RIPE NCC tools and IPv4 runout · •RIPE NCC has been collecting BGP information since 1999 ......

SwiNOG 27| Bern - Switzerland | 22 October 2014

RIPE NCC Tools and IPv4 runout

Massimiliano Stucchi Training Services

•RIPE & RIPE NCC

•RIPE Stat

•RIPE Atlas

•Getting more IPv4

2Overview topics

RIPE & RIPE NCC

Who is this guy talking?

Who are we? 4

• RIPE NCC

• Located in Amsterdam

• Not for profit membership organisation

• One of five RIRs

• RIPE Community

• Open community

• Develops policies

• Working group mailing lists

What do we do? 5

• Distribute IPv4, IPv6, ASNs

• Support RIPE community

• Training

• RIPE Database

• RIPE Atlas

• RIPE Stat

• Resource Certification (RPKI)

• Research and Statistics

• And more!

RIPE Stat

Give me more info!

What is RIPEstat? 7

One interface for viewing all Internet number resource data

“One-stop shop”

What data? What sources? 8

• RIPE Database

• Other RIR data

• BGP routing data (RIS)

• Active measurements (RIPE Atlas, DNSMON)

• GeoLocation (third party)

• Blacklist data (third party)

• More…

RIS - Routing Information Service 9

• RIPE NCC has been collecting BGP information since 1999

• Raw data: ris.ripe.net

• RIS has 15 route collectors and 600+ peers

• RIPEstat visualises RIS data

Why use RIPEstat? 10

• For your own network:

• Is someone else announcing my prefix?

• How visible is my new IPv6 network?

• Is my BGP routing consistent with Routing Registry?

• Are my DNS and reverse DNS consistent?

• Location of my customers’ prefixes

• Was my prefix visible yesterday in Tokyo?

Why use RIPEstat? 11

• For viewing other networks:

• How many IPv6 prefixes are announced in my country?

• IPv6 in my country compared to neighbours

• Who has more peers, AS1 or AS2?

• How does the upstream outage look?

• Is the prefix/ASN that I want already announced?

• Which ASN announces an IP?

• Where can I report abuse from an IP?

Query page 12

RIPEstat shows your own IP/ASN

Results default tab 13

Widgets

AS3333

More tabs with results

BGPlay 14

• See how your network is routed

• Announcements

• Withdrawals

• Path changes

• BGPlay shows routing history

• Animated graphic

• Highly interactive

!

https://stat.ripe.net/widget/bgplay

BGPlay 15

http://stat.ripe.net

16Link

RIPE Atlas

Divide, distribute and conquer

!

• Ping• Traceroute• DNS• SSL• All both on IPv4 and IPv6

18Measurements

RIPE Atlas in numbers: August 2014 19

• 6,600+ probes connected

• 3,000+ active users this year

!

• 1,000+ built-in measurements daily

• 5,000+ user-defined measurements daily

• Available to hosts and members

• ping, traceroute, DNS, SSL

!

• Goal by end 2014:

• 10000 connected probes

Measurement devices 20

• v1 & v2: Lantronix XPort Pro

• v3: TP-Link TL-MR3020 powered from USB port

• Does not work as a wireless router

• Same functionality as the old probe

• RIPE Atlas anchor: Soekris net6501-70

RIPE Atlas coverage 21

Where is B-root? 22

Probes per ASN (in RIPEstat) 23

Running measurements!

• 6600+ probes, from different networks, at your fingertips

• Run customised, one-off measurements

• Or continuous ones!

• You need points: You earn points by hosting a probe, or by being an LIR!

!

!

!

24

Measurements data!

• Built-in measurement data is available to

everyone

• Maps

• Data from public probes

• API to download raw data!

!

!

!

25

Monitoring with RIPE Atlas!

• Measurements can be turned into monitoring

• Integration with nagios/icinga is possible

• Tests from 500 up to 6000 probes can be used !

!

!

• See your network from outside

• Plug into existing infrastructure!

!

!

26

http://atlas.ripe.net

27Link

IPv4 Depletion

It’s over! Get over it.

Internet Protocol version 4Invented by me.

32 bits is enough.

30

IANA IPv4 Pool

0%

10%

20%

30%

40%

2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011

31

“On 14 September 2012, the RIPE NCC ran out of their regular pool of IPv4”

Remaining RIPE NCC IPv4 pool 32

Remaining RIPE NCC IPv4 pool 33

IPv4 allocation from the last /8

• Must already hold IPv6 allocation

• or sub-allocation

!

• Members can get one /22 (=1024 addresses)

!

• And that’s all they get…

34

IPv4 Transfers

Getting a little more…

IPv4 allocation transfers

• Only between RIPE NCC members

• No minimum allocation size

• Evaluated by the RIPE NCC

• Cannot transfer same block again within 24 months

36

Don’t buy your IPv4 on eBay!

• Find out if the seller is the legitimate holder

• Check if the IPv4 block can be transferred

37

IPv4 Transfers: where to look

• IPv4 Listing Service

• Accessible for LIRs in the LIR Portal

!

• Through a Broker

• Listed on RIPE NCC website

• NOT endorsed by RIPE NCC

• Signed an agreement to conform to RIPE Policies

38

IPv4 Transfers: how to request it

• Contact the Registration Services dept.

• Some documentation is required!

• The IPRAs will assist you with the request

39

Questions? 40

41Follow us!

@TrainingRIPENCC

Fin

Ende

KpajKonec

Son

Fine

Pabaiga

Einde

Fim

Finis

Koniec

Lõpp

Kрай

SfârşitКонeц

KrajVége

Kiнець

Slutt

Loppu

Τέλος

Y Diwedd

Amaia Tmiem

Соңы

Endir

Slut

Liðugt

An Críoch

Fund

הסוף

Fí

ËnnFinvezh

The End!

Beigas