- ncc-services-wg - mailman.ripe.net

Interim RIPE NCC Services WG Session on Cloud Strategy
by Felipe Victolla Silveira 22 Jul '21

22 Jul '21

Dear colleagues, The RIPE NCC Services WG will be holding an interim session on our cloud strategy on 28 July at 16:00 (UTC+2). If you would like to participate, you can find the details for this session here: https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-July/003446.ht… <https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-July/003446.ht…> At this session we will give an update on our current thinking and hear more from the RIPE community* to see if we can find a path towards rough consensus. We will publish an initial draft strategy shortly after the WG session and continue the discussion from there. Our strategy will also include some principles for how we will engage with the community around our core services and we will discuss this in the session as well. Kind regards, Felipe Silveira Chief Operations Officer RIPE NCC *The beginning of this discussion in the RIPE NCC Services WG can be found at: https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-June/003408.ht… <https://www.ripe.net/ripe/mail/archives/ncc-services-wg/2021-June/003408.ht…>

1 0

NCC Services WG Interim meetings
by Kurtis Lindqvist 22 Jul '21

22 Jul '21

All, The NCC Services WG chairs have received a request from the RIPE NCC for an interim meeting from the RIPE NCC to allow for a focused discussion around the NCC’s Cloud Strategy. The chairs have agreed to hold this interim meeting and due to the holiday times have opted to have two meetings to ensure maximum participation of the RIPE community. The first interim meeting will be on July the 28th at 16:00 CEST via Zoom. This meeting will be recorded and we will publish the recording. To meeting details for this session is : Topic: NCC Services WG Meeting Time: Jul 28, 2021 16:00 Amsterdam Join Zoom Meeting https://ripe.zoom.us/j/93434716511?pwd=dm43MHc2UXl3LzZndElJM2dMSnFHZz09 Meeting ID: 934 3471 6511 Passcode: 330022 Join by SIP 93434716511(a)zoomcrc.com Join by H.323 162.255.37.11 (US West) 162.255.36.11 (US East) 221.122.88.195 (China) 115.114.131.7 (India Mumbai) 115.114.115.7 (India Hyderabad) 213.19.144.110 (Amsterdam Netherlands) 213.244.140.110 (Germany) 103.122.166.55 (Australia Sydney) 103.122.167.55 (Australia Melbourne) 209.9.211.110 (Hong Kong SAR) 64.211.144.160 (Brazil) 69.174.57.160 (Canada Toronto) 65.39.152.160 (Canada Vancouver) 207.226.132.110 (Japan Tokyo) 149.137.24.110 (Japan Osaka) Meeting ID: 934 3471 6511 Passcode: 330022 The second one will be on September the 6th at 16:00 CEST. Meeting details for meeting will be circulated later. The NCC have notified us that they intend to publish a further RIPE Labs article before the first interim meeting. These meetings are only intended to allow for discussion between the NCC and the RIPE community around the Cloud strategy and RIPE NCC’s use of Cloud services in a more focused environment than mailing lists allow for, but the mailing lists still remains the main discussion forum for the WG. On behalf of the RIPE NCC Service WG Chairs

3 2

New on RIPE Labs: RIPE NCC and the Cloud - Let’s Start Again
by Alun Davies 05 Jul '21

05 Jul '21

Dear colleagues, The community’s reaction to our cloud proposal was stronger than expected. In this article we look at some of the concerns we have seen so far, to make sure we heard you correctly: https://labs.ripe.net/author/felipe_victolla_silveira/ripe-ncc-and-the-clou… Please share any comments on this mailing list so the discussion can continue. Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

11 23

Re: [ncc-services-wg] Fw: New on RIPE Labs: RIPE NCC and the Cloud - Let???s Start Again
by denis walker 23 Jun '21

23 Jun '21

Colleagues Gert put it very simply, I like to elaborate. What is the driving force behind this proposal? Is something broken? Has the RIPE NCC reached it's limit of capabilities in some area? For decades the RIPE NCC has provided the RIPE Database service to an exceptionally high standard. They have managed the whole system, it's design, software, engineering infrastructure, 24/7 operation, security. They have an excellent record of uptime for both updates and queries. They have built in resilience that has never yet failed beyond small incidents. They not only have significant levels of in-house experience and knowledge, but there are so many previous engineers still around within the community whose past experience and knowledge the NCC can draw on. It seems they now want to take a, potentially, irreversible step in a new direction. Sometimes that can be a breath of fresh air and breathe new life into a stagnant system. Or it can be the death of a previously successful service. So as Gert asked, what is the compelling reason for taking this step? Is something likely to break if this step is not taken soon? As someone else remarked, what happens if the new cloud service 'goes down'? Or if data is hacked or non-public data is leaked? Is the risk of resource hijacking affected in any way when this data is outside of the RIPE NCC and resource holders control? If the current high standard of service falls, what will the RIPE NCC's response be? Are we going to get that "Sorry but it is outside of our control, please contact the cloud provider" answer? Have all of these (and maybe other) questions been considered and answered in the proposal and impact analyses? Has any cost benefit analysis been done in terms of financial, human and reputational costs? (btw I personally am not for or against the proposal...I am just a good devil's advocate and like to help people see things from different perspectives) cheers denis co-chair DB-WG > From: Gert Doering <gert(a)space.net> > To: Alun Davies <adavies(a)ripe.net> > Cc: "ncc-services-wg(a)ripe.net" <ncc-services-wg(a)ripe.net> > Sent: Monday, 21 June 2021, 18:17:38 CEST > Subject: Re: [ncc-services-wg] New on RIPE Labs: RIPE NCC and the Cloud - Let???s Start Again > > Hi, > > On Mon, Jun 21, 2021 at 11:13:33AM +0200, Alun Davies wrote: > > https://labs.ripe.net/author/felipe_victolla_silveira/ripe-ncc-and-the-clou… > > > Is it just me or is this a somewhat reactive article that still does not > cover the > > "what does the NCC want to achieve with 'going to the cloud'" > > bit? > > Just because it's en vogue doesn't mean it's the right thing to do. > > > (And given that the glorious example of outsourcing the NCC ticket > system has *still* not led to an acceptable user experience...) > > Gert Doering > -- LIR contact > -- > have you enabled IPv6 on something today...? > > SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer > Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann > D-80807 Muenchen HRB: 136055 (AG Muenchen) > Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 >

2 1

New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Maria Stafyla 11 Jun '21

11 Jun '21

Dear Martin, As part of our cloud first strategy, we have put in place policies mandating that if we decide to migrate to cloud a service that contains personal data, this data will be stored and processed in data storage locations within the EEA. When personal data is not processed outside the EEA, there is no transfer of personal data occurring. In the event that for example access to our data is required from outside the EEA (e.g. we request technical support from the cloud provider and this gets provided by technical staff outside the EEA), one of the offered under GDPR transfer mechanisms such as transfers based on an adequacy decision issued by the European Commission, Standard Contractual Clauses etc would serve as the legal basis for this transfer to take place. The most common transfer mechanism that we see being used by our service providers are the Standard Contractual Clauses and valid adequacy decisions. With regards to international transfers of personal data based on the Standard Contractual Clauses, we perform an assessment to understand what additional measures are required to be put in place on a case-to-case basis. Examples include technical (e.g. limiting access to the data that is strictly necessary for the particular case) and contractual measures (e.g. verifying the provider's transparency with regards to received orders to disclose their customer's data and how they respond to those requests). Regarding your last question, we would like to reassure you that before we migrate a service to the cloud various internal stakeholders including technical, security, legal, communications and other colleagues are consulted to advise on the matter. These analysis are meant for internal purposes. Kind regards, Maria Stafyla Senior Legal Counsel RIPE NCC

3 3

[service] RPKI Planned Downtime
by Nathalie Trenaman 26 May '21

26 May '21

Dear colleagues, On Monday, 31 May from 10:30-12:30 (UTC+2), we plan to upgrade the infrastructure supporting our RPKI service. You will not be able to access the RPKI dashboard or API during this period. The rsync and RRDP repositories will remain available. You can always check the status of our services on our website: https://www.ripe.net/support/service-announcements <https://www.ripe.net/support/service-announcements> Kind regards, Nathalie Trenaman Routing Security Programme Manager RIPE NCC

1 0

State of sanctions
by Alex Le Heux 20 May '21

20 May '21

Hi All, The various types of sanctions and or such limits that apply to the RIPE NCC’s services have been a recurring topic for a couple years now. Recently, this seems to pop up more often though. This isn’t surprising as sanctions have become a more popular tool in the last few years. It occurred to me that we don’t seem to have a clear overview of what the total effect is: - Which sanctions, imposed by whom, affect the RIPE NCC’s operations and services? - Who are the targets of these sanctions? - Which of the RIPE NCC’s services are affected by these sanctions, for whom and in which way? (Please read “sanctions” with a wide definition and include such things as Dutch banks looking for money laundering that was mentioned during RIPE82) If there is a detailed overview of all this available, could the RIPE NCC publish this periodically? If not, can they start doing so? Best regards, Alex Le Heux

1 0

New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Alun Davies 19 May '21

19 May '21

Dear colleagues, The mission critical services the RIPE NCC provides to the Internet community require a solid technical foundation. In this new article on RIPE Labs, Felipe Silveira looks at plans to use cloud infrastructure as a means to that end. The full article is available here: https://labs.ripe.net/author/felipe_victolla_silveira/rpki-repositories-and… Kind regards, Alun Davies RIPE Labs Editor RIPE NCC

11 11

Re: [ncc-services-wg] New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud
by Giuliano C. Peritore - Panservice 12 May '21

12 May '21

Hi, as a LIR I do *totally* agree with Gert's position to not "give away control on critical services". RIPE is in the position to guarantee a service with a relevant uptime, like it did for tens of years, and should think to "outsourced resources" just as backup in case of unavailability of internal resources. Regards, Giuliano Peritore -- Giuliano Peritore - g.peritore(a)panservice.it Direzione Generale - Panservice (AS20912) Servizi professionali per Internet ed il Networking Telefono: +39 0773 410020 - Fax +39 0773 470219 Numero verde: 800 901492 - http://www.panservice.it ----- Messaggio originale ----- Da: "Gert Doering" <gert(a)space.net> A: "Alun Davies" <adavies(a)ripe.net> Cc: ncc-services-wg(a)ripe.net Inviato: Mercoledì, 12 maggio 2021 9:19:11 Oggetto: Re: [ncc-services-wg] New on RIPE Labs: RPKI Repositories and the RIPE Database in the Cloud Hi, On Mon, May 10, 2021 at 01:40:07PM +0200, Alun Davies wrote: > The mission critical services the RIPE NCC provides to the Internet > community require a solid technical foundation. In this new article > on RIPE Labs, Felipe Silveira looks at plans to use cloud infrastructure > as a means to that end. The full article is available here: As a member, I do not want the RIPE NCC to spend our money on "give away control on critical services". Use of cloud services (or any other "outsourced infrastructure") is something I consider acceptable as a *backup* in case of something catastrophic happening to the RIPE NCC operated machines, to restore services to members and community quicker. Using cloud services generally implies - loss of control --> so the NCC *must* be primary authority on all data, and the cloud can only be a cache - loss of contact and responsibility --> if a NCC provided service does not work, I do not want to talk to a cloud provider hotline, or hear from the NCC "well, there is nothing we can do, something in the cloud is broken" All this cloudstuff is really great if you need "elastic services" (like, when the big run on the last IPv4 space starts, scale up the LIR portal to 200 instances - oh, wait, this opportunity got missed), or "low latency for high bandwidth content delivery" (so, yeah, ... no?). But for the services the NCC provides, "cloud" sounds like "yeah, someone else to blaim if it explodes", and this is not why we give the NCC money. (And no, there is not much trust from my side, since the ticket system is *still* a major annoyance in our day to day dealing with the NCC - despite promises, two years ago, to make this more usable) Gert Doering -- voting LIR contact -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Michael Emmer Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279

4 3

Fwd: Community Wellbeing Survey
by Bijal Sanghani 04 May '21

04 May '21

Dear all, In case you’re not on the ripe-list mailing list, please see below a mail from Erik on a community wellbeing survey. The deadline for the survey is May 11th and the plan is to present the results at the coming RIPE meeting. If you think this is an important topic for the community please take the time to complete the survey. Kind regards, Bijal > Begin forwarded message: > > From: Erik Bais <ebais(a)a2b-internet.com> > Subject: [ripe-list] Community Wellbeing Survey > Date: 30 April 2021 at 16:58:45 BST > To: ripe-list <ripe-list(a)ripe.net> > Cc: "erik(a)bais.name" <erik(a)bais.name> > > Dear RIPE Community, > > A couple months ago we began discussing in a small group the challenges around personal mental wellbeing in the RIPE community and how we could potentially investigate the issue and what we could potentially put in place to make things better. > One outcome of that was the development of a questionnaire around how the community is coping in the current Covid-19 era. ( The questionnaire is here: https://www.surveymonkey.com/r/JPNJG57 <https://www.surveymonkey.com/r/JPNJG57> ) > > Participating in this is a personal decision for you but we do appreciate your feedback, either via the questionnaire or other means. > > As some of you may know, I did a presentation in 2019 at the Dutch Network Operator Group ( NLNOG ) - https://www.youtube.com/watch?v=7areInUXbyo <https://www.youtube.com/watch?v=7areInUXbyo> > about working in a toxic work environment and the risks of running into a burnout. > > This topic, ( having a burnout . .the risks and being able to talk about this in groups of small peers or even in public ) is in many countries and communities still a taboo topic. > > Based on the experiences that we have from that presentation and what it did for the people in the Dutch NLNOG community.. and providing a safe place for people to talk and discuss about this.. > We decided that we also would like to see what the current state is in the larger community .. and start with a questionnaire on the topic. > > The feedback and results of the questionnaire ( and your input is highly appreciated if you participate ) will be looked at and I will do a presentation in a plenary at RIPE82 in a couple weeks. > > The goal is to see if we as a RIPE community need to provide similar ways for people in our region to (anonymously) be able to communicate about various topics that may or may not be directly work related. > > It could be that we need to have a place where we can discuss about the situation working remote .. not being able to go to the office.. the additional stress that this brings .. > or that we need to talk about what all those additional social distancing rules bring to you.. or how you feel about these rules.. for some it is a blessing .. > and for some it works like a new stress factor as the rules are changing per shop / public store / building .. and some of us like to have nice and clear directions .. > > But also about how people deal with the lockdowns .. and don’t get to meet other people that have a similar interest .. or a relation .. > So what we like to see is how are you feeling .. how are you coping .. or not .. > And then the question comes .. can we help .. and how > > I’m aware that I’m currently the one that is pushing this as a topic in public (and here for instance) .. but I’m very aware of the group of great people that helped to get this initiative and questionnaire to a state as where it is today. > And I would especially like to thank Eileen (INEX), Mirjam ( RIPE Chair ), Carolien (NCC HR) , Alastair ( NCC ), Ulka ( NCC ) Alun ( NCC ), Vesna ( NCC - for her mad Wiki and notary skills ) and the people assisting in reviewing the questionnaire already for us. > > We like to get the information before May 11th 2021, so that we have some time to look at the results and prep the ppt for the week of the RIPE82 meeting. > The data itself will be stored for max 2 weeks after that.. and only 1 admin from the NCC and the HR manager of the NCC will have access to the data, besides myself. As we use the NCC survey monkey account for the questionnaire. > All questions can be skipped if you don’t feel like you want to answer a specific question. > > And feel free to reply here on the list .. or reach out to Mirjam, Eileen (both in CC: ) or myself in private if needed. We are planning a bit larger support group once we are done with the RIPE82 meeting on this. > > To minimize tracking by Survey Monkey .. You can paste the questionnaire URL in an incognito window.. > The questionnaire is here: https://www.surveymonkey.com/r/JPNJG57 <https://www.surveymonkey.com/r/JPNJG57> > > Thank you all in advance and see you all at RIPE82. > > Kind regards, > > Erik Bais

1 0