SwiNOG 27| Bern - Switzerland | 22 October 2014
RIPE NCC Tools and IPv4 runout
Massimiliano Stucchi Training Services
•RIPE & RIPE NCC
•RIPE Stat
•RIPE Atlas
•Getting more IPv4
2Overview topics
RIPE & RIPE NCC
Who is this guy talking?
Who are we? 4
• RIPE NCC
• Located in Amsterdam
• Not for profit membership organisation
• One of five RIRs
• RIPE Community
• Open community
• Develops policies
• Working group mailing lists
What do we do? 5
• Distribute IPv4, IPv6, ASNs
• Support RIPE community
• Training
• RIPE Database
• RIPE Atlas
• RIPE Stat
• Resource Certification (RPKI)
• Research and Statistics
• And more!
RIPE Stat
Give me more info!
What is RIPEstat? 7
One interface for viewing all Internet number resource data
“One-stop shop”
What data? What sources? 8
• RIPE Database
• Other RIR data
• BGP routing data (RIS)
• Active measurements (RIPE Atlas, DNSMON)
• GeoLocation (third party)
• Blacklist data (third party)
• More…
RIS - Routing Information Service 9
• RIPE NCC has been collecting BGP information since 1999
• Raw data: ris.ripe.net
• RIS has 15 route collectors and 600+ peers
• RIPEstat visualises RIS data
Why use RIPEstat? 10
• For your own network:
• Is someone else announcing my prefix?
• How visible is my new IPv6 network?
• Is my BGP routing consistent with Routing Registry?
• Are my DNS and reverse DNS consistent?
• Location of my customers’ prefixes
• Was my prefix visible yesterday in Tokyo?
Why use RIPEstat? 11
• For viewing other networks:
• How many IPv6 prefixes are announced in my country?
• IPv6 in my country compared to neighbours
• Who has more peers, AS1 or AS2?
• How does the upstream outage look?
• Is the prefix/ASN that I want already announced?
• Which ASN announces an IP?
• Where can I report abuse from an IP?
Query page 12
RIPEstat shows your own IP/ASN
Results default tab 13
Widgets
AS3333
More tabs with results
BGPlay 14
• See how your network is routed
• Announcements
• Withdrawals
• Path changes
• BGPlay shows routing history
• Animated graphic
• Highly interactive
!
https://stat.ripe.net/widget/bgplay
BGPlay 15
http://stat.ripe.net
16Link
RIPE Atlas
Divide, distribute and conquer
!
• Ping• Traceroute• DNS• SSL• All both on IPv4 and IPv6
18Measurements
RIPE Atlas in numbers: August 2014 19
• 6,600+ probes connected
• 3,000+ active users this year
!
• 1,000+ built-in measurements daily
• 5,000+ user-defined measurements daily
• Available to hosts and members
• ping, traceroute, DNS, SSL
!
• Goal by end 2014:
• 10000 connected probes
Measurement devices 20
• v1 & v2: Lantronix XPort Pro
• v3: TP-Link TL-MR3020 powered from USB port
• Does not work as a wireless router
• Same functionality as the old probe
• RIPE Atlas anchor: Soekris net6501-70
RIPE Atlas coverage 21
Where is B-root? 22
Probes per ASN (in RIPEstat) 23
Running measurements!
• 6600+ probes, from different networks, at your fingertips
• Run customised, one-off measurements
• Or continuous ones!
• You need points: You earn points by hosting a probe, or by being an LIR!
!
!
!
24
Measurements data!
• Built-in measurement data is available to
everyone
• Maps
• Data from public probes
• API to download raw data!
!
!
!
25
Monitoring with RIPE Atlas!
• Measurements can be turned into monitoring
• Integration with nagios/icinga is possible
• Tests from 500 up to 6000 probes can be used !
!
!
• See your network from outside
• Plug into existing infrastructure!
!
!
26
http://atlas.ripe.net
27Link
IPv4 Depletion
It’s over! Get over it.
Internet Protocol version 4Invented by me.
32 bits is enough.
30
IANA IPv4 Pool
0%
10%
20%
30%
40%
2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011
31
“On 14 September 2012, the RIPE NCC ran out of their regular pool of IPv4”
Remaining RIPE NCC IPv4 pool 32
Remaining RIPE NCC IPv4 pool 33
IPv4 allocation from the last /8
• Must already hold IPv6 allocation
• or sub-allocation
!
• Members can get one /22 (=1024 addresses)
!
• And that’s all they get…
34
IPv4 Transfers
Getting a little more…
IPv4 allocation transfers
• Only between RIPE NCC members
• No minimum allocation size
• Evaluated by the RIPE NCC
• Cannot transfer same block again within 24 months
36
Don’t buy your IPv4 on eBay!
• Find out if the seller is the legitimate holder
• Check if the IPv4 block can be transferred
37
IPv4 Transfers: where to look
• IPv4 Listing Service
• Accessible for LIRs in the LIR Portal
!
• Through a Broker
• Listed on RIPE NCC website
• NOT endorsed by RIPE NCC
• Signed an agreement to conform to RIPE Policies
38
IPv4 Transfers: how to request it
• Contact the Registration Services dept.
• Some documentation is required!
• The IPRAs will assist you with the request
39
Questions? 40
41Follow us!
@TrainingRIPENCC
Fin
Ende
KpajKonec
Son
Fine
Pabaiga
Einde
Fim
Finis
Koniec
Lõpp
Kрай
SfârşitКонeц
KrajVége
Kiнець
Slutt
Loppu
Τέλος
Y Diwedd
Amaia Tmiem
Соңы
Endir
Slut
Liðugt
An Críoch
Fund
הסוף
Fí
ËnnFinvezh
The End!
Beigas