- ncc-services-wg - mailman.ripe.net

Reminder: RIPE NCC Services WG Session on Cloud Strategy
by Felipe Victolla Silveira 28 Jul '21

28 Jul '21

Dear colleagues, Just a reminder that the RIPE NCC Services WG will be holding an interim session to discuss our cloud strategy today at 16:00 (UTC+2). We will give an update on our current thinking and hear more from the RIPE community on this. You can find the details for the session at: https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-July/003446.ht… <https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-July/003446.ht…> Kind regards, Felipe Silveira Chief Operations Officer RIPE NCC

1 0

Re: [ncc-services-wg] RIPE NCC Infosheet
by Antony Gollan 22 Jul '21

22 Jul '21

Dear Hank, Thank you for pointing this out. We have updated the PDF on that link. Kind regards Antony Gollan Communications Team Manager RIPE NCC > Date: Thu, 22 Jul 2021 08:49:43 +0300 > From: Hank Nussbacher <hank(a)interall.co.il> > To: ncc-services-wg(a)ripe.net > Subject: [ncc-services-wg] RIPE NCC Infosheet > > Shouldn't this brochure be taken down or updated: > https://www.ripe.net/about-us/what-we-do/infosheet.pdf > 7150 members? Fees from 2011? > > Regards, > Hank

1 0

Interim RIPE NCC Services WG Session on Cloud Strategy
by Felipe Victolla Silveira 22 Jul '21

22 Jul '21

Dear colleagues, The RIPE NCC Services WG will be holding an interim session on our cloud strategy on 28 July at 16:00 (UTC+2). If you would like to participate, you can find the details for this session here: https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-July/003446.ht… <https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-July/003446.ht…> At this session we will give an update on our current thinking and hear more from the RIPE community* to see if we can find a path towards rough consensus. We will publish an initial draft strategy shortly after the WG session and continue the discussion from there. Our strategy will also include some principles for how we will engage with the community around our core services and we will discuss this in the session as well. Kind regards, Felipe Silveira Chief Operations Officer RIPE NCC *The beginning of this discussion in the RIPE NCC Services WG can be found at: https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-June/003408.ht… <https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-June/003408.ht…>

1 0

NCC Services WG Interim meetings
by Kurtis Lindqvist 22 Jul '21

22 Jul '21

All, The NCC Services WG chairs have received a request from the RIPE NCC for an interim meeting from the RIPE NCC to allow for a focused discussion around the NCC’s Cloud Strategy. The chairs have agreed to hold this interim meeting and due to the holiday times have opted to have two meetings to ensure maximum participation of the RIPE community. The first interim meeting will be on July the 28th at 16:00 CEST via Zoom. This meeting will be recorded and we will publish the recording. To meeting details for this session is : Topic: NCC Services WG Meeting Time: Jul 28, 2021 16:00 Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/93434716511?pwd=dm43MHc2UXl3LzZndElJM2dMSnFHZz09 Meeting ID: 934 3471 6511 Passcode: 330022 Join by SIP 93434716511(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 221.122.88.195 (China) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia Sydney) 103.122.167.55 (Australia Melbourne) 209.9.211.110 (Hong Kong SAR) 64.211.144.160 (Brazil) 69.174.57.160 (Canada Toronto) 65.39.152.160 (Canada Vancouver) 207.226.132.110 (Japan Tokyo) 149.137.24.110 (Japan Osaka) Meeting ID: 934 3471 6511 Passcode: 330022 The second one will be on September the 6th at 16:00 CEST. Meeting details for meeting will be circulated later. The NCC have notified us that they intend to publish a further RIPE Labs article before the first interim meeting. These meetings are only intended to allow for discussion between the NCC and the RIPE community around the Cloud strategy and RIPE NCC’s use of Cloud services in a more focused environment than mailing lists allow for, but the mailing lists still remains the main discussion forum for the WG. On behalf of the RIPE NCC Service WG Chairs

3 2

New on RIPE Labs: RIPE NCC and the Cloud - Let’s Start Again
by Alun Davies 05 Jul '21

05 Jul '21

Dear colleagues, The community’s reaction to our cloud proposal was stronger than expected. In this article we look at some of the concerns we have seen so far, to make sure we heard you correctly: https://labs.ripe.net/author/felipe_victolla_silveira/ripe-ncc-and-the-clou… Please share any comments on this mailing list so the discussion can continue. Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

11 23

Re: [ncc-services-wg] Fw: New on RIPE Labs: RIPE NCC and the Cloud - Let???s Start Again
by denis walker 23 Jun '21

23 Jun '21

Colleagues Gert put it very simply, I like to elaborate. What is the driving force behind this proposal? Is something broken? Has the RIPE NCC reached it's limit of capabilities in some area? For decades the RIPE NCC has provided the RIPE Database service to an exceptionally high standard. They have managed the whole system, it's design, software, engineering infrastructure, 24/7 operation, security. They have an excellent record of uptime for both updates and queries. They have built in resilience that has never yet failed beyond small incidents. They not only have significant levels of in-house experience and knowledge, but there are so many previous engineers still around within the community whose past experience and knowledge the NCC can draw on. It seems they now want to take a, potentially, irreversible step in a new direction. Sometimes that can be a breath of fresh air and breathe new life into a stagnant system. Or it can be the death of a previously successful service. So as Gert asked, what is the compelling reason for taking this step? Is something likely to break if this step is not taken soon? As someone else remarked, what happens if the new cloud service 'goes down'? Or if data is hacked or non-public data is leaked? Is the risk of resource hijacking affected in any way when this data is outside of the RIPE NCC and resource holders control? If the current high standard of service falls, what will the RIPE NCC's response be? Are we going to get that "Sorry but it is outside of our control, please contact the cloud provider" answer? Have all of these (and maybe other) questions been considered and answered in the proposal and impact analyses? Has any cost benefit analysis been done in terms of financial, human and reputational costs? (btw I personally am not for or against the proposal...I am just a good devil's advocate and like to help people see things from different perspectives) cheers denis co-chair DB-WG > From: Gert Doering <gert(a)space.net> > To: Alun Davies <adavies(a)ripe.net> > Cc: "ncc-services-wg(a)ripe.net" <ncc-services-wg(a)ripe.net> > Sent: Monday, 21 June 2021, 18:17:38 CEST > Subject: Re: [ncc-services-wg] New on RIPE Labs: RIPE NCC and the Cloud - Let???s Start Again > > Hi, > > On Mon, Jun 21, 2021 at 11:13:33AM +0200, Alun Davies wrote: > > https://labs.ripe.net/author/felipe_victolla_silveira/ripe-ncc-and-the-clou… > > > Is it just me or is this a somewhat reactive article that still does not > cover the > > "what does the NCC want to achieve with 'going to the cloud'" > > bit? > > Just because it's en vogue doesn't mean it's the right thing to do. > > > (And given that the glorious example of outsourcing the NCC ticket > system has *still* not led to an acceptable user experience...) > > Gert Doering > -- LIR contact > -- > have you enabled IPv6 on something today...? > > SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer > Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann > D-80807 Muenchen HRB: 136055 (AG Muenchen) > Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 >

2 1

New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Maria Stafyla 11 Jun '21

11 Jun '21

Dear Martin, As part of our cloud first strategy, we have put in place policies mandating that if we decide to migrate to cloud a service that contains personal data, this data will be stored and processed in data storage locations within the EEA. When personal data is not processed outside the EEA, there is no transfer of personal data occurring. In the event that for example access to our data is required from outside the EEA (e.g. we request technical support from the cloud provider and this gets provided by technical staff outside the EEA), one of the offered under GDPR transfer mechanisms such as transfers based on an adequacy decision issued by the European Commission, Standard Contractual Clauses etc would serve as the legal basis for this transfer to take place. The most common transfer mechanism that we see being used by our service providers are the Standard Contractual Clauses and valid adequacy decisions. With regards to international transfers of personal data based on the Standard Contractual Clauses, we perform an assessment to understand what additional measures are required to be put in place on a case-to-case basis. Examples include technical (e.g. limiting access to the data that is strictly necessary for the particular case) and contractual measures (e.g. verifying the provider's transparency with regards to received orders to disclose their customer's data and how they respond to those requests). Regarding your last question, we would like to reassure you that before we migrate a service to the cloud various internal stakeholders including technical, security, legal, communications and other colleagues are consulted to advise on the matter. These analysis are meant for internal purposes. Kind regards, Maria Stafyla Senior Legal Counsel RIPE NCC

3 3

[service] RPKI Planned Downtime
by Nathalie Trenaman 26 May '21

26 May '21

Dear colleagues, On Monday, 31 May from 10:30-12:30 (UTC+2), we plan to upgrade the infrastructure supporting our RPKI service. You will not be able to access the RPKI dashboard or API during this period. The rsync and RRDP repositories will remain available. You can always check the status of our services on our website: https://www.ripe.net/support/service-announcements <https://www.ripe.net/support/service-announcements> Kind regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

State of sanctions
by Alex Le Heux 20 May '21

20 May '21

Hi All, The various types of sanctions and or such limits that apply to the RIPE NCC’s services have been a recurring topic for a couple years now. Recently, this seems to pop up more often though. This isn’t surprising as sanctions have become a more popular tool in the last few years. It occurred to me that we don’t seem to have a clear overview of what the total effect is: - Which sanctions, imposed by whom, affect the RIPE NCC’s operations and services? - Who are the targets of these sanctions? - Which of the RIPE NCC’s services are affected by these sanctions, for whom and in which way? (Please read “sanctions” with a wide definition and include such things as Dutch banks looking for money laundering that was mentioned during RIPE82) If there is a detailed overview of all this available, could the RIPE NCC publish this periodically? If not, can they start doing so? Best regards, Alex Le Heux

1 0

New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Alun Davies 19 May '21

19 May '21

Dear colleagues, The mission critical services the RIPE NCC provides to the Internet community require a solid technical foundation. In this new article on RIPE Labs, Felipe Silveira looks at plans to use cloud infrastructure as a means to that end. The full article is available here: https://labs.ripe.net/author/felipe_victolla_silveira/rpki-repositories-and… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

11 11