Internet Operations and the RIRs

Similar documents
What's inside the cloud?!

4.1.2., , [Section Number Retired] Determination of IP address allocation

The Internet Introductory material.

Introduction to The Internet

The Internet. On October 24, 1995, the FNC unanimously passed a resolution defining the term Internet.

The IANA Functions. An Introduction to the Internet Assigned Numbers Authority (IANA) Functions

Fireware How To Dynamic Routing

Internet Bodies.

Regional Internet Registries. Statistics & Activities. Prepared By APNIC, ARIN, LACNIC, RIPE NCC

Internet Structure and Organization

Topic 1: Internet Architecture & Addressing

Introduction to IP Numbers vs. Domain names. Adiel A. Akplogan CEO, AFRINIC. 2014

Introduction to The Internet. ISP/IXP Workshops

How To Get An Ipv6 Allocation On Ipv4 (Ipv4) From Ipv5) From The Ipvripe Ncc (Ip6) From A Ipvv6 Ipv2 (Ip4) To Ip

Law Enforcement and Internet Governance: An Ounce of Prevention Is Worth a Pound of Cure

RIPE Network Coordination Centre RIPE NCC LIR Tutorial

IPv6 Addressing. ISP Training Workshops

IPv6 and IPv4 Update from the RIPE NCC. Sandra Brás, Ferenc Csorba

Ref: A. Leon Garcia and I. Widjaja, Communication Networks, 2 nd Ed. McGraw Hill, 2006 Latest update of this lecture was on

APNIC Trial of Certification of IP Addresses and ASes

BGP Terminology, Concepts, and Operation. Chapter , Cisco Systems, Inc. All rights reserved. Cisco Public

RIPE NCC Activity Plan 2005

IPv6 Address Planning

:0db8:2004:f000:20d:60ff: Continuing cooperation The NRO and Internet Governance. The. Number

Distributed Systems. 09. Naming. Paul Krzyzanowski. Rutgers University. Fall 2015

Part I - Gathering WHOIS Information

Components of Routing Table Growth

RPKI Tutorial. Certification. Goals. Current Practices in Filtering

DNS Basics. DNS Basics

Transforming the Internet: from IPv4 to IPv6

IPv6 The Big Picture. Rob Evans, Janet

technical Operations Area IP Resource Management

INTERNET ORGANIZATION OVERVIEW OF THE INTERNET'S ORGANIZATION AND MAIN STANDARD BODIES. Internet Organization. Peter R. Egli INDIGOO.COM. indigoo.

Internet Protocol version 4 Part I

256 4 = 4,294,967,296 ten billion = 18,446,744,073,709,551,616 ten quintillion. IP Addressing. IPv4 Address Classes

IP Address Structure

Internet Addresses (You should read Chapter 4 in Forouzan)

What is AfriNIC, IPv4 exhaustion & IPv6 transition

A PKI For IDR Public Key Infrastructure and Number Resource Certification

APNIC Internet Resource Management (IRM) Tutorial. Petaling Jaya, Malaysia 24 February 2014

Domain Names and their Role for the Net

APNIC IPv6 Deployment

BGP. 1. Internet Routing

Lab - Mapping the Internet

A RESTful Web Service for Whois. Andy Newton Chief Engineer, ARIN

Who rules the internet? Understanding ICANN

Subpoena Compliance and Special Investigations. Law Enforcement Assistance Guide for Internet Investigations

Peering in Hong Kong. Che-Hoo CHENG CUHK/HKIX

CE363 Data Communications & Networking. Chapter 6 Network Layer: Logical Addressing

Introduction to IP v6

Oracle Communications Internet Name and Address Management

Communications and Networking

IRINN affiliation Guide

An introduction to IANA Presentation Notes

Chapter 3. TCP/IP Networks. 3.1 Internet Protocol version 4 (IPv4)

IPv6 Addressing and Subnetting

RIPE Whois Database Query Reference Manual

Assessing the Supply Curve in the IPv4 Address Market

Computer Network Foundation. Chun-Jen (James) Chung. Arizona State University

Expert Reference Series of White Papers. The Basics of Configuring and Using Cisco Network Address Translation

Glossary of Technical Terms Related to IPv6

Internet Protocol Address

Internet Technical Governance: Orange s view

TECHNICAL REPORT Network Technologies (NTECH); Description of the DNS protocol usage in IP based operators networks

DNS Root NameServers

Beginner s Guide to INTERNET PROTOCOL (IP) ADDRESSES

Chapter 19 Network Layer: Logical Addressing 19.1

CHAPTER 0 INTRODUCTION TO TCP/IP

Address Scheme Planning for an ISP backbone Network

How to use the UNIX commands for incident handling. June 12, 2013 Koichiro (Sparky) Komiyama Sam Sasaki JPCERT Coordination Center, Japan

APNIC elearning: Requesting IP Address

Transcription:

Internet Operations and the RIRs

Overview ARIN and the Regional Internet Registry (RIR) System IP Number Resources, DNS and Routing IP Address Management Whois

ARIN and the RIR System

About ARIN One of five Regional Internet Registries Issues Internet number resources; facilitates consensus based policies and promotes the advancement of the Internet through education and outreach Services 25 Economies in the Caribbean and North America Nonprofit corporation based in Chantilly, VA, established December 1997 100% community funded

Regional Internet Registries

ARIN s Service Region ARIN s region includes Canada, many Caribbean and North Atlantic islands, and the United States.

RIR Structure Not-for-profit Fee for services, not number resources 100% community funded Membership Organization Open Broad-based - Private sector - Public sector - Civil society Community Regulated Community developed policies Member-elected executive board Open and transparent

RIR Services Number Resources IP address allocation & assignment ASN assignment Directory services Whois IRR Reverse DNS Organization Elections Meetings Information dissemination Website Newsletters Roundtables Training Policy Development Maintain e-mail discussion lists Conduct public policy meetings Publish policy documents

Internet Operations

On the Internet, you are nothing but an IP address! www.afrinic.net 196.216.2.1 www.nro.net www.apnic.net 193.0.0.131 202.12.29.20 www.icann.org 192.0.34.163 202.12.29.142 www.arin.net 192.149.252.7 www.isoc.org 206.131.253.68 www.ripe.net 192.0.0.214 www.lacnic.net 200.160.2.15

What is an IP Address? An Internet Protocol (IP) address is a number that identifies a device on a computer network. Every device directly connected to the Internet needs a unique IP address There are two types of IP addresses IPv4 and IPv6

Quick History of the Internet Protocol Internet Protocol version 4 (IPv4, or just IP ) First developed for the original Internet (ARPANET) in spring 1978 Deployed globally with growth of the Internet Total of 4 billion IP addresses available Used by every ISP and hosting company to connect customers to the Internet Allocated based on documented need Internet Protocol version 6 (IPv6) Design started in 1993 when IETF forecasts showed IPv4 depletion between 2010 and 2017 Completed, tested, and available for production since 1999 Total of 340,282,366,920,938,463,463,374,607,431,768,211,456 IP addresses available Used and managed similar to IPv4

About IPv4 and IPv6 Internet Protocol version 4 (IPv4) Internet Protocol version 6 (IPv6) Deployed 1981 1999 Address Size 32-bit number 128-bit number Address Format Dotted Decimal Notation: 192.149.252.76 Hexadecimal Notation: 3FFE:F200:0234:AB00:0 123:4567:8901:ABCD Prefix Notation 192.149.0.0/24 3FFE:F200:0234::/48 Number of Addresses 2 32 = ~4,000,000,000 2 128 = ~340,000,000, 000,000,000,000,000, 000,000,000,000,000

IPv4 Depletion is Imminent 5 RIRs together have been allocating, on average, 10-12 /8s each year Demand for IPv4 continues from organizations around the world IANA has issued eight /8s to the 5 RIRs in 2010 There are 18 /8s remaining at the IANA as of 31 May 2010 IANA IPv4 free pool depletion COULD happen in early 2011

What is a Domain Name? A domain name is label that a person uses in place of an IP address to locate a site on the Internet, like www.arin.net.

What is the Domain Name System (DNS)? The Domain Name System (DNS) is a way to store and retrieve information about domain names and IP addresses.

IP Addresses are Not Domain Names IP Address [Identifier] Computer-friendly Unique number identifies computer on Internet Used for routing (moving information across an internetwork from a source to a destination) DNS Name [Reference] People-Friendly Maps host name to unique IP address A means of storing and retrieving information about hostnames and IP addresses in a distributed data base

Using Domain Names The Internet DNS 1. My Computer asks the DNS where to find www.cernet.cn www.cernet.cn? 2001:0C00:8888:: My Computer

Using Domain Names The Internet 202.112.0.46 2001:0400:: DNS 2. The DNS provides the IPv4 or IPv6 address for the requested URL. 2001:0C00:8888:: My Computer

Using Domain Names The Internet 202.112.0.46 2001:0400:: DNS 3. My Computer queries the appropriate server for the IP address provided by the DNS. 2001:0C00:8888:: My Computer 2001:0400:: www. cernet.cn

What is an Autonomous System Number (ASN)? A globally unique number (16 or 32 bit) used by routing protocols (like BGP) to identify an autonomous system (a connected group of IP networks that adhere to a single, clearly defined routing policy) 4,294,967,296 AS numbers (or 2 32 ) e.g. 36863 (16 bit), 393225 (32 bit)

What is Routing? Routing is the act of moving information across an internetwork from a source to a destination.

Network Instead, the computers can connect to a single router. Router

Point-to-Point Networking Six computers need to communicate with each other.

Point-to-Point Networking Each computer communicates with the other computers on its network, creating a total of 15 connections.

Point-to-Point Networking On a larger network, individual connections become unmanageable.

Interconnected Networks Each network can link to other networks via its router.

Interconnected Networks Each network can link to other networks via its router. 172.25.1.4 192.23.9.6 Each segment receives IP addresses. 201.32.16.10 163.37.56.21

Administrative Grouping 172.25.1.4 192.23.9.6 163.37.56.21 Groups of devices with a single, clearly defined routing policy may be assigned an Autonomous System Number (ASN). 201.32.16.10

Administrative Grouping AS 1234 AS 2345 172.25.1.4 192.23.9.6 163.37.56.21 Registries provide Internet number resources to help divide internetworks into interconnected, autonomous groups of devices. 201.32.16.10 AS 3456

Internet Address Routing The Internet Internetwork Routing Table 4.128/9 60.100/16 60.100.0/20 135.22/16

Internet Address Routing The Internet Internetwork Routing Table 4.128/9 60.100/16 60.100.0/20 135.22/16 1. The network announces an IP address range. Announce 202.12.29.0/24 202.12.29.0/24

Internet Address Routing The Internet Internetwork Routing Table 4.128/9 60.100/16 60.100.0/20 135.22/16 202.12.29.0/24 2. The range is added to a specific table within a router. Announce 202.12.29.0/24 202.12.29.0/24

Internet Address Routing The Internet Internetwork Routing Table 4.128/9 60.100/16 60.100.0/20 135.22/16 202.12.29.0/24 3. The router can redistribute information to devices within the network. Traffic 202.12.29.0/24 202.12.29.0/24

Internet Address Routing 1. Traffic enters the network according to the routing table. Traffic 202.12.29.142 Local Router Routing Table 202.12.29.0/25 202.12.29.128/25 202.12.29.142 202.12.29.0/24

Internet Address Routing 2. The local router directs traffic to the appropriate device according to its own routing table. Traffic 202.12.29.142 Local Router Routing Table 202.12.29.0/25 202.12.29.128/25 202.12.29.142 202.12.29.0/24

Global Internet Routing Network Network Network Network Network Network Network Network Network Network Network

Global Internet Routing With a coordinated numbering system, you can build a network of networks. Network Network Network Network Network Network Network Network Network Internetwork Routing Table 4.128/9 60.100/16 60.100.0/20 135.22/16 Network Network

IP Address Management

Terms Allocate to issue number resources to ISPs (LIRs) for internal networks and for further sub-delegation to customers Assign to issue number resources to end-users for internal networks only Legacy Space Numbering resources issued prior to the establishment of the RIRs Issued without a contract Currently maintained and updated by ARIN Honeypot for criminality

Who are the Provisioning Organizations? ICANN IANA RIR ISP/LIR Top level technical coordination of the Internet (Names, Numbers, Root Servers) Manage global unallocated IP address pool Allocate number resources to RIRs Manage regional unallocated IP address pool Allocate number resources to ISPs/LIRs Assign number resources to End-users Manage local IP address pool for use by customers and for infrastructure Allocate number resources to ISPs Assign number resources to End-users

Number Resource Provisioning Hierarchy ICANN / IANA (Internet Assigned Numbers Authority) Manage global unallocated IP address pool Allocate RIRs (AfriNIC, APNIC, ARIN, LACNIC, RIPE NCC) Manage regional unallocated IP address pool Allocate Assign ISPs End Users Re-Allocate Re-Assign ISPs End Users

Data Verification Orgs and POCs registered first All new Orgs vetted and authenticated Secretary of State websites Westlaw SEC Legal documents Organizations making modifications vetted every 12 months

What is WHOIS? A general purpose registry directory service Serves a variety of purposes: Number Registry Name Registry Routing Registry Differs in usage and content depending on registry

What s in ARIN s Whois? Registration information about IP addresses and AS numbers issued by ARIN IP addresses and AS numbers issued by the Central Registry (pre-rir or legacy) Organizations that hold these resources (ORGs) Points of Contact (POCs) for resources or organizations Reallocated/reassigned networks (from ISPs to customers)

What s not in ARIN s Whois? Information about Domain names Host names Reassignments/reallocations by ISPs using their own Whois servers (called RWHOIS) Military networks (see http://www.nic.mil) Routing information Geographic location of the network Addresses shown not necessarily the physical location of the resource

Whois Tips Data not always accurate Registrants responsibility to update Legacy space rarely updated Not all customer reallocations/reassignments in Whois Those smaller than /29 (generally) Those registered in RWHOIS server Private residence info not shown If you need data not shown in Whois, may need subpoena

What Other Information Might ARIN Have? Information about about an organization s network Peering or exchange points to which the network may directly connect An organization s internal utilization information IP ranges utilizing specific types of services, e.g., DSL, webhosting, dial-up, etc. Historical Data Previous Points of Contact for the network Address ranges an organization may have renumbered out of and returned to ARIN Previous address registrants subsequent to a transfer or merger More detailed reassignment information Financial transaction records and billing POCs Corporate papers and list of officers

Useful Links

RIR s Whois ARIN http://whois.arin.net/ui/ AfriNIC http://www.afrinic.net/cgi-bin/whois APNIC http://www.apnic.net/search/index.html LACNIC http://lacnic.net/cgi-bin/lacnic/whois RIPE NCC http://www.ripe.net/perl/whois

Number and Name Lookup Services Domain registries http://www.iana.org/gtld/gtld.htm http://www.iana.org/cctld/cctld-whois.htm GeekTools http://www.geektools.org/whois.php

Routing Information Route Views http://www.routeviews.org RIS http://www.ripe.net/projects/ris/index.html Looking glass information http://www.caida.org/analysis/routing/reversetrac e/ Blacklisting http://www.mxtoolbox.com/blacklists.aspx

Questions?