Policy and Legal Issues Relating to Internet Protocol (IP) Number Resources: The Runout of IPv4

1. Policy and Legal Issues Relating to Internet Protocol (IP) Number Resources: The Runout of IPv4 Stephen M. Ryan, Esq. Tel. 202-756-8333 sryan@mwe.com

2. About ARIN Regional Internet Registry (RIR) Established December 1997 by Internet community 100% community funded ARIN’s region includes Canada, many Caribbean and North Atlantic islands, US Minor Outlying Islands, and the United States. Stephen M. Ryan sryan@mwe.com 2

3. IETF RFC 2050 Formally defines the RIR system and sets three goals for IP address space management: conservation routability – uniqueness/aggregation registration ICANN ICP-2 Requires adherence to global policies regarding address space conservation, aggregation, and registration. ARIN is an ICP-2 recognized registry. Key Regional Registry System Documents Stephen M. Ryan sryan@mwe.com 3

4. Applying the principles of stewardship, ARIN, a nonprofit corporation: allocates Internet Protocol resources; develops consensus-based policies; and facilitates the advancement of the Internet through information and educational outreach. ARIN’s Mission Stephen M. Ryan sryan@mwe.com 4

5. IP Addresses • IP Addresses Identify Internet Path Points • Source, intermediate point, destination • IP Addresses Do Not Identify • Geographic location of Path Point • Who has it • Who gave it to the consumer • The reason for obtaining it Stephen M. Ryan sryan@mwe.com

6. IP Address vs. Domain Name Stephen M. Ryan sryan@mwe.com

7. About IPv4 and IPv6 Stephen M. Ryan sryan@mwe.com 7

8. Terminology: “CIDR” • Classless Inter-Domain Routing (CIDR) • Replaced Classful System • IP address assignments restructured to increase efficiency • Hierarchical address scheme to minimize route table entries • Legacy Space • Numbering resources issued prior to the establishment of the RIR system (Class A, B and C addresses fall into this category) Stephen M. Ryan sryan@mwe.com

9. Discussing IPv4 Stephen M. Ryan sryan@mwe.com

10. IPv4 Depletion Situation Report The RIRs have needed between 8 and 12 /8s each year worldwide There were seven /8s remaining in the available pool this morning! Today is “D Day” – 2 are being allocated today to APNIC, and as a result, each of the 5 RIRs will be given one last /8. All unused IPv4 issued as of today to RIRs. “Run dry” will occur faster in certain regions than others Stephen M. Ryan sryan@mwe.com 10

11. IPv4 & IPv6 Will Coexist Today, the Internet is predominantly based on IPv4. For the foreseeable future, the Internet must run both IP versions (IPv4 & IPv6) at the same time. (When done on a single device, this is called the “dual-stack” approach.) Stephen M. Ryan sryan@mwe.com 11

12. IP Addresses Are Not “Owned” • IP Addresses are NOT Property: Loaned for use • IETF RFC 2008 Defines “Loan” Concept Stephen M. Ryan sryan@mwe.com

13. ARIN Post-Depletion Policies • The ARIN community has established policies for post-depletion to help satisfy the requirements of those with valid need for additional IPv4 address space: • Substantially reduce size of allocations: • 3 months v. 1 year • Encourage return of address space and its reuse Stephen M. Ryan sryan@mwe.com

14. ARIN Transfer Policies Stephen M. Ryan sryan@mwe.com • ARIN always permitted M&A change in IP • New ARIN policy permits voluntaryspecifiedtransfer: • Provides incentive for a party that may be able to free up IP address blocks (e.g. by renumbering) to be able to transfer space to a party which qualifies to receive space per ARIN’s existing number resource policies. • Not a market, per se, but it enables limited market-like behavior for those who have qualified need for address space for their infrastructure growth. • ARIN approves address space request from a recipient as usual, but then notes qualification if no ARIN resources are available. • If transferor and recipient both agree, ARIN receives address space from the transferor, and updates registration to reflect recipient. • ARIN is not party to compensation, if any. 14

15. IPv4 & IPv6 - The Bottom Line We’re running out of IPv4 address space. IPv6 must be adopted for continued Internet growth. IPv6 is not backwards compatible with IPv4. We must maintain IPv4 and IPv6 simultaneously for many years. IPv6 deployment has begun. Stephen M. Ryan sryan@mwe.com 15

16. What’s In ARIN’s WHOIS? • Registration information about • IP addresses and AS numbers issued by ARIN • IP addresses and AS numbers issued by the Central Registry • Organizations that hold these sources (ORGs) • Points of Contact for resources or organizations (POCs) • Reallocated/reassigned networks (from ISPs to customers) • Referential information • Other RIR authorities • More specific customer information for ISPs Stephen M. Ryan sryan@mwe.com

17. What’s NOT in ARIN’s WHOIS? • ORG and POC information for • Domain Names • Host Names • Authoritative information for • Sub-delegations by ISPs using RWHOIS • Military networks (see http://www.nic.mil) • Resources registered in other RIRs’ WHOIS • Routing information • Geographic location of the network Stephen M. Ryan sryan@mwe.com