Re: [db-wg] Foreign ROUTE objects in RIPE Database - final decision?
3) Consider possible, simple options to allow non RIPE resource holders to 'approve' (if not authorise) the creation of a foreign ROUTE object. cheers denis co-chair DB WG On 17 October 2017 at 01:23, William Sylvester via db-wg <db-wg@ripe.net> wrote:
---------- Forwarded message ---------- From: William Sylvester <william.sylvester@addrex.net> To: Database WG <db-wg@ripe.net> Cc: Bcc: Date: Mon, 16 Oct 2017 23:22:55 +0000 Subject: Re: [db-wg] Foreign ROUTE objects in RIPE Database - final decision? Db-wg members,
Now that there has been substantial discussion on this topic, I wanted to try to bring the conversation back to a more practical and actionable path forward. Clearly this is a topic where there are a lot of opinions. From seeing the discussion and receiving additional feedback, I wanted to point out some re-occurring themes and request a revised proposal for working group consideration.
1) Remove the "origin:" authorization requirement. RIPE is currently the only RIR that requires this, the current implementation creates data concurrency issues across Internet databases by requiring the creation of duplicate autnums.
2) Flag "route:" objects for non-RIPE-managed space with "source: RIPE-NONAUTH" to identify non-authoritative data.
I’d like to seek input from the group;
- Do you feel these options are straight forward and easy to understand? - Does this provide a reasonable security posture? - Will this make a positive impact for RIPE DB and the greater Internet? - Do you support these concepts?
Thanks, William Db-wg co-chair
* denis1@gmail.com (den is) [Tue 17 Oct 2017, 03:02 CEST]:
3) Consider possible, simple options to allow non RIPE resource holders to 'approve' (if not authorise) the creation of a foreign ROUTE object.
This is cumbersome in practice already. Options 1 and 2 would lessen the administrative load of documenting permission of others to route prefixes; option 3 wouldn't. On 17 October 2017 at 01:23, William Sylvester wrote:
1) Remove the "origin:" authorization requirement. RIPE is currently the only RIR that requires this, the current implementation creates data concurrency issues across Internet databases by requiring the creation of duplicate autnums.
2) Flag "route:" objects for non-RIPE-managed space with "source: RIPE-NONAUTH" to identify non-authoritative data.
I support these two. They would make things simpler that I encounter frequently. Regards, -- Niels.
participants (2)
-
den is
-
niels=dbwg@bakker.net