RIPE Network Coordination Centre RIPE NCC LIR Tutorial

Transcription

1 RIPE NCC LIR Tutorial Alex Band, RIPE NCC

2 The Internet Registry (IR) system Getting resources RIPE Database 2

3 What is an LIR? Local Internet Registry - responsible for obtaining, distributing and registering IP resources, according to the RIPE policies Member of the RIPE NCC - receiving resources directly from the RIPE NCC - RIPE NCC is a Regional Internet Registry (RIR) Benefits - flexibility - independence (BGP multihoming) 3

4 The Internet Registry System

5 RIR Service Regions 5

6 Goals: Registration Why? - Ensure uniqueness of Internet number resources - Provide contact information for users of Internet number resources How? - RIR whois databases Results: - IP address space used only by one organisation - Information available on users of Internet number resources 6

7 Goals: Aggregation Why? - Routing tables growing too fast - Provide scalable routing solution for Internet How? - Encourage announcement of whole allocations - Introduction of Classless Inter Domain Routing (CIDR) Result: - Growth of routing tables has slowed, but could still be better 7

8 Goals: Conservation Why? - IP address space and AS Numbers are limited resources - These resources were not used efficiently in the past How? - Introduction of CIDR - Policies to ensure fair usage Results: - Growth in IP address space usage slowed down - Internet number resources are distributed based on need 8

9 PDP cycle 9

10 IP Address Distribution /0 IANA /8 RIR /21 /23 Allocation LIR /25 End User /23 PA Assignment PI Assignment 10

11 IPv4 Address Pool June 2005 Other Central Registry 25% available APNIC source: RIPE NCC LACNIC ARIN AfriNIC 11

12 IPv4 Address Pool - Now Other Central Registry 16% available RIPE NCC APNIC source: LACNIC AfriNIC ARIN 12

13 Lies, Damn Lies and.

14 IPv6 Allocations 14

15 IPv6 Allocations per Country 15

16 Questions?

17 Getting Resources

18 Confidential LIR Resource Request Reg File Update RIPE Database 18

19 IPv4 Allocation If you... - are an LIR - need IPv4 addresses Minimum allocation size is /21 19

20 IPv6 Allocation If you... - are an LIR - advertise the allocation as a single prefix - have a plan for making assignments within two years Minimum allocation size is /32 20

21 Assignment Window (AW) Maximum number of IP addresses the LIR can assign without approval from the RIPE NCC - To any End User within 12 months - New LIR: AW = 0 - Six months after the first allocation: AW = /21 21

22 Using your AW The AW is /21 All requests are from the same customer March July November April time /23 /22 /22 /22 send to RIPE NCC 22

23 LIR Assignment Process Collect information and evaluate request Request > AW? yes no Need 2 nd opinion? yes RIPE NCC evaluates request no Choose addresses Keep documentation and register in RIPE DB 23

24 AS Numbers If you... - want to become multihomed - have peering agreements 24

25 ASN Assignment rate 25

26 16-Bit AS Number Pool - Now Reserved RIPE NCC AfriNIC 28% available ARIN APNIC source: LACNIC 26

27 32 Bit AS Numbers Assignments in : 16-bit AS default, 32-bit AS on request in 2009: 32-bit AS default, 16-bit AS on request as of 2010: only 32-bit AS numbers Prepare for 32-bit AS numbers in your organisation Ask your hardware vendor for support Please don t wait until

28 Questions?

29 RIPE Database

30 RIPE Database Public Network Management Database All LIRs must have - person object - maintainer (mntner) object - organisation object 30

31 Database Object Syntax Attribute name person: address: phone: nic-hdl: changed: source: Attribute value Comment John Smith Singel 258 Amsterdam # 9-17 CET JS1-RIPE john@example.net RIPE (after #) Continuation (line starts with white character) 31

32 Not using a Role Object inetnum: tech-c: JS123-RIPE SB456-RIPE person: John Smith nic-hdl: JS123-RIPE inetnum: tech-c: JS123-RIPE SB456-RIPE inetnum: tech-c: JS123-RIPE SB456-RIPE inetnum: tech-c: JS123-RIPE SB456-RIPE inetnum: person: Sue Baker nic-hdl: SB456-RIPE tech-c: SB456-RIPE JS123-RIPE inetnum: tech-c: JS123-RIPE SB456-RIPE inetnum: tech-c: JS123-RIPE SB456-RIPE 32

33 Using a Role Object inetnum: tech-c: person: John Smith inetnum: tech-c: nic-hdl: JS123-RIPE LIR Admin nic-hdl: LA789-RIPE Sue Baker nic-hdl: SB456-RIPE LA789-RIPE inetnum: role: person: LA789-RIPE tech-c: tech-c: JS123-RIPE SB456-RIPE tech-c: LA789-RIPE inetnum: tech-c: LA789-RIPE inetnum: tech-c: LA789-RIPE inetnum: tech-c: LA789-RIPE inetnum: tech-c: LA789-RIPE 33

34 RIPE Database Protection mntner holds the password / key for authorisation of updates of other objects Include mnt-by: NAME-MNT in all objects! - for updates: include password: bla or sign Authentication methods: - MD5-PW <encrypted password> - encryption web interface available PGPKEY-<key ID> X509-<ID> Forgot password? Go to RIPE DB > DB Support > Security 34

35 Multiple protection mntner: ONE-MNT auth: MD5-PW bla34^&$% auth: PGPKEY-AE6FBBF7 person: John Smith nic-hdl: JS1-RIPE mntner: TWO-MNT auth: mnt-by: ONE-MNT mnt-by: TWO-MNT MD5-PW $1$o93UxR Any of the three authentications 35

36 Hierarchical Authorisation inetnum: /21 /21 status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: LIR-MNT inetnum: status: mnt-by: /25 ASSIGNED PA LIR-MNT /25 Allocation Assignment 36

37 Questions?

38 Do You Want to Host RIPE NCC Training Courses? You will provide - Location with lunch facilities - High speed Internet connection The RIPE NCC will - Provide the Training Course Announce the Training Course at your location Register the attendees Send the training material to your location The RIPE NCC will pay for - Catering (Food and drink) - Travel and accommodation for the RIPE NCC trainers - Shipping the training material 38

39 The End! Y Diwedd Kрай Fí Соңы Konec Lõpp הסוף Fine Einde Fim Liðugt Ende Kraj Vége Endir Finis Kiнець Fund Son An Críoch Sfârş it Fin Kpaj Τέλος Конeц Slut Slutt Pabaiga Koniec Amaia Loppu Tmiem 39