ripe ncc update€¦ · ais 14 djibouti - june 2014 increased risk for hijacks ripe ncc update...

16
RIPE NCC | AIS 14 - Djibouti | June 2014 RIPE NCC Update Ingrid Wijte Registration Services

Upload: others

Post on 18-Oct-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

RIPE NCC | AIS 14 - Djibouti | June 2014

RIPE NCC Update

Ingrid Wijte Registration Services

Page 2: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateBusy Times

• More organisations becoming a member• Expanding regional presence• IPv4 transfers increasing• IPv6 gaining momentum• Improving contact methods and RIPE website• Increasing complexity

2

Over 10,000 RIPE NCC Members

Source: https://labs.ripe.net/statistics

Customer Services queues

Page 3: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateExpanding Regionally

• Established a Dubai office in 2011• Time has come to expand our presence• Hired two Arab speaking employees to work from

Dubai• Opened an office in Media City

- Better contact with the Arab community- Operations remain in Amsterdam

3

Page 4: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateIPv4 status

• We still have IPv4 addresses left- Every member can get 1,024 addresses (/22)- Block reserved for Internet Exchange Points

• Number of transfers increasing• “Post depletion adjustments” policy changes reduce

bureaucracy- Less paperwork to prove you need addresses

4

Page 5: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateIPv4 Transfers 5

IPv4 Transfers under Transfer Policy

Mergers & Acquisitions

Page 6: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateIPv6 and RIPE NCC Membership 6

Page 7: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateIncreased Risk for Hijacks

• IPv4 addresses are becoming more valuable• Hijackers try very sophisticated methods to obtain

control over (apparently) unused address blocks- Faking registration and identity papers- Faking entire websites and domains

• RIPE NCC has to do more thorough checks- Finding the right balance between due diligence and being

overly bureaucratic

7

Page 8: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateProtect Your Resources

• Hijacks often target address blocks with outdated contact details

• Make sure contact persons and company details are up-to-date

- Check the LIR Portal and update contacts- Verify all entries in RIPE Database are correct- Process any changes right away

• Certify resources

8

Page 9: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateAssisted Registry Check (ARC)

https://labs.ripe.net/Members/matt_parker/assisted-registry-check-first-results

9

• Need for current and accurate registry• Previous audit activities considered “time-

consuming and disruptive” by members- Provide a more efficient, less time-consuming experience for

the member

Page 10: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateRPKI Update 10

• 2000 Members have requested a certificate (20%)• Averaging between 2 and 3 new CAs every day• Members created ROAs covering:

- 1500 unique ASNs- 6400 IPv4 prefixes; more than six /8s of address space- 1000 IPv6 prefixes; more than 10,000 /32 blocks

• Functionality progress- All address space (PI and Legacy)- RPKI software open source and

standalone package- Resiliency improvements

http://certification-stats.ripe.net

Page 11: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateRIPE Policy Highlights

• Main theme: Registry quality & reduce bureaucracy • 2014-01 “Abandoning the Minimum Allocation Size for

IPv4” (for allocation held by LIRs)

• 2014-02 “Allow PI Transfers”- Incentivise PI holders to maintain accurate registry data

• 2014-03 “Remove Multihoming Requirement for AS Number Assignments”

• 2014-04 “Relaxing IPv6 Requirement for Receiving Space from the Final /8”

• 2014-05 “Policy for Inter-RIR Transfers of Internet Resources”

11

Page 12: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateOutreach

• Government Roundtables• Law Enforcement Agencies• Main Focus remains the IGF

- incl Regional Events like EuroDIG, Arab IGF, Russian IGF etc

• NETMundial• ...

12

Page 13: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateMore Operational Improvements

• Conducted Member Survey and defined 50 action items for 2014

• Investigating supporting more languages- Provide translations of key documents and information

• More contact with membership- Small scale events such as dinners and lunch meetings

• Advancing capacity building- Introducing technical hands-on IPv6 training- Improving E-learning platform and courses- IPv6 Roadshow material rewritten

• Collecting input on website improvements

13

Page 14: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdatePast meeting: RIPE 68 12-16 May

• RIPE 25 Year Anniversary

!

!

• Including “Change of the Guard”- RIPE Chairman Rob Blokzijl stepped down- Hans Petter Holen took over

14

Page 15: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

AIS 14 Djibouti - June 2014

RIPE NCC UpdateNext RIPE Meeting

• RIPE 69, London, 12 - 16 May

!

• Including “Change of the Guard”- RIPE Chairman Rob Blokzijl to step down- Hans Petter Holen will take over

15

Page 16: RIPE NCC Update€¦ · AIS 14 Djibouti - June 2014 Increased Risk for Hijacks RIPE NCC Update •IPv4 addresses are becoming more valuable •Hijackers try very sophisticated methods

Questions?

AIS 14 Djibouti - June 2014

RIPE NCC Update 16