- ripe-list - mailman.ripe.net

Return of Legacy Space
by Axel Pawlik 16 Mar '12

16 Mar '12

Dear colleagues, In preparation for the ratification of "Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA" (GPP-IPv4-2011) by the ICANN Board of Directors, we will remove from the available pool of IPv4 address space the IPv4 legacy space that has been returned to the RIPE NCC by various members. 1,368,576 IPv4 addresses were removed from the available pool of IPv4 address space on 14 March, 2012. It is intended that any IPv4 legacy space returned to the RIPE NCC will be placed in IANA's Recovered IPv4 Pool. Until now, legacy space returned to the RIPE NCC has been returned to the RIPE NCC's IPv4 available pool but is not re-distributed. By removing the legacy space from the RIPE NCC's IPv4 available pool, a more accurate overview of the actual space that can be distributed can be seen. As legacy space was distributed before the RIR system was introduced, the RIPE NCC does not have any policy governing the re-distribution of returned legacy space. We believe that placing this legacy space in the IANA's Recovered IPv4 Pool for redistribution to the RIRs will contribute to the future well-being of the Internet. The Global Policy can be found at: http://www.ripe.net/ripe/docs/ripe-529 More information about the policy and the ratification process can be found at: http://www.icann.org/en/announcements/announcement-26apr11-en.htm The total amount of available IPv4 space that the RIPE NCC holds can be found at: http://www.ripe.net/internet-coordination/ipv4-exhaustion/ipv4-available-po… Regards, Axel Pawlik Managing Director RIPE NCC

4 3

RIPE 64 Updates: Hotel Discount Expires, Meeting Programme Online, Social Events and RIPE NCC's 20th Anniversary
by RIPE Meeting 15 Mar '12

15 Mar '12

Dear colleagues, RIPE 64 is just over four weeks away. We'd like to share the following news with you: ========================== Hotel Room Discount Expires Tomorrow ========================== If you'd like to take advantage of the early bird room discount offered by the meeting venue hotel, please book your room by Friday, 16 March: http://ripe64.ripe.net/venue/meeting-venue/ ======================== Meeting Programme Online ======================== You can view the meeting programme at: http://ripe64.ripe.net/programme/meeting-plan/ A preliminary list of talks, tutorials and BoFs is available at: http://ripe64.ripe.net/programme/list-of-talks/ ======================== Social Events Posted ======================== RIPE 64 social event sponsors have organised excellent socials for RIPE 64 attendees including a cave tour and a RIPE Dinner in Ljubljana Castle. More details about RIPE 64 social events are available at: http://ripe64.ripe.net/programme/social-events/ ======================== Celebrate RIPE NCC's 20th Anniversary ======================== The RIPE NCC turns 20 this year and we'll be marking this special occasion at RIPE 64 with special presentations in the Plenary and at the RIPE Dinner. We hope you like cake! We look forward to seeing you in Ljubljana. Kind regards, The RIPE Meeting Team RIPE NCC

1 0

defending at layer seven against layer nine attacks
by Randy Bush 09 Mar '12

09 Mar '12

yesterday, a few friends asked if someone files in court against your customer and gets a judgment telling the rir to revoke your bgp-speaking customer's certs and roas[0], what the heck happens to your responsibility and/or sla to your customer? what can you do to keep them flying? i believe this is a legitimate concern. one classic example is a russian isp being attacked by a dutch court. of course it could be a canadian being attacked by a virginia court. note that, traditionally, the sla describes a level of service between you and your customer, and its all best effort to the rest of the intertubes. first, the rirs, no matter how well-meaning, can do nothing to help, any thought thereof is a joke. they will not stand up to court orders and people with guns, end of story. and the same goes for well-intentioned schemes where arin backs up ripe's members' rpki data. american (dns) registries have already been used, through us courts, to attack overseas sites. but, note that the decisions routers make are not burned in. by design, they are local policy configured by the operator. rpki- based origin validation merely marks a received bgp announcement as valid, notfound, or invalid. it is up to operator-configured policy to decide how to treat the received announcement based on the validity marking and anything else the operator chooses. so we will use local knowledge of who your customers are to make a local policy decision that you're going to route them no matter what some third party says about them. let's assume you have a prefix filter list for my customer's prefixes (the customer themself, not their bgp speaking customer cone). you do have prefix lists for your customers, don't you [1]? so, your programatically generated template for a customer peering could be something such as the following pretty strict policy: if p in custs-pfxs community add ExportToPeersCustsAndUpstreams if p is marked valid set local-pref 120 elif p is marked notfound set local-pref 100 elif p is marked invalid # layer nine attack set local-pref 120 # maintain g-r fantasy an even more paranoid approach might begin if p in custs-pfxs if p comes from or through an as not my customer's drop it on the floor ... as you surely have customer specific prefix filters in place, you do not risk allowing in invalid attacks sourced by your customer. that this is all supported in the design and in current code from J&C is not an accident. but beware of occasional vendor do-gooder knobs which default to applying policy for you. also check out draft-ietf-sidr-ltamgmt. it explains how to use the rpki tools and tool-sets (i.e. nothing new needed) to have your own view of the world, overriding the iana/rir-based rpki data. this view could include copies of your customers' rpki data. it would also be really helpful to have a seventh registry of good reputation situated in a much less vulnerable jurisdiction, e.g. iceland. we could all use the ltamgt hack to use them as a safety net. otoh, i would also hope that the goons at layers 8-10 would realize that a lot of attacks against the rpki would jeopardize everyone's, including their own, routing security as folk will start to shy away from using it. --- [0] - or forces the rir to create a roa for as 0 [1] - you can construct one from the rpki data, all the roas with the customer's as. if they did not register, then all this makes no difference, their prefixes are always notfound.

1 0

RIPE 64 Draft Agenda Published
by Todd Underwood 06 Mar '12

06 Mar '12

All, The RIPE Programme Committee is pleased to announce a first draft of the Plenary Agenda for the upcoming RIPE64 conference. It is available at: http://ripe64.ripe.net/programme/list-of-talks/ The draft agenda is intended to enable people who require travel approval in order to attende RIPE conferences to have some indication of the content that will be presented. It is not at all a final list of presentations for the conference. Approximately half of the plenary presentation slots remain unfilled. If you have a draft of a presentation that you wish to submit for for consideration for one of these slots, please submit it at: https://meetings.ripe.net/pc/ The Programme Committee will publish a final list of presentations shortly before the conference. If you have questions about the process for presenting, please contact the Committee at pc(a)ripe.net. Looking forward to seeing you all in Ljubljana in April. cheers, -- Todd Underwood for the RIPE Programme Committee tmu(a)google.com

1 0

RIPE 64 Draft Plenary Agenda
by RIPE NCC Meeting Coordinator 05 Mar '12

05 Mar '12

Dear colleague, It's six weeks to go until RIPE 64! We've just posted a preliminary list of talks, tutorials and BoFs: http://ripe64.ripe.net/programme/list-of-talks/ Please check back regularly for updates. Registration, meeting fees, and hotel information can be found at: http://ripe64.ripe.net/ Kind regards, RIPE Meeting team RIPE NCC

1 0

RIPE 64: Registration Now Open
by RIPE NCC Meeting Coordinator 16 Feb '12

16 Feb '12

Dear colleague, RIPE 64 will take place from 16-20 April 2012 in the Grand Union Hotel in Ljubljana, Slovenia. You can now register online at: https://ripe64.ripe.net/register ======================== Meeting Venue and Hotels ======================== Information about the RIPE 64 meeting venue and alternative hotels is available at: http://ripe64.ripe.net/venue/ ================================ Meeting Costs and Ticket Options ================================ A regular week meeting ticket costs EUR 350 if paid for one full working day before the meeting starts. The ticket costs EUR 400 if you register at the meeting. Day tickets are available for EUR 125 and week student tickets are available for EUR 175. No early bird discounts apply to these tickets. Information about costs and types of tickets is available at: http://www.ripe.net/ripe/meetings/faq-meetings/ripe-meeting-faqs ============================= Free Tickets for New LIRs ============================= New LIRs receive two free RIPE meeting tickets. You can redeem these free tickets during the online registration process. Information about this is available at: http://www.ripe.net/lir-services/new-lir/free-tickets-to-a-ripe-meeting ============================ Stay Up-to-Date on RIPE 64 ============================ For the latest information, keep an eye on the RIPE 64 website: http://ripe64.ripe.net Follow us on Twitter: @ripemeeting (#RIPE64) @RIPE_NCC Become a fan of the RIPE Meeting RIPE NCC pages: http://www.facebook.com/ripemeetings http://www.facebook.com/ripencc We look forward to seeing you at RIPE 64! Kind regards, The RIPE Meeting Team

1 0

2011 Worldwide Infrastructure Report available for download.
by Dobbins, Roland 08 Feb '12

08 Feb '12

[Apologies if you've already seen this announcement in other forums.] We've just posted the 2011 Worldwide Infrastructure Security Report for download at this URL: <http://www.arbornetworks.com/report> This year's WWISR contains responses and data from 114 network operators in all major geographical regions. The WWISR is based upon input from the global operational community, and, as such, is unique in its focus on the operational security aspects of public-facing networks. Many of you contributed to the survey which forms the foundation of the report; as always, we're grateful for your insight and participation, and welcome your feedback and comments. Thanks much! ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> The basis of optimism is sheer terror. -- Oscar Wilde

1 0

RIPE 64: Submit Your Presentation By 3 February
by RIPE PC 03 Feb '12

03 Feb '12

Dear colleagues, RIPE 64 takes place on 16-20 April 2012 in Ljubljana, Slovenia. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the Plenary, BoF and tutorial sessions at RIPE 64. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: • IPv6 deployment • Managing IPv4 scarcity in operations • Commercial transactions of IPv4 addresses • Data centre technologies • Network and DNS operations • Internet governance and regulatory practices • Network and routing security * Content delivery * Internet peering and mobile data exchange Submissions ------------ RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. Presenters who are proposing a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. Presenters should indicate how much time they will require (30 minutes is a common maximum duration, although some talks can be longer). Proposals for presentations must be submitted for full consideration no later than *3 February* using the online topic submission system at: http://meetings.ripe.net/pc/ Presentations submitted after this date will be considered on a space-available basis. In addition to presentations selected in advance for the plenary, the RIPE PC also offers several timeslots for “lightning talks”, which are selected immediately before or during the conference. Lightning talks are short (10 mins maximum) and will be announced shortly before the conference. If you are aware of a talk that might be interesting to the community, please provide us with the details and we will approach the potential speaker. If you have any questions or requests concerning content submissions, please email pc(a)ripe.net. For more information about RIPE 64, including how to register, visit: http://ripe64.ripe.net/ Kind regards, Todd Underwood on behalf of the RIPE Programme Committee

5 7

Nominations for Seat 9 on ICANN Board Close 16 January 2012
by Axel Pawlik 11 Jan '12

11 Jan '12

Dear colleagues, The Address Supporting Organization Address Council (ASO AC) call for nominations for Seat Number 9 on the ICANN Board will close at 23:59 UTC on 16 January 2012. The ASO AC election procedures are found in Section 7 of the ASO Operating Procedures and are available on the ASO website at: http://aso.icann.org/documents/operating-procedures-aso-ac/ Article VI of the ICANN Bylaws states that: "At any given time, no two Directors selected by a Supporting Organization shall be citizens from the same country or of countries located in the same Geographic Region." The ASO AC selection for Seat 10 of the ICANN Board of Directors resides in the APNIC region, so nominees for Seat 9 cannot reside in the APNIC region. Submit nominations by email to nominations2012(a)aso.icann.org including the following information: * Full name of the person being nominated * Contact email address for the person being nominated * Contact telephone number (if available) of the person being nominated * Full name of the person making the nomination * Contact email address for the person making the nomination * Contact telephone number of the person making the nomination The full time frame for the selection process is as follows: * Nomination Phase 1 November 2011 to 16 January 2012 * Comment Phase 17 January 2012 – 19 April 2012 * Interview Phase 20 February 2012 – 19 April 2012 - The deadline for return of written questionnaires is 20 February 2012. - Telephone and face-to-face interviews with selected candidates may take place. * Selection Phase 23 April 2012 - 14 May 2012 * Due Diligence Review 15 May 2012 - 15 June 2012 * Winner Announced 18 June 2012 (or earlier, based on completion date of due diligence review) All phases will conclude at 23:59 UTC on the date specified. Regards, ASO Secretariat secretariat(a)aso.icann.org

1 0

RIPE NCC closed on Monday 26 December 2011
by Saskia Oostdijck-van Gorp 21 Dec '11

21 Dec '11

Dear Colleagues, Our office is closed on Monday 26 December 2011 (Boxing Day). Normal office hours will resume on Tuesday 27 December 2011. The office closes on all Dutch public holidays listed at: http://www.ripe.net/lir-services/ncc/contact/public-holidays We wish you Happy Holidays. Regards, Saskia Oostdijck - van Gorp RIPE NCC

1 0