Mark Kosters, CTO

Engineering Update

• Operations• Five engineers + manager

• Information Systems and Security • Three engineers + manager

• Development• Nine engineers + manager• User Experience Expert• User Interface Designer

• Software Integration • Five engineers + manager

• Project Management • One project manager and one part-time project manager

• CTO

Staffing Summary

2 #ARIN43

• Main focus areas• Website Improvements

• ARIN Online is now 100% on Angular technology• Outstanding area which is not:

• Whois web search (whois.arin.net)

• Technical Debt• Whois performance

• Yes, still have instances of crawling a /32 at a time• Lots of traffic from

• Specific countries• Social network providers• Cloud providers

Accomplishments since ARIN 42

3 #ARIN43

• ACSPs• ACSP 2011.21 – ARIN Online User Interface• ACSP 2016.2 - Minor UI Improvements to ARIN Online• ACSP 2016.3 – Provide Web UI for RDAP

• Completed Version 1 of User Interface (UI) work incrementally placed in ARIN Online• Lots of iteration to be done• CMSD continues with content responsibility

• RDAP conformance• Added network type field (type) to the IP Response object for RDAP. • Added network status array (status) to the IP Response object for RDAP.• To satisfy RFC 7480 requirements, ARIN’s RDAP service now allows application/json as an Accept header,

in addition to application/rdap+json

Accomplishments since ARIN 42

4 #ARIN43

• Website has had a lot of your input• Test drives• User feedback

• Website has been extensively overhauled• Every dynamic page reviewed by the UI/UX team• Every dynamic page has new technology behind it

• Engineering created a new framework for static content

• Site is now responsive

• Site was designed and tested to meet Web Content Accessibility Guidelines 2.1, level AA compliance

• The new site is a culmination of a multi-year cross-department collaboration

A Few Words about the New Website

5 #ARIN43

• Technical Debt Completed• Upgraded DNS monitoring

• Sadly it took an DNSSEC outage to shore up identified shortcomings• Still behind on our bump in the middle DNSSEC signer

• Automated build systems using Ansible• Modernized our virtualization managers

• More whois performance improvements

Accomplishments since ARIN 42

6 #ARIN43

ARIN Online Usage149,335 accounts activated since inception

through Q1 of 2019

7 #ARIN43

Active Usage of ARIN Online

8 #ARIN43

Provisioning Transactions(cumulative – RESTful + templates)

9 #ARIN43

DNSSECARIN 43

Number of Orgs with DNSSEC 184 (+11)

Total Number of Delegations 663,965

DNSSEC Secured Zones 1,210 (+222)

Percentage Secured 0.18 % (+.03%)

10 #ARIN43

Resource Public Key Infrastructure (RPKI) Usage

Oct2012

Apr2013 Oct 2013 Apr 2014 Oct 2014 Apr 2015 Oct 2015 Apr 2016 Oct 2016 Apr

2017Oct 2017

Apr2018 Sep 2018 Apr 2019

Certified Orgs 47 68 108 153 187 220 250 268 292 328 361 434 591

ROAs 19 60 106 162 239 308 338 370 414 470 538 604 1013 4519

Covered Resources 30 82 147 258 332 430 482 528 577 640 741 825 1953 5816

Up/Down Delegated 0 0 0 1 2 1 2 2 2 1 1 1

11 #ARIN43

Whois/Whois-RWS Queries Per Second

0.00

500.00

1000.00

1500.00

2000.00

2500.00

3000.00

3500.00

4000.00

1999

-10

2000

-06

2001

-02

2001

-10

2002

-06

2003

-02

2003

-10

2004

-06

2005

-02

2005

-10

2006

-06

2007

-02

2007

-10

2008

-06

2009

-02

2009

-10

2010

-06

2011

-02

2011

-10

2012

-06

2013

-02

2013

-10

2014

-06

2015

-02

2015

-10

2016

-06

2017

-02

2017

-10

2018

-06

2019

-02

Queries Per Second

Whois RWS Whois Por t 43

12 #ARIN43

Whois/Whois-RWS/RDAP Queries over IPv6

0.00%

5.00%

10.00%

15.00%

20.00%

25.00%

2009

-01

2009

-06

2009

-11

2010

-04

2010

-09

2011

-02

2011

-07

2011

-12

2012

-05

2012

-10

2013

-03

2013

-08

2014

-01

2014

-06

2014

-11

2015

-04

2015

-09

2016

-02

2016

-07

2016

-12

2017

-05

2017

-10

2018

-03

2018

-08

2019

-01

Directory Service Queries over IPv6

13 #ARIN43

Registry Data Access Protocol (RDAP)

0

100000000

200000000

300000000

400000000

500000000

600000000

700000000

201

5-0

6

201

5-0

8

201

5-1

0

201

5-1

2

201

6-0

2

201

6-0

4

201

6-0

6

201

6-0

8

201

6-1

0

201

6-1

2

201

7-0

2

201

7-0

4

201

7-0

6

201

7-0

8

201

7-1

0

201

7-1

2

201

8-0

2

201

8-0

4

201

8-0

6

201

8-0

8

201

8-1

0

201

8-1

2

201

9-0

2

RDAP Queries Per Month

RDAP -v4

14 #ARIN43

Internet Routing Registry (IRR) Maintainers

1726 1850 1951 21022322 2485 2692

2957 3211

0

500

1000

1500

2000

2500

3000

3500

2011 2012 2013 2014 2015 2016 2017 2018 2019Maintainers

2019 Data through Q1

15 #ARIN43

IRR Route / Route6 Objects

18636 19969 21204 23535 27255 31464 36315 39167 53124

242527 698 1072 1385 1712 2145 3211 4293

1

10

100

1000

10000

100000

2011 2012 2013 2014 2015 2016 2017 2018 2019

2019 data through Q1

RouteRoute6

16 #ARIN43

IRR InetNum / Inet6Num Objects

419 481 531 621 731 906 965 1066

1489

1325 38 51 77 137

159 173

257

1

10

100

1000

10000

2011 2012 2013 2014 2015 2016 2017 2018 2019

InetNum

Inet6Num2019 data through Q1

17 #ARIN43

Number of Organizations Number of Objects

6 1001-19574

57 100-1000

5 90-99

5 80-89

12 70-79

19 60-69

17 50-59

569 10-49

731 5-9

1829 1-4

IRR Object Breakout by Organization

18 #ARIN43

• IRR• In the design stages now• Will start development work in Q3 2019

• Stateless ARIN Online• No more pesky timeouts!• Allows engineering to deploy without an outage

• RPKI HSM Upgrade• Website phase II

• Website chat• Website ACSPs

What we are working on through 2019 Q3

19 #ARIN43

• Technical backlog • Still on Java 7 and JBoss• Automated build systems using Ansible

• Folding the remaining puppet iterations into Ansible• Upgrading bump-in-the-wire DNSSEC signer (holdover)

• Global Service Load Balancing for ARIN Services• Currently using Round-robin DNS

• Working on cutover to disaster site• Servers are there• Glue tying it together requires more work (monitoring/database

connections/mail flow etc)

What We are Working on Through 2019 Q3

20 #ARIN43

• Working out differences on• Registration Data Access Protocol (RDAP) implementations• Extended statistics file formats

• Internet Technology Health Indicators (ITHI)• Working on coordinated reporting between the RIRs

• Resource Public Key Infrastructure (RPKI)• Providing operational feedback on various protocol enhancements within Internet

Engineering Task Force (IETF)• Examples are:

• RPKI Validation Reconsidered• RPKI signed object for Trust Anchor Locators (TALs)• RPKI Multiple "All Resources" Trust Anchors Applicability Statement

Coordination Work with the Other RIRs

21 #ARIN43

Thank you.Any Questions?

22 #ARIN43

Thank you.Any Questions?

Discussion

23 #ARIN43