The Internet Registry System CEENet Workshop Budapest, August 2000 Vesna Manojlovic [email protected] Vesna Manojlovic . CEENet Workshop, August 2000 . http://www.ripe.net.

Download Report

Transcript The Internet Registry System CEENet Workshop Budapest, August 2000 Vesna Manojlovic [email protected] Vesna Manojlovic . CEENet Workshop, August 2000 . http://www.ripe.net.

The Internet Registry System

CEENet Workshop Budapest, August 2000 Vesna Manojlovic Vesna Manojlovic [email protected]

.

CEENet Workshop, August 2000 .

http://www.ripe.net

1

Overview

• • • •

RIPE RIPE NCC Internet Governance Global Internet Registry System

– IP address distribution & registration – IPv6 – RIPE Database – Reverse DNS Delegation

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

2

Questions always welcome!

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

3

Reseaux IP Européens

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

4

What is RIPE?

• •

Reseaux IP Européens (1989)

– forum for network engineers to discuss technical issues

RIPE is

– service provider forum –

open

for everybody – voluntary participation, no fees – works by consensus – encourages face-to-face discussion – acts like an “interest group” supporting Internet community – but has NO legal power

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

5

How RIPE Works

RIPE chair

– Chair: Rob Blokzijl (Nikhef) •

How does it work?

– Working groups – Mailing lists – Meetings

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

6

Join RIPE Working Groups

• • • • • • • • • •

Local Internet Registries (LIR) RIPE Database (DB) IP version 6 (IPv6) European Internet Exchange Forum (EIX) Routing / MBONE Domain Name System (DNS) NETNEWS Co-ordination Anti-Spam Test-Traffic Project European Operators Forum (EOF) RIPE does NOT develop Internet Standards Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

7

Global Context

World-wide Internet Technical Development & Standards Body IETF World-wide Operators Forum IEPG EU Operators USA Operators RIPE Asian Operators NANOG APRICOT

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

8

Subscribe to RIPE Mailing Lists

• • • •

General announcement list

– <

[email protected]

>

Working group lists

– <

[email protected]>

> – etc.

For more information

– Send “help” to

Join the mailing lists and get informed http://www.ripe.net/info/maillists.html

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

9

RIPE Meetings

• • •

3 times a year ~3.5 day long 300+ participants

• • •

Working group meetings Plenary Presentations

• •

Long breaks Informal chats

Terminal room

– IPv4, IPv6 and wireless connectivity

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

10

Come to RIPE Meetings

• • • •

Keep up to date with Internet developments Meet others in the business Gather information, tips, ideas Influence directions in Internet administration

– in RIPE NCC service region and beyond •

Next meeting

RIPE 37 – Amsterdam, 12-15. September 2000 –

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

11

RIPE Meeting Attendees in 1999

EU US FR AT UNK DK SE IT ES FI CH BE NL HU CZ RU PT GB NO other IE DE UK Vesna Manojlovic .

Total 857 CEENet Workshop, August 2000 .

http://www.ripe.net

12

RIPE Meeting Attendance per Organisational Category 1999 EDU 14% GOV 0% Unkown 8% Assoc.

14% COM 64% Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

13

RIPE Network Coordination Centre

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

14

What is the RIPE NCC?

Not-for-profit association under Dutch law

8 years of history

2000+ members (mainly ISPs, but open to anyone)

Co-ordination and support services for ISPs Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

15

Why a

NCC

?

RIPE participation was increasing

Too much RIPE work done on a voluntary basis

Activities require continuity & co-ordination

Neutrality and impartiality is important

Contact point inside & outside RIPE region Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

16

RIPE NCC History

• • • •

April 1992: Birth of the RIPE NCC

– TERENA legal umbrella

September 1992: RIR Function 1995: Contributing Local IRs 1998: Independent Organisation

– not-for-profit association under Dutch law – General Assembly of all members – Executive Board of elected nominees http://www.ripe.net/annual-report/99ar.html

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

17

Vital Statistics

Statistics 1992

– 3 staff members – No Local IR’s – 182,528 hosts in European Internet – 7,955 objects in RIPE database (June ‘92) •

Statistics Now

– 62 staff (21 nationalities)  2,018 + participating Local IR’s  11,390,000+

countable

hosts in the RIPE NCC region  3,041,650+ objects in the database

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

18

> 2 New Members per Day

2,000 1,500 1,000 500 0 Q 4/ 93 Q 2/ 94 Q 4/ 94 Q 2/ 95 Q 4/ 95 Q 2/ 96 Q 4/ 96 Q 2/ 97 Q 4/ 97 Q 2/ 98 Q 4/ 98 Q 2/ 99 Q 4/ 99 Q 2/ 20 00 Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

19

New LIRs in 2000

120 109 100 80 80 60 50 47 40 28 27 20 20 20 19 16 16 11 11 9 8 6 5 5 4 4 4 0 Ger m an y UK Ital y Ru ssi Neth a er lan ds Sp ai n Fr an Swi ce tz er lan d Po lan d Tu rkey Ukr ai ne Fi nl an d Gr eec e No rway Bel gi um Eg yp t Den m ar Po Cz k rtu ech gal R ep ub lic Hu ng ar y Sl oven ia Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

20

RIPE NCC

Member Services

Registration Services

– IPv4 addresses – IPv6 addresses – AS numbers – Reverse domain name delegation – LIR Training Courses

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

21

RIPE NCC

Public Services

Co-ordination

– RIPE support – RIPE database maintenance – Routing Registry Maintenance (RR) – Liaison with: • LIRs / RIRs / ICANN / etc … – Information dissemination •

Special Projects

– Test Traffic – Routing Information Service (RIS) – Routing Registry Consistency (RR)

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

22

Formal Decision Making

“Consensus” Model RIPE proposes activity plan RIPE NCC proposes budget to accompany activity plan General Assembly votes on both activities and budget at yearly meeting Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

23

Internet Governance

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

24

Authority in the Net??

The Internet Corporation for Assigned Names and Numbers (ICANN) is the non-profit corporation that was formed to assume responsibility for the IP address space allocation, protocol parameter assignment, domain name system management, and root server system management functions now performed under U.S. Government contract by IANA and other entities.

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

25

Developments in Internet Governance

ICANN PSO ASO DNSO At Large RIPE NCC RIPE ARIN ARIN mtg.

APNIC APNIC mtg.

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

26

Address Supporting Organization

• • • • •

RIR agreed on a proposal “Simple model” MoU between ICANN and RIRs Policies set through existing regional processes Address Council established

– oversee policy development processes – select ICANN directors (open process) http://www.aso.icann.org

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

27

Global Internet Registry System

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

28

Goals of the Internet Registry System

• • • •

Fair distribution of address space Conservation

– prevention of stockpiling of addresses

Aggregation

– hierarchical distribution of globally unique address space – permits aggregation of routing information

Registration

– provision of public registry – ensures uniqueness and enables troubleshooting

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

29

Service Regions

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

30

Address Distribution

Global Authority /8 RIR /20 + LIR (ISP/Enterprise) /32 + ISP / End Users RIPE NCC Members Anybody with a network/host

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

31

Address Space Usage

100,000,000 80,000,000 60,000,000 40,000,000 213/8 212/8 62/8 195/8 194/8 193/8 60% 97% 40,1% 96,5% 97% 20,000,000 98% 0 Q4/ 95 Q1/ 96 Q2/ 96 Q3/ 96 Q4/ 96 Q1/ 97 Q2/ 97 Q3/ 97 Q4/ 97 Q1/ 98 Q2/ 98 Q3/ 98 Q4/ 98 Q1/ 99 Q2/ 99 Q3/ 99 99 Q4/ Q1/ 200 0 Q2/ 200 0

32

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

Terminology

Allocation

– address space given to registries which is held by them to assign to customers •

Assignment

– address space given to end-users for use in operational networks /20 allocation = 4096 addresses assignment

Vesna Manojlovic

assignment

.

CEENet Workshop, August 2000 .

http://www.ripe.net

33

Classful Notation

Class A network 8

0

0.0.0.0 - 127.255.255.255

host 16,777,216 16 Class B

10

128.0.0.0 - 191.255.255.255

65,536 24 Class C

110

192.0.0.0 - 223.255.255.255

256 • Obsolete because of – depletion of B space – too many routes from C space • Solution –

C

lassless

I

nter

D

omain

R

outing – hierarchical address space allocation

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

34

Addresses ...

8 16 32 64 128 256 ...

4096 8192 16384 32768 65536 ...

Vesna Manojlovic

Classless Notation

...

Prefix ...

Classful Net Mask ...

/29 /28 /27 /26 /25 /24 ...

...

1 C 255.255.255.248

255.255.255.240

255.255.255.224

255.255.255.192

255.255.255.128

255.255.255.0

...

/20 /19 /18 /17 16 C’s 32 C’s 64 C’s 128 C’s .

/16 ...

...

1 B CEENet Workshop, August 2000 .

255.255.240.0

255.255.224

255.255.192

255.255.128

255.255.0.0

...

http://www.ripe.net

35

How to get IP addresses?

Go to your Local Internet Registry

– Your provider is probably one or is connected to one http://www.ripe.net/lir/registries/europe.html

If you are a provider and think you may need to be an LIR?

– Contact RIPE NCC

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

36

Becoming a LIR

Complete application form (

ripe-212

)

Provide Reg-ID & contact persons

Read relevant RIPE documents

Sign service agreement (

ripe-191

)

– agreed to follow policies and procedures •

Pay sign-up & yearly fee

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

37

Obtaining IP Addresses Through Existing LIR

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

38

Providing Information (1)

• •

Overview of organisation

• information relevant to the address space request – name and location of the organisation?

– organisation activities?

– what is the structure?

• does it have subsidiaries and where?

• how many departments?

• for what part of the company are the addresses requested?

Possible additional information

- pointer to web site - deployment plan - special technologies - purchase receipts

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

39

Providing Information (2)

Design of the network

• how many physical segments it will consist of?

• what is each segment going to be used for?

– including equipment used • how many hosts are in each segment?

• expectations of growth • topology map –

Utilisation and efficiency guidelines

• 25% immediately, 50% in one year • operational needs; no reservations –

Can address space be conserved by using:

• different subnet sizes?

• avoiding padding between subnets?

Any address space already in use?

• returning and renumbering? (encouraged)

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

40

Addressing Plan

Relative Prefix

0.0.0.0 0.0.0.128 0.0.0.160 0.0.0.176

0.0.0.192

0.0.1.0 0.0.1.128 0.0.1.160 0.0.1.176

Subnet Mask

255.255.255.128 255.255.255.224 255.255.255.240 255.255.255.240 255.255.255.192 255.255.255.128 255.255.255.224 255.255.255.240 255.255.255.240

Size Imm 1yr 2yr Description

128

32

16 16 64

128 32 16 16

100 100 10 8 12 10 14 24 0 0 14 0 14

35

100 12 14 0 100 16 13 14

50

100 25 14

dynamic

dial-up Amsterdam web/mail/ftp servers Amsterdam customers’ servers Amsterdam training room LAN Amsterdam Amsterdam office LAN

(*1)

dynamic dial-up Utrecht web/mail/ftp servers Utrecht Inet cafe Utrecht 448 170 297 342 Totals

(*1)

Office LAN = workstations, router, 2 printers and 1 fileserver

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

41

Request Overview

request-size: 448 addresses-immediate: 170 addresses-year-1: addresses-year-2: 297 342 Totals: 448 170 297 342 subnets-immediate: 6 subnets-year-1: 8 subnets-year-2: 9 inet-connect: YES, already connected to “UpstreamISP” country-net: NL private-considered: Yes request-refused: NO PI-requested: NO address-space returned: 195.20.42.0/25, to UpstreamISP, “in 3 months”

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

42

Private Address Space

RFC-1918 (Address Allocation for Private Internets)

Suitable for

– partial connectivity – limited access to outside services • can use application layer gateways (fire walls, NAT) •

Motivation

– saves public address space – allows for more flexibility – security

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

43

IPv6

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

44

Why IPv6?

Next generation protocol

– scalability -- 128 bits addresses – security – dynamic hosts numbering •

Interoperable with IPv4

• simple and smooth transition – hardware vendors – applications •

Testbed for deployment of IPv6

– www.6bone.net

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

45

IPv6 Introduction

Current format boundaries |-3|--13-|--13-|-6-|--13-|--16--|------64 bits-----| +--+-----+-----+---+-----+------+------------------+ |FP|-TLA-|-sub-|Res|-NLA-|--SLA-|---Interface ID---| |--|-ID--|-TLA-|---|--ID-|--ID--|------------------| |----public topology ----|-site-|-----Interface----| +--+-----+-----+---+-----+------+------------------+ /23 /29 /35 /48 /64

• • •

Classfull; another level of hierarchy Hexadecimal representation of addresses IANA allocations

– APNIC – ARIN – RIPE NCC 2001:0200::/23 (12 subTLAs) 2001:0400::/23 ( 4 subTLAs) 2001:0600::/23 (19 subTLAs)

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

46

IPv6 Allocations

Draft allocation guidelines

– provisional & bootstrap criteria – currently under revision by community –

[email protected]

&

[email protected]

Initial allocation to LIRs

– /35 subTLA • 13 bits of NLA space + 16 bits of SLA space – whole /29 subTLA reserved http://www.ripe.net/ripencc/mem-services/registration/ipv6/ipv6.html

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

47

The RIPE Database

Its usage and its usefulness

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

48

RIPE Database (1)

Public Network Management Database

Information about

IP address space reverse domains routing policies contact details

objects

inetnum, inet6num domain route, aut-num person, role, maintainer

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

49

RIPE Database (2)

• •

Software Management

• server and client – NOT relational – RIPE NCC – Database Working Group (RIPE community)

Data Management

– LIRs – other users – RIPE NCC • •

Information content not responsibility of RIPE NCC Strong protection mechanisms

not

default Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

50

Querying RIPE Database

• • • • •

RIPE whois server

whois -h whois.ripe.net

– telnet whois.ripe.net

(UNIX command line queries)

RIPE whois client

ftp://ftp.ripe.net/ripe/dbase/software/ripe-dbase-2.2.1.tar.gz

Glimpse full text search

– http://www.ripe.net/cgi-bin/ripedbsearch

Web interface

– http://www.ripe.net/cgi-bin/whois

Database documentation

http://www.ripe.net/db/

http://www.ripe.net/docs/ripe-157.html

& http://www.ripe.net/docs/ripe-189.html

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

51

Search keys (Look-up Keys)

– – – – – – – –

person role maintainer inetnum domain aut-num as-macro route

name, nic-hdl, e-mail name, nic-hdl, e-mail maintainer name network number, network name domain name AS number AS-macro name route value • •

Network number and route value are classless Network name is a search key, but not unique Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

52

‘person’ Object

person: Mirjam Kuehne address: RIPE NCC address: Singel 258 address: NL - 1016 AB Amsterdam address: Netherlands phone: +31 20 535 4444 fax-no: e-mail: nic-hdl: +31 20 535 4445 [email protected]

MK16-RIPE notify: mnt-by: changed: [email protected] 19950411 changed: [email protected] 19970616 source: [email protected]

RIPE-NCC-MNT RIPE

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

53

‘role’ Object

% whois -h whois.ripe.net -t role

role: address: phone: fax-no: e-mail: trouble: admin-c: tech-c: nic-hdl: remarks: notify: mnt-by: changed: source: [mandatory] [single] [primary/look-up key] [mandatory] [multiple] [ ] [optional] [multiple] [ ] [optional] [multiple] [ ] [mandatory] [multiple] [look-up key] [optional] [multiple] [ ] [mandatory] [multiple] [inverse key] [mandatory] [multiple] [inverse key] [mandatory] [single] [primary/look-up key] [optional] [multiple] [ ] [optional] [multiple] [inverse key] [optional] [multiple] [inverse key] [mandatory] [multiple] [ ] [mandatory] [single] [ ]

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

54

‘role’ Object

role: RIPE NCC Hostmaster address: RIPE Network Coordination Centre address: Singel 258 address: NL - 1016 AB Amsterdam, Netherlands phone:

e-mail:

+31 20 535 4444

[email protected]

trouble: Work days 0900-1800 CET: phone XXX trouble: Outside Business Hours: phone YYY admin-c: JLC2-RIPE tech-c:

notify:

mnt-by:

nic-hdl:

MK16-RIPE

[email protected]

RIPE-NCC-MNT

RNH124-RIPE

changed: [email protected] 19971002 source: RIPE

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

55

Network Object

inetnum: 193.0.0.0 - 193.0.0.255

netname: RIPE-NCC descr: descr: RIPE Network Co-ordination Centre Amsterdam, Netherlands country: NL admin-c: JLC2-RIPE tech-c: status: mnt-by: MK16-RIPE ASSIGNED PA RIPE-NCC-MNT changed: [email protected] 19970310 source: RIPE •

“/” notation possible for inetnum value Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

56

20,000,000 15,000,000 10,000,000 5,000,000 0

Queries Reach 7/sec Average

7/sec

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

57

Number of DB Objects

6,000,000 5,000,000 4,000,000 3,000,000 2,000,000 1,000,000 0

• 2,5 million .de domain objects taken out on 28th June • 50,000 .be domain objects taken out on 24th July

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

58

Example Query

whois 193.0.0.0

inetnum

: netname: admin-c: tech-c: 193.0.0.0 - 193.0.0.255

RIPE-NCC DK58 OPS4-RIPE

route

: descr:

role

: address: nic-hdl: 193.0.0.0/24 RIPE-NCC RIPE NCC Operations Singel 258 OPS4-RIPE

person

: address: nic-hdl: Daniel Karrenberg RIPE Network Coordination Centre (NCC) DK58

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

59

Using RIPE DB Flags

– – – – –

whois

-r

193.0.0.0

whois

-T inetnum

193.0.0.0

whois -r -T inetnum 193.0.0.0 whois OPS4-RIPE whois -r OPS4-RIPE

=> inetnum, route => inetnum,person,role => inetnum => role, person

s

=> role • •

whois -v as-macro whois -a

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

60

Inverse Lookups in RIPE DB

• •

whois

-i

admin-c

,

tech-c

,

zone-c

JJ123-RIPE

– – –

whois -i admin-c,tech-c,zone-c

-T

domain JJ123-RIPE whois -i zone-c JJ123-RIPE whois

-r

-i admin-c,tech-c -T role BL112-RIPE

whois -i notify

[email protected]

whois -i origin AS42

whois -i mnt-by BLUELIGHT-MNT

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

61

Hierarchical DB Query

whois -

M

195.35.64.0/19 whois -

m

195.35.64.0/19 195.35.64.0 195.35.95.255

195.35.64.0 195.35.65.191

Blue Light 195.35.80/25 Goody2Shoes 195.35.88/26 eNGOs 195.35.92/29 ENGO-7 ...

195.35.92.8/29 ENGO-8 whois -

L

195.35.92.10

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

62

RIPE whois Flags

• i • L • m • M • r

inverse lookup for specified attributes find all find first level find all

L M

ess specific matches

m

ore specific matches ore specific matches turn off recursive lookups

• T • a

type only look for objects of type (inetnum, route, etc.) search all databases

• h

hostname search alternate server

• s

search databases with source “source”

• t • v

show template for object of type “type” verbose information for object of type “type”

• whois help

(how to query the database)

63

.

.

Vesna Manojlovic CEENet Workshop, August 2000 http://www.ripe.net

DB Update Procedure

Changing an object

– add the

changed

line to the new version of object • value: email address and date – keep the same

primary key

* do not forget authentication (password, PGP key) •

Deleting an object

– add

delete

line to the exact copy of current object – value: email address, reason and date – submit to

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

64

• • •

DB Update Procedure

Unique Keys (Primary Keys)

– – – – – – – – –

person role maintainer inetnum domain aut-num as-macro community route

name + nic-hdl name + nic-hdl maintainer name network number domain name AS number AS-macro name community name route value + origin

Uniquely identifies object Updating an existing object will overwrite the old entry hence need unique key Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

65

Creating

person

Object

• • •

Check if

person

object exists in RIPE DB

whois {person’s name; email address}

– only one object per person

Obtain and complete a template

whois -t person whois -v person

Each

person

object has unique nic-hdl

– Only way to clear ambiguity in

person

objects – Format: - • e.g. CD567-RIPE

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

66

E-mail Interface

<

[email protected]>

– automatic mailbox – send all updates to this mailbox – can use HELP in subject line •

<

[email protected]>

– send questions and comments to this mailbox – please include error reports

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

67

Syntax Checking

Successful update

Warnings

– object corrected and accepted – notification of action taken in acknowledgement •

Errors

– object NOT corrected and NOT accepted – diagnostics in acknowledgement

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

68

Example Error Message

Update FAILED: [person] Mirjam Kuehne person: Mirjam Kuehne address: RIPE NCC address: Singel 258, NL-1016 AB, Amsterdam address: The Netherlands phone: +31 20 535 4444 fax-no: +31 20 535 4445 e-mail: [email protected]

changed: [email protected] 19980828 source: RIPE WARNING: date in "changed" (980828) changed to 19980828 *ERROR*: mandatory field "nic-hdl" missing

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

69

Deleting an Object

• •

Add

delete

attribute to copy of current object

person: Mirjam Kuehne address: address: address: address: phone: fax-no: e-mail: nic-hdl: changed: source:

delete:

RIPE NCC Singel 258 NL - 1016 AB Amsterdam Netherlands +31 20 535 4444 +31 20 535 4445 [email protected]

MK16-RIPE [email protected] 19980911 RIPE

[email protected] late for training Submit to Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

70

Nic hdl’s (Example)

person: ……… John F. Doe person: ……… Anne Smith inetnum: ……… ……… tech-c:

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

71

Test Database

• • • • •

Non-production DB Similar interface as “real” Database

– whois & email •

whois -h test-whois.ripe.net ; [email protected]

– syntax checking – error reports

Enable to submit your own maintainer Ideal for testing

– various authorisation schemes – self-made scripts that update RIPE DB

Source: TEST Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

72

DNS Activities

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

73

DNS Management

• •

Goals

– ensure proper operation of name servers – minimise “pollution” of DNS

Services

– manage reverse delegations of networks in 193/8, 194/8, 195/8, 212/8, 213/8, 217/8 and 62/8 in-addr.arpa domain – support LIR’s with feedback – secondary name servers for ccTLDs •

RIPE NCC DOES NOT register domain names Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

74

RIPE NCC Hostcount per Quarter

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

75

Why Do You Need Reverse Delegation ?

All host-IP mappings in the DNS (A record) should have a corresponding IP-host mapping (PTR record)

Failure to have this will likely

– block users from various services (ftp, mail) – make troubleshooting more difficult – produce more useless network traffic in general

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

76

IN-ADDR.ARPA Domain

. (ROOT) edu nl arpa net com bluelight in-addr 217 212 213 193 Reverse mapping (PTR www.bluelight.nl) 195 35 65 194 62 1 = 1.65.35.195.in-addr.arpa

Vesna Manojlovic .

CEENet Workshop, August 2000 .

www 195.35.65.1

Forward mapping (A 195.35.65.1)

http://www.ripe.net

77

Request Reverse Delegation

Send

domain

object to

– an automatic mailbox •

Robot (named Marvin) will

– check the Reg-ID • only LIRs can request reverse delegation – check if zone is correctly setup – check assignment validity – (try to) enter object to RIPE DB •

Questions, Comments to

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

78

< /24 Delegations

Reverse delegation is also possible for a /24 shared by more customers

=> NOT reason for classfull assignments

RIPE NCC reverse delegate authority for the entire /24 to LIR

If customer wants to run own primary nameserver

– LIR delegates parts as address space gets assigned – use CNAME to create an extra point of delegation (RFC-2317)

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

79

CNAME Example Zonefile at Provider Primary Nameserver

$ORIGIN 80.35.195.in-addr.arpa. 0-31 IN NS ns.goody2shoes.nl.

0-31 IN NS ns2.bluelight.nl.

32-71 IN NS ns.cyberfalafel.nl.

32-71 IN NS ns2.bluelight.nl.

0 IN CNAME 0.0-31 1 IN CNAME 1.0-31 ... ...

31 IN CNAME 31.0-31 32 IN CNAME 32.32-71 33 IN CNAME 33.32-71 ... ...

71 IN CNAME 71.32-71 72 IN PTR www.qwerty.nl.

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

80

Reverse DNS Quality Report

• • • •

80% of delegating zones

good

Quality improving ~500 new zones /week 52.3% of eligible /24 zones are delegated

http://www.ripe.net/inaddr/statistics

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

81

Questions?

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

82

AFRINIC APNIC ARIN CEENet CENTR CIX ETSI EuroISPA IANA

Vesna Manojlovic

Organizations

African Network Information Centre http://www.afrinic.org

Asian Pacific Network Information Centre http://www.apnic.net

American Registry for Internet Numbers http://www.arin.net

Central and Eastern European Networking Association http://www.ceenet.org

Council of European National Top level domain Registries http://www.centr.org

Commercial Internet Exchange http://www.cix.org

European Telecommunications Standards Institute http://www.etsi.org

European Internet Service Providers Association http://www.euroispa.org

Internet Assigned Numbers Authority http://www.iana.org

.

.

CEENet Workshop, August 2000 http://www.ripe.net

83

ICANN IETF ITU NANOG RIPE RIPE NCC W3C

Organizations

Internet Corporation for Assigned Numbers and Names http://www.icann.net

Internet Engineering Task Force http://www.ietf.org

International Telecommunications Union http://www.itu.int

North American Network Operators Group http://www.nanog.org

Reseaux IP European Network http://www.ripe.net

RIPE Network Coordination Centre http://www.ripe.net

World Wide Web Consortium http://www.w3.org

Vesna Manojlovic .

CEENet Workshop, August 2000 .

http://www.ripe.net

84