530 likes | 606 Views
So, you want to apply for address space. (or your customers are asking you) AfNOG Workshop, May 2002 Lome, Togo. Overview. Definitions: IR, LIR, RIR Registry system requirements Network plan Becoming a LIR Policy mechanism WHOIS database. Disclaimer.
E N D
So, you want to apply for address space (or your customers are asking you) AfNOG Workshop, May 2002 Lome, Togo
Overview • Definitions: IR, LIR, RIR • Registry system requirements • Network plan • Becoming a LIR • Policy mechanism • WHOIS database
Disclaimer • This presentation uses materials from the Registries • I used to for for one of the Regional Registries • I am not speaking on behalf of the Registries! • This is about numbers • not about domain names
IANA RIR /8 LIR (ISP/Enterprise) /20 ISP / End Users /32 Who are involved? (ARIN, APNIC, RIPE)
Definition:Internet Registry (IR) • organisation which allocates, assigns and registers Internet resources (IP addresses, ASNs)
Definition: Regional Internet Registry (RIR) • organisation with regional responsibility for management of Internet resources • allocates address space to LIRs • address registration services, co-ordination and policy development • APNIC, ARIN, RIPE-NCC • AfriNIC, LACNIC in formation • Must be neutral and consensus-based
RIR Service Regions AfriNIC LACNIC
Definition: Local Internet Registry (LIR) • Gets allocated address space from RIR • assigns address space to its customers • Usually an ISP • Very small ISPs get IP address space from their upstream provider
Definition: Allocation /Assignment • Allocation • A block of address space held by an IR for subsequent allocation or assignment • Not yet used to address any networks • Assignment • A block of address space used to address an operational network • May be provided to LIR customers, or used for an LIR’s infrastructure (‘self-assignment’)
Definition: Allocation and Assignment RIR LIR Allocates IP addresses Assigns IP addresses LIR Customer
Registry system requirements • Assignment of globally unique (IP) address space • Registration • Conservation of address space • Minimize routing information (aggregation) • Scalable • Fair
Conservation • A few years ago, consensus was that IPv4 address space would run out in the near future • Classless assignments causes this problem to be a medium-term problem now • Conservative address policies help • NAT and other tricks help too • but are not (and should not be) mandatory • you will get the address space you need, you may not get the address space you want
Aggregation • Growth of global routing table faster than Moore’s law • Very serious concern for the growth of the Internet • Currently addressed through aggregation • of multiple customers of the same ISP • of different pieces of the same organisation
But they cannot be relied on forever Projected routing table growth without CIDR CIDR made it work for a while DeploymentPeriod of CIDR Growth of Global Routing Table http://www.telstra.net/ops/bgptable.html
Aggregation and LIRs • LIRs obtain block of allocated address space from RIRs and assign from this block • Different assignments by same LIR can be part of the same routing prefix • ‘Natural’ aggregation of multiple customers • Assignments of ISP LIRs typically match allocated block received from RIR
Definition: PI and PA • Provider Independent (Portable) • Customer holds addresses independent from ISP • Customer keeps addresses when changing ISP • Bad for size of routing tables • Bad for QOS: routes may be filtered, flap-dampened • Provider Aggregatable (Non-portable) • Customer uses ISP’s address space • Customer must renumber if changing ISP • Only way to effectively scale the Internet
Ask for how much space? • Where do you need the space for? • Guessing on amount of space needed won’t work: • Not getting enough space doesn’t work • Getting too much space leaves unused space go to waiste • Need an addressing plan
Addressing Plan • Identify components of network • Customer services • ISP internal infrastructure • Identify phases of deployment • Starting off, 6 months, 12 months • Identify equipment and topology changes • Need for redundancy • Need for increased scale
Interconnected resilience UpstreamISP Customer services 10 hosts Internal DNS,Web Mail servers 5 hosts Virtual web (name based) Dialup services 16 modems ISP Infrastructure 15 hosts NOC operations Network Plan ’ • Starting off Leased line services 5-8 customers
one loopback interface per assigned router /32 ‘ip unnumbered’ to upstream ISP 5-8 leased line customers UpstreamISP ‘ip unnumbered’ to customers 10 hosts 5 hosts WAN point to point /30 16 dialup modems 15 hosts Network Plan
-numbers of host addresses (interfaces) network-plan: network-plan: network-plan: 16 5 128 • analogue dialup modems, vendor ‘x’ • LAN -web hosting (Name-based hosting) • 5-8 leased line customers (/28) 15 10 4 2 network-plan: network-plan: network-plan: network-plan: • LAN -NOC and Ops management • LAN -mail,DNS, web servers internal • loopback router interfaces • router WAN ports (x 5 lines) Addressing Plan Initial addressing plan
increased number of leased line customers 30 leased linecustomers UpstreamISP 16 hosts- Servers 11 hosts name-based replaced original modem 60 dialupmodems (2PRI) 60 dialupmodems (2PRI) 25 hosts- NOC added new router and LAN for redundancy 8 hosts- 2ndary Servers Network Plan • 6 months later • scale increased • redundancy increasednumberof hosts on all LANs added new dial up equipment
-increases in hosts (interfaces) Changed description network-plan: network-plan: network-plan: 16/ 5/ 128/ 15/ 10/ 4/ 2/ • 2 PRI dialup modems, vendor ‘y’ • LAN -web hosting (Name-based hosting) • 30 leased line customers (pool) 60 11 512 25 16 6 2 network-plan: network-plan: network-plan: network-plan: • LAN -NOC and Ops management • LAN -mail,DNS, web servers internal • loopback router interfaces • router WAN ports (x 8 lines) 0/ 0/ network-plan: network-plan: • 2 PRI dialup modems • LAN-secondary servers 60 8 New hardware Addressing Plan Network plan at 6 months
redundancy of WAN connections now numbered links for BGP4 UpstreamISP A 60 leased linecustomersip unnumbered UpstreamISP B 35 host 11 hosts 240 dialupmodems (8PRI) 240 dialupmodems (8PRI) 40 hosts 8 hosts Network Plan • 12 months total • site redundancy • greater complexity • efficiency added new customer router two pieces of essential equipment
-increases in hosts (interfaces) • -one year total network-plan: network-plan: network-plan: network-plan: 16/60/ 0/60/ 5/11/ 128/512/ 15/25/ 10/16/ 0/8/ 2/2/ 4/6 240 240 11 1020 40 35 8 2 12 • 8 PRI dialup modems, vendor x • 8 PRI dialup modems, vendor y • LAN -web hosting (Name-based hosting) 60 leased line customers (pool) network-plan: network-plan: network-plan: network-plan: network-plan: • LAN -NOC and Ops management • LAN -mail,DNS, web servers internal • LAN-secondary servers • router WAN ports (x 8 lines) • loopback router interfaces Addressing Plan Network plan at 12 months
Can now determine subnet sizes network-plan: network-plan: network-plan: network-plan: 256 256 16 1024 64 64 8 4 16 16/60/240 0/60/240 5/11/11 128/512/1020 15/25/40 10/16/35 0/8/8 2/2/2 4/6/12 • 8 PRI dialup modems, vendor x • 8 PRI dialup modems, vendor y • LAN -web hosting (Name-based hosting) • 60 leased line customers (pool) network-plan: network-plan: network-plan: network-plan: network-plan: • LAN -NOC and Ops management • LAN -mail,DNS, web servers internal • LAN-secondary servers • router WAN ports (x 8 lines) • loopback router interfaces Addressing Plan
Addressing Plan • Addressing plan for network-plan • re-ordered large to small according to relative subnet size • determination of relative subnet addresses network-plan: 0.0.0.0 1024 128/512/1020 60 leased line customers (pool) network-plan: 0.0.4.0 256 16/60/240 8 PRI dial up modems, vendor x network-plan: 0.0.5.0 256 0/60/240 8 PRI dial up modems, vendor y network-plan: 0.0.6.0 64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 64 15/25/40 LAN -NOC and Ops management network-plan: 0.0.6.128 16 5/11/11 LAN -web hosting (Name-based hosting) network-plan: 0.0.6.144 160/8/8 LAN -secondary servers network-plan: 0.0.6.160 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 4 2/2/2 router WAN ports (x8) • cumulative total 0.0.6.208
Addressing Plan • Addressing plan for network-plan • determination of subnet masks network-plan: 0.0.0.0 255.255.252.0 1024 128/512/1020 60 leased line customers network-plan: 0.0.4.0 255.255.255.0 256 16/60/240 8 PRI dial up modems, vendor x network-plan: 0.0.5.0 255.255.255.0 256 0/60/240 8 PRI dial up modems, vendor y network-plan: 0.0.6.0 255.255.255.192 64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 255.255.255.192 64 15/25/40 LAN -NOC & Ops management network-plan: 0.0.6.128 255.255.255.240 16 5/11/11 LAN -web hosting (Name-based) network-plan: 0.0.6.144 255.255.255.240 160/8/8 LAN -secondary servers network-plan: 0.0.6.160 255.255.255.240 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 255.255.255.252 4 2/2/2 router WAN ports (x 8 )
Addressing Plan • Addressing plan for network-plan • connect to the Internet (full-time, part-time)? network-plan: 0.0.0.0 255.255.252.0 YES 1024 128/512/1020 60 leased customers network-plan: 0.0.4.0 255.255.255.0 PART 256 16/60/240 8 PRI dial up modems.. network-plan: 0.0.5.0 255.255.255.0 PART 256 0/60/240 8 PRI dial up modems.. network-plan: 0.0.6.0 255.255.255.192 YES 64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 255.255.255.192 YES 64 15/25/40 LAN -NOC & Ops management network-plan: 0.0.6.128 255.255.255.240 YES 16 5/11/11 LAN -web hosting (Name-based) network-plan: 0.0.6.144 255.255.255.240 YES 16 0/8/8 LAN -secondary servers network-plan: 0.0.6.160 255.255.255.240 YES 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 255.255.255.252 YES 4 2/2/2 router WAN ports (x 8 )
Addressing Plan • Addressing plan complete • total planned for customer assignments /22 • total planned for ISP infrastructure /24 + /23 network-plan: 0.0.0.0 255.255.252.0 YES 1024 128/512/1020 60 leased line customers network-plan: 0.0.4.0 255.255.255.0 PART 256 16/60/240 8 PRI dial up modems.. network-plan: 0.0.5.0 255.255.255.0 PART 256 0/60/240 8 PRI dial up modems.. network-plan: 0.0.6.0 255.255.255.192 YES64 10/16/35 LAN -mail,DNS, web internal network-plan: 0.0.6.64 255.255.255.192 YES64 15/25/40 LAN -NOC & Ops management network-plan: 0.0.6.128 255.255.255.240 YES16 5/11/11 LAN -web hosting (Name-based) network-plan: 0.0.6.144 255.255.255.240 YES 16 0/8/8 LAN -secondary servers network-plan: 0.0.6.160 255.255.255.240 YES 16 4/6/12 loopback router interfaces network-plan: 0.0.6.176 255.255.255.252 YES 4 2/2/2 router WAN ports (x 8 lines ) • detailed,efficient and accurate
Minimizing space requirements • Dynamic addresses for dialups • Classless assignments • Utilisation and efficiency guidelines • 25% immediately, 50% in one year • operational needs; no reservations • RFC1918 • Name-based web hosting • Unnumbered interfaces
Private Address Space • RFC1918 • 10/8, 172.16/12, 192.168/16 • saves public address space • allows for more flexibility • Suitable when • hosts do not require access to other networks • access to outside services through application layer GW • Not a solution for address space shortage!
Web Hosting • Name based hosting • single IP address assigned to physical server that hosts several virtual hosts • IP based hosting • single unique IP address assigned to each virtual host
Name Based Hosting • Conserves Address Space • Requires • support of “Host:” header in HTTP requests • HTTP1.1 compliant browsers • Technical Exceptions • SSL certificates • work ongoing at IETF to support name based hosting • Virtual ftp domains with anonymous login
IP Unnumbered • R1 and R2 form a "virtual router" • The serial link has no ip address • All packets arriving at S0 of either router immediately go to its E0 • All packets generated at E0 go onto serial link • Conserves addresses but makes management harder
Whom to ask for address space • Ask LIR of your (upstream) ISP • Become LIR yourself! When? • you have customers who need addresses • you need more than a /21 in 1 year
Advantages independent allocation from RIR independent from LIR of upstream provider Disadvantages has overhead costs resources costs $$$ (CFA, cedis, ...) possible need to renumber from upstream LIR block Becoming an LIR?
Responsibilities of an LIR • Be familiar with latest IP policies • Follow goals of Registry System • conservation • aggregation • registration • Manage allocations responsibly • Keep up to date records • internally • WHOIS database
Influencing the RIR • LIRs become member of association controlling LIR • LIR’s control RIR, RIR doesn’t control LIRs • Policies developed in open forums • Co-ordinated between RIRs and with IANA • Based on consensus rather than rules • Assures fair and open process
Policy Development Process • Policy (changes) can be suggested by • RIR Members/Local IRs • RIR staff • Public at large • Policy must be • fair to all • ‘good’ for the Internet • consistent with global policies
The whois Database Introduction and Usage
Overview • What is the whois database? • Why use it? • Who uses it? • Database query process • Database update process
What is the whois Database? • Network Management Database • Contains information about • address space • DNS domains • IP routing policies • contact information
Whyuse the Database? • Queries • Ascertain custodianship of a resource • Obtain details of technical contacts for a network • Investigate security incidents • Track source of network abuse or “spam” email
Whouses the Database? • Queries • Internet Service Providers • Site network managers and engineers • Any Internet user • Updates • Internet registries (RIRs, LIRs) • Internet Service Providers • Anyone who holds an Internet resource
Database Objects • Database object types OBJECTPURPOSE person contact persons role contact groups/roles inetnum IPv4 address allocations/assignments inet6num IPv6 address allocations/assignments aut-num autonomous system number as-macro group of autonomous systems domain reverse domains route prefixes being announced mntner (maintainer) database authorisation
Contact Information Example object - ‘person’ Values Attributes • person: • address: • address: • country: • phone: • fax-no: • e-mail: • nic-hdl: • mnt-by: • changed: • source: Brajesh Jain B 115 SARVODAYA ENCLAVENEW DELHI 110017 TH +91-11-6864138+91-11-6865888bcjain@ndb.vsnl.net.inBJ16-APMAINT-IN-ESTEL-BCJbcjain@ndb.vsnl.net.in 20000429APNIC
Network Information Example object - ‘inetnum’ Attributes Values inetnum:netname: descr: descr: country: admin-c: tech-c: mnt-by: mnt-lower: changed: source: 203.113.0.0 - 203.113.31.255TOTNET-APTelephone Organization of THAILAND(TOT)Telephone and IP Network Service ProviderTH NM18-AP RC80-AP APNIC-HM MAINT-TH-SS163-AP hostmaster@apnic.net 19990922 APNIC
person • role • mntner • inetnum • domain • aut-num • as-macro • route • inet6num • name, nic-hdl, e-mail • name, nic-hdl, e-mail • maintainer name • network number, name • domain name • as number • as-macro name • route value • network number, name Database Query - Search Keys OBJECT TYPE ATTRIBUTES - SEARCH KEYS • * whois supports queries on any of these objects/keys
inetnum: 203.127.128.0 - 203.127.159.255netname: SINGNET-SG descr: Singapore Telecommunications Ltd descr: 31, Exeter Road, #02-00, Podium Blockdescr: Comcentre, 0923 country: SGadmin-c: CWL3-APtech-c: CWL3-APmnt-by: APNIC-HM changed: hostmaster@apnic.net 19990803source: APNIC Database Query - Inetnum % whois 203.127.128.0 - 203.127.159.255 % whois 202.127.128.0/19 % whois SINGNET-SG • Notes • Incomplete addresses padded with “.0” • Address without prefix interpreted as “/32”