The Internet Registry System CEENet Workshop Budapest, August 2000 Vesna Manojlovic [email protected] Vesna Manojlovic . CEENet Workshop, August 2000 . http://www.ripe.net.
Download ReportTranscript The Internet Registry System CEENet Workshop Budapest, August 2000 Vesna Manojlovic [email protected] Vesna Manojlovic . CEENet Workshop, August 2000 . http://www.ripe.net.
The Internet Registry System
CEENet Workshop Budapest, August 2000 Vesna Manojlovic Vesna Manojlovic [email protected]
.
CEENet Workshop, August 2000 .
http://www.ripe.net
1
Overview
• • • •
RIPE RIPE NCC Internet Governance Global Internet Registry System
– IP address distribution & registration – IPv6 – RIPE Database – Reverse DNS Delegation
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
2
Questions always welcome!
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
3
Reseaux IP Européens
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
4
What is RIPE?
• •
Reseaux IP Européens (1989)
– forum for network engineers to discuss technical issues
RIPE is
– service provider forum –
open
for everybody – voluntary participation, no fees – works by consensus – encourages face-to-face discussion – acts like an “interest group” supporting Internet community – but has NO legal power
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
5
How RIPE Works
•
RIPE chair
– Chair: Rob Blokzijl (Nikhef) •
How does it work?
– Working groups – Mailing lists – Meetings
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
6
Join RIPE Working Groups
• • • • • • • • • •
Local Internet Registries (LIR) RIPE Database (DB) IP version 6 (IPv6) European Internet Exchange Forum (EIX) Routing / MBONE Domain Name System (DNS) NETNEWS Co-ordination Anti-Spam Test-Traffic Project European Operators Forum (EOF) RIPE does NOT develop Internet Standards Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
7
Global Context
World-wide Internet Technical Development & Standards Body IETF World-wide Operators Forum IEPG EU Operators USA Operators RIPE Asian Operators NANOG APRICOT
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
8
Subscribe to RIPE Mailing Lists
• • • •
General announcement list
– <
>
Working group lists
– <
–
> – etc.
For more information
– Send “help” to
Join the mailing lists and get informed http://www.ripe.net/info/maillists.html
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
9
RIPE Meetings
• • •
3 times a year ~3.5 day long 300+ participants
• • •
Working group meetings Plenary Presentations
• •
Long breaks Informal chats
•
Terminal room
– IPv4, IPv6 and wireless connectivity
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
10
Come to RIPE Meetings
• • • •
Keep up to date with Internet developments Meet others in the business Gather information, tips, ideas Influence directions in Internet administration
– in RIPE NCC service region and beyond •
Next meeting
RIPE 37 – Amsterdam, 12-15. September 2000 –
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
11
RIPE Meeting Attendees in 1999
EU US FR AT UNK DK SE IT ES FI CH BE NL HU CZ RU PT GB NO other IE DE UK Vesna Manojlovic .
Total 857 CEENet Workshop, August 2000 .
http://www.ripe.net
12
RIPE Meeting Attendance per Organisational Category 1999 EDU 14% GOV 0% Unkown 8% Assoc.
14% COM 64% Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
13
RIPE Network Coordination Centre
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
14
What is the RIPE NCC?
•
Not-for-profit association under Dutch law
•
8 years of history
•
2000+ members (mainly ISPs, but open to anyone)
•
Co-ordination and support services for ISPs Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
15
Why a
NCC
?
•
RIPE participation was increasing
•
Too much RIPE work done on a voluntary basis
•
Activities require continuity & co-ordination
•
Neutrality and impartiality is important
•
Contact point inside & outside RIPE region Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
16
RIPE NCC History
• • • •
April 1992: Birth of the RIPE NCC
– TERENA legal umbrella
September 1992: RIR Function 1995: Contributing Local IRs 1998: Independent Organisation
– not-for-profit association under Dutch law – General Assembly of all members – Executive Board of elected nominees http://www.ripe.net/annual-report/99ar.html
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
17
Vital Statistics
•
Statistics 1992
– 3 staff members – No Local IR’s – 182,528 hosts in European Internet – 7,955 objects in RIPE database (June ‘92) •
Statistics Now
– 62 staff (21 nationalities) 2,018 + participating Local IR’s 11,390,000+
countable
hosts in the RIPE NCC region 3,041,650+ objects in the database
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
18
> 2 New Members per Day
2,000 1,500 1,000 500 0 Q 4/ 93 Q 2/ 94 Q 4/ 94 Q 2/ 95 Q 4/ 95 Q 2/ 96 Q 4/ 96 Q 2/ 97 Q 4/ 97 Q 2/ 98 Q 4/ 98 Q 2/ 99 Q 4/ 99 Q 2/ 20 00 Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
19
New LIRs in 2000
120 109 100 80 80 60 50 47 40 28 27 20 20 20 19 16 16 11 11 9 8 6 5 5 4 4 4 0 Ger m an y UK Ital y Ru ssi Neth a er lan ds Sp ai n Fr an Swi ce tz er lan d Po lan d Tu rkey Ukr ai ne Fi nl an d Gr eec e No rway Bel gi um Eg yp t Den m ar Po Cz k rtu ech gal R ep ub lic Hu ng ar y Sl oven ia Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
20
RIPE NCC
Member Services
•
Registration Services
– IPv4 addresses – IPv6 addresses – AS numbers – Reverse domain name delegation – LIR Training Courses
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
21
RIPE NCC
Public Services
•
Co-ordination
– RIPE support – RIPE database maintenance – Routing Registry Maintenance (RR) – Liaison with: • LIRs / RIRs / ICANN / etc … – Information dissemination •
Special Projects
– Test Traffic – Routing Information Service (RIS) – Routing Registry Consistency (RR)
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
22
Formal Decision Making
“Consensus” Model RIPE proposes activity plan RIPE NCC proposes budget to accompany activity plan General Assembly votes on both activities and budget at yearly meeting Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
23
Internet Governance
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
24
Authority in the Net??
•
The Internet Corporation for Assigned Names and Numbers (ICANN) is the non-profit corporation that was formed to assume responsibility for the IP address space allocation, protocol parameter assignment, domain name system management, and root server system management functions now performed under U.S. Government contract by IANA and other entities.
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
25
Developments in Internet Governance
ICANN PSO ASO DNSO At Large RIPE NCC RIPE ARIN ARIN mtg.
APNIC APNIC mtg.
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
26
Address Supporting Organization
• • • • •
RIR agreed on a proposal “Simple model” MoU between ICANN and RIRs Policies set through existing regional processes Address Council established
– oversee policy development processes – select ICANN directors (open process) http://www.aso.icann.org
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
27
Global Internet Registry System
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
28
Goals of the Internet Registry System
• • • •
Fair distribution of address space Conservation
– prevention of stockpiling of addresses
Aggregation
– hierarchical distribution of globally unique address space – permits aggregation of routing information
Registration
– provision of public registry – ensures uniqueness and enables troubleshooting
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
29
Service Regions
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
30
Address Distribution
Global Authority /8 RIR /20 + LIR (ISP/Enterprise) /32 + ISP / End Users RIPE NCC Members Anybody with a network/host
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
31
Address Space Usage
100,000,000 80,000,000 60,000,000 40,000,000 213/8 212/8 62/8 195/8 194/8 193/8 60% 97% 40,1% 96,5% 97% 20,000,000 98% 0 Q4/ 95 Q1/ 96 Q2/ 96 Q3/ 96 Q4/ 96 Q1/ 97 Q2/ 97 Q3/ 97 Q4/ 97 Q1/ 98 Q2/ 98 Q3/ 98 Q4/ 98 Q1/ 99 Q2/ 99 Q3/ 99 99 Q4/ Q1/ 200 0 Q2/ 200 0
32
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
Terminology
•
Allocation
– address space given to registries which is held by them to assign to customers •
Assignment
– address space given to end-users for use in operational networks /20 allocation = 4096 addresses assignment
Vesna Manojlovic
assignment
.
CEENet Workshop, August 2000 .
http://www.ripe.net
33
Classful Notation
Class A network 8
0
0.0.0.0 - 127.255.255.255
host 16,777,216 16 Class B
10
128.0.0.0 - 191.255.255.255
65,536 24 Class C
110
192.0.0.0 - 223.255.255.255
256 • Obsolete because of – depletion of B space – too many routes from C space • Solution –
C
lassless
I
nter
D
omain
R
outing – hierarchical address space allocation
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
34
Addresses ...
8 16 32 64 128 256 ...
4096 8192 16384 32768 65536 ...
Vesna Manojlovic
Classless Notation
...
Prefix ...
Classful Net Mask ...
/29 /28 /27 /26 /25 /24 ...
...
1 C 255.255.255.248
255.255.255.240
255.255.255.224
255.255.255.192
255.255.255.128
255.255.255.0
...
/20 /19 /18 /17 16 C’s 32 C’s 64 C’s 128 C’s .
/16 ...
...
1 B CEENet Workshop, August 2000 .
255.255.240.0
255.255.224
255.255.192
255.255.128
255.255.0.0
...
http://www.ripe.net
35
How to get IP addresses?
•
Go to your Local Internet Registry
– Your provider is probably one or is connected to one http://www.ripe.net/lir/registries/europe.html
•
If you are a provider and think you may need to be an LIR?
– Contact RIPE NCC
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
36
Becoming a LIR
•
Complete application form (
ripe-212
)
•
Provide Reg-ID & contact persons
•
Read relevant RIPE documents
•
Sign service agreement (
ripe-191
)
– agreed to follow policies and procedures •
Pay sign-up & yearly fee
–
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
37
Obtaining IP Addresses Through Existing LIR
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
38
Providing Information (1)
• •
Overview of organisation
• information relevant to the address space request – name and location of the organisation?
– organisation activities?
– what is the structure?
• does it have subsidiaries and where?
• how many departments?
• for what part of the company are the addresses requested?
Possible additional information
- pointer to web site - deployment plan - special technologies - purchase receipts
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
39
Providing Information (2)
•
Design of the network
• how many physical segments it will consist of?
• what is each segment going to be used for?
– including equipment used • how many hosts are in each segment?
• expectations of growth • topology map –
Utilisation and efficiency guidelines
• 25% immediately, 50% in one year • operational needs; no reservations –
Can address space be conserved by using:
• different subnet sizes?
• avoiding padding between subnets?
–
Any address space already in use?
• returning and renumbering? (encouraged)
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
40
Addressing Plan
Relative Prefix
0.0.0.0 0.0.0.128 0.0.0.160 0.0.0.176
0.0.0.192
0.0.1.0 0.0.1.128 0.0.1.160 0.0.1.176
Subnet Mask
255.255.255.128 255.255.255.224 255.255.255.240 255.255.255.240 255.255.255.192 255.255.255.128 255.255.255.224 255.255.255.240 255.255.255.240
Size Imm 1yr 2yr Description
128
32
16 16 64
128 32 16 16
100 100 10 8 12 10 14 24 0 0 14 0 14
35
100 12 14 0 100 16 13 14
50
100 25 14
dynamic
dial-up Amsterdam web/mail/ftp servers Amsterdam customers’ servers Amsterdam training room LAN Amsterdam Amsterdam office LAN
(*1)
dynamic dial-up Utrecht web/mail/ftp servers Utrecht Inet cafe Utrecht 448 170 297 342 Totals
(*1)
Office LAN = workstations, router, 2 printers and 1 fileserver
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
41
Request Overview
request-size: 448 addresses-immediate: 170 addresses-year-1: addresses-year-2: 297 342 Totals: 448 170 297 342 subnets-immediate: 6 subnets-year-1: 8 subnets-year-2: 9 inet-connect: YES, already connected to “UpstreamISP” country-net: NL private-considered: Yes request-refused: NO PI-requested: NO address-space returned: 195.20.42.0/25, to UpstreamISP, “in 3 months”
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
42
Private Address Space
•
RFC-1918 (Address Allocation for Private Internets)
•
Suitable for
– partial connectivity – limited access to outside services • can use application layer gateways (fire walls, NAT) •
Motivation
– saves public address space – allows for more flexibility – security
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
43
IPv6
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
44
Why IPv6?
•
Next generation protocol
– scalability -- 128 bits addresses – security – dynamic hosts numbering •
Interoperable with IPv4
• simple and smooth transition – hardware vendors – applications •
Testbed for deployment of IPv6
– www.6bone.net
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
45
•
IPv6 Introduction
Current format boundaries |-3|--13-|--13-|-6-|--13-|--16--|------64 bits-----| +--+-----+-----+---+-----+------+------------------+ |FP|-TLA-|-sub-|Res|-NLA-|--SLA-|---Interface ID---| |--|-ID--|-TLA-|---|--ID-|--ID--|------------------| |----public topology ----|-site-|-----Interface----| +--+-----+-----+---+-----+------+------------------+ /23 /29 /35 /48 /64
• • •
Classfull; another level of hierarchy Hexadecimal representation of addresses IANA allocations
– APNIC – ARIN – RIPE NCC 2001:0200::/23 (12 subTLAs) 2001:0400::/23 ( 4 subTLAs) 2001:0600::/23 (19 subTLAs)
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
46
IPv6 Allocations
•
Draft allocation guidelines
– provisional & bootstrap criteria – currently under revision by community –
&
•
Initial allocation to LIRs
– /35 subTLA • 13 bits of NLA space + 16 bits of SLA space – whole /29 subTLA reserved http://www.ripe.net/ripencc/mem-services/registration/ipv6/ipv6.html
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
47
The RIPE Database
Its usage and its usefulness
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
48
RIPE Database (1)
•
Public Network Management Database
•
Information about
IP address space reverse domains routing policies contact details
objects
inetnum, inet6num domain route, aut-num person, role, maintainer
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
49
RIPE Database (2)
• •
Software Management
• server and client – NOT relational – RIPE NCC – Database Working Group (RIPE community)
Data Management
– LIRs – other users – RIPE NCC • •
Information content not responsibility of RIPE NCC Strong protection mechanisms
not
default Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
50
Querying RIPE Database
• • • • •
RIPE whois server
–
whois -h whois.ripe.net
– telnet whois.ripe.net
(UNIX command line queries)
RIPE whois client
–
ftp://ftp.ripe.net/ripe/dbase/software/ripe-dbase-2.2.1.tar.gz
Glimpse full text search
– http://www.ripe.net/cgi-bin/ripedbsearch
Web interface
– http://www.ripe.net/cgi-bin/whois
Database documentation
–
http://www.ripe.net/db/
http://www.ripe.net/docs/ripe-157.html
& http://www.ripe.net/docs/ripe-189.html
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
51
Search keys (Look-up Keys)
– – – – – – – –
person role maintainer inetnum domain aut-num as-macro route
name, nic-hdl, e-mail name, nic-hdl, e-mail maintainer name network number, network name domain name AS number AS-macro name route value • •
Network number and route value are classless Network name is a search key, but not unique Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
52
‘person’ Object
person: Mirjam Kuehne address: RIPE NCC address: Singel 258 address: NL - 1016 AB Amsterdam address: Netherlands phone: +31 20 535 4444 fax-no: e-mail: nic-hdl: +31 20 535 4445 [email protected]
MK16-RIPE notify: mnt-by: changed: [email protected] 19950411 changed: [email protected] 19970616 source: [email protected]
RIPE-NCC-MNT RIPE
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
53
‘role’ Object
% whois -h whois.ripe.net -t role
role: address: phone: fax-no: e-mail: trouble: admin-c: tech-c: nic-hdl: remarks: notify: mnt-by: changed: source: [mandatory] [single] [primary/look-up key] [mandatory] [multiple] [ ] [optional] [multiple] [ ] [optional] [multiple] [ ] [mandatory] [multiple] [look-up key] [optional] [multiple] [ ] [mandatory] [multiple] [inverse key] [mandatory] [multiple] [inverse key] [mandatory] [single] [primary/look-up key] [optional] [multiple] [ ] [optional] [multiple] [inverse key] [optional] [multiple] [inverse key] [mandatory] [multiple] [ ] [mandatory] [single] [ ]
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
54
‘role’ Object
role: RIPE NCC Hostmaster address: RIPE Network Coordination Centre address: Singel 258 address: NL - 1016 AB Amsterdam, Netherlands phone:
e-mail:
+31 20 535 4444
trouble: Work days 0900-1800 CET: phone XXX trouble: Outside Business Hours: phone YYY admin-c: JLC2-RIPE tech-c:
notify:
mnt-by:
nic-hdl:
MK16-RIPE
RIPE-NCC-MNT
RNH124-RIPE
changed: [email protected] 19971002 source: RIPE
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
55
Network Object
inetnum: 193.0.0.0 - 193.0.0.255
netname: RIPE-NCC descr: descr: RIPE Network Co-ordination Centre Amsterdam, Netherlands country: NL admin-c: JLC2-RIPE tech-c: status: mnt-by: MK16-RIPE ASSIGNED PA RIPE-NCC-MNT changed: [email protected] 19970310 source: RIPE •
“/” notation possible for inetnum value Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
56
20,000,000 15,000,000 10,000,000 5,000,000 0
Queries Reach 7/sec Average
7/sec
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
57
Number of DB Objects
6,000,000 5,000,000 4,000,000 3,000,000 2,000,000 1,000,000 0
• 2,5 million .de domain objects taken out on 28th June • 50,000 .be domain objects taken out on 24th July
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
58
Example Query
whois 193.0.0.0
inetnum
: netname: admin-c: tech-c: 193.0.0.0 - 193.0.0.255
RIPE-NCC DK58 OPS4-RIPE
route
: descr:
role
: address: nic-hdl: 193.0.0.0/24 RIPE-NCC RIPE NCC Operations Singel 258 OPS4-RIPE
person
: address: nic-hdl: Daniel Karrenberg RIPE Network Coordination Centre (NCC) DK58
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
59
Using RIPE DB Flags
– – – – –
whois
-r
193.0.0.0
whois
-T inetnum
193.0.0.0
whois -r -T inetnum 193.0.0.0 whois OPS4-RIPE whois -r OPS4-RIPE
=> inetnum, route => inetnum,person,role => inetnum => role, person
s
=> role • •
whois -v as-macro whois -a
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
60
Inverse Lookups in RIPE DB
• •
whois
-i
admin-c
,
tech-c
,
zone-c
JJ123-RIPE
– – –
whois -i admin-c,tech-c,zone-c
-T
domain JJ123-RIPE whois -i zone-c JJ123-RIPE whois
-r
-i admin-c,tech-c -T role BL112-RIPE
whois -i notify
•
whois -i origin AS42
•
whois -i mnt-by BLUELIGHT-MNT
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
61
Hierarchical DB Query
whois -
M
195.35.64.0/19 whois -
m
195.35.64.0/19 195.35.64.0 195.35.95.255
195.35.64.0 195.35.65.191
Blue Light 195.35.80/25 Goody2Shoes 195.35.88/26 eNGOs 195.35.92/29 ENGO-7 ...
195.35.92.8/29 ENGO-8 whois -
L
195.35.92.10
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
62
RIPE whois Flags
• i • L • m • M • r
inverse lookup for specified attributes find all find first level find all
L M
ess specific matches
m
ore specific matches ore specific matches turn off recursive lookups
• T • a
type only look for objects of type (inetnum, route, etc.) search all databases
• h
hostname search alternate server
• s
search databases with source “source”
• t • v
show template for object of type “type” verbose information for object of type “type”
• whois help
(how to query the database)
63
.
.
Vesna Manojlovic CEENet Workshop, August 2000 http://www.ripe.net
DB Update Procedure
•
Changing an object
– add the
changed
line to the new version of object • value: email address and date – keep the same
primary key
* do not forget authentication (password, PGP key) •
Deleting an object
– add
delete
line to the exact copy of current object – value: email address, reason and date – submit to
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
64
• • •
DB Update Procedure
Unique Keys (Primary Keys)
– – – – – – – – –
person role maintainer inetnum domain aut-num as-macro community route
name + nic-hdl name + nic-hdl maintainer name network number domain name AS number AS-macro name community name route value + origin
Uniquely identifies object Updating an existing object will overwrite the old entry hence need unique key Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
65
Creating
person
Object
• • •
Check if
person
object exists in RIPE DB
–
whois {person’s name; email address}
– only one object per person
Obtain and complete a template
–
whois -t person whois -v person
Each
person
object has unique nic-hdl
– Only way to clear ambiguity in
person
objects – Format:
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
66
E-mail Interface
•
<
– automatic mailbox – send all updates to this mailbox – can use HELP in subject line •
<
– send questions and comments to this mailbox – please include error reports
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
67
Syntax Checking
•
Successful update
•
Warnings
– object corrected and accepted – notification of action taken in acknowledgement •
Errors
– object NOT corrected and NOT accepted – diagnostics in acknowledgement
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
68
Example Error Message
Update FAILED: [person] Mirjam Kuehne person: Mirjam Kuehne address: RIPE NCC address: Singel 258, NL-1016 AB, Amsterdam address: The Netherlands phone: +31 20 535 4444 fax-no: +31 20 535 4445 e-mail: [email protected]
changed: [email protected] 19980828 source: RIPE WARNING: date in "changed" (980828) changed to 19980828 *ERROR*: mandatory field "nic-hdl" missing
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
69
Deleting an Object
• •
Add
delete
attribute to copy of current object
person: Mirjam Kuehne address: address: address: address: phone: fax-no: e-mail: nic-hdl: changed: source:
delete:
RIPE NCC Singel 258 NL - 1016 AB Amsterdam Netherlands +31 20 535 4444 +31 20 535 4445 [email protected]
MK16-RIPE [email protected] 19980911 RIPE
[email protected] late for training Submit to
CEENet Workshop, August 2000 .
http://www.ripe.net
70
Nic hdl’s (Example)
person: ……… John F. Doe person: ……… Anne Smith inetnum: ……… ……… tech-c:
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
71
Test Database
• • • • •
Non-production DB Similar interface as “real” Database
– whois & email •
whois -h test-whois.ripe.net ; [email protected]
– syntax checking – error reports
Enable to submit your own maintainer Ideal for testing
– various authorisation schemes – self-made scripts that update RIPE DB
Source: TEST Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
72
DNS Activities
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
73
DNS Management
• •
Goals
– ensure proper operation of name servers – minimise “pollution” of DNS
Services
– manage reverse delegations of networks in 193/8, 194/8, 195/8, 212/8, 213/8, 217/8 and 62/8 in-addr.arpa domain – support LIR’s with feedback – secondary name servers for ccTLDs •
RIPE NCC DOES NOT register domain names Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
74
RIPE NCC Hostcount per Quarter
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
75
Why Do You Need Reverse Delegation ?
•
All host-IP mappings in the DNS (A record) should have a corresponding IP-host mapping (PTR record)
•
Failure to have this will likely
– block users from various services (ftp, mail) – make troubleshooting more difficult – produce more useless network traffic in general
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
76
IN-ADDR.ARPA Domain
. (ROOT) edu nl arpa net com bluelight in-addr 217 212 213 193 Reverse mapping (PTR www.bluelight.nl) 195 35 65 194 62 1 = 1.65.35.195.in-addr.arpa
Vesna Manojlovic .
CEENet Workshop, August 2000 .
www 195.35.65.1
Forward mapping (A 195.35.65.1)
http://www.ripe.net
77
Request Reverse Delegation
•
Send
domain
object to
– an automatic mailbox •
Robot (named Marvin) will
– check the Reg-ID • only LIRs can request reverse delegation – check if zone is correctly setup – check assignment validity – (try to) enter object to RIPE DB •
Questions, Comments to
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
78
< /24 Delegations
Reverse delegation is also possible for a /24 shared by more customers
=> NOT reason for classfull assignments
•
RIPE NCC reverse delegate authority for the entire /24 to LIR
•
If customer wants to run own primary nameserver
– LIR delegates parts as address space gets assigned – use CNAME to create an extra point of delegation (RFC-2317)
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
79
CNAME Example Zonefile at Provider Primary Nameserver
$ORIGIN 80.35.195.in-addr.arpa. 0-31 IN NS ns.goody2shoes.nl.
0-31 IN NS ns2.bluelight.nl.
32-71 IN NS ns.cyberfalafel.nl.
32-71 IN NS ns2.bluelight.nl.
0 IN CNAME 0.0-31 1 IN CNAME 1.0-31 ... ...
31 IN CNAME 31.0-31 32 IN CNAME 32.32-71 33 IN CNAME 33.32-71 ... ...
71 IN CNAME 71.32-71 72 IN PTR www.qwerty.nl.
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
80
Reverse DNS Quality Report
• • • •
80% of delegating zones
good
Quality improving ~500 new zones /week 52.3% of eligible /24 zones are delegated
http://www.ripe.net/inaddr/statistics
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
81
Questions?
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
82
AFRINIC APNIC ARIN CEENet CENTR CIX ETSI EuroISPA IANA
Vesna Manojlovic
Organizations
African Network Information Centre http://www.afrinic.org
Asian Pacific Network Information Centre http://www.apnic.net
American Registry for Internet Numbers http://www.arin.net
Central and Eastern European Networking Association http://www.ceenet.org
Council of European National Top level domain Registries http://www.centr.org
Commercial Internet Exchange http://www.cix.org
European Telecommunications Standards Institute http://www.etsi.org
European Internet Service Providers Association http://www.euroispa.org
Internet Assigned Numbers Authority http://www.iana.org
.
.
CEENet Workshop, August 2000 http://www.ripe.net
83
ICANN IETF ITU NANOG RIPE RIPE NCC W3C
Organizations
Internet Corporation for Assigned Numbers and Names http://www.icann.net
Internet Engineering Task Force http://www.ietf.org
International Telecommunications Union http://www.itu.int
North American Network Operators Group http://www.nanog.org
Reseaux IP European Network http://www.ripe.net
RIPE Network Coordination Centre http://www.ripe.net
World Wide Web Consortium http://www.w3.org
Vesna Manojlovic .
CEENet Workshop, August 2000 .
http://www.ripe.net
84