele, I doubt you'll find anyone in the working group who is against good resource management. I am convinced that the proposed policy is not in conflict with good resource management, otherwise I would never have proposed it. While I can obviously only speak with certainty for myself, I assume that the people who support the proposal feel the same way. While it appears you believe that the proposal will bring about poor resource management, your message neglected to explain why or how. This makes it rather difficult for me to try to alleviate your concerns. As Gert also pointed out recently, the main reason I believe that IPv4 would continue to be consumed responsibly under the proposed policy, is that the LIRs in the region are painfully aware that there is no more IPv4 to be had from the RIPE NCC. Should an LIR anyway decide to go on a "spending spree" with its remaining inventory, it would only end up hurting itself by expediting its own depletion date. The community will not be impacted - without a Common, there can be no Tragedy. Best regards, Tore Anderson
Hello Milton, I hear what you are saying but I think you are comparing apples and pears. In regards to Michele's office space, try think of that analysis when Michele and say whole of RIPE community are to share a finite, i repeat finite, possibility of office spaces. In real economics of today you have more options to create your own alternative if something is not suiting your needs. IP address space is finite though, we wont be able to create all sorts of alternatives other than one kind; IPv6 which still has its issues. I would agree with you in the domain name space but not in IP. Filiz Apologies for the brevity of this mail, it was sent from my iphone On 25 Jul 2013, at 16:40, Milton L Mueller <mueller@syr.edu> wrote:
Filiz, Michele When number blocks are traded by companies in a market, the price of number blocks reflects their scarcity - i.e., the relationship between supply and demand - and thus companies have very strong incentives to allocate and conserve. These incentives are at once both more effectively enforced and more flexible than a regime in which a central bureaucratic authority looks at some technical indicators submitted to them on pieces of paper (or digital forms) and tries to assess "need."
So there are still strong incentives for responsible management without needs assessment. And since v4 is depleting, the idea that the price would rise and people would over time be discouraged from using it, ought to be seen as a good thing. Administrative needs assessment is not the ONLY method that could EVER be used to allocate resources. There are a variety of tools and mechanisms and the authors of 2013-3 are correct that the conditions that led to traditional needs assessments for numbers are gone, and not applicable to the current situation.
I've always asked the religious believers in needs assessment whether they think their rental of office space should be subject to a needs assessment. It's not meant to be a challenge, just something to make you think. The economic characteristics of the resources are not that different (space, like number blocks, are occupied but not consumed, and there is a short-term fixity in supply). So let me volunteer to do a needs assessment on Michele's offices, and his home, and perhaps a few other belongings. I just want to see if he is wasting any resources. ;-) Or would Michele prefer to just pay for what he thinks he needs?
From: address-policy-wg-bounces@ripe.net [mailto:address-policy-wg-bounces@ripe.net] On Behalf Of Filiz Yilmaz Sent: Wednesday, July 24, 2013 6:53 AM To: Tore Anderson Cc: address-policy-wg@ripe.net Subject: Re: [address-policy-wg] 2013-03 New Draft Document and Impact Analysis Published (No Need - Post-Depletion Reality Adjustment and Clean up)
Hello Tore,
While I am curious for Michele's response to your mail too, here is my bit, as I feel I agree with him in terms of principles.
First of all, I am not totally against your proposal; it cleans up the policy text reflecting today's circumstances to some extent and it makes a long document way more readable. This is also why I am writing back because I've read the draft policy document from the beginning to the end.
My observation is that the new document proposed is not exactly a "registration" policy document. It more looked to me like a description of how address space management is done within RIPE NCC region "by the RIPE NCC".
If I am not missing anything crucial, the main points described are:
- The language is English, - How big an allocation can be, - That there is no PI anymore to be assigned directly from the NCC pools to End users (except for the IXPs) so all resources will only goto LIRs - And these blocks can be transferred between LIRs.
The only bit about registration I see in the new text is section 4.0 Registration Requirements and it does not go more than saying details should be recorded in the database.
So it does not contain any substantial information for registration or address management on the LIR's side.
This is interesting as now with this proposed policy any End user's chance to get any IPv4 address space will be through an LIR and hope that these LIRs are responsible and know what they are doing. I would like to see some guidelines or at least principles mentioned in this document so the LIRs know their responsibility in terms of fair address management as well as the End Users so they know what to expect from these LIRs. This is what I would be expecting from a transparent documentation of a set of policies and principles that are still in place.
We may not have too many specific policies to set for the few left-over resources but I would like to believe we still have "principles" towards the responsible management of these resources.
In that sense Michele has a point and I argue that LIRs need to be guided for "good address management" even without the "conservation" principle as the top priority in the new IP world. This is missing in the proposed policy text for it to be considered as a helpful "registration" policy in my opinion.
In practice, I can set up a new LIR now and ask for a new allocation and I may be someone who does not have any previous RIPE or RIPE NCC experience. If all I have is this document, I am not sure if it tells me enough about my responsibilities, while I will be a critical token in the EU address management and registration system by just becoming an LIR.
My other concern is in regards to the transfers. As neatly put by the NCC Board in the Impact Analysis:
--- As mentioned in previous sections, the policy proposal would negatively affect the ability of LIRs to engage in inter-RIR transfers, as the RIPE NCC’s service region would be the only one without a needs-based requirement for transfers. Implementation of the policy could expose LIRs to legal challenges under EU competition law. ---
I think singling out the RIPE NCC region in the world of transfers may not be the best idea at this stage.
Kind regards Filiz Yilmaz
On 24 Jul 2013, at 10:52, Tore Anderson <tore@fud.no> wrote:
* Michele Neylon - Blacknight
As previously stated, I do NOT support the "no need" policy and cannot support this document.
IP addresses are a finite resource, as we all know, and obliging people to provide some level of justification makes sense.
The argument for "conservation" may no longer be valid, but there will always be a compelling argument in favour of good resource management, which I believe the policy covers.
RIPE should not remove the requirement to provide justification.
Hi Michele,
I doubt you'll find anyone in the working group who is against good resource management. I am convinced that the proposed policy is not in conflict with good resource management, otherwise I would never have proposed it. While I can obviously only speak with certainty for myself, I assume that the people who support the proposal feel the same way.
While it appears you believe that the proposal will bring about poor resource management, your message neglected to explain why or how. This makes it rather difficult for me to try to alleviate your concerns.
As Gert also pointed out recently, the main reason I believe that IPv4 would continue to be consumed responsibly under the proposed policy, is that the LIRs in the region are painfully aware that there is no more IPv4 to be had from the RIPE NCC. Should an LIR anyway decide to go on a "spending spree" with its remaining inventory, it would only end up hurting itself by expediting its own depletion date. The community will not be impacted - without a Common, there can be no Tragedy.
Best regards, Tore Anderson
Dear AP WG, as you might have noticed... On Tue, Jul 02, 2013 at 03:28:05PM +0200, Emilio Madaio wrote:
The second version of the draft document for the policy proposal 2013-03 has been published, along with an impact analysis carried out by the RIPE NCC. [..] We encourage you to read the draft document text and send any comments to <address-policy-wg@ripe.net> before 30 July 2013.
... the discussion phase for 2013-03 formally ended about a week ago. In the light of the ongoing discussion, the WG chairs have decided to extend the review phase by two weeks, so we're not cutting short any input from the community. Emilio will send the formal announcement on this later today. After this extention, from where we stand in the discussion today, it's likely that we'll see a new proposal text, new impact analysis, and new review phase - that is, if those that objected to the current proposal can agree with Tore's proposed modifications. In the light of the strong community support otherwise (at least 11 persons voicing support without any restrictions for the current text), I would certainly welcome if those that are sceptical could agree to some middle ground... Gert Doering -- APWG chair -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
participants (36)
-
Andreas Larsen
-
Anfinsen, Ragnar
-
bmanning@vacation.karoshi.com
-
Daniel Stolpe
-
David Conrad
-
David Farmer
-
Dimitri I Sidelnikov
-
Dmitry Burkov
-
Donal Cunningham
-
Elvis Daniel Velea
-
Emilio Madaio
-
Erik Bais
-
Fil
-
Filiz Yilmaz
-
Gert Doering
-
Hans Petter Holen
-
James Blessing
-
Jan Ingvoldstad
-
Jan Zorz @ go6.si
-
Jim Reid
-
John Curran
-
Malcolm Hutty
-
Michele Neylon - Blacknight
-
Mike Simkins
-
Milton L Mueller
-
Nick Hilliard
-
Nigel Titley
-
Opteamax GmbH - RIPE-Team
-
Randy Bush
-
Richard Hartmann
-
Roger Jørgensen
-
Sander Steffann
-
Sascha Luck
-
Sylvain Vallerot
-
Tom Vest
-
Tore Anderson