so, you want to apply for address space

So, you want to apply for address space

(or your customers are asking you)

AfNOG Workshop, May 2002

Lome, Togo

• Definitions: IR, LIR, RIR

• Registry system requirements

• Network plan

• Becoming a LIR

• Policy mechanism

• WHOIS database

Overview

Disclaimer

• This presentation uses materials from the Registries

• I used to for for one of the Regional Registries

• I am not speaking on behalf of the Registries!

• This is about numbers– not about domain names

Who are involved?

/8

IANA

RIR

LIR (ISP/Enterprise) /20

ISP / End Users /32

(ARIN, APNIC, RIPE)

Definition:Internet Registry (IR)

• organisation which allocates, assigns and registers Internet resources (IP addresses, ASNs)

Definition: Regional Internet Registry (RIR)

• organisation with regional responsibility for management of Internet resources

• allocates address space to LIRs

• address registration services, co-ordination and policy development

• APNIC, ARIN, RIPE-NCC

• AfriNIC, LACNIC in formation

• Must be neutral and consensus-based

RIR Service Regions

AfriNIC

LACNIC

Definition: Local Internet Registry (LIR)

– Gets allocated address space from RIR– assigns address space to its customers– Usually an ISP

• Very small ISPs get IP address space from their upstream provider

Definition: Allocation /Assignment

• Allocation– A block of address space held by an IR for

subsequent allocation or assignment• Not yet used to address any networks

• Assignment– A block of address space used to address an

operational network – May be provided to LIR customers, or used for

an LIR’s infrastructure (‘self-assignment’)

Definition: Allocation and Assignment

RIRRIR

CustomerCustomer

Allocates IP addressesAllocates IP addresses Assigns IP addressesAssigns IP addresses

LIRLIR

LIRLIR

Registry system requirements

• Assignment of globally unique (IP) address space

• Registration

• Conservation of address space

• Minimize routing information (aggregation)

• Scalable

• Fair

Conservation

• A few years ago, consensus was that IPv4 address space would run out in the near future

• Classless assignments causes this problem to be a medium-term problem now– Conservative address policies help– NAT and other tricks help too

• but are not (and should not be) mandatory

• you will get the address space you need, you may not get the address space you want

Aggregation

• Growth of global routing table faster than Moore’s law

• Very serious concern for the growth of the Internet

• Currently addressed through aggregation– of multiple customers of the same ISP – of different pieces of the same organisation

Growth of Global Routing Table

http://www.telstra.net/ops/bgptable.html

CIDR made it workfor a while

But they cannot berelied on foreverProjected routing table

growth without CIDR

DeploymentPeriod of CIDR






Aggregation and LIRs

• LIRs obtain block of allocated address space from RIRs and assign from this block

• Different assignments by same LIR can be part of the same routing prefix– ‘Natural’ aggregation of multiple customers

• Assignments of ISP LIRs typically match allocated block received from RIR

Definition: PI and PA

• Provider Independent (Portable)• Customer holds addresses independent from ISP

• Customer keeps addresses when changing ISP

• Bad for size of routing tables

• Bad for QOS: routes may be filtered, flap-dampened

• Provider Aggregatable (Non-portable)• Customer uses ISP’s address space

• Customer must renumber if changing ISP

• Only way to effectively scale the Internet

Ask for how much space?

• Where do you need the space for?

• Guessing on amount of space needed won’t work:– Not getting enough space doesn’t work– Getting too much space leaves unused space

go to waiste

• Need an addressing plan

Addressing Plan

• Identify components of network• Customer services

• ISP internal infrastructure

• Identify phases of deployment• Starting off, 6 months, 12 months

• Identify equipment and topology changes• Need for redundancy

• Need for increased scale

Network Plan

• Starting off’

Leased line services Leased line services 5-8 customers 5-8 customers

Dialup services Dialup services 16 modems16 modems

Interconnected resilience resilience

UpstreamUpstreamISPISP

15 hosts NOC 15 hosts NOC operationsoperations

10 hosts 10 hosts Internal DNS,Web Internal DNS,Web

Mail serversMail servers

ISP Infrastructure

Customer servicesCustomer services 5 hosts5 hostsVirtual web Virtual web (name based)(name based)

Network Plan

WAN point to WAN point to point /30 /30

5 hosts5 hosts

15 hosts15 hosts

10 hosts10 hosts


16 dialup 16 dialup modemsmodems

5-8 leased line 5-8 leased line customerscustomers

‘‘ip unnumbered’ip unnumbered’to customersto customers

one loopback interface per one loopback interface per assigned router /32 assigned router /32

‘ip unnumbered’to upstream ISP

Addressing Plan

•

network-plan: network-plan: network-plan:network-plan:network-plan:network-plan:

analogue dialup modems, vendor ‘x’analogue dialup modems, vendor ‘x’LAN -web hosting (Name-based hosting)LAN -web hosting (Name-based hosting)5-8 leased line customers (/28)5-8 leased line customers (/28)

network-plan:network-plan:network-plan: network-plan: network-plan: network-plan: network-plan:network-plan:

LAN -NOC and Ops managementLAN -NOC and Ops managementLAN -mail,DNS, web servers internalLAN -mail,DNS, web servers internalloopback router interfacesloopback router interfacesrouter WAN ports (x 5 lines)router WAN ports (x 5 lines)

Initial addressing planInitial addressing plan

1616 55128128

15151010 44 22

-numbers of host addresses (interfaces)-numbers of host addresses (interfaces)

Network Plan• 6 months later

• scale increased

• redundancy

60 dialup60 dialupmodems (2PRI)modems (2PRI)

30 leased line30 leased linecustomerscustomers

11 hosts 11 hosts name-name-basedbased

8 hosts- 8 hosts- 2ndary 2ndary ServersServers

25 hosts- 25 hosts- NOCNOC

16 hosts- 16 hosts- ServersServers



added new router and added new router and LAN for redundancyLAN for redundancy

added new dial upadded new dial up equipmentequipment

replaced originalreplaced originalmodemmodem

increased number of increased number of leased line customersleased line customers

increasedincreased numbernumber ofofhosts on all LANs

Addressing Plan• Network plan at 6 monthsNetwork plan at 6 months

60601111512512252516166622

-increases in hosts (interfaces)-increases in hosts (interfaces)

New hardwareNew hardware

2 PRI dialup modems 2 PRI dialup modems LAN-secondary serversLAN-secondary servers

network-plan:network-plan:network-plan:network-plan:

0/0/0/0/

606088

network-plan: network-plan: network-plan:network-plan:network-plan:network-plan:

2 PRI dialup modems, vendor ‘y’2 PRI dialup modems, vendor ‘y’LAN -web hosting (Name-based hosting)LAN -web hosting (Name-based hosting)30 leased line customers (pool)30 leased line customers (pool)

16/16/5/5/128/128/15/15/10/10/4/4/2/2/

network-plan:network-plan:network-plan:network-plan:network-plan:network-plan: network-plan: network-plan:

LAN -NOC and Ops managementLAN -NOC and Ops managementLAN -mail,DNS, web servers internalLAN -mail,DNS, web servers internalloopback router interfacesloopback router interfacesrouter WAN ports (x 8 lines)router WAN ports (x 8 lines)

Changed descriptionChanged description

Network Plan

• 12 months total– site redundancy

– greater complexity

– efficiency60 leased line60 leased line

customerscustomersip unnumberedip unnumbered

11 hosts11 hosts

8 hosts8 hosts

35 host35 host


UpstreamUpstreamISP AISP A


40 hosts40 hosts

UpstreamUpstreamISP BISP B

added new customer router

redundancy of WAN connections

now numbered links for BGP4

two pieces of essential equipment

Addressing Plan•

network-plan: network-plan:network-plan:network-plan:

8 PRI dialup modems, vendor x8 PRI dialup modems, vendor y LAN -web hosting (Name-based hosting) 60 leased line customers (pool)

16/60/0/60/5/11/128/512/15/25/10/16/0/8/2/2/4/6

network-plan:network-plan: network-plan: network-plan:network-plan:

LAN -NOC and Ops managementLAN -mail,DNS, web servers internalLAN-secondary serversrouter WAN ports (x 8 lines)loopback router interfaces

Network plan at 12 months

24024011102040358212

-increases in hosts (interfaces)-one year total

Addressing Plan

•

network-plan: network-plan: network-plan:network-plan:network-plan:network-plan:network-plan:network-plan:

8 PRI dialup modems, vendor x8 PRI dialup modems, vendor x8 PRI dialup modems, vendor y8 PRI dialup modems, vendor yLAN -web hosting (Name-based hosting)LAN -web hosting (Name-based hosting)60 leased line customers (pool)60 leased line customers (pool)

16/60/16/60/2402400/60/0/60/2402405/11/5/11/1111128/512/128/512/1020102015/25/15/25/404010/16/10/16/3535 0/8/0/8/88 2/2/2/2/22 4/6/4/6/1212

network-plan:network-plan:network-plan:network-plan: network-plan: network-plan: network-plan:network-plan:network-plan:network-plan:

LAN -NOC and Ops managementLAN -NOC and Ops managementLAN -mail,DNS, web servers internalLAN -mail,DNS, web servers internalLAN-secondary serversLAN-secondary serversrouter WAN ports (x 8 lines)router WAN ports (x 8 lines)loopback router interfacesloopback router interfaces

2562562562561616102410246464646488441616

Can now determine subnet sizesCan now determine subnet sizes

Addressing Plan–Addressing plan for network-plan

– re-ordered large to small according to relative subnet size– determination of relative subnet addresses

network-plan: 0.0.0.0 1024 128/512/1020 60 leased line customers (pool)network-plan: 0.0.4.0 256 16/60/240 8 PRI dial up modems, vendor xnetwork-plan: 0.0.5.0 256 0/60/240 8 PRI dial up modems, vendor ynetwork-plan: 0.0.6.0 64 10/16/35 LAN -mail,DNS, web internalnetwork-plan: 0.0.6.64 64 15/25/40 LAN -NOC and Ops managementnetwork-plan: 0.0.6.128 16 5/11/11 LAN -web hosting (Name-based

hosting)

network-plan: 0.0.6.144 16 0/8/8 LAN -secondary serversnetwork-plan: 0.0.6.160 16 4/6/12 loopback router interfacesnetwork-plan: 0.0.6.176 4 2/2/2 router WAN ports (x8)

– cumulative total 0.0.6.208

Addressing Plan–Addressing plan for network-plan

– determination of subnet masks

network-plan: 0.0.0.0 255.255.252.0 1024 128/512/1020 60 leased line customers

network-plan: 0.0.4.0 255.255.255.0 256 16/60/240 8 PRI dial up modems, vendor x

network-plan: 0.0.5.0 255.255.255.0 256 0/60/240 8 PRI dial up modems, vendor y

network-plan: 0.0.6.0 255.255.255.192 64 10/16/35 LAN -mail,DNS, web internal

network-plan: 0.0.6.64 255.255.255.192 64 15/25/40 LAN -NOC & Ops management

network-plan: 0.0.6.128 255.255.255.240 16 5/11/11 LAN -web hosting (Name-based)

network-plan: 0.0.6.144 255.255.255.240 16 0/8/8 LAN -secondary servers

network-plan: 0.0.6.160 255.255.255.240 16 4/6/12 loopback router interfaces

network-plan: 0.0.6.176 255.255.255.252 4 2/2/2 router WAN ports (x 8 )

Addressing Plan– Addressing plan for network-plan

– connect to the Internet (full-time, part-time)?

network-plan: 0.0.0.0 255.255.252.0 YES 1024 128/512/1020 60 leased customers

network-plan: 0.0.4.0 255.255.255.0 PART 256 16/60/240 8 PRI dial up modems..


network-plan: 0.0.6.0 255.255.255.192 YES 64 10/16/35 LAN -mail,DNS, web internal

network-plan: 0.0.6.64 255.255.255.192 YES 64 15/25/40 LAN -NOC & Ops management

network-plan: 0.0.6.128 255.255.255.240 YES 16 5/11/11 LAN -web hosting (Name-based)

network-plan: 0.0.6.144 255.255.255.240 YES 16 0/8/8 LAN -secondary servers

network-plan: 0.0.6.160 255.255.255.240 YES 16 4/6/12 loopback router interfaces

network-plan: 0.0.6.176 255.255.255.252 YES 4 2/2/2 router WAN ports (x 8 )

–Addressing plan complete– total planned for customer assignments /22

– total planned for ISP infrastructure /24 + /23

network-plan: 0.0.0.0 255.255.252.0 YES 1024 128/512/1020 60 leased line customers



network-plan: 0.0.6.0 255.255.255.192 YES 64 10/16/35 LAN -mail,DNS, web internal

network-plan: 0.0.6.64 255.255.255.192 YES 64 15/25/40 LAN -NOC & Ops management

network-plan: 0.0.6.128 255.255.255.240 YES 16 5/11/11 LAN -web hosting (Name-based)

network-plan: 0.0.6.144 255.255.255.240 YES 16 0/8/8 LAN -secondary servers

network-plan: 0.0.6.160 255.255.255.240 YES 16 4/6/12 loopback router interfaces

network-plan: 0.0.6.176 255.255.255.252 YES 4 2/2/2 router WAN ports (x 8 lines )

–detailed, efficient and accurate

Addressing Plan

Minimizing space requirements

• Dynamic addresses for dialups

• Classless assignments• Utilisation and efficiency guidelines

– 25% immediately, 50% in one year– operational needs; no reservations

• RFC1918

• Name-based web hosting

• Unnumbered interfaces

Private Address Space

• RFC1918– 10/8, 172.16/12, 192.168/16– saves public address space– allows for more flexibility

• Suitable when– hosts do not require access to other networks– access to outside services through application

layer GW

• Not a solution for address space shortage!

Web Hosting

• Name based hosting– single IP address assigned to physical server

that hosts several virtual hosts

• IP based hosting– single unique IP address assigned to each

virtual host

Name Based Hosting

• Conserves Address Space

• Requires– support of “Host:” header in HTTP requests– HTTP1.1 compliant browsers

• Technical Exceptions– SSL certificates

• work ongoing at IETF to support name based hosting

– Virtual ftp domains with anonymous login

• R1 and R2 form a "virtual router"• The serial link has no ip address

– All packets arriving at S0 of either router immediately go to its E0

– All packets generated at E0 go onto serial link

• Conserves addresses but makes management harder

IP Unnumbered

Whom to ask for address space

• Ask LIR of your (upstream) ISP

• Become LIR yourself! When?– you have customers who need addresses– you need more than a /21 in 1 year

Becoming an LIR?

• Advantages– independent allocation

from RIR

– independent from LIR of upstream provider

• Disadvantages– has overhead

– costs resources

– costs $$$ (CFA, cedis, ...)

– possible need to renumber from upstream LIR block

Responsibilities of an LIR

• Be familiar with latest IP policies

• Follow goals of Registry System– conservation– aggregation– registration

• Manage allocations responsibly

• Keep up to date records– internally– WHOIS database

Influencing the RIR

• LIRs become member of association controlling LIR– LIR’s control RIR, RIR doesn’t control LIRs

• Policies developed in open forums

• Co-ordinated between RIRs and with IANA

• Based on consensus rather than rules

• Assures fair and open process

Policy Development Process

• Policy (changes) can be suggested by– RIR Members/Local IRs – RIR staff– Public at large

• Policy must be– fair to all– ‘good’ for the Internet– consistent with global policies

The whois Database

Introduction and Usage

Overview

• What is the whois database?

• Why use it?

• Who uses it?

• Database query process

• Database update process

What is the whois Database?

• Network Management Database

• Contains information about– address space– DNS domains– IP routing policies– contact information

Why use the Database?

• Queries– Ascertain custodianship of a resource– Obtain details of technical contacts for a

network– Investigate security incidents– Track source of network abuse or “spam” email

Who uses the Database?

• Queries– Internet Service Providers– Site network managers and engineers– Any Internet user

• Updates– Internet registries (RIRs, LIRs)– Internet Service Providers– Anyone who holds an Internet resource

Database Objects• Database object types

OBJECT PURPOSEperson contact persons role contact groups/rolesinetnum IPv4 address allocations/assignmentsinet6num IPv6 address allocations/assignmentsaut-num autonomous system numberas-macro group of autonomous systemsdomain reverse domainsroute prefixes being announcedmntner (maintainer) database authorisation

Contact InformationExample object - ‘person’

person:

address:

address:

country:phone:

fax-no:

e-mail:

nic-hdl:mnt-by:

changed:source:

Brajesh Jain B 115 SARVODAYA ENCLAVENEW DELHI 110017 TH +91-11-6864138+91-11-6865888bcjain@[email protected] 20000429

APNIC

AttributesAttributes ValuesValues

Network Information

Example object - ‘inetnum’

inetnum:netname:descr:descr:country:admin-c:tech-c:mnt-by:mnt-lower:changed:source:

203.113.0.0 - 203.113.31.255 TOTNET-APTelephone Organization of THAILAND(TOT) Telephone and IP Network Service Provider TH

NM18-APRC80-APAPNIC-HMMAINT-TH-SS163-AP

[email protected] 19990922APNIC

AttributesAttributes ValuesValues

Database Query - Search Keys

OBJECT TYPEOBJECT TYPE ATTRIBUTES - SEARCH KEYS ATTRIBUTES - SEARCH KEYS

** whois supports queries on any of these objects/keyswhois supports queries on any of these objects/keys

name, nic-hdl, e-mailname, nic-hdl, e-mailmaintainer namenetwork number, namedomain nameas numberas-macro nameroute valuenetwork number, name

personrolemntnerinetnumdomainaut-numas-macrorouteinet6num

Database Query - Inetnum

• NotesNotes• Incomplete addresses padded with “.0”Incomplete addresses padded with “.0”• Address without prefix interpreted as “/32”Address without prefix interpreted as “/32”

% whois 203.127.128.0 - 203.127.159.255

% whois SINGNET-SG% whois 202.127.128.0/19

inetnum: 203.127.128.0 - 203.127.159.255netname: SINGNET-SG descr: Singapore Telecommunications Ltd descr: 31, Exeter Road, #02-00, Podium Blockdescr: Comcentre, 0923 country: SGadmin-c: CWL3-APtech-c: CWL3-APmnt-by: APNIC-HM changed: [email protected] 19990803 source: APNIC


• RIPE extended whois clientftp://ftp.ripe.net/ripe/dbase/software/ripe-dbase-3.0.tar.gz

• Flags used for inetnum queriesNone find exact match

- L find all less specific matches

- m find first level more specific matches

- M find all More specific matches

- r turn off recursive lookups

210.8.30/23210.8.30/23

Database Query - Inetnuminetnum hierarchy: whois 210.8.0.0/16

All less All less specifics (-L)specifics (-L) 210/7210/7

0/00/0

Exact matchExact match 210.8/16210.8/16

All moreAll morespecifics (-M)specifics (-M)

1st level1st levelmoremoreSpecific (-m)Specific (-m)

‘‘-M’ will find all assignments in a range in the database-M’ will find all assignments in a range in the database

inetnum: 202.144.0.0 - 202.144.31.255netname: SILNET-APdescr: Satyam Infoway Pvt.Ltd.,.....inetnum: 202.144.13.104 - 202.144.13.111netname: SOFTCOMNETdescr: SOFTCOM LAN (Internet)IP......inetnum: 202.144.1.0 - 202.144.1.255descr: SILNETdescr: Satyam Infoway's Chennai LAN.....

% whois -M 202.144.0.0/19


so, you want to apply for address space

Documents

rirassigns address space

ipv4 address space

address spaceor

space leaves unused

isps address spacecustomer

space doesnt workgetting

space needed wont work

allocated block