June 2024 - db-wg - mailman.ripe.net

Changes to the RIPE Database Acceptable Use Policy and Daily Limit Accounting
by Edward Shryane 07 Aug '24

07 Aug '24

Dear colleagues, We would like to share some changes to the RIPE Database Acceptable Use Policy and how we implement the daily limit. The Database team will enable these changes from this Thursday, 16 May 2024 onwards. The RIPE NCC Executive Board approved amendments to the "RIPE Database Acceptable Use Policy" (AUP) in March this year, allowing for an additional method of accounting for RIPE Database queries containing personal data. With this method, the count will be based per user, rather than per IP address, for logged-in users. This allows multiple users to share the same public IP address but be accounted for separately. Previously, an office behind a NAT, for example, would get blocked as all users shared the same query limit. This will no longer be the case, as we will count the number of queries per user based on their RIPE NCC Access (single sign-on) accounts, if they are logged in. For users who are not logged in to RIPE NCC Access accounts, the queries will be counted based on IP addresses. Additionally, we found that the daily limit configured in Whois was inconsistent with the AUP. Along with the other changes described above, we will enforce the daily query limit in Whois in line with the Acceptable Use Policy: * Number of personal data sets returned in queries from an IP address – 1,000 per 24 hours * Number of personal data sets returned in queries from a RIPE NCC Access (SSO) account – 1,000 per 24 hours Users who query for personal data above the daily limit will receive the message below explaining what has happened and what to do next: Access from your host has been temporarily denied. For more information, see: https://apps.db.ripe.net/docs/FAQ/#why-did-i-receive-an-error-201-access-de… The minutes from the March meeting of the RIPE NCC Executive Board are available at: https://www.ripe.net/about-us/executive-board/minutes/2024/174th-executive-… The resolution amending the RIPE Database Acceptable Use Policy is under section 4.6. The updated RIPE Database Acceptable Use Policy is available on our website: https://www.ripe.net/manage-ips-and-asns/db/support/documentation/ripe-data… Regards, Ed Shryane RIPE NCC

8 26

Phone number requirement for person objects
by Cynthia Revström 06 Aug '24

06 Aug '24

Hi, In the DB-WG interim session I mentioned that there's currently a discrepancy between person objects and role objects with regards to contact information. More specifically, person objects currently require a phone number while role objects require an email address. I think we should try to bring person objects more in line with role objects by removing the phone number requirement. Ideally I would want it to be mandatory to have either a phone number or an email address in order to not lose any flexibility but I'm not sure if that is possible. During the session I asked if anyone was opposed to the idea and no one said they were so I would assume that this is relatively uncontroversial but please let me know what you think. -Cynthia

4 6

First round of cleanup of Database WG NWIs
by Peter Hessler 14 Jul '24

14 Jul '24

Hello Working Group, As you all know, the Database Working Group uses a different process from other working groups, and have Numbered Work Items instead of Policy Development Process. We've had many Items on the list, and some have been there since we created the NWI process. So, the Chairs have decided that we need to go through and clean up the list so we can complete the items we wish to complete. For this round, we'd like us to review two NWIs that are similar to each other. https://www.ripe.net/manage-ips-and-asns/db/numbered-work-items/ NWI-2 - Displaying history for database objects where available NWI-17 - Historical data We ask the working group to discuss these two Items and decide if the WG can confirm the problem statements and provide feedback if either of these Items are still a problem that should be persued. We ask for discussion on list until Friday July 5th. Peter Hessler on behalf of the Database WG Chairs

12 20

Re: [db-wg] So what happened last night to the DB?
by Hank Nussbacher 03 Jul '24

03 Jul '24

> Dear colleagues, > > We are aware of an incident affecting Whois updates yesterday evening, which we are continuing to investigate. We will keep the DB-WG informed. > > Regards > Ed Shryane > RIPE NCC There is still ongoing activity with perhaps malicious whois updates. See attached. Regards, Hank

8 11

Whois Release 1.113
by Edward Shryane 01 Jul '24

01 Jul '24

Dear colleagues, RIPE Database release 1.113 has been deployed to the Release Candidate environment for testing. We plan to deploy to production on Monday 1st July. The 1.113 release has the following main changes: * Inetnum AGGREGATED-BY-LIR status (implements RIPE-822 policy) (#1467) * Enable Client Auth Certificate for REST API lookup (#1475) * ROA Overlapping INVALID ROA and VALID ROA fix (#1470) * Java 21 Support (#1440) The release notes are on the website: https://apps.db.ripe.net/docs/Release-Notes/#ripe-database-release-1-113 More information on the Release Candidate environment can be found on our website: https://apps.db.ripe.net/docs/Release-Notes/ The data in the RC environment is a dummified copy of production from 12th June. Please let us know if you find any issues with this release in the RC environment. Regards Ed Shryane RIPE NCC

2 1

Whois Release 1.112.1
by Edward Shryane 24 Jun '24

24 Jun '24

Dear colleagues, RIPE Database release 1.112.1 has been deployed to the PRODUCTION environment just now. This is a bugfix release to help mitigate the ongoing production issue caused by many updates containing objects with an unusual amount of references. This is the only change from release 1.112. We will also apply this change to the upcoming 1.113 release (due next Monday, 1st July). We will continue to monitor for any more incidents, and will publish a full post-mortem later. Regards Ed Shryane RIPE NCC

1 0

RPSL for for foreigh IPv6 space
by Randy Bush 24 Jun '24

24 Jun '24

hi, All of RGnet's address space, mostly legacy, is in the RIPE whois, with RPKI etc. Except ... RGnet has three IPv6 /48s from NTT. Cogent filters BGP based on RPSL, and wants the RPSL for our ASs to be in the appropriate RPSL route6: objects, each with the appropriate AS. This is pretty old-fashioned and reasonable. Do we figure out how to register the route6: objects in NTT and presume Cogent will pick them up across IRR instances? Do we try some hack to violate the RIPE database's pristine authority model? Do we give up on this silly IPv6 stuff? [ just kidding, gert :) ] Surely other have been here before us. randy

3 2

RIPE Policy document updated “IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region” (ripe-826)
by Angela Dall'Ara 20 Jun '24

20 Jun '24

Dear Colleagues, The RIPE policy “IPv4 Address Allocation and Assignment Policies for the RIPE NCC Service Region” has been updated to align with the implementation of NWI4, done in Whois release 1.112, which added the option to change the status of an IPv4 allocation object in the RIPE Database from “ALLOCATED PA” to “ALLOCATED-ASSIGNED PA” when the whole address space is assigned to the LIR infrastructure or for use by an End User with services provided by the issuing LIR. The new document is called ripe-826 and is available at: https://www.ripe.net/publications/docs/ripe-826/ Please note that also the following has been updated: 1) In the Abstract: The link to the webpage where to find information on the Address Policy WG from https://www.ripe.net/participate/ripe/wg/ap to https://www.ripe.net/community/wg/active-wg/ap/ 2) In 1.1 Scope: The link to the webpage listing the RIPE community’s policies: from https://www.ripe.net/ripe-policies to https://www.ripe.net/publications/docs/ripe-policies/ 3) In 5.3 Sub-Allocations The option to ask for a conversion of PI to PA via LIR Portal has been added. Kind regards, Angela Dall'Ara Policy Officer RIPE NCC

1 0

So what happened last night to the DB?
by Hank Nussbacher 17 Jun '24

17 Jun '24

3 2

Re: [db-wg] So what happened last night to the DB?
by Lutz Donnerhacke 17 Jun '24

17 Jun '24

> I have thought about doing it so, as I was also included as the > maintainers of the object. The real question is: why did blake66 made > such an object ? And how could we prevent something alike to happen > again (not an easy question -- maybe limiting the amount of mnt-by ?) Especially the DB should not process backscatter messages from MAILER-DAEMON.

1 0