From joelja at bogus.com Sun Jan 2 11:00:32 2011 From: joelja at bogus.com (Joel Jaeggli) Date: Sun, 02 Jan 2011 08:00:32 -0800 Subject: [arin-ppml] *Spam?* Re: Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D1CE5B2.9070000@matthew.at> References: <4D125FAE.3050307@arin.net> <8695009A81378E48879980039EEDAD288C048C46@MAIL1.polartel.local> <4D1CD7DD.8020001@matthew.at> <4D1CDBB9.20309@matthew.at> <4D1CE5B2.9070000@matthew.at> Message-ID: <4D20A120.1040409@bogus.com> On 12/30/10 12:04 PM, Matthew Kaufman wrote: > So no, I'm not interested in helping them make this bad idea more > palatable to the masses. It is a bad idea. I've pointed out why it is a > bad idea. As I've pointed out it is an *especially* bad idea if applied > to transfers... but I don't want them to take transfers out of the > proposal either, because doing so will make it *more likely* that it > will pass. Matthew has nicely summed my objections to 125. I support ipv6 deployment,I do not support 125. Joel From jay-ARIN at tp.org Sun Jan 2 12:24:58 2011 From: jay-ARIN at tp.org (Jay Moran (AOL)) Date: Sun, 2 Jan 2011 12:24:58 -0500 Subject: [arin-ppml] *Spam?* Re: Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D20A120.1040409@bogus.com> References: <4D125FAE.3050307@arin.net> <8695009A81378E48879980039EEDAD288C048C46@MAIL1.polartel.local> <4D1CD7DD.8020001@matthew.at> <4D1CDBB9.20309@matthew.at> <4D1CE5B2.9070000@matthew.at> <4D20A120.1040409@bogus.com> Message-ID: On Sun, Jan 2, 2011 at 11:00 AM, Joel Jaeggli wrote: > On 12/30/10 12:04 PM, Matthew Kaufman wrote: > > > So no, I'm not interested in helping them make this bad idea more > > palatable to the masses. It is a bad idea. I've pointed out why it is a > > bad idea. As I've pointed out it is an *especially* bad idea if applied > > to transfers... but I don't want them to take transfers out of the > > proposal either, because doing so will make it *more likely* that it > > will pass. > > Matthew has nicely summed my objections to 125. > > I support ipv6 deployment,I do not support 125. > > Joel > Have to say that I agree with Joel's agreement with Matthew's summation. I too support IPv6 deployment, but do NOT support 125. Jay -- Jay Moran http://tp.org/jay -------------- next part -------------- An HTML attachment was scrubbed... URL: From vaughn at swiftsystems.com Sun Jan 2 22:23:08 2011 From: vaughn at swiftsystems.com (Vaughn Thurman - Swift Systems) Date: Sun, 2 Jan 2011 22:23:08 -0500 Subject: [arin-ppml] *Spam?* Re: Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <4D125FAE.3050307@arin.net> <8695009A81378E48879980039EEDAD288C048C46@MAIL1.polartel.local> <4D1CD7DD.8020001@matthew.at> <4D1CDBB9.20309@matthew.at> <4D1CE5B2.9070000@matthew.at> <4D20A120.1040409@bogus.com> Message-ID: <08ECFAE4-3048-4DC2-92F2-8E3A11CFC10F@swiftsystems.com> And I weigh in with an echo. I support IPv6 deployment, but do NOT support 125. Sent from my iPhone On Jan 2, 2011, at 12:24 PM, "Jay Moran (AOL)" wrote: > On Sun, Jan 2, 2011 at 11:00 AM, Joel Jaeggli wrote: > On 12/30/10 12:04 PM, Matthew Kaufman wrote: > > > So no, I'm not interested in helping them make this bad idea more > > palatable to the masses. It is a bad idea. I've pointed out why it is a > > bad idea. As I've pointed out it is an *especially* bad idea if applied > > to transfers... but I don't want them to take transfers out of the > > proposal either, because doing so will make it *more likely* that it > > will pass. > > Matthew has nicely summed my objections to 125. > > I support ipv6 deployment,I do not support 125. > > Joel > > Have to say that I agree with Joel's agreement with Matthew's summation. I too support IPv6 deployment, but do NOT support 125. > > Jay > -- > Jay Moran > http://tp.org/jay > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -------------- next part -------------- An HTML attachment was scrubbed... URL: From bret at getjive.com Mon Jan 3 00:06:15 2011 From: bret at getjive.com (Bret Palsson) Date: Sun, 2 Jan 2011 22:06:15 -0700 Subject: [arin-ppml] *Spam?* Re: Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <08ECFAE4-3048-4DC2-92F2-8E3A11CFC10F@swiftsystems.com> References: <4D125FAE.3050307@arin.net> <8695009A81378E48879980039EEDAD288C048C46@MAIL1.polartel.local> <4D1CD7DD.8020001@matthew.at> <4D1CDBB9.20309@matthew.at> <4D1CE5B2.9070000@matthew.at> <4D20A120.1040409@bogus.com> <08ECFAE4-3048-4DC2-92F2-8E3A11CFC10F@swiftsystems.com> Message-ID: <7300750712932615998@unknownmsgid> I support IPv6 deployment, but do NOT support 125. Same here. Sent from my iPhone On Jan 2, 2011, at 8:23 PM, Vaughn Thurman - Swift Systems < vaughn at swiftsystems.com> wrote: And I weigh in with an echo. I support IPv6 deployment, but do NOT support 125. Sent from my iPhone On Jan 2, 2011, at 12:24 PM, "Jay Moran (AOL)" wrote: On Sun, Jan 2, 2011 at 11:00 AM, Joel Jaeggli < joelja at bogus.com> wrote: > On 12/30/10 12:04 PM, Matthew Kaufman wrote: > > > So no, I'm not interested in helping them make this bad idea more > > palatable to the masses. It is a bad idea. I've pointed out why it is a > > bad idea. As I've pointed out it is an *especially* bad idea if applied > > to transfers... but I don't want them to take transfers out of the > > proposal either, because doing so will make it *more likely* that it > > will pass. > > Matthew has nicely summed my objections to 125. > > I support ipv6 deployment,I do not support 125. > > Joel > Have to say that I agree with Joel's agreement with Matthew's summation. I too support IPv6 deployment, but do NOT support 125. Jay -- Jay Moran http://tp.org/jay _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. -------------- next part -------------- An HTML attachment was scrubbed... URL: From alh-ietf at tndh.net Mon Jan 3 12:18:24 2011 From: alh-ietf at tndh.net (Tony Hain) Date: Mon, 3 Jan 2011 09:18:24 -0800 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> Message-ID: <035101cbab6a$427bbe00$c7733a00$@net> There is a simple way to deal with all the list noise on pp124 & 125, as well as reduce the wasted time and energy of the ARIN staff while we are at it .... Transfer all remaining ARIN IPv4 resources in a split between Lacnic & Afrinic today, and move on. The useless efforts to micromanage the end of the pool are not doing anyone any good, and certainly not motivating the deployment of IPv6 as much as a solid 'sorry we have no more' answer from ARIN would. It is time to stop focusing on the past and just let it go. Tony > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Bill Sandiford > Sent: Thursday, December 30, 2010 6:54 PM > To: 'John Curran' > Cc: arin ppml > Subject: Re: [arin-ppml] ARIN IPv4 Number Resource Inventory (was: PP > 124 Preliminary Info) > > Thanks John: > > I knew it was a tough question that didn't have a simple answer. The > answer given is much appreciated. > > Regards, > Bill > > > -----Original Message----- > > From: John Curran [mailto:jcurran at arin.net] > > Sent: Thursday, December 30, 2010 8:44 PM > > To: Bill Sandiford > > Cc: arin ppml > > Subject: Re: [arin-ppml] ARIN IPv4 Number Resource Inventory (was: PP > > 124 Preliminary Info) > > > > On Dec 30, 2010, at 7:50 PM, Bill Sandiford wrote: > > > > > John: > > > > > > Do we know what ARIN's current IPv4 issue rate is? > > > > Bill - > > > > You'll get very different answers depending on the time > > period you pick to rate average. The IPv4 issue rate over > > the last few years for ARIN has been on or under 2 /8's > > per year (data through '09 is here: 64K /24's = /8, > > ) If you > > want to consider the rate over CY 2010, it's been lower > > but increasingly rapidly towards the end of the year > > > > Note that there are quite a few factors that make the > > "current rate" a horrible predictor: it does not take > > seasonality of requests into account, nor does it show > > the human factors impact of various policies passing > > (until well after the fact when they show up in the > > actual allocations made.) > > > > FYI - For those who really want some raw data, it is all > > available via the ARIN-issued mailing list (also listed > > on that web page.) Feel free to run the actual daily > > allocations into whatever model you feel most appropriate... > > > > If you'd like an estimate based on my own judgement of > > the most recent activity, the current "instantaneous" > > issue rate is probably closer to one /8 every two to > > three months (which implies about 9 months from IANA > > depletion to ARIN depletion.) I hesitate to state even > > that much publicly, since a handful of requests can > > dramatically impact that outlook in *either* direction. > > Going into 2012, any parties that want to continue grow > > their Internet business should be serious looking into > > IPv6 and (if needed) the limited options that will exist > > for IPv4 address transfer. This is not drill: we are > > going to fully deplete the available IPv4 address pool > > in the very near future. > > > > Best wishes, > > /John > > > > John Curran > > President and CEO > > ARIN > > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From jbates at brightok.net Mon Jan 3 12:51:28 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 03 Jan 2011 11:51:28 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <20101227164347.GA70716@ussenterprise.ufp.org> Message-ID: <4D220CA0.8050308@brightok.net> I oppose 125 On 12/27/2010 11:16 AM, Jason Schiller wrote: > Leo. This was certainly not my intention. I think the scenerio you > describe is acceptable, but difficult to monitor for abuse. > I know I'm late on this thread, but you expect ARIN to actually monitor A/AAAA records and somehow figure out abuse? Are we to give ARIN access to every box so they can confirm that there is a v6 address on the box as well? What about the millions of boxes which don't use A/AAAA records or need them? 125 proposes something that ARIN has no way of enforcing (which is probably one reason it was tossed). In addition, it's overly restrictive for those who do follow the rules. There are still plenty of interfaces that have no need, nor can support, IPv6. Perhaps it's changed, but MPLS wasn't working with v6, management of CPE sure as heck doesn't need v6 in the short term. Finally, dual-stack is not the only migration technology. For ARIN to enforce one migration method over another will only hinder v6 migration. Jack From hannigan at gmail.com Mon Jan 3 13:35:56 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 3 Jan 2011 13:35:56 -0500 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <035101cbab6a$427bbe00$c7733a00$@net> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> Message-ID: On Mon, Jan 3, 2011 at 12:18 PM, Tony Hain wrote: > There is a simple way to deal with all the list noise on pp124 & 125, as > well as reduce the wasted time and energy of the ARIN staff while we are at > it .... Transfer all remaining ARIN IPv4 resources in a split between Lacnic > & Afrinic today, and move on. The useless efforts to micromanage the end of > the pool are not doing anyone any good, and certainly not motivating the > deployment of IPv6 as much as a solid 'sorry we have no more' answer from > ARIN would. > > It is time to stop focusing on the past and just let it go. > Tony, Noone disagrees with you. 124M addresses is not really crumbs either. The cost of replacing that address space for the members is half-billion dollars. Noone really knows what it is going to be tomorrow. But more importantly, what 124 and 125 are saying is "yes", get rid of it, but now we need to get everyone unified and moving to v6 *fast* so that we can cut our expenses. Effectively, exact same thing except not enriching parties unnecessarily. Best, -M< From hannigan at gmail.com Mon Jan 3 13:37:32 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 3 Jan 2011 13:37:32 -0500 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D220CA0.8050308@brightok.net> References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> Message-ID: On Mon, Jan 3, 2011 at 12:51 PM, Jack Bates wrote: [ snip ] > Finally, dual-stack is not the only migration technology. For ARIN to > enforce one migration method over another will only hinder v6 migration. Jack, Don't be so naive. Do you think that "every" transition scheme is going to be supported as we become fully entrenched in exhaustion? Choose carefully. Best, -M< From jbates at brightok.net Mon Jan 3 13:50:56 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 03 Jan 2011 12:50:56 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> Message-ID: <4D221A90.7050809@brightok.net> On 1/3/2011 12:37 PM, Martin Hannigan wrote: > Don't be so naive. Do you think that "every" transition scheme is > going to be supported as we become fully entrenched in exhaustion? > Choose carefully. I do not believe it's ARIN's place to decide which will and won't be supported. Reachability and market will decide which ones actually are mainstream use, but any technology which is implemented will be used, and it's not ARIN's place to say "I don't like your method, so you can't have any more IPv4 addressing." Jack From cgrundemann at gmail.com Mon Jan 3 14:01:13 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Mon, 3 Jan 2011 12:01:13 -0700 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D220CA0.8050308@brightok.net> References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> Message-ID: On Mon, Jan 3, 2011 at 10:51, Jack Bates wrote: > I oppose 125 > > > I know I'm late on this thread, but you expect ARIN to actually monitor > A/AAAA records and somehow figure out abuse? Are we to give ARIN access to > every box so they can confirm that there is a v6 address on the box as well? > What about the millions of boxes which don't use A/AAAA records or need > them? ARIN currently requires that you demonstrate use of your current allocations/assignments before you can receive more addresses. This policy simply expands that current practice. What I expect is that organizations demonstrate to ARIN (as they do today) that they meet the requirements. > 125 proposes something that ARIN has no way of enforcing (which is probably > one reason it was tossed). In addition, it's overly restrictive for those > who do follow the rules. Can you expand on how prop-125 is overly restrictive? Perhaps suggest changes to make it less onerous? > There are still plenty of interfaces that have no need, nor can support, > IPv6. Perhaps it's changed, but MPLS wasn't working with v6, management of > CPE sure as heck doesn't need v6 in the short term. Many folks are still missing the forest for the trees, IMO. Prop-125 requires that a requester demonstrate that they have dual-stacked as many addresses as they are requesting, not every address that they have (unless they are doubling their network every time they make a request to ARIN). Even in the extreme, prop-125 has a safeguard built in; the up-to 80% rule, which means that no org is ever required to dual-stack everything. Here is an example that might help: ISP Q currently has the equivalent of a /10, or 4,194,304 IPv4 addresses. They are growing at a rate of 20% a year, so they need an additional 838,861 or so addresses this year. A /12 would give them a bit over 1 million addresses, let's say they can qualify for that under current policy. If we apply prop-125, ISP Q will be required to demonstrate that they are using a /12 (about 25% of their total space) worth of their current IPv4 space for dual-stacked interfaces. They will also have to use the new space (which is for growth of their network) alongside of IPv6 space. A very similar scenario plays out for content providers and any other network operator; the more new space you need (aka the faster you are growing) the more IPv6 deployment you must undertake; up to 80% parity between IPv4 and IPv6. One thing I know about growing networks, especially growing them quickly, is that it requires more gear. So, prop-125 requires that the networks purchasing the most new gear deploy the most IPv6. In other words, the recurring argument that there is legacy gear out there that can't support an IPv6 address is irrelevant. Yes, I too can point to lot's of things that can not do IPv6, the kicker is that those devices will cause their owners problems regardless of prop-125. The bottom line is that anyone deploying *new* gear should be demanding IPv6 capability. > Finally, dual-stack is not the only migration technology. For ARIN to > enforce one migration method over another will only hinder v6 migration. As previously stated, I am very willing to amend the proposal to include parallel IPv6 networks. The point is to provide service parity between IPv4 and IPv6. ~Chris > > Jack > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.com www.coisoc.org From kkargel at polartel.com Mon Jan 3 14:02:24 2011 From: kkargel at polartel.com (Kevin Kargel) Date: Mon, 3 Jan 2011 13:02:24 -0600 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> Message-ID: <8695009A81378E48879980039EEDAD288C048C55@MAIL1.polartel.local> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Martin Hannigan > Sent: Monday, January 03, 2011 12:36 PM > To: Tony Hain > Cc: arin ppml > Subject: Re: [arin-ppml] Semi-serious proposal to start 2011 > > On Mon, Jan 3, 2011 at 12:18 PM, Tony Hain wrote: > > There is a simple way to deal with all the list noise on pp124 & 125, as > > well as reduce the wasted time and energy of the ARIN staff while we are > at > > it .... Transfer all remaining ARIN IPv4 resources in a split between > Lacnic > > & Afrinic today, and move on. The useless efforts to micromanage the end > of > > the pool are not doing anyone any good, and certainly not motivating the > > deployment of IPv6 as much as a solid 'sorry we have no more' answer > from > > ARIN would. > > > > It is time to stop focusing on the past and just let it go. > > > > > Tony, > > Noone disagrees with you. 124M addresses is not really crumbs either. > The cost of replacing that address space for the members is > half-billion dollars. Noone really knows what it is going to be > tomorrow. But more importantly, what 124 and 125 are saying is "yes", > get rid of it, but now we need to get everyone unified and moving to > v6 *fast* so that we can cut our expenses. Effectively, exact same > thing except not enriching parties unnecessarily. > > Best, > > -M< My basic feeling is that some people will move early because it is fun and they are adventurous, some will move because they can see the business advantage to being a front runner, but most people will move when they have to and not before. Artificial pricing structures and taxes and artificial roadblocks are almost always bad. It is not ARIN's responsibility to ensure that individual networks transition smoothly. All ARIN can do is make the information available and hope that people take advantage of it. My forecast: Bolstering an artificial IP market to try and do some profit taking will be a great disservice to the community. I am convinced it will happen because the greedy people are more motivated to make it so than the rest of us are to prevent it. Once IP's are declared property (if you can trade it or buy it or sell it or rent it or lease it then it is manageable as property, no matter how strenuously you protest) then government regulation and taxation will be soon to follow. Bad things will happen after that. IMHO the best thing we could do is to maintain the current SOP and let IPv4 experience a steady predictable runout. Any attempts at micro-managing the runout will only rearrange the inevitable and create chaos and will have only minor if any affect on the runout date. Kevin From hannigan at gmail.com Mon Jan 3 14:12:45 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 3 Jan 2011 14:12:45 -0500 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D221A90.7050809@brightok.net> References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> <4D221A90.7050809@brightok.net> Message-ID: On Mon, Jan 3, 2011 at 1:50 PM, Jack Bates wrote: > > On 1/3/2011 12:37 PM, Martin Hannigan wrote: > >> Don't be so naive. Do you think that "every" transition scheme is >> going to be supported as we become fully entrenched in exhaustion? >> Choose carefully. > > I do not believe it's ARIN's place to decide which will and won't be > supported. Reachability and market will decide which ones actually are > mainstream use, but any technology which is implemented will be used, and > it's not ARIN's place to say "I don't like your method, so you can't have > any more IPv4 addressing." > Is it safe for me to ignore the lame delegations policy then? Best, -M< From BillD at cait.wustl.edu Mon Jan 3 14:17:17 2011 From: BillD at cait.wustl.edu (Bill Darte) Date: Mon, 3 Jan 2011 13:17:17 -0600 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <8695009A81378E48879980039EEDAD288C048C55@MAIL1.polartel.local> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net><90D44311-09FC-404C-960D-2C99B269AADC@arin.net><035101cbab6a$427bbe00$c7733a00$@net> <8695009A81378E48879980039EEDAD288C048C55@MAIL1.polartel.local> Message-ID: > -----Original Message----- > From: arin-ppml-bounces at arin.net > [mailto:arin-ppml-bounces at arin.net] On Behalf Of Kevin Kargel > Sent: Monday, January 03, 2011 1:02 PM > To: arin ppml > Subject: Re: [arin-ppml] Semi-serious proposal to start 2011 > > My basic feeling is that some people will move early because > it is fun and they are adventurous, some will move because > they can see the business advantage to being a front runner, > but most people will move when they have to and not before. > > Artificial pricing structures and taxes and artificial > roadblocks are almost always bad. > > It is not ARIN's responsibility to ensure that individual > networks transition smoothly. All ARIN can do is make the > information available and hope that people take advantage of it. > > My forecast: > Bolstering an artificial IP market to try and do some profit > taking will be a great disservice to the community. I am > convinced it will happen because the greedy people are more > motivated to make it so than the rest of us are to prevent > it. Once IP's are declared property (if you can trade it or > buy it or sell it or rent it or lease it then it is > manageable as property, no matter how strenuously you > protest) then government regulation and taxation will be soon > to follow. Bad things will happen after that. > > IMHO the best thing we could do is to maintain the current > SOP and let IPv4 experience a steady predictable runout. Any > attempts at micro-managing the runout will only rearrange the > inevitable and create chaos and will have only minor if any > affect on the runout date. I very much agree with what Kevin expresses above.... bd > > Kevin > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From jbates at brightok.net Mon Jan 3 14:18:23 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 03 Jan 2011 13:18:23 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> Message-ID: <4D2220FF.2080300@brightok.net> On 1/3/2011 1:01 PM, Chris Grundemann wrote: > ARIN currently requires that you demonstrate use of your current > allocations/assignments before you can receive more addresses. This > policy simply expands that current practice. What I expect is that > organizations demonstrate to ARIN (as they do today) that they meet > the requirements. > And how, exactly, do you demonstrate this? > Can you expand on how prop-125 is overly restrictive? Perhaps suggest > changes to make it less onerous? > It requires dual stack. It requires DNS entries. Both of which are unacceptable. > Many folks are still missing the forest for the trees, IMO. Prop-125 > requires that a requester demonstrate that they have dual-stacked as > many addresses as they are requesting, not every address that they > have (unless they are doubling their network every time they make a It doesn't read that way, and I doubt ARIN would interpret it that way. Historically, all documentation is for existing networks, not what we plan to do. So the demonstration of dual stack would be for every v4 address already in use. > If we apply prop-125, ISP Q will be required to demonstrate that they > are using a /12 (about 25% of their total space) worth of their > current IPv4 space for dual-stacked interfaces. They will also have to > use the new space (which is for growth of their network) alongside of > IPv6 space. > And how are they exactly supposed to demonstrate such a thing? > In other words, the recurring argument that there is legacy gear out > there that can't support an IPv6 address is irrelevant. Yes, I too can > point to lot's of things that can not do IPv6, the kicker is that > those devices will cause their owners problems regardless of prop-125. > The bottom line is that anyone deploying *new* gear should be > demanding IPv6 capability. > Not at all. I don't need v6 for MPLS. It runs fine over v4 within the network. I don't need v6 for management of cpe either. If I'm large like comcast and run out of rfc-1918, I might request IPv4 from ARIN to continue numbering cpe devices. >> Finally, dual-stack is not the only migration technology. For ARIN to >> enforce one migration method over another will only hinder v6 migration. > > As previously stated, I am very willing to amend the proposal to > include parallel IPv6 networks. The point is to provide service parity > between IPv4 and IPv6. > The problem is that ARIN shouldn't have such restrictions. What happens when someone comes up with the new migration technology that everyone loves, yet it is in violation of the policy? ARIN isn't in the business of designing our networks. Policy shouldn't attempt to do so. Jack From hannigan at gmail.com Mon Jan 3 14:24:06 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 3 Jan 2011 14:24:06 -0500 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <8695009A81378E48879980039EEDAD288C048C55@MAIL1.polartel.local> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> <8695009A81378E48879980039EEDAD288C048C55@MAIL1.polartel.local> Message-ID: On Mon, Jan 3, 2011 at 2:02 PM, Kevin Kargel wrote: > > > [ clip ] > > IMHO the best thing we could do is to maintain the current SOP and let IPv4 experience a steady predictable runout. ?Any attempts at micro-managing the runout will only rearrange the inevitable and create chaos and will have only minor if any affect on the runout date. > Kevin, With all due respect you're not saying anything substantive. There already is a market and it is already leagues ahead with respect to "artificial cost". Attempts to micro-manage ARIN's last 5 /8 equivalents in the interest of keeping "all" members costs low as we move to transition is required as stewards. Most of the "micro management" has already transpired and unfortunately benefits a narrow band of the ARIN membership. The job with respect to transition is not done just because v4 addresses have exhausted. If you want to see a market develop that is going to hurt all of us, assuming that we're done is the best way to insure that. Best, -M< From jbates at brightok.net Mon Jan 3 14:26:10 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 03 Jan 2011 13:26:10 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> <4D221A90.7050809@brightok.net> Message-ID: <4D2222D2.5030807@brightok.net> On 1/3/2011 1:12 PM, Martin Hannigan wrote: > Is it safe for me to ignore the lame delegations policy then? > People safely ignore it all the time. It is there to provide accurate information in the zone. It has no effect except to automatically clean up invalid data. You are NOT required to actually have rDNS. If you do not support it, ARIN will happily remove the glue records. Jack From cgrundemann at gmail.com Mon Jan 3 14:43:07 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Mon, 3 Jan 2011 12:43:07 -0700 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D2220FF.2080300@brightok.net> References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> <4D2220FF.2080300@brightok.net> Message-ID: On Mon, Jan 3, 2011 at 12:18, Jack Bates wrote: > And how, exactly, do you demonstrate this? The same way you do today; network designs, device configurations, SWIP/WHOIS, other network documentation, affidavit, etc. ARIN reviews the documentation and then spot checks to find inconsistencies (which trigger a full audit if needed). > It requires dual stack. Again, I am willing to include parallel IPv6 deployment. > It requires DNS entries. Both of which are > unacceptable. How do you plan to deploy services over IPv6 without DNS? > It doesn't read that way, and I doubt ARIN would interpret it that way. Perhaps you should re-read the proposal text, in particular the deployment requirements section: 4.2.4.5. IPv6 Deployment In order to receive additional space ISPs must provide detailed documentation demonstrating that: - for every IPv4 address requested, at least one pre-existing interface is dual stacked, up to 80% of all interfaces and - for every down stream customer site where the new addresses will be deployed, at least one pre-existing down stream customer site is IPv6 enabled, up to 80% of the total customer base. > And how are they exactly supposed to demonstrate such a thing? See response to same question above. > Not at all. I don't need v6 for MPLS. It runs fine over v4 within the > network. I don't need v6 for management of cpe either. If I'm large like > comcast and run out of rfc-1918, I might request IPv4 from ARIN to continue > numbering cpe devices. I am much more concerned with the services that networks provide than how they are managed. In order for the Internet to grow, we must transition to IPv6. You can, of course, choose not too be a part of the Internet. > The problem is that ARIN shouldn't have such restrictions. What happens when > someone comes up with the new migration technology that everyone loves, yet > it is in violation of the policy? ARIN isn't in the business of designing > our networks. Policy shouldn't attempt to do so. 1) If the IETF starts working on a superior transition method, we can adjust policy accordingly. 2) There is probably not enough life left in IPv4 for this to occur. Sustainable, long-term IPv6 deployments will be native everywhere which that is possible. Today I see two possibilities for this; dual-stack and parallel network. Please point out the missing technology and I will happily include it in the policy. ~Chris > > Jack > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.com www.coisoc.org From hannigan at gmail.com Mon Jan 3 22:25:22 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 3 Jan 2011 22:25:22 -0500 Subject: [arin-ppml] PP 124 Preliminary Info Was: Re: Advisory Council Meeting Results - December 2010 In-Reply-To: References: Message-ID: Folks, One minor additional piece of information for the rationale below. The inventory numbers are increased by about 32 million addresses as a result of the disclosure by ARIN with respect to current inventory. I've included the last /8. I've also included the InterOp /8. The global policy dealing with returns to the IANA is not a slam dunk nor is it unlikely that someone would suggest and possible succeed proposing policy that would require address space held in inventory to be released if it wasn't disposed of by another means such as global policy. Best, -M< On Wed, Dec 29, 2010 at 1:52 PM, Martin Hannigan wrote: > Folks, > > I'm preparing the petition for PP 124 and wanted to post a reminder > and the revised text for 124 prior to the petition. > > I'd like to request that the ARIN staff please provide an accurate > condition of current inventory including all address space, reserves, > holds, etc. > > > Best, > > Martin > > > > ### snarf ### > > Policy Proposal ARIN-prop-124 > Clarification of Section 4.2.4.4 > > Proposal Originator: Martin Hannigan, Chris Grundemann > > Proposal Version: 2 > > Date: 13 December 2010 > > Proposal type: Modify, complete replacement of 4.2.4.4 > > Policy term: Permanent > > Policy statement: > > 4.2.4.4. Subscriber Members After One Year > > After an organization has been a subscriber member of ARIN for one year, > that organization may choose to request up to a 12 month supply of IP > addresses. > > On the date that ARIN receives its last /8 as a result of the IANA > executing section 10.4.2.2 of the NRPM and in accordance with the Global > Policy for the Allocation of the Remaining IPv4 Address Space, the > length of supply that any organization may request from ARIN from that > moment forward will be reduced to three months. Any request submitted > prior to that moment will continue to be eligible for a twelve month > supply of IPv4 addresses as long as need has been reasonably > demonstrated and the application is not deemed frivolous. > > This reduction does not apply to resources received through the > utilization of NRPM Section 8.3 of the NRPM. An organization receiving a > transfer under NRPM Section 8.3 may continue to request up to a 12-month > supply of IP addresses. > > Rationale: > > ARIN's pending operational practice is that if an organization has a > request in the ARIN hostmaster queue for IPv4 resources when the IANA > declares the exhaustion phase (10.4.2.2), their request will be > automatically truncated from a twelve month supply to a three month > supply since policy in effect at the time of exhaustion will apply. 8.3 > and 4.2.4.4 are currently "in effect". > > Example: If an entity is asking for 4 x /24 for a 12 month period and > IANA exhaustion occurs, a requester will receive, if justified, 1 x /24. > If an entity is asking for 120 x /24 at the time that exhaustion occurs, > they would only receive 30 x /24 if justified. If ARIN determines that > this same entity would only qualify for 90 of the 120 x /24 requested, > then that entity would only receive 22 x /24. > > ARIN has the equivalent of almost a /8 in at least one reserve, has > recently received 2 /8's, received ~391 x /16's as a result of the > distribution of "various registries" from the IANA and is guaranteed to > receive at least one additional /8 (aggregate of about 92 million > individual IPv4 addresses) as a result of the execution of 10.4.2.2 by > the IANA. Considering the size of the supply, it would seem prudent to > provide for all members needs in a fair and consistent manner as long as > possible in order to support the continued orderly transition of the > Internet to IPv6. > > The intention of this proposal is simple. To allow resource requests in > the application queue that have provided an application that has a > reasonable chance of success the opportunity to complete the process and > receive transition addresses. > > The ARIN AC should review and determine what action if any should be > taken at their next available opportunity, or sooner if they deem warranted. > > > > From dlw+arin at tellme.com Tue Jan 4 10:25:17 2011 From: dlw+arin at tellme.com (David Williamson) Date: Tue, 4 Jan 2011 07:25:17 -0800 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <035101cbab6a$427bbe00$c7733a00$@net> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> Message-ID: <20110104152517.GJ13617@shell02.cell.sv2.tellme.com> On Mon, Jan 03, 2011 at 09:18:24AM -0800, Tony Hain wrote: > There is a simple way to deal with all the list noise on pp124 & 125, as > well as reduce the wasted time and energy of the ARIN staff while we are at > it .... Transfer all remaining ARIN IPv4 resources in a split between Lacnic > & Afrinic today, and move on. The useless efforts to micromanage the end of > the pool are not doing anyone any good, and certainly not motivating the > deployment of IPv6 as much as a solid 'sorry we have no more' answer from > ARIN would. > > It is time to stop focusing on the past and just let it go. An interesting idea, but what gives us the right to foist the problem off on to them? If the remaining ARIN IPv4 space is contentious for us, what would it do in those regions? Perhaps the best move is to just run it out. That may yet happen - I don't see much chance of broadly supported policy passing before "the end". -David From jbates at brightok.net Tue Jan 4 11:57:03 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 04 Jan 2011 10:57:03 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <20101227164347.GA70716@ussenterprise.ufp.org> <4D220CA0.8050308@brightok.net> <4D2220FF.2080300@brightok.net> Message-ID: <4D23515F.9050602@brightok.net> On 1/3/2011 1:43 PM, Chris Grundemann wrote: > The same way you do today; network designs, device configurations, > SWIP/WHOIS, other network documentation, affidavit, etc. ARIN reviews > the documentation and then spot checks to find inconsistencies (which > trigger a full audit if needed). > Device configurations? Really? Does ARIN actually ask for those? Honestly, a person can abuse and lie though this proposal as easily as if the proposal wasn't so specific. The proposal doesn't stop abuse, but makes engineering decisions for networks. > Again, I am willing to include parallel IPv6 deployment. > NAT64 as well. I'm sure there will be other migration technologies which I'm not familiar with. > How do you plan to deploy services over IPv6 without DNS? > Since when does an eyeball network require authoritative DNS? > - for every IPv4 address requested, at least one pre-existing > interface is dual stacked, up to 80% of all interfaces and Hi, I need a /19. How would you like me to prove the 6,554 IPv6 interfaces? Oh, and are we proving my v6 readiness or my customer's v6 readiness? I'm not sure their linksys is up to the task yet. > I am much more concerned with the services that networks provide than > how they are managed. In order for the Internet to grow, we must > transition to IPv6. You can, of course, choose not too be a part of > the Internet. > Agreed, we need v6. ARIN trying to govern network engineering with no possible way to handle the vast volume of data necessary to actually review the justification is what I disagree with. > 1) If the IETF starts working on a superior transition method, we can > adjust policy accordingly. > 2) There is probably not enough life left in IPv4 for this to occur. > This may be correct, but I'm not willing to give ARIN more authority over my network and how I design it. At most, I'd let them reserve v4 for those who are actively using v6. > Sustainable, long-term IPv6 deployments will be native everywhere > which that is possible. Today I see two possibilities for this; > dual-stack and parallel network. Please point out the missing > technology and I will happily include it in the policy. I'm sure CGN and NAT64 and a few other methods I haven't considered will crop up. Heck, I won't be surprised when proxy servers are used to feed v4 customers v6 websites (they are today). My objection, to simplify the above is: 1) ARIN does not have the manpower to review the large volumes of data to prove 80% worth of a large allocation is assigned as v6. 2) ARIN often allocates to a member similarly sized allocations (for my, that's normally /19-/20). The proposal says I need 6554 IPv6 addresses assigned, and then I can just keep asking for v4 without growing v6. 3) ARIN should not be given more control over network design. 4) Proposal will cause early IPv4 exhaustion, by causing the first networks to be denied IPv4 address. Exhaustion is NOT when all RIR's have allocated the last of their space, but when the first customers are denied when need is shown. Jack From spiffnolee at yahoo.com Tue Jan 4 13:17:01 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Tue, 4 Jan 2011 10:17:01 -0800 (PST) Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <035101cbab6a$427bbe00$c7733a00$@net> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> Message-ID: <744575.79231.qm@web63301.mail.re1.yahoo.com> ----- Original Message ---- > From: Tony Hain > To: arin ppml > Sent: Mon, January 3, 2011 12:18:24 PM > Subject: [arin-ppml] Semi-serious proposal to start 2011 > > There is a simple way to deal with all the list noise on pp124 & 125, as > well as reduce the wasted time and energy of the ARIN staff while we are at > it .... Transfer all remaining ARIN IPv4 resources in a split between Lacnic > & Afrinic today, and move on. Proposal template is here: https://www.arin.net/policy/pdp_appendix_b.txt > The useless efforts to micromanage the end of > the pool are not doing anyone any good, For certain values of "any." > and certainly not motivating the > deployment of IPv6 as much as a solid 'sorry we have no more' answer from > ARIN would. Many organizations are making progress on deploying IPv6, but it is not a quick process. Compare various scenarios of companies needing one year to deploy: 1. Company has started and needs six more months. You would cause them six months of unnecessary pain? 2. Company is just starting, will have six months of pain. You would increase that to a full year? 3. Company won't start until runout. They'll have a year of pain. But their year would overlap with the pain of the above two companies--there's no competitor able to take over their business. > It is time to stop focusing on the past and just let it go. I know it's been a long time, and people who were involved in IPng are tired of it. But there's a lot of work to be done this year--let's give people a chance to do it. Lee From z0ink at yahoo.com Tue Jan 4 16:11:45 2011 From: z0ink at yahoo.com (lucas karisny) Date: Tue, 4 Jan 2011 13:11:45 -0800 (PST) Subject: [arin-ppml] ARIN-PPML Digest, Vol 67, Issue 5 In-Reply-To: References: Message-ID: <985595.30133.qm@web111111.mail.gq1.yahoo.com> Define "simple" and "good". We may speak further ----- Original Message ---- From: "arin-ppml-request at arin.net" To: arin-ppml at arin.net Sent: Tue, January 4, 2011 9:00:01 AM Subject: ARIN-PPML Digest, Vol 67, Issue 5 Send ARIN-PPML mailing list submissions to ??? arin-ppml at arin.net To subscribe or unsubscribe via the World Wide Web, visit ??? http://lists.arin.net/mailman/listinfo/arin-ppml or, via email, send a message with subject or body 'help' to ??? arin-ppml-request at arin.net You can reach the person managing the list at ??? arin-ppml-owner at arin.net When replying, please edit your Subject line so it is more specific than "Re: Contents of ARIN-PPML digest..." Today's Topics: ? 1. Re: Semi-serious proposal to start 2011 (David Williamson) ? 2. Re: Discussion Petition of ARIN-prop-125 Efficient ? ? ? Utilization of IPv4 Requires Dual-Stack (Jack Bates) ---------------------------------------------------------------------- Message: 1 Date: Tue, 4 Jan 2011 07:25:17 -0800 From: David Williamson To: "'arin ppml'" Subject: Re: [arin-ppml] Semi-serious proposal to start 2011 Message-ID: <20110104152517.GJ13617 at shell02.cell.sv2.tellme.com> Content-Type: text/plain; charset=us-ascii On Mon, Jan 03, 2011 at 09:18:24AM -0800, Tony Hain wrote: > There is a simple way to deal with all the list noise on pp124 & 125, as > well as reduce the wasted time and energy of the ARIN staff while we are at > it .... Transfer all remaining ARIN IPv4 resources in a split between Lacnic > & Afrinic today, and move on. The useless efforts to micromanage the end of > the pool are not doing anyone any good, and certainly not motivating the > deployment of IPv6 as much as a solid 'sorry we have no more' answer from > ARIN would. > > It is time to stop focusing on the past and just let it go. An interesting idea, but what gives us the right to foist the problem off on to them?? If the remaining ARIN IPv4 space is contentious for us, what would it do in those regions? Perhaps the best move is to just run it out.? That may yet happen - I don't see much chance of broadly supported policy passing before "the end". -David ------------------------------ Message: 2 Date: Tue, 04 Jan 2011 10:57:03 -0600 From: Jack Bates To: Chris Grundemann Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] Discussion Petition of ARIN-prop-125 ??? Efficient Utilization of IPv4 Requires Dual-Stack Message-ID: <4D23515F.9050602 at brightok.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed On 1/3/2011 1:43 PM, Chris Grundemann wrote: > The same way you do today; network designs, device configurations, > SWIP/WHOIS, other network documentation, affidavit, etc. ARIN reviews > the documentation and then spot checks to find inconsistencies (which > trigger a full audit if needed). > Device configurations? Really? Does ARIN actually ask for those? Honestly, a person can abuse and lie though this proposal as easily as if the proposal wasn't so specific. The proposal doesn't stop abuse, but makes engineering decisions for networks. > Again, I am willing to include parallel IPv6 deployment. > NAT64 as well. I'm sure there will be other migration technologies which I'm not familiar with. > How do you plan to deploy services over IPv6 without DNS? > Since when does an eyeball network require authoritative DNS? >? - for every IPv4 address requested, at least one pre-existing > interface is dual stacked, up to 80% of all interfaces and Hi, I need a /19. How would you like me to prove the 6,554 IPv6 interfaces? Oh, and are we proving my v6 readiness or my customer's v6 readiness? I'm not sure their linksys is up to the task yet. > I am much more concerned with the services that networks provide than > how they are managed. In order for the Internet to grow, we must > transition to IPv6. You can, of course, choose not too be a part of > the Internet. > Agreed, we need v6. ARIN trying to govern network engineering with no possible way to handle the vast volume of data necessary to actually review the justification is what I disagree with. > 1) If the IETF starts working on a superior transition method, we can > adjust policy accordingly. > 2) There is probably not enough life left in IPv4 for this to occur. > This may be correct, but I'm not willing to give ARIN more authority over my network and how I design it. At most, I'd let them reserve v4 for those who are actively using v6. > Sustainable, long-term IPv6 deployments will be native everywhere > which that is possible. Today I see two possibilities for this; > dual-stack and parallel network. Please point out the missing > technology and I will happily include it in the policy. I'm sure CGN and NAT64 and a few other methods I haven't considered will crop up. Heck, I won't be surprised when proxy servers are used to feed v4 customers v6 websites (they are today). My objection, to simplify the above is: 1) ARIN does not have the manpower to review the large volumes of data to prove 80% worth of a large allocation is assigned as v6. 2) ARIN often allocates to a member similarly sized allocations (for my, that's normally /19-/20). The proposal says I need 6554 IPv6 addresses assigned, and then I can just keep asking for v4 without growing v6. 3) ARIN should not be given more control over network design. 4) Proposal will cause early IPv4 exhaustion, by causing the first networks to be denied IPv4 address. Exhaustion is NOT when all RIR's have allocated the last of their space, but when the first customers are denied when need is shown. Jack ------------------------------ _______________________________________________ ARIN-PPML mailing list ARIN-PPML at arin.net http://lists.arin.net/mailman/listinfo/arin-ppml End of ARIN-PPML Digest, Vol 67, Issue 5 **************************************** From alh-ietf at tndh.net Tue Jan 4 19:50:54 2011 From: alh-ietf at tndh.net (Tony Hain) Date: Tue, 4 Jan 2011 16:50:54 -0800 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <20110104152517.GJ13617@shell02.cell.sv2.tellme.com> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> <20110104152517.GJ13617@shell02.cell.sv2.tellme.com> Message-ID: <06cf01cbac72$a561a440$f024ecc0$@net> David Williamson wrote: > On Mon, Jan 03, 2011 at 09:18:24AM -0800, Tony Hain wrote: > > There is a simple way to deal with all the list noise on pp124 & 125, > as > > well as reduce the wasted time and energy of the ARIN staff while we > are at > > it .... Transfer all remaining ARIN IPv4 resources in a split between > Lacnic > > & Afrinic today, and move on. The useless efforts to micromanage the > end of > > the pool are not doing anyone any good, and certainly not motivating > the > > deployment of IPv6 as much as a solid 'sorry we have no more' answer > from > > ARIN would. > > > > It is time to stop focusing on the past and just let it go. > > An interesting idea, but what gives us the right to foist the problem > off on to them? If the remaining ARIN IPv4 space is contentious for > us, what would it do in those regions? That was more about the perpetual claims about historical unfairness that ARIN has more blocks. Also, if they hold to their regional burn rates, they will never use them up to become contentious because the global Internet will have long since given up on IPv4. > > Perhaps the best move is to just run it out. That may yet happen - I > don't see much chance of broadly supported policy passing before "the > end". I didn't bother with a template because it would just cause unnecessary work for the AC. In the first business day of the new year APnic is running on a pace to hand out more than they did last year, so they will be completely exhausted before June 1. RIPE is on pace to be exhausted by July 1, so I agree that it really doesn't matter what policy changes are attempted at this point. As I said before, stop worrying about it and move on... Tony > > -David > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Tue Jan 4 20:13:27 2011 From: owen at delong.com (Owen DeLong) Date: Tue, 4 Jan 2011 17:13:27 -0800 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <06cf01cbac72$a561a440$f024ecc0$@net> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> <20110104152517.GJ13617@shell02.cell.sv2.tellme.com> <06cf01cbac72$a561a440$f024ecc0$@net> Message-ID: <174E8251-2EF8-43F5-9D48-283FC58AFE1A@delong.com> > > I didn't bother with a template because it would just cause unnecessary work > for the AC. In the first business day of the new year APnic is running on a > pace to hand out more than they did last year, so they will be completely > exhausted before June 1. RIPE is on pace to be exhausted by July 1, so I > agree that it really doesn't matter what policy changes are attempted at > this point. As I said before, stop worrying about it and move on... > Tony, If you'd really like to see it happen, feel free to submit a template. I'm sure the AC will be happy to do the right thing with it. Owen (Speaking only for myself and not on behalf of the AC) From hannigan at gmail.com Thu Jan 6 11:21:07 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Thu, 6 Jan 2011 11:21:07 -0500 Subject: [arin-ppml] Semi-serious proposal to start 2011 In-Reply-To: <06cf01cbac72$a561a440$f024ecc0$@net> References: <007BFE18-2C89-42AE-8C1B-EBEE0401397B@corp.arin.net> <90D44311-09FC-404C-960D-2C99B269AADC@arin.net> <035101cbab6a$427bbe00$c7733a00$@net> <20110104152517.GJ13617@shell02.cell.sv2.tellme.com> <06cf01cbac72$a561a440$f024ecc0$@net> Message-ID: On Tue, Jan 4, 2011 at 7:50 PM, Tony Hain wrote: > David Williamson wrote: >> On Mon, Jan 03, 2011 at 09:18:24AM -0800, Tony Hain wrote: >> > There is a simple way to deal with all the list noise on pp124 & 125, >> as >> > well as reduce the wasted time and energy of the ARIN staff while we >> are at >> > it .... Transfer all remaining ARIN IPv4 resources in a split between >> Lacnic >> > & Afrinic today, and move on. The useless efforts to micromanage the >> end of >> > the pool are not doing anyone any good, and certainly not motivating >> the >> > deployment of IPv6 as much as a solid 'sorry we have no more' answer >> from >> > ARIN would. >> > >> > It is time to stop focusing on the past and just let it go. >> >> An interesting idea, but what gives us the right to foist the problem >> off on to them? ?If the remaining ARIN IPv4 space is contentious for >> us, what would it do in those regions? > > That was more about the perpetual claims about historical unfairness that > ARIN has more blocks. Also, if they hold to their regional burn rates, they > will never use them up to become contentious because the global Internet > will have long since given up on IPv4. > That's vacuous fundamentalism. Thinking strictly about volume (addresses and currency) without thinking of need. If the people whispering that old argument want to have a fairness debate they should discuss why various-registries was carved up evenly despite the differentiating need across the regions. But as you say, it is most definitely water under the bridge. >> Perhaps the best move is to just run it out. ?That may yet happen - I >> don't see much chance of broadly supported policy passing before "the >> end". > > I didn't bother with a template because it would just cause unnecessary work > for the AC. Thank you. This would've ended up as a ceremonial piglet with a short line of suitors trying to apply multiple shades of lipstick. I think we have better things to do. Best, -M< From cgrundemann at gmail.com Thu Jan 6 20:58:38 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Thu, 6 Jan 2011 18:58:38 -0700 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D125FAE.3050307@arin.net> References: <4D125FAE.3050307@arin.net> Message-ID: In response to feedback both on and off list, the other originators of this policy and I have agreed on a much lighter weight version of prop-125. Although I can not revise the proposal while it is under petition, I would like to share the new text with everyone and ask for your support. If the petition is successful, I will submit this new text as version 2. ~Chris Changes in this version: 1) Added parallel IPv6 networks in addition to dual-stack. 2) Removed the explicit application to transfers. 3) Removed all retro-active requirements. ## Policy Statement: * Add the following sections to section 4.1: 4.1.2. Efficient Utilization IPv4 addresses are a finite resource and as such are required to be efficiently utilized by resource holders in order to maximize their benefit to the community. 4.1.3. IPv6 Deployment 4.1.3.1 Dual-Stack Dual-stack refers to configuring both an IPv4 and an IPv6 address or network together on the same network infrastructure. 4.1.3.2 Parallel Deployment of IPv6 Parallel deployment of IPv6 refers to the building out of a second, parallel IPv6 network along side of an existing IPv4 network. In order to be considered a parallel deployment of IPv6, the IPv6 network infrastructure may be physically or logically seperate from the IPv4 network but must provide the same functionality and services. 4.1.3.3 Efficient Utilization of IPv4 Requires Ipv6 All new IPv4 addresses assigned or allocated to an organization must: - be deployed on dual-stacked interfaces along with IPv6 addresses, or - be deployed along with a parallel deployment of IPv6 4.1.3.4 Service Parity When IPv4 addresses are used to provide an Internet facing service, the service must be fully IPv6 accessible. * Add the following sentance to the end of sections 4.2.1.6, 4.2.2.1.2, 4.2.2.2.1, 4.2.3.1. and 4.3.4: In accordance with section 4.1.3, all new addresses must be deployed with IPv6 addresses and all Internet facing services provided by new addresses must be fully IPv6 accessible. * Re-write section 4.2.3.4.1. to: Reassignment information for prior allocations must show that each customer meets the 80% utilization criteria, the IPv6 deployment criteria and must be available via SWIP / RWhois prior to your issuing them additional space. -- -- chris at theIPv6experts.net From matthew at matthew.at Thu Jan 6 22:07:22 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 06 Jan 2011 19:07:22 -0800 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: <4D26836A.3020605@matthew.at> On 1/6/2011 5:58 PM, Chris Grundemann wrote: > In response to feedback both on and off list, the other originators of > this policy and I have agreed on a much lighter weight version of > prop-125. Although I can not revise the proposal while it is under > petition, I would like to share the new text with everyone and ask for > your support. If the petition is successful, I will submit this new > text as version 2. I do not support the petition. I also would not support the proposal or the petition as modified below. See comments inline. > ~Chris > > Changes in this version: > 1) Added parallel IPv6 networks in addition to dual-stack. > 2) Removed the explicit application to transfers. > 3) Removed all retro-active requirements. > > ## Policy Statement: > > * Add the following sections to section 4.1: > > 4.1.2. Efficient Utilization > > IPv4 addresses are a finite resource and as such are required to be > efficiently utilized by resource holders in order to maximize their > benefit to the community. I don't have a problem with this. We just don't agree on "efficiently utilized". > 4.1.3. IPv6 Deployment > > 4.1.3.1 Dual-Stack > > Dual-stack refers to configuring both an IPv4 and an IPv6 address or > network together on the same network infrastructure. Ok. > 4.1.3.2 Parallel Deployment of IPv6 > > Parallel deployment of IPv6 refers to the building out of a second, > parallel IPv6 network along side of an existing IPv4 network. In order > to be considered a parallel deployment of IPv6, the IPv6 network > infrastructure may be physically or logically seperate from the IPv4 > network but must provide the same functionality and services. This might be vague enough to be acceptable, as long as it is understood that "same functionality and services" doesn't necessarily mean "identical". At the most basic level, it is clear that at current growth levels it isn't at all necessary to provide as many IPv6-facing servers as IPv4-facing servers to get the same response times. But in some cases the "same functionality" is impossible to provide for one or the other protocol, and it wouldn't make sense to try. > 4.1.3.3 Efficient Utilization of IPv4 Requires Ipv6 > > All new IPv4 addresses assigned or allocated to an organization must: > - be deployed on dual-stacked interfaces along with IPv6 addresses, or > - be deployed along with a parallel deployment of IPv6 Again, do you mean "parallel concept" so that as long as you can do similar things with IPv6 that counts, or do you mean "strictly parallel" in that for every box behind the IPv4 load balancer there must be a box behind the IPv6 load balancer? And what would a "parallel deployment" of IPv6 mean for cases where it makes *no sense at all* to try to provide the same thing? (Examples include my hypothetical legacy computing museum from last week, or a proxy service that is only relevant to one protocol or the other) > 4.1.3.4 Service Parity > > When IPv4 addresses are used to provide an Internet facing service, > the service must be fully IPv6 accessible. What do you mean by "fully IPv6 accessible"? Do you mean "the firewall lets the same ports through"? Or do you mean "your IPv6 transit must be as well-connected as your IPv4 transit"? Does that mean I need a second IPv6 provider if mine has a peering disagreement with one of the other major ones? Does it mean that I can never be "fully IPv6 accessible" as long as there are eyeball networks that are IPv4-only? > * Add the following sentance to the end of sections 4.2.1.6, > 4.2.2.1.2, 4.2.2.2.1, 4.2.3.1. and 4.3.4: > > In accordance with section 4.1.3, all new addresses must be deployed > with IPv6 addresses and all Internet facing services provided by new > addresses must be fully IPv6 accessible. And again, doesn't make sense. If my "Internet facing service" is "telnet access to NeXTStation machines" there isn't really an IPv6 equivalent, is there? And who would expect it anyway? > * Re-write section 4.2.3.4.1. to: > > Reassignment information for prior allocations must show that each > customer meets the 80% utilization criteria, the IPv6 deployment > criteria and must be available via SWIP / RWhois prior to your issuing > them additional space. Given that we don't know how ARIN would audit this, it isn't clear how an ISP would. And you've covered "downstream reassignment" and "Internet-facing services" but there's all sorts of other reasons someone might apply for IPv4 addresses... what do they need to do in order to "pass the test"? Matthew Kaufman From mysidia at gmail.com Fri Jan 7 00:05:24 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Thu, 6 Jan 2011 23:05:24 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: On Thu, Jan 6, 2011 at 7:58 PM, Chris Grundemann wrote: > 4.1.3.1 Dual-Stack > Dual-stack refers to configuring both an IPv4 and an IPv6 address or > network together on the same network infrastructure. While the revision has significant improvements, I still do not support PP125 or the petition. The main remaining problem is it still requires an IPv6 network to be configured, which is onerous; ARIN's role is not to lay down law about which protocols applicants use on their networks, only to provide addresses, based on the reasonable need-based criteria, such as the RFC 2050 guidelines. There are still forseeable situations such as non-connected networks, where IPv6 addressing may not be needed or desired. One way to remedy would be to replace the "Dual Stack" criteria with a "Dual Assignment" criteria. And specify that IPv6 addresses merely have to be reserved for devices or interfaces for use in the future, that the addresses do not have to actually be configured or routed at the time of application. That should reduce the barrier required for the applicant and ARIN in the future, for IPv6 deployment, and give a "nudge" without ARIN getting into the business of trying to regulate the architecture and choice of protocols IP network implementations. -- -J From vaughn at swiftsystems.com Fri Jan 7 08:01:42 2011 From: vaughn at swiftsystems.com (Vaughn Thurman - Swift Systems) Date: Fri, 7 Jan 2011 08:01:42 -0500 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: Though I shudder to consider the responses I may get, and truly do not suggest any intentional bad play, it still needs to be said: Some of the folks who are pushing this have potential alterior motives, such as being IPv6 consultants, authors/content providers, speakers, trainers, service providers, etc. Consider this possible subconscious but nefarious thought: "The slow market adoption rates among the small and mids, who most often need outside talent to adopt new technologies, are running counter to desired market conditions. So, wouldn't it be nice if we could use ARIN to force the issue and create an unnatural bubble of demand?" This is why there is so much hidden, and potentially discrediting danger in having ARIN become a behavioral modification tool that benefits some at the direct expense of others. Even the idea of it is risky. IPv6 is available. When IPv4 is depleted, the change will come soon enough as a result of market forces. However, many providers who manage their networks efficiently, or who believe that they can manage in the transfer market for a while, etc., may be desiring to wait out the storm, and then deploy IPv6 when costs are more inline, and/or needed talent is more readily available. Wise or not, that seems an autonomous operational right. But, this policy would (or could be perceived to) hoist an economic burden on them counter to thier own best interest, potentially leading to ill will as they find themselves forced to hire one of us to help them implement IPv6 earlier than needed. In fact, what if they have already decided to sell at this point, say to another provider, because they don't feel like going through this? What if they just don't want to deal with this right now for health or other reasons, which among many others are all legit concerns for small and medium providers. Does ARIN's charter really include the power to force certain protocols, technical implementations, or even a limited pool of consultants onto businesses and organizations that request address space? And, even if you say yes (and I would assert a strong "no" when those requirements are not related to the requested items), don't we run the risk of appearing self-serving? Sent from my iPhone On Jan 7, 2011, at 12:05 AM, Jimmy Hess wrote: > On Thu, Jan 6, 2011 at 7:58 PM, Chris Grundemann wrote: > >> 4.1.3.1 Dual-Stack >> Dual-stack refers to configuring both an IPv4 and an IPv6 address or >> network together on the same network infrastructure. > > While the revision has significant improvements, I still do not > support PP125 or the petition. > > The main remaining problem is it still requires an IPv6 network to be > configured, which is onerous; ARIN's role is not to lay down law > about which protocols applicants use on their networks, only to > provide addresses, based on the reasonable need-based criteria, > such as the RFC 2050 guidelines. > > There are still forseeable situations such as non-connected > networks, where IPv6 addressing may not be needed or desired. > > One way to remedy would be to replace the "Dual Stack" criteria > with a "Dual Assignment" criteria. > And specify that IPv6 addresses merely have to be reserved for devices > or interfaces for use in the future, that the addresses do not have > to actually be configured or routed at the time of application. > > > That should reduce the barrier required for the applicant and ARIN in > the future, for IPv6 deployment, and give a "nudge" without ARIN > getting into the business of trying to regulate the architecture and > choice of protocols IP network implementations. > > -- > -J > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From carlosm3011 at gmail.com Fri Jan 7 08:16:49 2011 From: carlosm3011 at gmail.com (Carlos Martinez-Cagnazzo) Date: Fri, 7 Jan 2011 11:16:49 -0200 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: I've been following this "125" discussioni with great interest, and I do believe that policy initiatives that ensure that the last portions of IPv4 space are used wisely are badly needed accross all regions. I do not intend to emit opinion on the proposal as I am not a member nor work for a member of ARIN. What I do want to say is that I do not believe in conspiracy theories. What has been said about "becoming consultants" can be said about almost any technology and for all the big changes the TCP/IP stack has seen over the years. What about CIDR? Surely there was a lot of interest at the time on small / meds on hiring people to explain to them those pesky 255.255.255.224 thingies, and I am sure that a lot of people made money on these consulting jobs. Sadly I was too young at the time, I might have been one of those :-) Is there anything wrong with that? I don't think so. We all agree that IPv6 is the way to move forward, and yes, some people will make money out of it. The good thing here is that almost everybody that wishes so can be part of this. There is no hidden monopoly here, no "owning the means of production" to protect. Everything you need is a few Google searches away. And yes, I do believe Neil Armstrong walked the moon :-) cheers! Carlos On Fri, Jan 7, 2011 at 11:01 AM, Vaughn Thurman - Swift Systems wrote: > Though I shudder to consider the responses I may get, and truly do not suggest any intentional bad play, it still needs to be said: > > Some of the folks who are pushing this have potential alterior motives, such as being IPv6 consultants, authors/content providers, speakers, trainers, service providers, etc. > > Consider this possible subconscious but nefarious thought: ?"The slow market adoption rates among the small and mids, who most often need outside talent to adopt new technologies, are running counter to desired market conditions. So, wouldn't it be nice if we could use ARIN to force the issue and create an unnatural bubble of demand?" > > This is why there is so much hidden, and potentially discrediting danger in having ARIN become a behavioral modification tool that benefits some at the direct expense of others. ?Even the idea of it is risky. > > IPv6 is available. ?When IPv4 is depleted, the change will come soon enough as a result of market forces. However, many providers who manage their networks efficiently, or who believe that they can manage in the transfer market for a while, etc., may be desiring to wait out the storm, and then deploy IPv6 when costs are more inline, and/or needed talent is more readily available. ? Wise or not, that seems an autonomous operational right. ?But, this policy would (or could be perceived to) hoist an economic burden on them counter to thier own best interest, potentially leading to ill will as they find themselves forced to hire one of us to help them implement IPv6 earlier than needed. ?In fact, what if they have already decided to sell at this point, say to another provider, because they don't feel like going through this? What if they just don't want to deal with this right now for health or other reasons, which among many others are all legit concerns for small and medium pro > ?viders. > > Does ARIN's charter really include the power to force certain protocols, technical implementations, or even a limited pool of consultants onto businesses and organizations that request address space? > > And, even if you say yes (and I would assert a strong "no" when those requirements are not related to the requested items), don't we run the risk of appearing self-serving? > > > > Sent from my iPhone > > On Jan 7, 2011, at 12:05 AM, Jimmy Hess wrote: > >> On Thu, Jan 6, 2011 at 7:58 PM, Chris Grundemann wrote: >> >>> 4.1.3.1 Dual-Stack >>> Dual-stack refers to configuring both an IPv4 and an IPv6 address or >>> network together on the same network infrastructure. >> >> While the revision has ?significant improvements, ? I ?still ?do not >> support PP125 or the petition. >> >> The main remaining problem is it still requires an IPv6 network to be >> configured, which is onerous; ? ARIN's ?role is not to lay down law >> about which protocols applicants use on their networks, ?only ?to >> provide addresses, based on the reasonable need-based criteria, >> such as the RFC 2050 guidelines. >> >> There are still ?forseeable situations ?such as ?non-connected >> networks, ?where IPv6 addressing may not be needed or desired. >> >> One way to remedy would be to replace ?the "Dual Stack" ?criteria >> with a ?"Dual Assignment" criteria. >> And specify that IPv6 addresses merely have to be reserved for devices >> or interfaces ?for use in the future, ?that the ?addresses do not have >> to actually be configured or routed ?at the time of application. >> >> >> That ?should reduce the barrier required for the applicant and ARIN in >> the future, ?for IPv6 deployment, ?and give a "nudge" without ARIN >> getting into the business of trying to regulate ?the architecture and >> choice of protocols IP network implementations. >> >> -- >> -J >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- -- ========================= Carlos M. Martinez-Cagnazzo http://www.labs.lacnic.net ========================= From bret at getjive.com Fri Jan 7 08:34:50 2011 From: bret at getjive.com (Bret Palsson) Date: Fri, 7 Jan 2011 06:34:50 -0700 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: <7940520206380324255@unknownmsgid> This has also crossed my mind more than a few times. Sent from my iPhone On Jan 7, 2011, at 6:02 AM, Vaughn Thurman - Swift Systems wrote: > Though I shudder to consider the responses I may get, and truly do not suggest any intentional bad play, it still needs to be said: > > Some of the folks who are pushing this have potential alterior motives, such as being IPv6 consultants, authors/content providers, speakers, trainers, service providers, etc. > > Consider this possible subconscious but nefarious thought: "The slow market adoption rates among the small and mids, who most often need outside talent to adopt new technologies, are running counter to desired market conditions. So, wouldn't it be nice if we could use ARIN to force the issue and create an unnatural bubble of demand?" > > This is why there is so much hidden, and potentially discrediting danger in having ARIN become a behavioral modification tool that benefits some at the direct expense of others. Even the idea of it is risky. > > IPv6 is available. When IPv4 is depleted, the change will come soon enough as a result of market forces. However, many providers who manage their networks efficiently, or who believe that they can manage in the transfer market for a while, etc., may be desiring to wait out the storm, and then deploy IPv6 when costs are more inline, and/or needed talent is more readily available. Wise or not, that seems an autonomous operational right. But, this policy would (or could be perceived to) hoist an economic burden on them counter to thier own best interest, potentially leading to ill will as they find themselves forced to hire one of us to help them implement IPv6 earlier than needed. In fact, what if they have already decided to sell at this point, say to another provider, because they don't feel like going through this? What if they just don't want to deal with this right now for health or other reasons, which among many others are all legit concerns for small and medium pro > viders. > > Does ARIN's charter really include the power to force certain protocols, technical implementations, or even a limited pool of consultants onto businesses and organizations that request address space? > > And, even if you say yes (and I would assert a strong "no" when those requirements are not related to the requested items), don't we run the risk of appearing self-serving? > > > > Sent from my iPhone > > On Jan 7, 2011, at 12:05 AM, Jimmy Hess wrote: > >> On Thu, Jan 6, 2011 at 7:58 PM, Chris Grundemann wrote: >> >>> 4.1.3.1 Dual-Stack >>> Dual-stack refers to configuring both an IPv4 and an IPv6 address or >>> network together on the same network infrastructure. >> >> While the revision has significant improvements, I still do not >> support PP125 or the petition. >> >> The main remaining problem is it still requires an IPv6 network to be >> configured, which is onerous; ARIN's role is not to lay down law >> about which protocols applicants use on their networks, only to >> provide addresses, based on the reasonable need-based criteria, >> such as the RFC 2050 guidelines. >> >> There are still forseeable situations such as non-connected >> networks, where IPv6 addressing may not be needed or desired. >> >> One way to remedy would be to replace the "Dual Stack" criteria >> with a "Dual Assignment" criteria. >> And specify that IPv6 addresses merely have to be reserved for devices >> or interfaces for use in the future, that the addresses do not have >> to actually be configured or routed at the time of application. >> >> >> That should reduce the barrier required for the applicant and ARIN in >> the future, for IPv6 deployment, and give a "nudge" without ARIN >> getting into the business of trying to regulate the architecture and >> choice of protocols IP network implementations. >> >> -- >> -J >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From bill at herrin.us Fri Jan 7 09:16:06 2011 From: bill at herrin.us (William Herrin) Date: Fri, 7 Jan 2011 09:16:06 -0500 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: On Fri, Jan 7, 2011 at 8:01 AM, Vaughn Thurman - Swift Systems wrote: > Though I shudder to consider the responses I may get, and truly do not >suggest any intentional bad play, it still needs to be said: > > Some of the folks who are pushing this have potential alterior motives, >such as being IPv6 consultants, authors/content providers, speakers, >trainers, service providers, etc. ul?te?ri?or adj. 1. Lying beyond what is evident, revealed, or avowed, especially being concealed intentionally so as to deceive: an ulterior motive. You can't have it both ways. Either they're engaging in deceptive play (which I don't believe for an instant) or they don't have ulterior motives, they just have regular motives. You, me, the prop 125 guys, we ALL have a regular motive: we're trying to improve the state of the Internet, for each of our honest personal definitions of "improve." Definitions we've each reached from years and decades of experience in the field. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From hannigan at gmail.com Fri Jan 7 09:42:48 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Fri, 7 Jan 2011 09:42:48 -0500 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: On Fri, Jan 7, 2011 at 8:01 AM, Vaughn Thurman - Swift Systems wrote: > Though I shudder to consider the responses I may get, and truly do not suggest any intentional bad play, it still needs to be said: > > Some of the folks who are pushing this have potential alterior motives, such as being IPv6 consultants, authors/content providers, speakers, trainers, service providers, etc. > > Consider this possible subconscious but nefarious thought: ?"The slow market adoption rates among the small and mids, who most often need outside talent to adopt new technologies, are running counter to desired market conditions. So, wouldn't it be nice if we could use ARIN to force the issue and create an unnatural bubble of demand?" > Vaughn, Do you need a hug? Best, Marty From jbates at brightok.net Fri Jan 7 10:08:57 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 07 Jan 2011 09:08:57 -0600 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: <4D272C89.6020308@brightok.net> I oppose 125, and the changes haven't changed why I oppose it. On 1/7/2011 7:01 AM, Vaughn Thurman - Swift Systems wrote: > However, many providers who manage their networks efficiently, or who > believe that they can manage in the transfer market for a while, > etc., may be desiring to wait out the storm, and then deploy IPv6 > when costs are more inline, and/or needed talent is more readily > available. Honestly, the problem is implementation readiness and pricing. Vendors have often pushed the better IPv6 stacks to their newer gear only, pushing the price of deploying into a proper IPv6 layout higher. In addition, not all problems have been resolved by most/all vendors. So the policy proposal is to strong arm people into spending money on more expensive crap hardware solutions to deploy something that is far inferior to what they currently have instead of letting them wait until vendors can work the bugs out and market pricing can come down to a reasonable level. Oh, and before I forget. There are millions of users out there that CANNOT use IPv6 with their cheap(by business standards, not home user standards), "can NEVER be upgraded to IPv6" routers. This has been done by design to allow all these home router vendors to get more money out of the masses. I was informed just recently that the company which produces one of our PPPoE area CPE's will NOT be support IPv6 on any of the old version CPE (actually, I've been told this by almost every DSL manufacturer, but luckily I thought ahead and didn't deploy CPEs that needed v6 support in 99% of the areas). Sad really. Jack From charityg at diplomacy.edu Fri Jan 7 10:10:10 2011 From: charityg at diplomacy.edu (Charity Gamboa) Date: Fri, 7 Jan 2011 09:10:10 -0600 Subject: [arin-ppml] 2011 Philippine IPv6 Conference and Training In-Reply-To: <18A758A4C634483F9037DA359604993F@SATELLITE> References: <18A758A4C634483F9037DA359604993F@SATELLITE> Message-ID: Hi All, Sorry for cross-posting but I would like to forward this invitation to anyone interested to join ISOC PH for the 2011 Philippine IPv6 Conference and Training this coming 24-27 of January 2011 at Shangri-la Hotel, Ayala, Makati City, Philippines. More information on the training can be accessed here: http://ipv6.isoc.ph/ Thank you! Kind regards, Charity Gamboa-Embley ISOC PH ---------- Forwarded message ---------- From: Rodel Urani Date: Fri, Jan 7, 2011 at 12:20 AM Subject: 2011 Philippine IPv6 Conference and Training To: Rodel Urani Dear All, A prosperous 2011 to you and family! I would like to personally invite you to join the 2011 Philippine Internet Protocol version 6 (IPv6) Conference and Training to be held on 24-27 January 2011 at the Shangri-la Hotel, Ayala, Makati City. Please visit this site for more details. Reserve your seat now. You may forward this email to those you know who may be interested attending the event. Thank you. Kindest regards, -Rodel __________________________________________________ Rodel Urani +63.2.215.8861 _______________________________________________ FOUNDING mailing list FOUNDING at ISOC.PH http://box325.bluehost.com/mailman/listinfo/founding_isoc.ph -------------- next part -------------- An HTML attachment was scrubbed... URL: From bret at getjive.com Fri Jan 7 10:17:53 2011 From: bret at getjive.com (Bret Palsson) Date: Fri, 7 Jan 2011 08:17:53 -0700 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> Martin: As one who is petitioning PP 124, that feed back just shows you are doing this for the money. We don't create policy to make ourselves rich or for job security, or at least we shouldn't. Obviously this is your primary motive. I'm opposed to PP 124. -Bret On Jan 7, 2011, at 7:42 AM, Martin Hannigan wrote: > On Fri, Jan 7, 2011 at 8:01 AM, Vaughn Thurman - Swift Systems > wrote: >> Though I shudder to consider the responses I may get, and truly do not suggest any intentional bad play, it still needs to be said: >> >> Some of the folks who are pushing this have potential alterior motives, such as being IPv6 consultants, authors/content providers, speakers, trainers, service providers, etc. >> >> Consider this possible subconscious but nefarious thought: "The slow market adoption rates among the small and mids, who most often need outside talent to adopt new technologies, are running counter to desired market conditions. So, wouldn't it be nice if we could use ARIN to force the issue and create an unnatural bubble of demand?" >> > > > Vaughn, > > Do you need a hug? > > > Best, > > Marty > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. Folks, I'm preparing the petition for PP 124 and wanted to post a reminder and the revised text for 124 prior to the petition. I'd like to request that the ARIN staff please provide an accurate condition of current inventory including all address space, reserves, holds, etc. Best, Martin From cgrundemann at gmail.com Fri Jan 7 10:20:45 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Fri, 7 Jan 2011 08:20:45 -0700 Subject: [arin-ppml] 125 In-Reply-To: <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> Message-ID: Point of clarity Bret - this thread is in reference to prop-125, not 124... ~Chris On Fri, Jan 7, 2011 at 08:17, Bret Palsson wrote: > Martin: > > As one who is petitioning PP 124, that feed back just shows you are doing this for the money. We don't create policy to make ourselves rich or for job security, or at least we shouldn't. Obviously this is your primary motive. > > I'm opposed to PP 124. > > -Bret > > On Jan 7, 2011, at 7:42 AM, Martin Hannigan wrote: > >> On Fri, Jan 7, 2011 at 8:01 AM, Vaughn Thurman - Swift Systems >> wrote: >>> Though I shudder to consider the responses I may get, and truly do not suggest any intentional bad play, it still needs to be said: >>> >>> Some of the folks who are pushing this have potential alterior motives, such as being IPv6 consultants, authors/content providers, speakers, trainers, service providers, etc. >>> >>> Consider this possible subconscious but nefarious thought: ?"The slow market adoption rates among the small and mids, who most often need outside talent to adopt new technologies, are running counter to desired market conditions. So, wouldn't it be nice if we could use ARIN to force the issue and create an unnatural bubble of demand?" >>> >> >> >> Vaughn, >> >> Do you need a hug? >> >> >> Best, >> >> Marty >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. > Folks, > > I'm preparing the petition for PP 124 and wanted to post a reminder > and the revised text for 124 prior to the petition. > > I'd like to request that the ARIN staff please provide an accurate > condition of current inventory including all address space, reserves, > holds, etc. > > > Best, > > Martin > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.com www.coisoc.org From bret at getjive.com Fri Jan 7 10:22:09 2011 From: bret at getjive.com (Bret Palsson) Date: Fri, 7 Jan 2011 08:22:09 -0700 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> Message-ID: So it is. However sending an email with "Do you need a hug?" is pretty annoying. -Bret On Jan 7, 2011, at 8:20 AM, Chris Grundemann wrote: > Point of clarity Bret - this thread is in reference to prop-125, not 124... > ~Chris > > On Fri, Jan 7, 2011 at 08:17, Bret Palsson wrote: >> Martin: >> >> As one who is petitioning PP 124, that feed back just shows you are doing this for the money. We don't create policy to make ourselves rich or for job security, or at least we shouldn't. Obviously this is your primary motive. >> >> I'm opposed to PP 124. >> >> -Bret >> >> On Jan 7, 2011, at 7:42 AM, Martin Hannigan wrote: >> >>> On Fri, Jan 7, 2011 at 8:01 AM, Vaughn Thurman - Swift Systems >>> wrote: >>>> Though I shudder to consider the responses I may get, and truly do not suggest any intentional bad play, it still needs to be said: >>>> >>>> Some of the folks who are pushing this have potential alterior motives, such as being IPv6 consultants, authors/content providers, speakers, trainers, service providers, etc. >>>> >>>> Consider this possible subconscious but nefarious thought: "The slow market adoption rates among the small and mids, who most often need outside talent to adopt new technologies, are running counter to desired market conditions. So, wouldn't it be nice if we could use ARIN to force the issue and create an unnatural bubble of demand?" >>>> >>> >>> >>> Vaughn, >>> >>> Do you need a hug? >>> >>> >>> Best, >>> >>> Marty >>> _______________________________________________ >>> PPML >>> You are receiving this message because you are subscribed to >>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >>> Unsubscribe or manage your mailing list subscription at: >>> http://lists.arin.net/mailman/listinfo/arin-ppml >>> Please contact info at arin.net if you experience any issues. >> Folks, >> >> I'm preparing the petition for PP 124 and wanted to post a reminder >> and the revised text for 124 prior to the petition. >> >> I'd like to request that the ARIN staff please provide an accurate >> condition of current inventory including all address space, reserves, >> holds, etc. >> >> >> Best, >> >> Martin >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. >> > > > > > -- > @ChrisGrundemann > weblog.chrisgrundemann.com > www.burningwiththebush.com > www.theIPv6experts.com > www.coisoc.org From hannigan at gmail.com Fri Jan 7 10:51:55 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Fri, 7 Jan 2011 10:51:55 -0500 Subject: [arin-ppml] 125 In-Reply-To: <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> Message-ID: On Fri, Jan 7, 2011 at 10:17 AM, Bret Palsson wrote: > Martin: > > As one who is petitioning PP 124, that feed back just shows you are doing this for the money. We don't create policy to make ourselves rich or for job security, or at least we shouldn't. Obviously this is your primary motive. > > I'm opposed to PP 124. > Bret, Pretty far flung accusation. Can you explain how I'm going to profit from 125? For that matter, can you explain how anyone is going to profit from 125? You can get in the hug line. Best, -M< From bret at getjive.com Fri Jan 7 11:02:34 2011 From: bret at getjive.com (Bret Palsson) Date: Fri, 7 Jan 2011 09:02:34 -0700 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> Message-ID: <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> You may not be listed here, but some that are pushing for this policy are. Seems like marketing to me: http://www.theipv6experts.net/the-experts/ Placing your bio and contact information as an ipv6expert and creating/pushing policy that not many people want seems like the policy is for the better of the policy maker rather than the whole community. I agree ipv6 needs to be adopted. I don't think it's ARINs place to force it. It will come naturally as ipv4 runs out. We don't need a policy policing that. I think if someone has a justified reason to request ipv4 and it's available, ARIN can decide to grant that allocation. We don't need more loop holes to jump through. IPv6 will be adopted with or without this policy. Let's move on with our lives and accept the AC's decision. -Bret On Jan 7, 2011, at 8:51 AM, Martin Hannigan wrote: > On Fri, Jan 7, 2011 at 10:17 AM, Bret Palsson wrote: >> Martin: >> >> As one who is petitioning PP 124, that feed back just shows you are doing this for the money. We don't create policy to make ourselves rich or for job security, or at least we shouldn't. Obviously this is your primary motive. >> >> I'm opposed to PP 124. >> > > > Bret, > > Pretty far flung accusation. Can you explain how I'm going to profit > from 125? For that matter, can you explain how anyone is going to > profit from 125? > > You can get in the hug line. > > Best, > > -M< From kkargel at polartel.com Fri Jan 7 11:09:18 2011 From: kkargel at polartel.com (Kevin Kargel) Date: Fri, 7 Jan 2011 10:09:18 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <4D125FAE.3050307@arin.net> Message-ID: <8695009A81378E48879980039EEDAD288C048C7D@MAIL1.polartel.local> I still oppose p125 . ARIN is still a registrar and still has no business specifying network topology or operation. I am not saying that the intent of p125 is necessarily evil, but that ARIN is not the appropriate venue to accomplish the goals. Forced IPv6 adoption should be handled by one of the protocol standards organizations (if it should happen at all), not by the numbering registrar. IPv6 will be a natural mutation. As content becomes available end users will demand IPv6 and that will drive adoption. IPv6 is bigger than ARIN. > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Chris Grundemann > Sent: Thursday, January 06, 2011 7:59 PM > To: arin-ppml at arin.net > Subject: Re: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient > Utilization of IPv4 Requires Dual-Stack > > In response to feedback both on and off list, the other originators of > this policy and I have agreed on a much lighter weight version of > prop-125. Although I can not revise the proposal while it is under > petition, I would like to share the new text with everyone and ask for > your support. If the petition is successful, I will submit this new > text as version 2. > > ~Chris > > Changes in this version: > 1) Added parallel IPv6 networks in addition to dual-stack. > 2) Removed the explicit application to transfers. > 3) Removed all retro-active requirements. > From hannigan at gmail.com Fri Jan 7 11:36:31 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Fri, 7 Jan 2011 11:36:31 -0500 Subject: [arin-ppml] 125 In-Reply-To: <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> Message-ID: On Fri, Jan 7, 2011 at 11:02 AM, Bret Palsson wrote: > You may not be listed here, but some that are pushing for this policy are. Seems like marketing to me: > > http://www.theipv6experts.net/the-experts/ A free website with volunteers offering their demonstrated expertise to help anyone who wants it to become more proficient in IPv6 networking...for free? You need to think about this a bit more before continuing to make assumptions (and accusations) that anyone is profiting from ARIN policy. Best, -M< From kkargel at polartel.com Fri Jan 7 12:41:10 2011 From: kkargel at polartel.com (Kevin Kargel) Date: Fri, 7 Jan 2011 11:41:10 -0600 Subject: [arin-ppml] IP "Experts" -- off topic comment In-Reply-To: <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> Message-ID: <8695009A81378E48879980039EEDAD288C048C7F@MAIL1.polartel.local> I suspect that everyone who is active on this list stands to profit from IPv6 adoption in one form or another. If everyone who had a vested business interest abstained from commenting it would be a very quiet list. I don't think that any of the "IPv6 experts" are worried about a lack of work opportunities in the next couple of years. There is plenty of opportunity in the offing, I don't see a need for anyone to artificially create a demand. I for one greatly value the input from "experts" who will derive income from IP networking, whether v4 or v6. Thank you all for participating. Kevin Kargel > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Bret Palsson > Sent: Friday, January 07, 2011 10:03 AM > To: Martin Hannigan > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] 125 > > You may not be listed here, but some that are pushing for this policy are. > Seems like marketing to me: > > http://www.theipv6experts.net/the-experts/ > From bret at getjive.com Fri Jan 7 12:40:54 2011 From: bret at getjive.com (Bret Palsson) Date: Fri, 7 Jan 2011 10:40:54 -0700 Subject: [arin-ppml] 125 In-Reply-To: References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> Message-ID: <7917E652-0FAE-480E-84C6-990BF1ED1558@getjive.com> I don't see much help there other than credentials and ways to contact someone... I'm just waiting to hear how much the help costs. http://weblog.chrisgrundemann.com/index.php/2010/day-exploring-ipv6/ http://www.theipv6experts.net/about/ I just find it an author of a book about IPv6, who has in the past posted a link to his personal "free" site on a mailing list like this. With as much push back as there is on PP 125, it seems the only people for it belong to organizations like www.theipv6experts.net. While good intentions likely exist, it feels to me like this is an unnecessary proposal. If it were a good proposal, generally, most people would be for it. That hasn't been the case for about 60 days now. -B On Jan 7, 2011, at 9:36 AM, Martin Hannigan wrote: > On Fri, Jan 7, 2011 at 11:02 AM, Bret Palsson wrote: >> You may not be listed here, but some that are pushing for this policy are. Seems like marketing to me: >> >> http://www.theipv6experts.net/the-experts/ > > A free website with volunteers offering their demonstrated expertise > to help anyone who wants it to become more proficient in IPv6 > networking...for free? > > You need to think about this a bit more before continuing to make > assumptions (and accusations) that anyone is profiting from ARIN > policy. > > Best, > > -M< From hannigan at gmail.com Fri Jan 7 13:04:50 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Fri, 7 Jan 2011 13:04:50 -0500 Subject: [arin-ppml] 125 In-Reply-To: <7917E652-0FAE-480E-84C6-990BF1ED1558@getjive.com> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> <7917E652-0FAE-480E-84C6-990BF1ED1558@getjive.com> Message-ID: On Fri, Jan 7, 2011 at 12:40 PM, Bret Palsson wrote: > I don't see much help there other than credentials and ways to contact someone... I'm just waiting to hear how much the help costs. > > http://weblog.chrisgrundemann.com/index.php/2010/day-exploring-ipv6/ > http://www.theipv6experts.net/about/ > Seems like you're wrong again, Bret: http://www.theipv6experts.net/category/policy/ http://www.theipv6experts.net/2010/smtp-ipv6-zimbra-postfix/ I also know that this effort just got off of the ground. Looks like t's shaping up to be a most excellent resource for the community and others. Best, -M< From matthew at matthew.at Fri Jan 7 13:27:57 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 07 Jan 2011 10:27:57 -0800 Subject: [arin-ppml] 125 In-Reply-To: <7917E652-0FAE-480E-84C6-990BF1ED1558@getjive.com> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> <7917E652-0FAE-480E-84C6-990BF1ED1558@getjive.com> Message-ID: <4D275B2D.8040705@matthew.at> On 1/7/2011 9:40 AM, Bret Palsson wrote: > While good intentions likely exist, it feels to me like this is an unnecessary proposal. If it were a good proposal, generally, most people would be for it. That hasn't been the case for about 60 days now. What is the status of the petition to revive 125, anyway? Matthew Kaufman From owen at delong.com Fri Jan 7 14:56:46 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 7 Jan 2011 11:56:46 -0800 Subject: [arin-ppml] 125 In-Reply-To: <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> Message-ID: I'm listed there and I'm opposed to 124 and 125. I'm not sure you can draw the connections and conclusions you are drawing from that. Owen On Jan 7, 2011, at 8:02 AM, Bret Palsson wrote: > You may not be listed here, but some that are pushing for this policy are. Seems like marketing to me: > > http://www.theipv6experts.net/the-experts/ > > Placing your bio and contact information as an ipv6expert and creating/pushing policy that not many people want seems like the policy is for the better of the policy maker rather than the whole community. > > I agree ipv6 needs to be adopted. I don't think it's ARINs place to force it. It will come naturally as ipv4 runs out. We don't need a policy policing that. > > I think if someone has a justified reason to request ipv4 and it's available, ARIN can decide to grant that allocation. > > We don't need more loop holes to jump through. IPv6 will be adopted with or without this policy. Let's move on with our lives and accept the AC's decision. > > -Bret > > On Jan 7, 2011, at 8:51 AM, Martin Hannigan wrote: > >> On Fri, Jan 7, 2011 at 10:17 AM, Bret Palsson wrote: >>> Martin: >>> >>> As one who is petitioning PP 124, that feed back just shows you are doing this for the money. We don't create policy to make ourselves rich or for job security, or at least we shouldn't. Obviously this is your primary motive. >>> >>> I'm opposed to PP 124. >>> >> >> >> Bret, >> >> Pretty far flung accusation. Can you explain how I'm going to profit >> from 125? For that matter, can you explain how anyone is going to >> profit from 125? >> >> You can get in the hug line. >> >> Best, >> >> -M< > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From info at arin.net Fri Jan 7 16:12:01 2011 From: info at arin.net (ARIN) Date: Fri, 07 Jan 2011 16:12:01 -0500 Subject: [arin-ppml] Advisory Council Meeting Results - December 2010 - petition deadline In-Reply-To: <4D10E080.8080408@arin.net> References: <4D10E080.8080408@arin.net> Message-ID: <4D2781A1.4050408@arin.net> > The abandonment of proposals 122, 124 and 125 may be > petitioned to try to change them into draft policies for discussion on > the Public Policy Mailing List and at the April Public Policy Meeting > (this is the Discussion Petition). The deadline to begin a petition > will be five business days after the AC's draft meeting minutes are > published. The minutes from the ARIN Advisory Council's meeting of 16 December 2010 have been published and are available at: https://www.arin.net/about_us/ac/index.html The deadline to begin a petition for proposals 122 and 124 is 14 January 2011 (there is already a petition underway for proposal 125). Draft Policy and Policy Proposal texts are available at: https://www.arin.net/policy/proposals/index.html Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ARIN wrote: > In accordance with the ARIN Policy Development Process (PDP), the ARIN > Advisory Council (AC) held a meeting on 16 December 2010 and made > decisions about several draft policies and proposals. > > After last call the AC recommended that the ARIN Board of Trustees adopt > the following draft policy: > > ARIN-2010-8 Rework of IPv6 assignment criteria > > The AC moved the following draft policy to last call (it will be posted > separately to last call): > > ARIN-2010-14 Standardize IP Reassignment Registration Requirements > > The AC accepted the following proposals on to the AC's docket for > development and evaluation: > > ARIN-prop-121 Better IPv6 Allocation for ISPs > ARIN-prop-123 Reserved Pool for Critical Infrastructure > > The AC abandoned the following proposals: > > ARIN-prop-122 Reserved Pool for Future Policy Development > ARIN-prop-124 Clarification of Section 4.2.4.4 > ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack > > "The AC did not feel that emergency action was warranted for proposal > 122, and given that the IANA IPv4 pool is expected to exhaust before the > April Public Policy Meeting, did not feel that it would be useful to put > this proposal on the AC's docket. The AC would encourage anyone with > policy proposals for improving NRPM section 4.10 to submit them > immediately, so they can be considered in time for the April meeting." > > "After discussion of proposal 124, the AC did not feel that emergency > action was warranted. Normally there are few requests in queue and any > moment, as a result the expected overall impact of this issue should be > small. Furthermore, it is possible this proposal could increase the > motivation to submit incomplete or fraudulent proposals at the last > moment, it was felt this should not be encouraged. As the trigger event > in NRPM Section 4.2.4.4 is almost assuredly to have occurred before the > April Public Policy Meeting, this proposal would be irrelevant by the > time it could be presented at that meeting. Therefore, the AC voted to > abandon the proposal now." > > And regarding ARIN-prop-125 the AC stated, "The initial interpretation > was that while ARIN's role is to manage and administer Internet number > resources, this proposal strays too far from management towards a > mandate. This proposal may benefit the deployment of IPv6, but it would > do so by forcing companies to deploy IPv6 where it may not be > immediately needed and could have unintended consequences on IPv4 > transfers." > > The PDP states, ?Any member of the community, including a proposal > originator, may initiate a Discussion Petition if they are dissatisfied > with the action taken by the Advisory Council regarding any specific > policy proposal.? The abandonment of proposals 122, 124 and 125 may be > petitioned to try to change them into draft policies for discussion on > the Public Policy Mailing List and at the April Public Policy Meeting > (this is the Discussion Petition). The deadline to begin a petition > will be five business days after the AC's draft meeting minutes are > published. For more information on starting and participating in > petitions, see PDP Petitions at: > https://www.arin.net/policy/pdp_petitions.html > > Draft Policy and Policy Proposal texts are available at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > > > > > > > > From info at arin.net Fri Jan 7 16:13:21 2011 From: info at arin.net (ARIN) Date: Fri, 07 Jan 2011 16:13:21 -0500 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: <4D125FAE.3050307@arin.net> References: <4D125FAE.3050307@arin.net> Message-ID: <4D2781F1.8010602@arin.net> > The duration of the petition is until five business days after the AC's > draft meeting minutes are published. The minutes from the ARIN Advisory Council's meeting of 16 December 2010 have been published and are available at: https://www.arin.net/about_us/ac/index.html The petition of proposal 125 will end on 14 January 2011. Draft Policy and Policy Proposal texts are available at: https://www.arin.net/policy/proposals/index.html Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ARIN wrote: > The message below started a petition regarding the ARIN Advisory > Council's decision to abandon "ARIN-prop-125 Efficient Utilization of > IPv4 Requires Dual-Stack". The AC's decision was posted by ARIN staff to > PPML on 21 December 2010. > > If successful, this petition will change ARIN-prop-125 into a Draft > Policy which will be published for adoption discussion on the PPML and > at the Public Policy Meeting in April. If the petition fails, the > proposal will be closed. > > For this petition to be successful, the petition needs statements of > support from at least 10 different people from 10 different > organizations. If you wish to support this petition, post a statement of > support to PPML on this thread. > > The duration of the petition is until five business days after the AC's > draft meeting minutes are published. ARIN staff will post the result of > the petition to PPML. > > For more information on starting and participating in petitions, see PDP > Petitions at: > https://www.arin.net/policy/pdp_petitions.html > > The proposal text is below and at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ##### > > >> -----Original Message----- >> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >> Behalf Of Chris Grundemann >> Sent: Wednesday, December 22, 2010 3:11 PM >> To: arin-ppml at arin.net >> Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient >> Utilization of IPv4 Requires Dual-Stack >> >> The AC should not have abandoned ARIN-prop-125 Efficient Utilization >> of IPv4 Requires Dual-Stack. I petition to move the following text >> forward for discussion on the list and at the next Public Policy >> Meeting. Please support moving this proposal forward now by posting >> statements in support of the petition to this list. >> >> ### >> >> Policy Statement: >> >> * Add the following sections to section 4.1: >> >> 4.1.2. Efficient Utilization >> >> IPv4 addresses are a finite resource and as such are required to be >> efficiently utilized by resource holders in order to maximize their >> benefit to the community. >> >> 4.1.3. Dual-Stack >> >> Dual-stack refers to configuring both an IPv4 and an IPv6 address or >> network together on the same network infrastructure. >> >> All new IPv4 addresses assigned, allocated or transfered to an >> organization must be deployed on dual-stacked interfaces along with >> IPv6 addresses. >> >> 4.1.4. IPv6 Deployment >> >> When addresses are used to provide an Internet facing service, the >> service must be fully IPv6 accessible (if you deploy an A record, you >> must also have a AAAA record, and both must answer). >> >> * Add the following sentance to the end of sections 4.2.1.6, >> 4.2.2.1.2, 4.2.2.2.1, 4.2.3.1. and 4.3.4: >> >> In accordance with section 4.1.3 and 4.1.4, all new addresses must be >> deployed on dual-stacked interfaces and all Internet facing services >> provided by new addresses must be fully IPv6 accessible. >> >> * Re-write section 4.2.3.4.1. to: >> >> Reassignment information for prior allocations must show that each >> customer meets the 80% utilization criteria, the dual-stack criteria >> and must be available via SWIP / RWhois prior to your issuing them >> additional space. >> >> * Add the following section to section 4.2.4: >> >> 4.2.4.5. IPv6 Deployment >> >> In order to receive additional space ISPs must provide detailed >> documentation demonstrating that: >> - for every IPv4 address requested, at least one pre-existing >> interface is dual stacked, up to 80% of all interfaces and >> - for every down stream customer site where the new addresses will be >> deployed, at least one pre-existing down stream customer site is IPv6 >> enabled, up to 80% of the total customer base. >> >> * Add the following to section 4.3.6: >> >> 4.3.6.3. IPv6 Deployment >> >> In order to receive additional space end-users must provide detailed >> documentation demonstrating that at least 80% of their existing IPv4 >> addresses are deployed on dual-stacked interfaces in accordance with >> section 4.1.3. >> >> Rational: >> >> In this period of available IPv4 address scarcity and transition to >> IPv6, IPv4 addresses that are not deployed along with IPv6 are simply >> not being efficiently utilized. Although we have likely failed to >> deploy dual-stack in a meaningful way in time to avoid transition >> problems, we can still choose the correct path for future assignments, >> allocations and transfers. >> >> This proposal has three objectives: >> -1- Encourage IPv6 deployment prior to and post depletion >> -2- Enable growth of IPv4 to accelerate IPv6 transition #[only change >> was to this line]# >> -3- Improve the utilization of IP addresses >> >> It accomplishes these goals by enforcing three basic ideals: >> -1- ARIN will only make allocations and assignments for networks that >> have already deployed production IPv6 >> -2- Any new IPv4 addresses received, must be deployed along side of >> IPv6 (dual-stacked) >> -3- Firmly encourages deployment of IPv6 in existing IPv4-only networks >> >> The specific requirements to be enforced can be summed up in this way: >> ~ New addresses must be deployed on dual-stacked interfaces plus one >> additional pre-existing IPv4-only interface must be dual-stacked per >> new address, up to 80% of all interfaces. >> ~ For each down stream customer site where these addresses are >> deployed, another pre-existing IPv4 only down stream site must also be >> IPv6 enabled, up to 80% of the total customer base. >> ~ All end-sites must dual-stack before getting new space. >> ~ Internet facing services that new IPv4 addresses are used to provide >> must be fully IPv6 accessible. >> >> ### >> >> Chris Grundemann >> www.theIPv6experts.net >> chris at theIPv6experts.net >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. > > > > > > > From mysidia at gmail.com Fri Jan 7 21:32:18 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Fri, 7 Jan 2011 20:32:18 -0600 Subject: [arin-ppml] IP "Experts" -- off topic comment In-Reply-To: <8695009A81378E48879980039EEDAD288C048C7F@MAIL1.polartel.local> References: <4D125FAE.3050307@arin.net> <35225A17-1C1B-4C73-B78A-EF82B3C5077D@getjive.com> <7D249423-A829-4825-BE8E-CCDFD1E346B2@getjive.com> <8695009A81378E48879980039EEDAD288C048C7F@MAIL1.polartel.local> Message-ID: On Fri, Jan 7, 2011 at 11:41 AM, Kevin Kargel wrote: > I suspect that everyone who is active on this list stands to profit from IPv6 adoption in one form or another. ?If everyone who had a vested business interest abstained from commenting it would be a very quiet list. Anyone who is a member of the internet community / user of the internet stands to profit from IPv6 adoption in one form or another, so, basically, that criteria almost automatically applies to anyone who has an e-mail account, let alone PPML subscription. I rely on the internet to continue to work properly, and to continue to expand, therefore, for that reason alone, I have a vested business interest in IPv6 adoption. > I don't think that any of the "IPv6 experts" are worried about a lack of work opportunities in the next couple of years. ?There is plenty of opportunity in the offing, I don't see a need for anyone to artificially create a demand. I assume you are referring to IPv6 experts for hire. Most of them are also IPv4 experts, and don't need IPv6 to sell their services. "Artificially" encouraging IPv6 adoption is not about selling a product or service, but is instead about attempting to achieve a sustainable internet, before resources run out, and helping to mitigate instability that will result with the sudden impact of IPv4 exhaustion. The more networks that have at least looked into IPv6, the better, in that regard. There are very good reasons for ARIN to promote IPv6 in every reasonable way possible, and nudge people who require to interact with ARIN every way possible towards building an IPv6 network, without actually forcing them to do it. That's not a solution in search of a problem -- the problem is basically the same IPv4 exhaustion problem that has been known for the past 20 years, and the same chicken-and-egg problem that has prevented IPv6 from becoming widespread for the past 15 years. > Kevin Kargel -- -JH From Vaughn at SwiftSystems.com Fri Jan 7 23:25:23 2011 From: Vaughn at SwiftSystems.com (Vaughn Thurman - Swift Systems Inc) Date: Fri, 7 Jan 2011 23:25:23 -0500 Subject: [arin-ppml] 125 In-Reply-To: <4D272C89.6020308@brightok.net> References: <4D125FAE.3050307@arin.net> <4D272C89.6020308@brightok.net> Message-ID: <000501cbaeec$119407e0$34bc17a0$@SwiftSystems.com> > Honestly, the problem is implementation readiness and pricing. Vendors have often pushed the better IPv6 stacks to their newer gear only, pushing the > price of deploying into a proper IPv6 layout higher. In addition, not all problems have been resolved by most/all vendors. > So the policy proposal is to strong arm people into spending money on more expensive crap hardware solutions to deploy something that is far inferior to > what they currently have instead of letting them wait until vendors can work the bugs out and market pricing can come down to a reasonable level. Jack, I think you made my point here much more succinctly, and a bit less controversially than I did. Despite the schoolyard responses, there is a simple point here. It is NOT the business of ARIN to be dictating who spends what where, and prop 125 does that. It's simply out of scope. We don't need to encourage IPv6, it is as inevitable as the morning sun tomorrow! I feel like we are debating a policy designed to get the sun to rise faster and everyone will need to buy stock in "SunComeUpCo" now or else. From frnkblk at iname.com Sat Jan 8 00:37:48 2011 From: frnkblk at iname.com (Frank Bulk) Date: Fri, 7 Jan 2011 23:37:48 -0600 Subject: [arin-ppml] 125 In-Reply-To: <000501cbaeec$119407e0$34bc17a0$@SwiftSystems.com> References: <4D125FAE.3050307@arin.net> <4D272C89.6020308@brightok.net> <000501cbaeec$119407e0$34bc17a0$@SwiftSystems.com> Message-ID: <000f01cbaef6$2f448a80$8dcd9f80$@iname.com> Why are people saying that prop 125 results in "ARIN ... dictating who spends what where", as if that's something special. Pretty well all of ARIN's policy have an effect on an organization's operational behavior. You mean I can't assign a separate IPv4 /24, using only one IP, for one residential customer? That's right -- ARIN's policy requires certain usage levels, which changes what might be my preferred default behavior. So if the charge is that prop 125 forces an organization to do something, sure, that's right, but that's no different than ARIN's other policies. What seems to be bothering some people is that prop 125 will make it more difficult for some people to obtain IPv4 address space which will force looking at alternative solutions (greater efficiency of current space, or move toward IPv6). Well, I can make the argument right now that ARIN's current policies result in changes in my operational behavior. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Vaughn Thurman - Swift Systems Inc Sent: Friday, January 07, 2011 10:25 PM To: 'Jack Bates' Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] 125 > Honestly, the problem is implementation readiness and pricing. Vendors have often pushed the better IPv6 stacks to their newer gear only, pushing the > price of deploying into a proper IPv6 layout higher. In addition, not all problems have been resolved by most/all vendors. > So the policy proposal is to strong arm people into spending money on more expensive crap hardware solutions to deploy something that is far inferior to > what they currently have instead of letting them wait until vendors can work the bugs out and market pricing can come down to a reasonable level. Jack, I think you made my point here much more succinctly, and a bit less controversially than I did. Despite the schoolyard responses, there is a simple point here. It is NOT the business of ARIN to be dictating who spends what where, and prop 125 does that. It's simply out of scope. We don't need to encourage IPv6, it is as inevitable as the morning sun tomorrow! I feel like we are debating a policy designed to get the sun to rise faster and everyone will need to buy stock in "SunComeUpCo" now or else. _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From joelja at bogus.com Sat Jan 8 03:45:25 2011 From: joelja at bogus.com (Joel Jaeggli) Date: Sat, 08 Jan 2011 00:45:25 -0800 Subject: [arin-ppml] 125 In-Reply-To: <000f01cbaef6$2f448a80$8dcd9f80$@iname.com> References: <4D125FAE.3050307@arin.net> <4D272C89.6020308@brightok.net> <000501cbaeec$119407e0$34bc17a0$@SwiftSystems.com> <000f01cbaef6$2f448a80$8dcd9f80$@iname.com> Message-ID: <4D282425.8070204@bogus.com> On 1/7/11 9:37 PM, Frank Bulk wrote: > Why are people saying that prop 125 results in "ARIN ... dictating who > spends what where", as if that's something special. Actually a number of of arin members has simply stated that they do not support prop 125. Rou can rationalize that lack of support however you want. Pretty well all of > ARIN's policy have an effect on an organization's operational behavior. You > mean I can't assign a separate IPv4 /24, using only one IP, for one > residential customer? That's right -- ARIN's policy requires certain usage > levels, which changes what might be my preferred default behavior. > > So if the charge is that prop 125 forces an organization to do something, > sure, that's right, but that's no different than ARIN's other policies. > What seems to be bothering some people is that prop 125 will make it more > difficult for some people to obtain IPv4 address space which will force > looking at alternative solutions (greater efficiency of current space, or > move toward IPv6). Well, I can make the argument right now that ARIN's > current policies result in changes in my operational behavior. > > Frank > > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Vaughn Thurman - Swift Systems Inc > Sent: Friday, January 07, 2011 10:25 PM > To: 'Jack Bates' > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] 125 > > >> Honestly, the problem is implementation readiness and pricing. Vendors > have often pushed the better IPv6 stacks to their newer gear only, pushing > the >> price of deploying into a proper IPv6 layout higher. In addition, not all > problems have been resolved by most/all vendors. > >> So the policy proposal is to strong arm people into spending money on more > expensive crap hardware solutions to deploy something that is far inferior > to >> what they currently have instead of letting them wait until vendors can > work the bugs out and market pricing can come down to a reasonable level. > > > Jack, I think you made my point here much more succinctly, and a bit less > controversially than I did. > > Despite the schoolyard responses, there is a simple point here. It is NOT > the business of ARIN to be dictating who spends what where, and prop 125 > does that. It's simply out of scope. We don't need to encourage IPv6, it > is as inevitable as the morning sun tomorrow! > > I feel like we are debating a policy designed to get the sun to rise faster > and everyone will need to buy stock in "SunComeUpCo" now or else. > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From scottleibrand at gmail.com Sun Jan 9 19:38:15 2011 From: scottleibrand at gmail.com (Scott Leibrand) Date: Sun, 9 Jan 2011 16:38:15 -0800 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations Message-ID: Given the contentious discussions around proposal 125, I'm getting the sense that even if its petition succeeds, it'll be too controversial to gain consensus. So I thought it might be worth posting an alternative I drafted, and see what kind of reaction it gets. I don't intend to introduce this into the policy process myself (as I'm not convinced it's necessary), but if anyone (particularly supporters of 125) feel that it would be a step in the right direction, feel free to do so. I'd also be interested to hear if anyone would be opposed to this language, and if so, what aspects you object to. And, as always, suggestions for improvement would be most welcome as well. -Scott (speaking only for myself) 4.1.8 IPv6 transition All organizations requiring IPv4 addresses for Internet connectivity or services must demonstrate a plan for interoperating with IPv6-only portions of the Internet. Components of such plans might include, but are not limited to: receiving IPv6 address space and using it for dual-stack or parallel IPv6 deployment; or making use of translation technologies to allow communication between IPv4 and IPv6 hosts. 4.2.1.7 IPv6 connectivity ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for connecting their customers with IPv6-only portions of the Internet, as detailed in section 4.1.8. 4.3.7 IPv6 transition End-users requiring IPv4 addresses from ARIN must demonstrate a plan for interoperating with IPv6-only portions of the Internet, as detailed in section 4.1.8. From owen at delong.com Mon Jan 10 01:20:10 2011 From: owen at delong.com (Owen DeLong) Date: Sun, 9 Jan 2011 22:20:10 -0800 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: Message-ID: I would not support this. While I'm one of the biggest supporters of IPv6 and have obviously put quite a bit of effort into raising IPv6 awareness and education, I don't think it's appropriate to go to this length. As much as I think ARIN has a good role as an advocate to raise community awareness of IPv6, I think that making protocol selection a policy issue is, at best, a no-op (as this policy would likely be) and at worst unnecessarily and inappropriately meddlesome (as 125). Owen On Jan 9, 2011, at 4:38 PM, Scott Leibrand wrote: > Given the contentious discussions around proposal 125, I'm getting the > sense that even if its petition succeeds, it'll be too controversial > to gain consensus. So I thought it might be worth posting an > alternative I drafted, and see what kind of reaction it gets. I don't > intend to introduce this into the policy process myself (as I'm not > convinced it's necessary), but if anyone (particularly supporters of > 125) feel that it would be a step in the right direction, feel free to > do so. > > I'd also be interested to hear if anyone would be opposed to this > language, and if so, what aspects you object to. And, as always, > suggestions for improvement would be most welcome as well. > > -Scott (speaking only for myself) > > 4.1.8 IPv6 transition > > All organizations requiring IPv4 addresses for Internet connectivity > or services must demonstrate a plan for interoperating with IPv6-only > portions of the Internet. Components of such plans might include, but > are not limited to: receiving IPv6 address space and using it for > dual-stack or parallel IPv6 deployment; or making use of translation > technologies to allow communication between IPv4 and IPv6 hosts. > > 4.2.1.7 IPv6 connectivity > > ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for > connecting their customers with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > > 4.3.7 IPv6 transition > > End-users requiring IPv4 addresses from ARIN must demonstrate a plan > for interoperating with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From kkargel at polartel.com Mon Jan 10 11:01:44 2011 From: kkargel at polartel.com (Kevin Kargel) Date: Mon, 10 Jan 2011 10:01:44 -0600 Subject: [arin-ppml] 125 In-Reply-To: <000f01cbaef6$2f448a80$8dcd9f80$@iname.com> References: <4D125FAE.3050307@arin.net> <4D272C89.6020308@brightok.net> <000501cbaeec$119407e0$34bc17a0$@SwiftSystems.com> <000f01cbaef6$2f448a80$8dcd9f80$@iname.com> Message-ID: <8695009A81378E48879980039EEDAD288C048C86@MAIL1.polartel.local> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Frank Bulk > Sent: Friday, January 07, 2011 11:38 PM > To: 'Vaughn Thurman - Swift Systems Inc'; 'Jack Bates' > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] 125 > > Why are people saying that prop 125 results in "ARIN ... dictating who > spends what where", as if that's something special. Pretty well all of > ARIN's policy have an effect on an organization's operational behavior. > You > mean I can't assign a separate IPv4 /24, using only one IP, for one > residential customer? That's right -- ARIN's policy requires certain > usage > levels, which changes what might be my preferred default behavior. Umm, I have a couple of places where I assign a customer a /32 as a means of giving them a static IP address where their equipment didn't support other means. All I need to do is aggregate the BGP advertisement and all is copacetic. The controlling factor that is not ARIN policy, it is BGP standards policy. ARIN makes no rules about what I can allocate where and I believe that is as it should be. To my knowledge ARIN would have no problem at all if I wanted to SWIP an IPv4 /30 or even a /32 to another customer. Don't confuse ARIN policy with standards of operation. > > So if the charge is that prop 125 forces an organization to do something, > sure, that's right, but that's no different than ARIN's other policies. > What seems to be bothering some people is that prop 125 will make it more > difficult for some people to obtain IPv4 address space which will force > looking at alternative solutions (greater efficiency of current space, or > move toward IPv6). Well, I can make the argument right now that ARIN's > current policies result in changes in my operational behavior. Again, I suspect you are blaming ARIN policy for controls that are actually found in RFC documents. There is (to my current understanding) nothing in ARIN policies to prevent a customer from getting an ASN, and advertising a single IP address and nothing else from that ASN. There is nothing to assure that the advertisement will be accepted by any BGP peer, in fact it will almost certainly be discarded by any other than a directly connected peer with special arrangements, but that is not because of ARIN policy. Please feel free to educate me, I always appreciate being educated. Kevin From kevin at steadfast.net Mon Jan 10 16:51:22 2011 From: kevin at steadfast.net (Kevin Stange) Date: Mon, 10 Jan 2011 15:51:22 -0600 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack In-Reply-To: References: <4D125FAE.3050307@arin.net> <20101229173036.GA34707@ussenterprise.ufp.org> Message-ID: <4D2B7F5A.9050706@steadfast.net> On 12/29/2010 12:04 PM, Chris Grundemann wrote: > I generally agree with you, with a couple exceptions - noted in-line below. > > On Wed, Dec 29, 2010 at 10:30, Leo Bicknell wrote: >> >> Your message articulates a fork in the road. >> >> The first path is the path that was argued back with the transfer >> policy. Some folks won't deploy IPv6 for various reasons, for >> instance their vendor is 6 months from giving them support on their >> platform, or their capital budget doesn't let them upgrade the >> hardware until the next fiscal year. The idea was to give these >> folks who had real impediments to IPv6 access to IPv4 so they were >> not dead in the water. >> >> The second path is the path you are arguing with PP125. Faced with >> decreasing IPv4 stocks we should choose to give them to the folks >> who are already fully IPv6 enabled and embracing the future, rewarding >> them for their early adoption and forward thinking. Those who can't >> do IPv4 should be left behind at this point, they missed the bus >> and it's no longer worth throwing good resources at people who just >> aren't going to make it. > > prop-125 does not require an org to be fully IPv6 enabled. It allows > an org to get an equivalent amount of IPv4 to the IPv6 that they have > deployed. This means that any org that deploys IPv6 in even part of > their network has access to new IPv4. Perhaps an org can dual-stack > their backbone but not their DSLAMs, or their servers, (or only some > servers/head-ends/etc.) that org can still get some IPv4 under this > policy. I don't like the amount of paperwork this implies I or ARIN would have to do to establish my need for IPv4 space. The proposal seems to say (though the terms "enabled," "deployed," and "dual-stack" are thrown around chaotically in the proposal) that we need to ensure that we can account for a number equivalent to 80% of the IPv4 addresses we want in a new allocation in customers that are actually implementing services on IPv6. This is something that would take a lot of probing our network to verify. What responsibility and tools would ARIN be given or expected to develop in order to permit them to verify the justification provided by the org actually meets the requirements? Our customers have been informed that IPv6 is something they need to prepare for. A large portion of our network is dedicated server customers that largely self-manage their servers. We cannot force these customers to "enable" IPv6 on servers even though they have been given the option to do so at any time. It makes no sense to hold my org or similar orgs responsible for whether our current customers are themselves ready for IPv6 before we can be allowed to make sure new customers are dual stacked and ready for IPv6. We as an organization can't support prop 125 with this kind of expectation being placed on us. -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature URL: From kevin at steadfast.net Mon Jan 10 17:05:07 2011 From: kevin at steadfast.net (Kevin Stange) Date: Mon, 10 Jan 2011 16:05:07 -0600 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: Message-ID: <4D2B8293.8020603@steadfast.net> While I like that this proposal has much less overhead than 125, I don't think this will actually help anything. If there's no requirement for an active implementation, then unless this policy demands very detailed plans (which lead back toward the problems I have with 125), then a very generic "we're currently offering IPv6 to all customers that request it" might do, and that makes it a no-op as Owen said. On 01/09/2011 06:38 PM, Scott Leibrand wrote: > Given the contentious discussions around proposal 125, I'm getting the > sense that even if its petition succeeds, it'll be too controversial > to gain consensus. So I thought it might be worth posting an > alternative I drafted, and see what kind of reaction it gets. I don't > intend to introduce this into the policy process myself (as I'm not > convinced it's necessary), but if anyone (particularly supporters of > 125) feel that it would be a step in the right direction, feel free to > do so. > > I'd also be interested to hear if anyone would be opposed to this > language, and if so, what aspects you object to. And, as always, > suggestions for improvement would be most welcome as well. > > -Scott (speaking only for myself) > > 4.1.8 IPv6 transition > > All organizations requiring IPv4 addresses for Internet connectivity > or services must demonstrate a plan for interoperating with IPv6-only > portions of the Internet. Components of such plans might include, but > are not limited to: receiving IPv6 address space and using it for > dual-stack or parallel IPv6 deployment; or making use of translation > technologies to allow communication between IPv4 and IPv6 hosts. > > 4.2.1.7 IPv6 connectivity > > ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for > connecting their customers with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > > 4.3.7 IPv6 transition > > End-users requiring IPv4 addresses from ARIN must demonstrate a plan > for interoperating with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature URL: From hannigan at gmail.com Mon Jan 10 17:50:38 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 10 Jan 2011 17:50:38 -0500 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: Message-ID: Scott, The Suggestion: The reason why I am supporting "some" iteration of 125 is that one of it's benefits is that it requires a measure of cost sharing across the board which is likely to end up being much more burdensome to all without something along the lines of 125. Much of the discussion about 125 has been related to cost and demonstrates some of the inequities in our policies. 125 seems to be somewhat of a right sizing albeit theoretically could be a degree or two too far to the right. Your modification doesn't seem to do anything significant other than instill a false sense of security in applicants that are likely to do nothing without some requirements. Aside from completely throwing out the intent of 125 as you did with your modification, how would you contribute to make 125 more palatable and continue to allow it to have some level of bite, a real result for all of the effort that we're going to have to go through with respect to IPv6 transition? Staff, The Petition: I was about to remark that everyone should be reminded that you do not have to post publicly to support a petition due to the level of causticity of the subject, but I'm unclear if that's the case. I had responded privately to a petition previously and I believe it was counted, but don't recall being told otherwise. I checked the PDP and it seems vague with respect to any requirement to post to PPML. The interpretation that a response to ARIN directly should suffice would be reasonable IMHO. https://www.arin.net/policy/pdp.html Could someone on the staff clarify that please? Best, -M< On Sun, Jan 9, 2011 at 7:38 PM, Scott Leibrand wrote: > Given the contentious discussions around proposal 125, I'm getting the > sense that even if its petition succeeds, it'll be too controversial > to gain consensus. ?So I thought it might be worth posting an > alternative I drafted, and see what kind of reaction it gets. ?I don't > intend to introduce this into the policy process myself (as I'm not > convinced it's necessary), but if anyone (particularly supporters of > 125) feel that it would be a step in the right direction, feel free to > do so. > > I'd also be interested to hear if anyone would be opposed to this > language, and if so, what aspects you object to. ?And, as always, > suggestions for improvement would be most welcome as well. > > -Scott (speaking only for myself) > > 4.1.8 ?IPv6 transition > > All organizations requiring IPv4 addresses for Internet connectivity > or services must demonstrate a plan for interoperating with IPv6-only > portions of the Internet. ?Components of such plans might include, but > are not limited to: receiving IPv6 address space and using it for > dual-stack or parallel IPv6 deployment; or making use of translation > technologies to allow communication between IPv4 and IPv6 hosts. > > 4.2.1.7 ?IPv6 connectivity > > ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for > connecting their customers with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > > 4.3.7 ?IPv6 transition > > End-users requiring IPv4 addresses from ARIN must demonstrate a plan > for interoperating with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From jbates at brightok.net Mon Jan 10 18:00:48 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 10 Jan 2011 17:00:48 -0600 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: Message-ID: <4D2B8FA0.5020600@brightok.net> On 1/10/2011 4:50 PM, Martin Hannigan wrote: > Aside from completely throwing out the intent of 125 as you did with > your modification, how would you contribute to make 125 more palatable > and continue to allow it to have some level of bite, a real result for > all of the effort that we're going to have to go through with respect > to IPv6 transition? I believe the intent should be thrown out. While the officer attestation isn't in the policy (wish such things would retrofit into policy), I think it should be modified to include attesting that the officer is aware of IPv4 scarcity and the org has researched IPv6. Implementation status is not my concern, and shouldn't be ARIN's. Insuring that people are educated concerning IPv4 runout and IPv6 availability is within ARIN's scope. If they *choose* not to deploy IPv6, that will be their problem. Jack From hannigan at gmail.com Mon Jan 10 18:14:45 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 10 Jan 2011 18:14:45 -0500 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: <4D2B8FA0.5020600@brightok.net> References: <4D2B8FA0.5020600@brightok.net> Message-ID: On Mon, Jan 10, 2011 at 6:00 PM, Jack Bates wrote: > > > On 1/10/2011 4:50 PM, Martin Hannigan wrote: >> >> Aside from completely throwing out the intent of 125 as you did with >> your modification, how would you contribute to make 125 more palatable >> and continue to allow it to have some level of bite, a real result for >> all of the effort that we're going to have to go through with respect >> to IPv6 transition? > > I believe the intent should be thrown out. While the officer attestation > isn't in the policy (wish such things would retrofit into policy), I think > it should be modified to include attesting that the officer is aware of IPv4 > scarcity and the org has researched IPv6. Implementation status is not my > concern, and shouldn't be ARIN's. Insuring that people are educated > concerning IPv4 runout and IPv6 availability is within ARIN's scope. If they > *choose* not to deploy IPv6, that will be their problem. Which of these following principles from the revised rational are obectionable? >To encourage IPv6 deployment prior to and post depletion, >to enable growth of IPv4 to accelerate IPv6 transition and >to improve the utilization of IP addresses. The second bullet point is quite good, IMHO. There has already been a suggestion(s) to address the dual stack requirement and the update that Chris provided demonstrated that. All that the petition does is allow this to continue to be discussed and would likely include more of the feedback that was presented here and still be required to be presented at an ARIN meeting where consensus would be gauged. All in all, I guess I'm puzzled as to why you wouldn't be able to make a suggestion on improving this to the point where we move it a bit or two closer to the center. -M< From jbates at brightok.net Mon Jan 10 18:34:59 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 10 Jan 2011 17:34:59 -0600 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: <4D2B8FA0.5020600@brightok.net> Message-ID: <4D2B97A3.6080701@brightok.net> On 1/10/2011 5:14 PM, Martin Hannigan wrote: > >> to enable growth of IPv4 to accelerate IPv6 transition and It doesn't enable it, it enforces it. > > There has already been a suggestion(s) to address the dual stack > requirement and the update that Chris provided demonstrated that. All > that the petition does is allow this to continue to be discussed and > would likely include more of the feedback that was presented here and > still be required to be presented at an ARIN meeting where consensus > would be gauged. > That's nice. I won't be at the meeting, so my consensus will have to be taken here, which is why I oppose and why I have placed my objections. > All in all, I guess I'm puzzled as to why you wouldn't be able to make > a suggestion on improving this to the point where we move it a bit or > two closer to the center. Because I disagree with ARIN enforcing protocol decisions and routing. I don't believe anyone should be forced into IPv6. I do not believe that deploying IPv6 has made an organizations network more deserving or in more need of IPv4 than a network which has not deployed IPv6. A network which has specific needs which haven't been met in IPv6 yet could technically be considered to need IPv4 more than a network who doesn't have those needs and easily deployed IPv6. Jack From hannigan at gmail.com Mon Jan 10 18:45:10 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 10 Jan 2011 18:45:10 -0500 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: <4D2B97A3.6080701@brightok.net> References: <4D2B8FA0.5020600@brightok.net> <4D2B97A3.6080701@brightok.net> Message-ID: On Mon, Jan 10, 2011 at 6:34 PM, Jack Bates wrote: > On 1/10/2011 5:14 PM, Martin Hannigan wrote: >> >>> to enable growth of IPv4 to accelerate IPv6 transition and > > It doesn't enable it, it enforces it. > >> >> There has already been a suggestion(s) to address the dual stack >> requirement and the update that Chris provided demonstrated that. All >> that the petition does is allow this to continue to be discussed and >> would likely include more of the feedback that was presented here and >> still be required to be presented at an ARIN meeting where consensus >> would be gauged. >> > > That's nice. I won't be at the meeting, so my consensus will have to be > taken here, which is why I oppose and why I have placed my objections. > >> All in all, I guess I'm puzzled as to why you wouldn't be able to make >> a suggestion on improving this to the point where we move it a bit or >> two closer to the center. > > Because I disagree with ARIN enforcing protocol decisions and routing. I > don't believe anyone should be forced into IPv6. I do not believe that > deploying IPv6 has made an organizations network more deserving or in more > need of IPv4 than a network which has not deployed IPv6. A network which has > specific needs which haven't been met in IPv6 yet could technically be > considered to need IPv4 more than a network who doesn't have those needs and > easily deployed IPv6. > Jack, Not one of those bullet points with respect to intent said anything about enforcement or requirements. I asked you to suggest an improvement and you're still rehashing version 1. Best, -M< From jbates at brightok.net Mon Jan 10 18:48:54 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 10 Jan 2011 17:48:54 -0600 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: <4D2B8FA0.5020600@brightok.net> <4D2B97A3.6080701@brightok.net> Message-ID: <4D2B9AE6.8080508@brightok.net> On 1/10/2011 5:45 PM, Martin Hannigan wrote: > Not one of those bullet points with respect to intent said anything > about enforcement or requirements. I asked you to suggest an > improvement and you're still rehashing version 1. > Show me a different proposal which doesn't have deployment requirements, and I'll look at it. Jack From scottleibrand at gmail.com Mon Jan 10 18:52:32 2011 From: scottleibrand at gmail.com (Scott Leibrand) Date: Mon, 10 Jan 2011 15:52:32 -0800 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: Message-ID: On Mon, Jan 10, 2011 at 2:50 PM, Martin Hannigan wrote: > Scott, > > The Suggestion: > > The reason why I am supporting "some" iteration of 125 is that one of > it's benefits is that it requires a measure of cost sharing across the > board which is likely to end up being much more burdensome to all > without something along the lines of 125. Much of the discussion about > 125 has been related to cost and demonstrates some of the inequities > in our policies. 125 seems to be somewhat of a right sizing albeit > theoretically could be a degree or two too far to the right. Understood. > Your modification doesn't seem to do anything significant other than > instill a false sense of security in applicants that are likely to do > nothing without some requirements. I would agree that my alternate language doesn't impose implementation requirements: I think that's actually the main benefit over 125, but we obviously disagree there, so I won't rehash the arguments. > Aside from completely throwing out the intent of 125 as you did with > your modification, how would you contribute to make 125 more palatable > and continue to allow it to have some level of bite, a real result for > all of the effort that we're going to have to go through with respect > to IPv6 transition? > I believe my suggestions (mainly re: removing the transfer restrictions) have already been incorporated into Chris's latest draft. I no longer have a strong objection to 125 (as I did to the first versions), but I am still unconvinced that forcing anyone to implement IPv6 before they're ready is in the best interests of the community. -Scott > > > Staff, > > The Petition: > > I was about to remark that everyone should be reminded that you do not > have to post publicly to support a petition due to the level of > causticity of the subject, but I'm unclear if that's the case. I had > responded privately to a petition previously and I believe it was > counted, but don't recall being told otherwise. I checked the PDP and > it seems vague with respect to any requirement to post to PPML. The > interpretation that a response to ARIN directly should suffice would > be reasonable IMHO. > > https://www.arin.net/policy/pdp.html > > Could someone on the staff clarify that please? > > > Best, > > -M< > > > On Sun, Jan 9, 2011 at 7:38 PM, Scott Leibrand > wrote: > > Given the contentious discussions around proposal 125, I'm getting the > > sense that even if its petition succeeds, it'll be too controversial > > to gain consensus. So I thought it might be worth posting an > > alternative I drafted, and see what kind of reaction it gets. I don't > > intend to introduce this into the policy process myself (as I'm not > > convinced it's necessary), but if anyone (particularly supporters of > > 125) feel that it would be a step in the right direction, feel free to > > do so. > > > > I'd also be interested to hear if anyone would be opposed to this > > language, and if so, what aspects you object to. And, as always, > > suggestions for improvement would be most welcome as well. > > > > -Scott (speaking only for myself) > > > > 4.1.8 IPv6 transition > > > > All organizations requiring IPv4 addresses for Internet connectivity > > or services must demonstrate a plan for interoperating with IPv6-only > > portions of the Internet. Components of such plans might include, but > > are not limited to: receiving IPv6 address space and using it for > > dual-stack or parallel IPv6 deployment; or making use of translation > > technologies to allow communication between IPv4 and IPv6 hosts. > > > > 4.2.1.7 IPv6 connectivity > > > > ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for > > connecting their customers with IPv6-only portions of the Internet, as > > detailed in section 4.1.8. > > > > 4.3.7 IPv6 transition > > > > End-users requiring IPv4 addresses from ARIN must demonstrate a plan > > for interoperating with IPv6-only portions of the Internet, as > > detailed in section 4.1.8. > > _______________________________________________ > > PPML > > You are receiving this message because you are subscribed to > > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > > Unsubscribe or manage your mailing list subscription at: > > http://lists.arin.net/mailman/listinfo/arin-ppml > > Please contact info at arin.net if you experience any issues. > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jwb at liveair.net Mon Jan 10 19:07:44 2011 From: jwb at liveair.net (Breeden, James W.) Date: Mon, 10 Jan 2011 18:07:44 -0600 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: , Message-ID: <32CA967D914F9A4B8563B334392B4D7F23BDCA4D45@bspmail01> Hello all, I am not 100% up on all of the discussion that has brewed over this proposal (I'm new to the list ), but I do want to throw my opinion out there for what it's worth after reading this most recent reply. "... but I am still unconvinced that forcing anyone to implement IPv6 before they're ready is in the best interests of the community." We're not completely ready for IPv6 yet either, like most of the country. However, the community, and more importantly, our global community, is actually forcing IPv6 migration by itself. My company is implementing dual stack IPv6 currently and will have IPv6 transit available within 3 months; and I would hope most of us are making some Ipv6 steps to help ease the pain caused by the pending V4 exhaustion. Thus, while ARIN's responsibility may be simply resource allocation in the most conservative of the approach, it is our opinion at LiveAir that networks should have some degree of IPv6 plan or readiness when getting additional IPv4 address space, or a reasonable reason for not having used IPv6 (and "We're not ready yet" doesn't count.) It's coming sooner than anyone wants it to - the community had better be ready. In essence, that makes V4 space the "reward" for making steps towards using the nextgen protocol. Just our two cents. jwb -------------- James W. Breeden | CEO | LiveAir Networks | it's the way we think 1231 FM 153 Unit A | Smithville, TX 78957 email/sip: jwb at liveair.net | o: 512.360.4273 | tf: 877.360.4273 | c: 512.304.0745 | f: 866.396.8990 | www.liveair.net social net: me - twitter.com/meltedfire | facebook.com/meltedfire | linkedin.com/in/meltedfire social net: liveair - twitter.com/liveair | facebook.com/liveair internet and data services . business support platform . web 2.0 development . multimedia production ________________________________________ From: arin-ppml-bounces at arin.net [arin-ppml-bounces at arin.net] On Behalf Of Scott Leibrand [scottleibrand at gmail.com] Sent: Monday, January 10, 2011 5:52 PM To: Martin Hannigan Cc: ARIN-PPML List Subject: Re: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations On Mon, Jan 10, 2011 at 2:50 PM, Martin Hannigan > wrote: Scott, The Suggestion: The reason why I am supporting "some" iteration of 125 is that one of it's benefits is that it requires a measure of cost sharing across the board which is likely to end up being much more burdensome to all without something along the lines of 125. Much of the discussion about 125 has been related to cost and demonstrates some of the inequities in our policies. 125 seems to be somewhat of a right sizing albeit theoretically could be a degree or two too far to the right. Understood. Your modification doesn't seem to do anything significant other than instill a false sense of security in applicants that are likely to do nothing without some requirements. I would agree that my alternate language doesn't impose implementation requirements: I think that's actually the main benefit over 125, but we obviously disagree there, so I won't rehash the arguments. Aside from completely throwing out the intent of 125 as you did with your modification, how would you contribute to make 125 more palatable and continue to allow it to have some level of bite, a real result for all of the effort that we're going to have to go through with respect to IPv6 transition? I believe my suggestions (mainly re: removing the transfer restrictions) have already been incorporated into Chris's latest draft. I no longer have a strong objection to 125 (as I did to the first versions), but I am still unconvinced that forcing anyone to implement IPv6 before they're ready is in the best interests of the community. -Scott Staff, The Petition: I was about to remark that everyone should be reminded that you do not have to post publicly to support a petition due to the level of causticity of the subject, but I'm unclear if that's the case. I had responded privately to a petition previously and I believe it was counted, but don't recall being told otherwise. I checked the PDP and it seems vague with respect to any requirement to post to PPML. The interpretation that a response to ARIN directly should suffice would be reasonable IMHO. https://www.arin.net/policy/pdp.html Could someone on the staff clarify that please? Best, -M< On Sun, Jan 9, 2011 at 7:38 PM, Scott Leibrand > wrote: > Given the contentious discussions around proposal 125, I'm getting the > sense that even if its petition succeeds, it'll be too controversial > to gain consensus. So I thought it might be worth posting an > alternative I drafted, and see what kind of reaction it gets. I don't > intend to introduce this into the policy process myself (as I'm not > convinced it's necessary), but if anyone (particularly supporters of > 125) feel that it would be a step in the right direction, feel free to > do so. > > I'd also be interested to hear if anyone would be opposed to this > language, and if so, what aspects you object to. And, as always, > suggestions for improvement would be most welcome as well. > > -Scott (speaking only for myself) > > 4.1.8 IPv6 transition > > All organizations requiring IPv4 addresses for Internet connectivity > or services must demonstrate a plan for interoperating with IPv6-only > portions of the Internet. Components of such plans might include, but > are not limited to: receiving IPv6 address space and using it for > dual-stack or parallel IPv6 deployment; or making use of translation > technologies to allow communication between IPv4 and IPv6 hosts. > > 4.2.1.7 IPv6 connectivity > > ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for > connecting their customers with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > > 4.3.7 IPv6 transition > > End-users requiring IPv4 addresses from ARIN must demonstrate a plan > for interoperating with IPv6-only portions of the Internet, as > detailed in section 4.1.8. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > Proprietary Information Notice: This message may contain proprietary information that is the property of LiveAir Networks or its clients. Such information may not be shared with outside entities without the prior written consent of LiveAir Networks. If you have received this message in error please destroy it immediately. From owen at delong.com Mon Jan 10 19:21:08 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 10 Jan 2011 16:21:08 -0800 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: Message-ID: <3B5D6297-AD3F-4583-A0F3-369289509E56@delong.com> You have to publicly post your support for the petition. You can send your contact details privately in parallel to your public statement of support, but, you have to provide both your statement of support (which must be public) and your contact details (which can be private) in order for support of a petition to be counted. (At least that is my understanding of the process). Owen On Jan 10, 2011, at 2:50 PM, Martin Hannigan wrote: > Scott, > > The Suggestion: > > The reason why I am supporting "some" iteration of 125 is that one of > it's benefits is that it requires a measure of cost sharing across the > board which is likely to end up being much more burdensome to all > without something along the lines of 125. Much of the discussion about > 125 has been related to cost and demonstrates some of the inequities > in our policies. 125 seems to be somewhat of a right sizing albeit > theoretically could be a degree or two too far to the right. Your > modification doesn't seem to do anything significant other than > instill a false sense of security in applicants that are likely to do > nothing without some requirements. > > Aside from completely throwing out the intent of 125 as you did with > your modification, how would you contribute to make 125 more palatable > and continue to allow it to have some level of bite, a real result for > all of the effort that we're going to have to go through with respect > to IPv6 transition? > > > Staff, > > The Petition: > > I was about to remark that everyone should be reminded that you do not > have to post publicly to support a petition due to the level of > causticity of the subject, but I'm unclear if that's the case. I had > responded privately to a petition previously and I believe it was > counted, but don't recall being told otherwise. I checked the PDP and > it seems vague with respect to any requirement to post to PPML. The > interpretation that a response to ARIN directly should suffice would > be reasonable IMHO. > > https://www.arin.net/policy/pdp.html > > Could someone on the staff clarify that please? > > > Best, > > -M< > > > On Sun, Jan 9, 2011 at 7:38 PM, Scott Leibrand wrote: >> Given the contentious discussions around proposal 125, I'm getting the >> sense that even if its petition succeeds, it'll be too controversial >> to gain consensus. So I thought it might be worth posting an >> alternative I drafted, and see what kind of reaction it gets. I don't >> intend to introduce this into the policy process myself (as I'm not >> convinced it's necessary), but if anyone (particularly supporters of >> 125) feel that it would be a step in the right direction, feel free to >> do so. >> >> I'd also be interested to hear if anyone would be opposed to this >> language, and if so, what aspects you object to. And, as always, >> suggestions for improvement would be most welcome as well. >> >> -Scott (speaking only for myself) >> >> 4.1.8 IPv6 transition >> >> All organizations requiring IPv4 addresses for Internet connectivity >> or services must demonstrate a plan for interoperating with IPv6-only >> portions of the Internet. Components of such plans might include, but >> are not limited to: receiving IPv6 address space and using it for >> dual-stack or parallel IPv6 deployment; or making use of translation >> technologies to allow communication between IPv4 and IPv6 hosts. >> >> 4.2.1.7 IPv6 connectivity >> >> ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for >> connecting their customers with IPv6-only portions of the Internet, as >> detailed in section 4.1.8. >> >> 4.3.7 IPv6 transition >> >> End-users requiring IPv4 addresses from ARIN must demonstrate a plan >> for interoperating with IPv6-only portions of the Internet, as >> detailed in section 4.1.8. >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. >> > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Mon Jan 10 19:30:14 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 10 Jan 2011 16:30:14 -0800 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: <4D2B8FA0.5020600@brightok.net> Message-ID: <5ADA8F27-E0E2-4526-88D0-F226ED9D6E51@delong.com> > > Which of these following principles from the revised rational are obectionable? > >> To encourage IPv6 deployment prior to and post depletion, > >> to enable growth of IPv4 to accelerate IPv6 transition and > >> to improve the utilization of IP addresses. They're all laudable goals, just like: To promote world peace To end world hunger They are also equally applicable to ARIN policy, IMHO, with the exception fot the third one which isn't really all that applicable to what 125 actually would do. There is a difference between goals which belong in outreach and education and goals which should be address policy. ARIN has tackled each of these goals through outreach and education and that is a good thing. Trying to turn the first two goals into policy, OTOH, goes too far and gets into the issue of ARIN literally trying to define business and operational considerations for resource recipients at a new level of micromanagement. Owen From hannigan at gmail.com Mon Jan 10 19:56:32 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Mon, 10 Jan 2011 19:56:32 -0500 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: <3B5D6297-AD3F-4583-A0F3-369289509E56@delong.com> References: <3B5D6297-AD3F-4583-A0F3-369289509E56@delong.com> Message-ID: That's not what the PDP says and that's not my experience. And if it is a requirement we should revisit that. Best, -M< On 1/10/11, Owen DeLong wrote: > You have to publicly post your support for the petition. > > You can send your contact details privately in parallel to your public > statement of support, but, you have to provide both your statement > of support (which must be public) and your contact details (which > can be private) in order for support of a petition to be counted. > > (At least that is my understanding of the process). > > Owen > > On Jan 10, 2011, at 2:50 PM, Martin Hannigan wrote: > >> Scott, >> >> The Suggestion: >> >> The reason why I am supporting "some" iteration of 125 is that one of >> it's benefits is that it requires a measure of cost sharing across the >> board which is likely to end up being much more burdensome to all >> without something along the lines of 125. Much of the discussion about >> 125 has been related to cost and demonstrates some of the inequities >> in our policies. 125 seems to be somewhat of a right sizing albeit >> theoretically could be a degree or two too far to the right. Your >> modification doesn't seem to do anything significant other than >> instill a false sense of security in applicants that are likely to do >> nothing without some requirements. >> >> Aside from completely throwing out the intent of 125 as you did with >> your modification, how would you contribute to make 125 more palatable >> and continue to allow it to have some level of bite, a real result for >> all of the effort that we're going to have to go through with respect >> to IPv6 transition? >> >> >> Staff, >> >> The Petition: >> >> I was about to remark that everyone should be reminded that you do not >> have to post publicly to support a petition due to the level of >> causticity of the subject, but I'm unclear if that's the case. I had >> responded privately to a petition previously and I believe it was >> counted, but don't recall being told otherwise. I checked the PDP and >> it seems vague with respect to any requirement to post to PPML. The >> interpretation that a response to ARIN directly should suffice would >> be reasonable IMHO. >> >> https://www.arin.net/policy/pdp.html >> >> Could someone on the staff clarify that please? >> >> >> Best, >> >> -M< >> >> >> On Sun, Jan 9, 2011 at 7:38 PM, Scott Leibrand >> wrote: >>> Given the contentious discussions around proposal 125, I'm getting the >>> sense that even if its petition succeeds, it'll be too controversial >>> to gain consensus. So I thought it might be worth posting an >>> alternative I drafted, and see what kind of reaction it gets. I don't >>> intend to introduce this into the policy process myself (as I'm not >>> convinced it's necessary), but if anyone (particularly supporters of >>> 125) feel that it would be a step in the right direction, feel free to >>> do so. >>> >>> I'd also be interested to hear if anyone would be opposed to this >>> language, and if so, what aspects you object to. And, as always, >>> suggestions for improvement would be most welcome as well. >>> >>> -Scott (speaking only for myself) >>> >>> 4.1.8 IPv6 transition >>> >>> All organizations requiring IPv4 addresses for Internet connectivity >>> or services must demonstrate a plan for interoperating with IPv6-only >>> portions of the Internet. Components of such plans might include, but >>> are not limited to: receiving IPv6 address space and using it for >>> dual-stack or parallel IPv6 deployment; or making use of translation >>> technologies to allow communication between IPv4 and IPv6 hosts. >>> >>> 4.2.1.7 IPv6 connectivity >>> >>> ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for >>> connecting their customers with IPv6-only portions of the Internet, as >>> detailed in section 4.1.8. >>> >>> 4.3.7 IPv6 transition >>> >>> End-users requiring IPv4 addresses from ARIN must demonstrate a plan >>> for interoperating with IPv6-only portions of the Internet, as >>> detailed in section 4.1.8. >>> _______________________________________________ >>> PPML >>> You are receiving this message because you are subscribed to >>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >>> Unsubscribe or manage your mailing list subscription at: >>> http://lists.arin.net/mailman/listinfo/arin-ppml >>> Please contact info at arin.net if you experience any issues. >>> >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. > > -- Sent from my mobile device From owen at delong.com Mon Jan 10 21:29:54 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 10 Jan 2011 18:29:54 -0800 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: <3B5D6297-AD3F-4583-A0F3-369289509E56@delong.com> Message-ID: The PDP main page is mute on the subject of whether or not they need to be public, saying only: From: https://www.arin.net/policy/pdp.html 2.4 Discussion Petition Any member of the community, including a proposal originator, may initiate a Discussion Petition if they are dissatisfied with the action taken by the Advisory Council regarding any specific policy proposal. If successful, this petition will change the policy proposal to a draft policy which will be published for discussion and review by the community on the PPML and at an upcoming public policy meeting. The Discussion Petition must be initiated within 5 business days of announcement of the Advisory Council's decision regarding a specific policy proposal; the petition must include the proposal and a petition statement. The petition duration is 5 business days. The ARIN President determines if the petition succeeds (success is support from at least 10 different people from 10 different organizations). In order to be considered at an upcoming public policy meeting, the petition must be successfully completed at least 35 days prior to that meeting. A successful petition may result in competing versions of the same draft policy. Staff and legal reviews will be conducted and published for successful petitions. All draft policies that are selected by the Advisory Council or successfully petitioned are published for review and discussion on the public policy mailing list. However, the petitions link off of that main PDP page says: From: https://www.arin.net/policy/pdp_petitions.html STARTING AND PARTICIPATING IN PETITIONS ARIN staff posts the results of the AC?s decisions to the PPML shortly after the AC has met. The decisions which can be petitioned are specifically pointed out, and, the deadline for starting a petition is provided (five business days). Petitions take place on the PPML; those who wish to start a petition and/or participate in petitions must be subscribed to the list. If you wish to petition a decision of the AC, send a message to PPML. The message must contain the proposal/draft policy text that you want to move forward and a petition statement. Point of contact information is also required, either to the entire PPML or topetition at arin.net. Should a petition begin, ARIN staff will acknowledge the petition by posting to the thread, and indicate when the petition period will end (once started, a petition?s duration is five business days). If you wish to support a petition, simply post a statement of support to PPML on the petition thread. Point of contact information is also required, either to the entire PPML or to petition at arin.net. So I'm not sure where you come up with the idea that is not what the PDP says. It is, indeed what the ARIN web site says under the PDP. I, personally, think that given the low (10 people from 10 organizations) threshold for a petition to succeed that requiring those 10 people to support it in public is a perfectly reasonable requirement. Owen On Jan 10, 2011, at 4:56 PM, Martin Hannigan wrote: > That's not what the PDP says and that's not my experience. And if it > is a requirement we should revisit that. > > Best, > > -M< > > On 1/10/11, Owen DeLong wrote: >> You have to publicly post your support for the petition. >> >> You can send your contact details privately in parallel to your public >> statement of support, but, you have to provide both your statement >> of support (which must be public) and your contact details (which >> can be private) in order for support of a petition to be counted. >> >> (At least that is my understanding of the process). >> >> Owen >> >> On Jan 10, 2011, at 2:50 PM, Martin Hannigan wrote: >> >>> Scott, >>> >>> The Suggestion: >>> >>> The reason why I am supporting "some" iteration of 125 is that one of >>> it's benefits is that it requires a measure of cost sharing across the >>> board which is likely to end up being much more burdensome to all >>> without something along the lines of 125. Much of the discussion about >>> 125 has been related to cost and demonstrates some of the inequities >>> in our policies. 125 seems to be somewhat of a right sizing albeit >>> theoretically could be a degree or two too far to the right. Your >>> modification doesn't seem to do anything significant other than >>> instill a false sense of security in applicants that are likely to do >>> nothing without some requirements. >>> >>> Aside from completely throwing out the intent of 125 as you did with >>> your modification, how would you contribute to make 125 more palatable >>> and continue to allow it to have some level of bite, a real result for >>> all of the effort that we're going to have to go through with respect >>> to IPv6 transition? >>> >>> >>> Staff, >>> >>> The Petition: >>> >>> I was about to remark that everyone should be reminded that you do not >>> have to post publicly to support a petition due to the level of >>> causticity of the subject, but I'm unclear if that's the case. I had >>> responded privately to a petition previously and I believe it was >>> counted, but don't recall being told otherwise. I checked the PDP and >>> it seems vague with respect to any requirement to post to PPML. The >>> interpretation that a response to ARIN directly should suffice would >>> be reasonable IMHO. >>> >>> https://www.arin.net/policy/pdp.html >>> >>> Could someone on the staff clarify that please? >>> >>> >>> Best, >>> >>> -M< >>> >>> >>> On Sun, Jan 9, 2011 at 7:38 PM, Scott Leibrand >>> wrote: >>>> Given the contentious discussions around proposal 125, I'm getting the >>>> sense that even if its petition succeeds, it'll be too controversial >>>> to gain consensus. So I thought it might be worth posting an >>>> alternative I drafted, and see what kind of reaction it gets. I don't >>>> intend to introduce this into the policy process myself (as I'm not >>>> convinced it's necessary), but if anyone (particularly supporters of >>>> 125) feel that it would be a step in the right direction, feel free to >>>> do so. >>>> >>>> I'd also be interested to hear if anyone would be opposed to this >>>> language, and if so, what aspects you object to. And, as always, >>>> suggestions for improvement would be most welcome as well. >>>> >>>> -Scott (speaking only for myself) >>>> >>>> 4.1.8 IPv6 transition >>>> >>>> All organizations requiring IPv4 addresses for Internet connectivity >>>> or services must demonstrate a plan for interoperating with IPv6-only >>>> portions of the Internet. Components of such plans might include, but >>>> are not limited to: receiving IPv6 address space and using it for >>>> dual-stack or parallel IPv6 deployment; or making use of translation >>>> technologies to allow communication between IPv4 and IPv6 hosts. >>>> >>>> 4.2.1.7 IPv6 connectivity >>>> >>>> ISPs requiring IPv4 addresses from ARIN must demonstrate a plan for >>>> connecting their customers with IPv6-only portions of the Internet, as >>>> detailed in section 4.1.8. >>>> >>>> 4.3.7 IPv6 transition >>>> >>>> End-users requiring IPv4 addresses from ARIN must demonstrate a plan >>>> for interoperating with IPv6-only portions of the Internet, as >>>> detailed in section 4.1.8. >>>> _______________________________________________ >>>> PPML >>>> You are receiving this message because you are subscribed to >>>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >>>> Unsubscribe or manage your mailing list subscription at: >>>> http://lists.arin.net/mailman/listinfo/arin-ppml >>>> Please contact info at arin.net if you experience any issues. >>>> >>> _______________________________________________ >>> PPML >>> You are receiving this message because you are subscribed to >>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >>> Unsubscribe or manage your mailing list subscription at: >>> http://lists.arin.net/mailman/listinfo/arin-ppml >>> Please contact info at arin.net if you experience any issues. >> >> > > -- > Sent from my mobile device -------------- next part -------------- An HTML attachment was scrubbed... URL: From hannigan at gmail.com Tue Jan 11 07:29:28 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Tue, 11 Jan 2011 07:29:28 -0500 Subject: [arin-ppml] Alternative to proposal 125: Requiring IPv6 planning for IPv4 allocations In-Reply-To: References: <3B5D6297-AD3F-4583-A0F3-369289509E56@delong.com> Message-ID: On Mon, Jan 10, 2011 at 9:29 PM, Owen DeLong wrote: [ clip ] > Petitions take place on the?PPML; those who wish to start a > petition and/or participate in petitions must be subscribed to the list. > If you wish to petition a decision of the AC, send a message to?PPML. That would instruct the petitioner. [ clip ] > If you wish to support a petition, simply post a statement of support > to?PPML?on the petition thread. Point of contact information is also > required, either to the entire PPML or to?petition at arin.net. Guess it's not as clear cut as some would like to think. Best, -M< From info at arin.net Tue Jan 11 08:23:02 2011 From: info at arin.net (ARIN) Date: Tue, 11 Jan 2011 08:23:02 -0500 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement Message-ID: <4D2C59B6.4040503@arin.net> ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-126: Compliance Requirement Proposal Originator: Marla Azinger Proposal Version: 1 Date: 11 January 2011 Proposal type: new Policy term: permanent Policy statement: Resource Review Update the following NRPM Sections: 12.4 Update to: Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources or update reassignment information as needed to bring them into (or reasonably close to) compliance. 12.5 Update to: If the organization does not voluntarily return resources or update reassignment information as requested, ARIN will cease providing reverse DNS services and/or revoke any resources issued by ARIN as required to bring the organization into overall compliance. ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. 12.6 Update to: Except in cases of fraud, or violations of policy, an organization shall be given a minimum (30) days to respond. Progress of record(s) correction(s) must be visible within (60) days after correspondence with ARIN began or ARIN will start proceeding with removal of DNS services and/or resources issued by ARIN. ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. Rationale: To date the community has not documented or firmly established use of an effective enforcement mechanism. This policy will support current policy and compel those who are allocated ARIN resources to maintain the proper WHOIS records in accordance with ARIN NRPM. While it is recognized this is not an absolute solution to ensure compliance, it is the best method under current ARIN policies. Timetable for implementation: Immediate From jbates at brightok.net Tue Jan 11 09:59:45 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 11 Jan 2011 08:59:45 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <4D2C7061.3050907@brightok.net> Opposed On 1/11/2011 7:23 AM, ARIN wrote: > 12.4 Update to: > Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources > or update reassignment information as needed to bring them into (or > reasonably close to) compliance. > To be honest, I'm lazy. The only time I do paperwork is when I have to do paperwork. ARIN currently enforces compliance of whois information when requests are made to get more address space. I have no interest in ARIN trying to recoup address space from people who are not requesting address space, with the exception of fraud. I'm sure many will disagree with my sentiments, but I'm also sure I'm not the only lazy one. Jack From bicknell at ufp.org Tue Jan 11 11:18:13 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Tue, 11 Jan 2011 08:18:13 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <20110111161813.GA66815@ussenterprise.ufp.org> In a message written on Tue, Jan 11, 2011 at 08:23:02AM -0500, ARIN wrote: > ARIN-prop-126: Compliance Requirement I love the concept, but I'm not so much a fan as-written. The critical element that is missing is a low water mark. If I may oversimplify for a moment, giving more space when 80% utilization is passed, and taking it away the organization drops below 80% utilization can lead to thrashing. Additionally, due to the way IP blocks are allocated and used it's likely that someone dropping below 80% would have to do significant renumbering to return a contiguous block, and that block would then subdivide their original allocation. Rather, what is needed is something like you get more when reaching 80% utilization, and ARIN can require the return of space when falling below 40% utilization. This eliminates thrashing around the mark, and insures a low enough utilization rate for the return that renumbering should be minimized and large, useful blocks should be returned. Sadly though, my oversimplification is exactly that, this process intersects with a number of sections of the NRPM. I think it is also worth considering the probable targets of this policy. While I'm sure there are many cases an organization may have extra space, I believe there are two significant cases that cover 90% or more of the organizations with extra space. The first is companies that have experienced a drop in business. Indeed, I was involved with one organization that I believe dropped below 80% utilization (and within a year exceeded it) and that was due to a bankruptcy process. I think this is important to realize in that it may hinder ARIN's efforts to perform audits efficiently. They are likely to be auditing groups under financial strain, perhaps understaffed, and/or complicated by processes like bankruptcy. The second is companies that obtained space prior to utilization requirements. For instance, folks who received space in the classful days. There are plenty of universities for instance that needed more than a Class C, so they got a Class B, even though they only need 25% of it even today. This is going to lead to ARIN contacting folks who have had pretty much no interaction with ARIN during the intervening years, who probably don't have an RSA, and so on. Unfortunately, while I like the concept I feel the practical concerns make it of limited value in the IPv4 space. I feel like the level of staff effort is going to be high for minimal gain. Also there is a timing concern, audits take time, renumbering takes time, blocks then sit around to "cool off" before being reissued. Would any IPv4 space get back in the game soon enough to make a meaningful difference? Even with the necessary changes of a high and low water mark I'm not sure if I could really support the policy pragmatically. However, I could support a policy like this in IPv6. We can get out in front of the problem, have it binding on folks under an RSA, and have it documented well enough in advance that people can prepare for the audits and return of space. Basically by doing IPv6 right early on we could avoid one of the areas of problem in IPv4 policy. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From scottleibrand at gmail.com Tue Jan 11 11:39:14 2011 From: scottleibrand at gmail.com (Scott Leibrand) Date: Tue, 11 Jan 2011 08:39:14 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <20110111161813.GA66815@ussenterprise.ufp.org> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> Message-ID: <048DB51D-28FB-45DC-A7CC-5B092DA914DA@gmail.com> I don't think this changes that: current policy already allows it (for orgs materially out of compliance, which would mean more like <50% than <80%). The only changes here, IIUIC, are to clarify that it applies to reassignment policy as well (requiring Whois to be kept current) and allowing ARIN to stop providing rDNS services before they take away someone's space. The latter may be considered an improvement on current policy with regard to the situation you outline. Scott On Jan 11, 2011, at 8:18 AM, Leo Bicknell wrote: > In a message written on Tue, Jan 11, 2011 at 08:23:02AM -0500, ARIN wrote: >> ARIN-prop-126: Compliance Requirement > > I love the concept, but I'm not so much a fan as-written. The > critical element that is missing is a low water mark. > > If I may oversimplify for a moment, giving more space when 80% > utilization is passed, and taking it away the organization drops > below 80% utilization can lead to thrashing. Additionally, due to > the way IP blocks are allocated and used it's likely that someone > dropping below 80% would have to do significant renumbering to > return a contiguous block, and that block would then subdivide their > original allocation. > > Rather, what is needed is something like you get more when reaching > 80% utilization, and ARIN can require the return of space when > falling below 40% utilization. This eliminates thrashing around the > mark, and insures a low enough utilization rate for the return that > renumbering should be minimized and large, useful blocks should be > returned. > > Sadly though, my oversimplification is exactly that, this process > intersects with a number of sections of the NRPM. > > I think it is also worth considering the probable targets of this > policy. While I'm sure there are many cases an organization may > have extra space, I believe there are two significant cases that > cover 90% or more of the organizations with extra space. > > The first is companies that have experienced a drop in business. > Indeed, I was involved with one organization that I believe dropped > below 80% utilization (and within a year exceeded it) and that was > due to a bankruptcy process. I think this is important to realize > in that it may hinder ARIN's efforts to perform audits efficiently. > They are likely to be auditing groups under financial strain, perhaps > understaffed, and/or complicated by processes like bankruptcy. > > The second is companies that obtained space prior to utilization > requirements. For instance, folks who received space in the classful > days. There are plenty of universities for instance that needed > more than a Class C, so they got a Class B, even though they only > need 25% of it even today. This is going to lead to ARIN contacting > folks who have had pretty much no interaction with ARIN during the > intervening years, who probably don't have an RSA, and so on. > > Unfortunately, while I like the concept I feel the practical concerns > make it of limited value in the IPv4 space. I feel like the level > of staff effort is going to be high for minimal gain. Also there > is a timing concern, audits take time, renumbering takes time, > blocks then sit around to "cool off" before being reissued. Would > any IPv4 space get back in the game soon enough to make a meaningful > difference? Even with the necessary changes of a high and low water > mark I'm not sure if I could really support the policy pragmatically. > > However, I could support a policy like this in IPv6. We can get > out in front of the problem, have it binding on folks under an RSA, > and have it documented well enough in advance that people can prepare > for the audits and return of space. Basically by doing IPv6 right > early on we could avoid one of the areas of problem in IPv4 policy. > > -- > Leo Bicknell - bicknell at ufp.org - CCIE 3440 > PGP keys at http://www.ufp.org/~bicknell/ > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From bicknell at ufp.org Tue Jan 11 11:45:53 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Tue, 11 Jan 2011 08:45:53 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <048DB51D-28FB-45DC-A7CC-5B092DA914DA@gmail.com> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> <048DB51D-28FB-45DC-A7CC-5B092DA914DA@gmail.com> Message-ID: <20110111164553.GA69927@ussenterprise.ufp.org> In a message written on Tue, Jan 11, 2011 at 08:39:14AM -0800, Scott Leibrand wrote: > I don't think this changes that: current policy already allows > it (for orgs materially out of compliance, which would mean more > like <50% than <80%). Your response made me realize that I glossed-over the vague nature of "materially". I suspect if we asked the room what qualified answers would range from 1% utilization to 79% utilization (in my overly simplified example). In retrospect my desire for a low water mark is equal parts of wanting to avoid thrashing, but also wanting folks to have a specific target so they can plan and evaluate their own network. We don't need ARIN staff and a resource holder to get in an argument over the definition of a vague word like materially. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From scottleibrand at gmail.com Tue Jan 11 11:51:06 2011 From: scottleibrand at gmail.com (Scott Leibrand) Date: Tue, 11 Jan 2011 08:51:06 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <20110111164553.GA69927@ussenterprise.ufp.org> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> <048DB51D-28FB-45DC-A7CC-5B092DA914DA@gmail.com> <20110111164553.GA69927@ussenterprise.ufp.org> Message-ID: <246AEB9D-E49D-4F06-8342-C796E8EBA0F7@gmail.com> Staff, Has this been a problem to date? What's the current threshold for requiring underutilized resource return? Scott On Jan 11, 2011, at 8:45 AM, Leo Bicknell wrote: > In a message written on Tue, Jan 11, 2011 at 08:39:14AM -0800, Scott Leibrand wrote: >> I don't think this changes that: current policy already allows >> it (for orgs materially out of compliance, which would mean more >> like <50% than <80%). > > Your response made me realize that I glossed-over the vague nature > of "materially". I suspect if we asked the room what qualified > answers would range from 1% utilization to 79% utilization (in my > overly simplified example). > > In retrospect my desire for a low water mark is equal parts of > wanting to avoid thrashing, but also wanting folks to have a specific > target so they can plan and evaluate their own network. We don't > need ARIN staff and a resource holder to get in an argument over > the definition of a vague word like materially. > > -- > Leo Bicknell - bicknell at ufp.org - CCIE 3440 > PGP keys at http://www.ufp.org/~bicknell/ > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From gbonser at seven.com Tue Jan 11 12:10:09 2011 From: gbonser at seven.com (George Bonser) Date: Tue, 11 Jan 2011 09:10:09 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC132CE@RWC-EX1.corp.seven.com> > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of ARIN > Sent: Tuesday, January 11, 2011 5:23 AM > To: arin-ppml at arin.net > Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement Opposed. v4 is dead. We can quickly get into the realm of diminishing returns with this policy where an increasing amount of effort is expended to free up a decreasing amount of resources. Expending more effort on v4 is probably not a productive use of time. Also, the potential to create an adversarial environment between ARIN and the rest of the community with this policy is great. "If the organization does not voluntarily return resources or update reassignment information as requested, ARIN will cease providing reverse DNS services and/or revoke any resources issued by ARIN as required to bring the organization into overall compliance." I have enough trouble as it is proving I use IP addresses that are not accessible from the Internet (v4 IPs used in VPN communications with various third parties, for example). The notion of "prove to our satisfaction that you are complying with the policy or we will break your business" doesn't sit well with me. It seems there is the potential for a lot of harm for little good. Sweeping up crumbs of v4 space (a /24 here a /24 there) isn't going to do anyone much good and the vast majority of the community already does what they can to make sure they are in compliance. We have enough operational problems as it is without having to create a potentially adversarial environment with ARIN. " To date the community has not documented or firmly established use of an effective enforcement mechanism." The enforcement happens when additional resources are requested. If you aren't using what you already have to enough of a degree, you are not given any additional. Going back and attempting to revoke already issued resources is much more difficult than simply not issuing more. Often addresses are used for communications paths that are not visible to the general Internet yet must remain globally unique. Short of providing device configurations, I am not sure how I can "prove" that a certain /24 or pair of /24's are in use as they may not even be announced to the Internet by BGP and may not be "pingable" from the Internet yet are in constant use. There are probably many others with the same sort of issue. It is already hard enough and we already try as hard as we can to stay within the guidelines. Of the people who don't, how much space does that actually represent? I have a feeling this policy would generate a large amount of work (and stress) on everyone involved for very little benefit. It would be better, in my opinion, not to consier IPv4 as a viable long-term service delivery mode going forward. From glenn at wholesaledatacenter.com Tue Jan 11 12:19:28 2011 From: glenn at wholesaledatacenter.com (Glenn Morrison) Date: Tue, 11 Jan 2011 11:19:28 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: Opposed Glenn Morrison DC Manager 816-389-5200 -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of ARIN Sent: Tuesday, January 11, 2011 7:23 AM To: arin-ppml at arin.net Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-126: Compliance Requirement Proposal Originator: Marla Azinger Proposal Version: 1 Date: 11 January 2011 Proposal type: new Policy term: permanent Policy statement: Resource Review Update the following NRPM Sections: 12.4 Update to: Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources or update reassignment information as needed to bring them into (or reasonably close to) compliance. 12.5 Update to: If the organization does not voluntarily return resources or update reassignment information as requested, ARIN will cease providing reverse DNS services and/or revoke any resources issued by ARIN as required to bring the organization into overall compliance. ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. 12.6 Update to: Except in cases of fraud, or violations of policy, an organization shall be given a minimum (30) days to respond. Progress of record(s) correction(s) must be visible within (60) days after correspondence with ARIN began or ARIN will start proceeding with removal of DNS services and/or resources issued by ARIN. ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. Rationale: To date the community has not documented or firmly established use of an effective enforcement mechanism. This policy will support current policy and compel those who are allocated ARIN resources to maintain the proper WHOIS records in accordance with ARIN NRPM. While it is recognized this is not an absolute solution to ensure compliance, it is the best method under current ARIN policies. Timetable for implementation: Immediate _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From scottleibrand at gmail.com Tue Jan 11 12:39:05 2011 From: scottleibrand at gmail.com (Scott Leibrand) Date: Tue, 11 Jan 2011 09:39:05 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: It seems there's some confusion about what is new in this proposal, and what already exists in the NRPM. For context, here is what existing policy *already* reads ( https://www.arin.net/policy/nrpm.html#twelve): 12.4 Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources as needed to bring them into (or reasonably close to) compliance. 12.5 If the organization does not voluntarily return resources as requested, ARIN may revoke any resources issued by ARIN as required to bring the organization into overall compliance. ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. 12.6 Except in cases of fraud, or violations of policy, an organization shall be given a minimum of six months to effect a return. ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. This proposal simply adds/updates the *bold* text: 12.4 Update to: Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources *or update reassignment information* as needed to bring them into (or reasonably close to) compliance. 12.5 Update to: If the organization does not voluntarily return resources* or update reassignment information *as requested, ARIN *will cease providing reverse DNS services and/or *revoke any resources issued by ARIN as required to bring the organization into overall compliance. ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. 12.6 Update to: Except in cases of fraud, or violations of policy, an organization shall be given a minimum *(30) days to respond. Progress of record(s) correction(s) must be visible within (60) days after correspondence with ARIN began or ARIN will start proceeding with removal of DNS services and/or resources issued by ARIN.* ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. -Scott On Tue, Jan 11, 2011 at 5:23 AM, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-126: Compliance Requirement > > Proposal Originator: Marla Azinger > > Proposal Version: 1 > > Date: 11 January 2011 > > Proposal type: new > > Policy term: permanent > > Policy statement: > > Resource Review > Update the following NRPM Sections: > > 12.4 Update to: > Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources > or update reassignment information as needed to bring them into (or > reasonably close to) compliance. > > 12.5 Update to: > If the organization does not voluntarily return resources or update > reassignment information as requested, ARIN will cease providing reverse > DNS services and/or revoke any resources issued by ARIN as required to > bring the organization into overall compliance. ARIN shall follow the > same guidelines for revocation that are required for voluntary return in > the previous paragraph. > > 12.6 Update to: > Except in cases of fraud, or violations of policy, an organization shall > be given a minimum (30) days to respond. Progress of record(s) > correction(s) must be visible within (60) days after correspondence with > ARIN began or ARIN will start proceeding with removal of DNS services > and/or resources issued by ARIN. ARIN shall negotiate a longer term > with the organization if ARIN believes the organization is working in > good faith to substantially restore compliance and has a valid need for > additional time to renumber out of the affected blocks. > > Rationale: > > To date the community has not documented or firmly established use of an > effective enforcement mechanism. This policy will support current > policy and compel those who are allocated ARIN resources to maintain the > proper WHOIS records in accordance with ARIN NRPM. While it is > recognized this is not an absolute solution to ensure compliance, it is > the best method under current ARIN policies. > > Timetable for implementation: Immediate > > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -------------- next part -------------- An HTML attachment was scrubbed... URL: From scott at speakservers.com Tue Jan 11 12:36:16 2011 From: scott at speakservers.com (SPEAKservers - Scott) Date: Tue, 11 Jan 2011 10:36:16 -0700 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <4D2C9510.20605@speakservers.com> Opposed On 01/11/2011 06:23 AM, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-126: Compliance Requirement > > Proposal Originator: Marla Azinger > > Proposal Version: 1 > > Date: 11 January 2011 > > Proposal type: new > > Policy term: permanent > > Policy statement: > > Resource Review > Update the following NRPM Sections: > > 12.4 Update to: > Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources > or update reassignment information as needed to bring them into (or > reasonably close to) compliance. > > 12.5 Update to: > If the organization does not voluntarily return resources or update > reassignment information as requested, ARIN will cease providing reverse > DNS services and/or revoke any resources issued by ARIN as required to > bring the organization into overall compliance. ARIN shall follow the > same guidelines for revocation that are required for voluntary return in > the previous paragraph. > > 12.6 Update to: > Except in cases of fraud, or violations of policy, an organization shall > be given a minimum (30) days to respond. Progress of record(s) > correction(s) must be visible within (60) days after correspondence with > ARIN began or ARIN will start proceeding with removal of DNS services > and/or resources issued by ARIN. ARIN shall negotiate a longer term > with the organization if ARIN believes the organization is working in > good faith to substantially restore compliance and has a valid need for > additional time to renumber out of the affected blocks. > > Rationale: > > To date the community has not documented or firmly established use of an > effective enforcement mechanism. This policy will support current > policy and compel those who are allocated ARIN resources to maintain the > proper WHOIS records in accordance with ARIN NRPM. While it is > recognized this is not an absolute solution to ensure compliance, it is > the best method under current ARIN policies. > > Timetable for implementation: Immediate > > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From cgrundemann at gmail.com Tue Jan 11 12:44:21 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Tue, 11 Jan 2011 10:44:21 -0700 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net> Message-ID: On Tue, Jan 11, 2011 at 10:39, Scott Leibrand wrote: > It seems there's some confusion about what is new in this proposal, and what > already exists in the NRPM. > > For context, here is what existing policy already reads > (https://www.arin.net/policy/nrpm.html#twelve): > > 12.4? Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources as > needed to bring them into (or reasonably close to) compliance. > > > 12.5? If the organization does not voluntarily return resources as > requested, ARIN may revoke any resources issued by ARIN as required to bring > the organization into overall compliance. ARIN shall follow the same > guidelines for revocation that are required for voluntary return in the > previous paragraph. > > 12.6? Except in cases of fraud, or violations of policy, an organization > shall be given a minimum of six months to effect a return. ARIN shall > negotiate a longer term with the organization if ARIN believes the > organization is working in good faith to substantially restore compliance > and has a valid need for additional time to renumber out of the affected > blocks. > > This proposal simply adds/updates the bold text: > > 12.4 Update to: > Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources > or update reassignment information as needed to bring them into (or > reasonably close to) compliance. > > 12.5 Update to: > If the organization does not voluntarily return resources or update > reassignment information as requested, ARIN will cease providing reverse > DNS services and/or revoke any resources issued by ARIN as required to > bring the organization into overall compliance. ARIN shall follow the > same guidelines for revocation that are required for voluntary return in > the previous paragraph. > > 12.6 Update to: > Except in cases of fraud, or violations of policy, an organization shall > be given a minimum (30) days to respond. Progress of record(s) > correction(s) must be visible within (60) days after correspondence with > ARIN began or ARIN will start proceeding with removal of DNS services > and/or resources issued by ARIN. ARIN shall negotiate a longer term > with the organization if ARIN believes the organization is working in > good faith to substantially restore compliance and has a valid need for > additional time to renumber out of the affected blocks. Also, section 12 of the NRPM is *NOT* IPv4 specific. This policy applies equally to IPv4 *AND* _IPv6_. I highly encourage folks who are unclear on the changes and affect of any policy to ask questions. Myself and many other members of the AC are happy to help clarify for those who may be less familiar with the current NRPM. Cheers, ~Chris > > -Scott > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From scottleibrand at gmail.com Tue Jan 11 12:44:27 2011 From: scottleibrand at gmail.com (Scott Leibrand) Date: Tue, 11 Jan 2011 09:44:27 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC132CE@RWC-EX1.corp.seven.com> References: <4D2C59B6.4040503@arin.net> <5A6D953473350C4B9995546AFE9939EE0BC132CE@RWC-EX1.corp.seven.com> Message-ID: I don't think this policy proposal is about IPv4. There is already an effective enforcement mechanism there: you can't get more space unless you're following procedures. But for IPv6, there is no real enforcement mechanism to ensure that those who are allocated IPv6 addresses will keep whois up to date. The original intent of the author was to give ARIN a tool to encourage people to keep their IPv6 whois records up to date, even if they never go back for additional space. And as I mentioned in another message, most of what you're objecting to is already policy. If you want to change that, we'd need a new policy proposal to do so... -Scott On Tue, Jan 11, 2011 at 9:10 AM, George Bonser wrote: > > > > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] > On > > Behalf Of ARIN > > Sent: Tuesday, January 11, 2011 5:23 AM > > To: arin-ppml at arin.net > > Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement > > Opposed. > > v4 is dead. We can quickly get into the realm of diminishing returns > with this policy where an increasing amount of effort is expended to > free up a decreasing amount of resources. Expending more effort on v4 > is probably not a productive use of time. Also, the potential to create > an adversarial environment between ARIN and the rest of the community > with this policy is great. > > "If the organization does not voluntarily return resources or update > reassignment information as requested, ARIN will cease providing reverse > DNS services and/or revoke any resources issued by ARIN as required to > bring the organization into overall compliance." > > I have enough trouble as it is proving I use IP addresses that are not > accessible from the Internet (v4 IPs used in VPN communications with > various third parties, for example). The notion of "prove to our > satisfaction that you are complying with the policy or we will break > your business" doesn't sit well with me. It seems there is the > potential for a lot of harm for little good. Sweeping up crumbs of v4 > space (a /24 here a /24 there) isn't going to do anyone much good and > the vast majority of the community already does what they can to make > sure they are in compliance. We have enough operational problems as it > is without having to create a potentially adversarial environment with > ARIN. > > " To date the community has not documented or firmly established use of > an effective enforcement mechanism." > > The enforcement happens when additional resources are requested. If you > aren't using what you already have to enough of a degree, you are not > given any additional. Going back and attempting to revoke already > issued resources is much more difficult than simply not issuing more. > Often addresses are used for communications paths that are not visible > to the general Internet yet must remain globally unique. Short of > providing device configurations, I am not sure how I can "prove" that a > certain /24 or pair of /24's are in use as they may not even be > announced to the Internet by BGP and may not be "pingable" from the > Internet yet are in constant use. There are probably many others with > the same sort of issue. It is already hard enough and we already try as > hard as we can to stay within the guidelines. Of the people who don't, > how much space does that actually represent? I have a feeling this > policy would generate a large amount of work (and stress) on everyone > involved for very little benefit. > > It would be better, in my opinion, not to consier IPv4 as a viable > long-term service delivery mode going forward. > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -------------- next part -------------- An HTML attachment was scrubbed... URL: From kevin at steadfast.net Tue Jan 11 12:55:08 2011 From: kevin at steadfast.net (Kevin Stange) Date: Tue, 11 Jan 2011 11:55:08 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <20110111161813.GA66815@ussenterprise.ufp.org> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> Message-ID: <4D2C997C.5080900@steadfast.net> On 01/11/2011 10:18 AM, Leo Bicknell wrote: > The second is companies that obtained space prior to utilization > requirements. For instance, folks who received space in the classful > days. There are plenty of universities for instance that needed > more than a Class C, so they got a Class B, even though they only > need 25% of it even today. This is going to lead to ARIN contacting > folks who have had pretty much no interaction with ARIN during the > intervening years, who probably don't have an RSA, and so on. Doesn't the lack of an RSA make them not subject to the NRPM until which time they decide to sign the LRSA? -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature URL: From gbonser at seven.com Tue Jan 11 13:00:12 2011 From: gbonser at seven.com (George Bonser) Date: Tue, 11 Jan 2011 10:00:12 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net><5A6D953473350C4B9995546AFE9939EE0BC132CE@RWC-EX1.corp.seven.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC132D5@RWC-EX1.corp.seven.com> Fair enough, but maybe it should be more explicit that it is aimed at keeping whois up to date. I agree that valid contact information is important. The major problem with v6 is going to be hijacking of address space simply because there is so much of it available. Nefarious operators are probably just going to grab a chunk of space and use it and the v6 "full bogons" list is so large that it probably can't be used on most dual stack routers (along with the full v4 and v6 non-bogons tables). But as someone pointed out earlier, how big a problem is this? What percentage of the issued resources is currently assigned to "dead" contacts? "most of what you're objecting to is already policy" except the "we break your network" part about turning off reverse dns which on reflection, is probably ok. But you are right, it wasn't exactly clear to me on a quick read how much of the proposed text is new. Thanks for sending that bolded version. In fact, I am in favor of producing that format in proposed changes with any deleted existing wording shown stuck through and new wording in bold. It sure makes it easier to see what exactly is being changed. From: Scott Leibrand [mailto:scottleibrand at gmail.com] Sent: Tuesday, January 11, 2011 9:44 AM To: George Bonser Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-126: Compliance Requirement I don't think this policy proposal is about IPv4. There is already an effective enforcement mechanism there: you can't get more space unless you're following procedures. But for IPv6, there is no real enforcement mechanism to ensure that those who are allocated IPv6 addresses will keep whois up to date. The original intent of the author was to give ARIN a tool to encourage people to keep their IPv6 whois records up to date, even if they never go back for additional space. And as I mentioned in another message, most of what you're objecting to is already policy. If you want to change that, we'd need a new policy proposal to do so... -Scott On Tue, Jan 11, 2011 at 9:10 AM, George Bonser wrote: -------------- next part -------------- An HTML attachment was scrubbed... URL: From bicknell at ufp.org Tue Jan 11 13:02:06 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Tue, 11 Jan 2011 10:02:06 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net> Message-ID: <20110111180206.GA75380@ussenterprise.ufp.org> In a message written on Tue, Jan 11, 2011 at 09:39:05AM -0800, Scott Leibrand wrote: > It seems there's some confusion about what is new in this proposal, and > what already exists in the NRPM. > For context, here is what existing policy already reads > ([1]https://www.arin.net/policy/nrpm.html#twelve): This comes from policy 2007-14 (https://www.arin.net/policy/proposals/2007_14.html) which was adopted by the Board on February 6th, 2009, and implemented April 1, 2009. I suspect some of the confusion is due to the fact that this has been policy less than 8 months. 12.2 sets out when this review might happen. 12.2.a is for new requests, if folks are requesting more it is unlikely they have a suplus of free space. 12.2.b is fraud/abuse in obtaining space, which is a different problem. Which leaves us with 12.2.c as the only case where ARIN might do a review that turned up under-utilized resources. I'll note that the policy does not require these reviews it simply states that ARIN may do them. Has ARIN staff ever done a review undertaken on the basis of 12.2.c? Can we get a report on how many have been done, and the (aggregate) results? If ARIN isn't doing 12.2.c reviews this policy proposal is moot until reviews start to happen. Did this change come from finding issues with the reviews? -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From kevin at steadfast.net Tue Jan 11 13:05:34 2011 From: kevin at steadfast.net (Kevin Stange) Date: Tue, 11 Jan 2011 12:05:34 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net> Message-ID: <4D2C9BEE.3050603@steadfast.net> On 01/11/2011 11:39 AM, Scott Leibrand wrote: > It seems there's some confusion about what is new in this proposal, and > what already exists in the NRPM. > > For context, here is what existing policy *already* reads > (https://www.arin.net/policy/nrpm.html#twelve): Ah, if only policy proposals were presented as unified diffs against the NPRM... :) I would support the changes here to allow an organization to correct poor documentation to establish utilization that meets ARIN's requirements, which seems to be the function of this proposal. -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature URL: From jbates at brightok.net Tue Jan 11 13:57:59 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 11 Jan 2011 12:57:59 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net> Message-ID: <4D2CA837.4000505@brightok.net> Still opposed. On 1/11/2011 11:39 AM, Scott Leibrand wrote: > For context, here is what existing policy *already* reads > (https://www.arin.net/policy/nrpm.html#twelve): I'm lazy, the whois information I have is valid, I'll thown in the extra downstream customers (who's contact information is a duplicate of mine) when ARIN requires it for extra space, or if they choose to audit and request that I do so. I dislike the changes, as they promote ARIN seeking to audit or take action more swiftly, as it's much easier to break rDNS than it is to revoke address space. If the matter is serious enough, they should just revoke the space; not deal with rDNS. The only truly important whois records are the originally assigned. Beyond that, it only matters for justification or if a downstream organization has different contacts. Providing an informative layout of the network to 3rd parties is not a valid reason for updating whois information. Jack From scottleibrand at gmail.com Tue Jan 11 13:52:57 2011 From: scottleibrand at gmail.com (Scott Leibrand) Date: Tue, 11 Jan 2011 10:52:57 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC132D5@RWC-EX1.corp.seven.com> References: <4D2C59B6.4040503@arin.net> <5A6D953473350C4B9995546AFE9939EE0BC132CE@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC132D5@RWC-EX1.corp.seven.com> Message-ID: FWIW, here's another version of the rationale that the original author had on an earlier version... "Due the large size of IPv6 address blocks there will be no real or effective enforcement mechanism to ensure those who are allocated IPv6 address will maintain the proper WHOIS records in accordance with ARIN NRPM 6.5. While it is recognized this is not an absolute solution to ensure compliance, it is the best method under current ARIN policies." -Scott On Tue, Jan 11, 2011 at 10:00 AM, George Bonser wrote: > Fair enough, but maybe it should be more explicit that it is aimed at > keeping whois up to date. I agree that valid contact information is > important. The major problem with v6 is going to be hijacking of address > space simply because there is so much of it available. Nefarious operators > are probably just going to grab a chunk of space and use it and the v6 ?full > bogons? list is so large that it probably can?t be used on most dual stack > routers (along with the full v4 and v6 non-bogons tables). > > > > But as someone pointed out earlier, how big a problem is this? What > percentage of the issued resources is currently assigned to ?dead? contacts? > > > > ?most of what you're objecting to is already policy? except the ?we break > your network? part about turning off reverse dns which on reflection, is > probably ok. But you are right, it wasn?t exactly clear to me on a quick > read how much of the proposed text is new. Thanks for sending that bolded > version. In fact, I am in favor of producing that format in proposed > changes with any deleted existing wording shown stuck through and new > wording in bold. It sure makes it easier to see what exactly is being > changed. > > > > > > *From:* Scott Leibrand [mailto:scottleibrand at gmail.com] > *Sent:* Tuesday, January 11, 2011 9:44 AM > *To:* George Bonser > *Cc:* arin-ppml at arin.net > *Subject:* Re: [arin-ppml] ARIN-prop-126: Compliance Requirement > > > > I don't think this policy proposal is about IPv4. There is already an > effective enforcement mechanism there: you can't get more space unless > you're following procedures. But for IPv6, there is no real enforcement > mechanism to ensure that those who are allocated IPv6 addresses will keep > whois up to date. The original intent of the author was to give ARIN a tool > to encourage people to keep their IPv6 whois records up to date, even if > they never go back for additional space. > > And as I mentioned in another message, most of what you're objecting to is > already policy. If you want to change that, we'd need a new policy proposal > to do so... > > -Scott > > On Tue, Jan 11, 2011 at 9:10 AM, George Bonser wrote: > > > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Tue Jan 11 14:05:16 2011 From: owen at delong.com (Owen DeLong) Date: Tue, 11 Jan 2011 11:05:16 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <20110111164553.GA69927@ussenterprise.ufp.org> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> <048DB51D-28FB-45DC-A7CC-5B092DA914DA@gmail.com> <20110111164553.GA69927@ussenterprise.ufp.org> Message-ID: <7047649C-1C04-4BDD-B72F-D678829C52BB@delong.com> On Jan 11, 2011, at 8:45 AM, Leo Bicknell wrote: > In a message written on Tue, Jan 11, 2011 at 08:39:14AM -0800, Scott Leibrand wrote: >> I don't think this changes that: current policy already allows >> it (for orgs materially out of compliance, which would mean more >> like <50% than <80%). > > Your response made me realize that I glossed-over the vague nature > of "materially". I suspect if we asked the room what qualified > answers would range from 1% utilization to 79% utilization (in my > overly simplified example). > > In retrospect my desire for a low water mark is equal parts of > wanting to avoid thrashing, but also wanting folks to have a specific > target so they can plan and evaluate their own network. We don't > need ARIN staff and a resource holder to get in an argument over > the definition of a vague word like materially. When we developed the original policy, we used materially because codifying a particular percentage didn't work so well... Being <50% utilization on a /24 is a lot less material to the community than being <50% utilization on a /16. I wouldn't want to start trying to revoke part of a /24 from an end user organization just because they dropped to 126 hosts. However, an organization with a /16 that is only using 126 /24s would seem to me like a reasonable target for getting back at least a /18 or so. I think that material is variable depending on the amount of address space held and other factors. I think codifying that metric in policy would be overly complex and even more difficult to get consensus on. Owen From owen at delong.com Tue Jan 11 14:19:43 2011 From: owen at delong.com (Owen DeLong) Date: Tue, 11 Jan 2011 11:19:43 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net> Message-ID: <7B41B25E-B184-4438-B7D9-9122BDE41BE8@delong.com> Since policy compliance already requires up to date reassignment information, other than the changes to the time periods (shortening) in section 12.6, this proposal is actually a no-op. Owen On Jan 11, 2011, at 9:39 AM, Scott Leibrand wrote: > It seems there's some confusion about what is new in this proposal, and what already exists in the NRPM. > > For context, here is what existing policy already reads (https://www.arin.net/policy/nrpm.html#twelve): > > 12.4 Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources as needed to bring them into (or reasonably close to) compliance. > > > 12.5 If the organization does not voluntarily return resources as requested, ARIN may revoke any resources issued by ARIN as required to bring the organization into overall compliance. ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. > > 12.6 Except in cases of fraud, or violations of policy, an organization shall be given a minimum of six months to effect a return. ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. > > This proposal simply adds/updates the bold text: > > 12.4 Update to: > Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources > or update reassignment information as needed to bring them into (or > reasonably close to) compliance. > > 12.5 Update to: > If the organization does not voluntarily return resources or update > reassignment information as requested, ARIN will cease providing reverse > DNS services and/or revoke any resources issued by ARIN as required to > bring the organization into overall compliance. ARIN shall follow the > same guidelines for revocation that are required for voluntary return in > the previous paragraph. > > 12.6 Update to: > Except in cases of fraud, or violations of policy, an organization shall > be given a minimum (30) days to respond. Progress of record(s) > correction(s) must be visible within (60) days after correspondence with > ARIN began or ARIN will start proceeding with removal of DNS services > and/or resources issued by ARIN. ARIN shall negotiate a longer term > with the organization if ARIN believes the organization is working in > good faith to substantially restore compliance and has a valid need for > additional time to renumber out of the affected blocks. > > -Scott > > On Tue, Jan 11, 2011 at 5:23 AM, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-126: Compliance Requirement > > Proposal Originator: Marla Azinger > > Proposal Version: 1 > > Date: 11 January 2011 > > Proposal type: new > > Policy term: permanent > > Policy statement: > > Resource Review > Update the following NRPM Sections: > > 12.4 Update to: > Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources > or update reassignment information as needed to bring them into (or > reasonably close to) compliance. > > 12.5 Update to: > If the organization does not voluntarily return resources or update > reassignment information as requested, ARIN will cease providing reverse > DNS services and/or revoke any resources issued by ARIN as required to > bring the organization into overall compliance. ARIN shall follow the > same guidelines for revocation that are required for voluntary return in > the previous paragraph. > > 12.6 Update to: > Except in cases of fraud, or violations of policy, an organization shall > be given a minimum (30) days to respond. Progress of record(s) > correction(s) must be visible within (60) days after correspondence with > ARIN began or ARIN will start proceeding with removal of DNS services > and/or resources issued by ARIN. ARIN shall negotiate a longer term > with the organization if ARIN believes the organization is working in > good faith to substantially restore compliance and has a valid need for > additional time to renumber out of the affected blocks. > > Rationale: > > To date the community has not documented or firmly established use of an > effective enforcement mechanism. This policy will support current > policy and compel those who are allocated ARIN resources to maintain the > proper WHOIS records in accordance with ARIN NRPM. While it is > recognized this is not an absolute solution to ensure compliance, it is > the best method under current ARIN policies. > > Timetable for implementation: Immediate > > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -------------- next part -------------- An HTML attachment was scrubbed... URL: From cboyd at gizmopartners.com Tue Jan 11 14:49:57 2011 From: cboyd at gizmopartners.com (Chris Boyd) Date: Tue, 11 Jan 2011 13:49:57 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <20110111161813.GA66815@ussenterprise.ufp.org> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> Message-ID: <2B39EABC-5386-4DFD-8935-1978AC4D8F5C@gizmopartners.com> I understand the desire to better manage the address space utilization, but this seems like a lot of work on both sides to manage. Maybe if we were talking about this as a policy in the dawn of ARIN time I could fully support it with a few tweaks. As it stands, it seems that it would just add a lot explanations to execs unfamiliar with ARIN about why we need to do all this additional work just because we [shut down a division | sold a customer base | other business reason for changing address space used]. It seems to try to conserve IPv4 resources that we're all supposed to be moving away from. We're still relying on end users to accurately report usage of address space, and I don't think that anyone wants to get ARIN into a full-blown network auditor position. Overall, I'd rather keep the current language. --Chris From farmer at umn.edu Tue Jan 11 15:01:46 2011 From: farmer at umn.edu (David Farmer) Date: Tue, 11 Jan 2011 14:01:46 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2CA837.4000505@brightok.net> References: <4D2C59B6.4040503@arin.net> <4D2CA837.4000505@brightok.net> Message-ID: <4D2CB72A.4080101@umn.edu> On 1/11/11 12:57 CST, Jack Bates wrote: ... > I dislike the changes, as they promote ARIN seeking to audit or take > action more swiftly, as it's much easier to break rDNS than it is to > revoke address space. If the matter is serious enough, they should just > revoke the space; not deal with rDNS. I too am seriously concerned about using rDNS as leverage to gain compliance. If keeping Whois up to date is a real issue, then revoke the resources or apply a financial fine to the offender. Turning off rDNS is equally likely to create an operation impact for someone else as it is for the offending party, therefore penalizing the wrong party. Using rDNS as an enforcement mechanism is likely to have unintended consequences. As written I'm opposed to the policy as it is likely to create operation impact on wrong party. -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From cgrundemann at gmail.com Tue Jan 11 15:12:03 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Tue, 11 Jan 2011 13:12:03 -0700 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <2B39EABC-5386-4DFD-8935-1978AC4D8F5C@gizmopartners.com> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> <2B39EABC-5386-4DFD-8935-1978AC4D8F5C@gizmopartners.com> Message-ID: On Tue, Jan 11, 2011 at 12:49, Chris Boyd wrote: > I understand the desire to better manage the address space utilization, but this seems like a lot of work on both sides to manage. ?Maybe if we were talking about this as a policy in the dawn of ARIN time I could fully support it with a few tweaks. > > As it stands, it seems that it would just add a lot explanations to execs unfamiliar with ARIN about why we need to do all this additional work just because we [shut down a division | sold a customer base | other business reason for changing address space used]. > > It seems to try to conserve IPv4 resources that we're all supposed to be moving away from. As a point of clarification (and as Scott already pointed out), the original author's intent was specific to IPv6. Although this policy also affects IPv4, that is not it's intended or stated primary purpose. As such, it may be worthwhile to look at this proposal from the perspective that we *are* talking about this near the dawn of the IPv6 Internet. Just some food for thought, ~Chris > We're still relying on end users to accurately report usage of address space, and I don't think that anyone wants to get ARIN into a full-blown network auditor position. > > Overall, I'd rather keep the current language. > > --Chris > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From kkargel at polartel.com Tue Jan 11 15:41:19 2011 From: kkargel at polartel.com (Kevin Kargel) Date: Tue, 11 Jan 2011 14:41:19 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <8695009A81378E48879980039EEDAD288C048C8F@MAIL1.polartel.local> Opposed > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of ARIN > Sent: Tuesday, January 11, 2011 7:23 AM > To: arin-ppml at arin.net > Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement > > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-126: Compliance Requirement > > Proposal Originator: Marla Azinger > > Proposal Version: 1 > > Date: 11 January 2011 > > Proposal type: new > > Policy term: permanent > > Policy statement: > > Resource Review > Update the following NRPM Sections: > > 12.4 Update to: > Organizations found by ARIN to be materially out of compliance with > current ARIN policy shall be requested or required to return resources > or update reassignment information as needed to bring them into (or > reasonably close to) compliance. > > 12.5 Update to: > If the organization does not voluntarily return resources or update > reassignment information as requested, ARIN will cease providing reverse > DNS services and/or revoke any resources issued by ARIN as required to > bring the organization into overall compliance. ARIN shall follow the > same guidelines for revocation that are required for voluntary return in > the previous paragraph. > > 12.6 Update to: > Except in cases of fraud, or violations of policy, an organization shall > be given a minimum (30) days to respond. Progress of record(s) > correction(s) must be visible within (60) days after correspondence with > ARIN began or ARIN will start proceeding with removal of DNS services > and/or resources issued by ARIN. ARIN shall negotiate a longer term > with the organization if ARIN believes the organization is working in > good faith to substantially restore compliance and has a valid need for > additional time to renumber out of the affected blocks. > > Rationale: > > To date the community has not documented or firmly established use of an > effective enforcement mechanism. This policy will support current > policy and compel those who are allocated ARIN resources to maintain the > proper WHOIS records in accordance with ARIN NRPM. While it is > recognized this is not an absolute solution to ensure compliance, it is > the best method under current ARIN policies. > > Timetable for implementation: Immediate > > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From bjohnson at drtel.com Tue Jan 11 16:35:13 2011 From: bjohnson at drtel.com (Brian Johnson) Date: Tue, 11 Jan 2011 21:35:13 +0000 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: Opposed - Brian J. >-----Original Message----- >From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >Behalf Of ARIN >Sent: Tuesday, January 11, 2011 7:23 AM >To: arin-ppml at arin.net >Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement > >ARIN received the following policy proposal and is posting it to the >Public Policy Mailing List (PPML) in accordance with the Policy >Development Process. > >The ARIN Advisory Council (AC) will review the proposal at their next >regularly scheduled meeting (if the period before the next regularly >scheduled meeting is less than 10 days, then the period may be extended >to the subsequent regularly scheduled meeting). The AC will decide how >to utilize the proposal and announce the decision to the PPML. > >The AC invites everyone to comment on the proposal on the PPML, >particularly their support or non-support and the reasoning >behind their opinion. Such participation contributes to a thorough >vetting and provides important guidance to the AC in their deliberations. > >Draft Policies and Proposals under discussion can be found at: >https://www.arin.net/policy/proposals/index.html > >The ARIN Policy Development Process can be found at: >https://www.arin.net/policy/pdp.html > >Mailing list subscription information can be found >at: https://www.arin.net/mailing_lists/ > >Regards, > >Communications and Member Services >American Registry for Internet Numbers (ARIN) > > >## * ## > > >ARIN-prop-126: Compliance Requirement > >Proposal Originator: Marla Azinger > >Proposal Version: 1 > >Date: 11 January 2011 > >Proposal type: new > >Policy term: permanent > >Policy statement: > >Resource Review >Update the following NRPM Sections: > >12.4 Update to: >Organizations found by ARIN to be materially out of compliance with >current ARIN policy shall be requested or required to return resources >or update reassignment information as needed to bring them into (or >reasonably close to) compliance. > >12.5 Update to: >If the organization does not voluntarily return resources or update >reassignment information as requested, ARIN will cease providing reverse >DNS services and/or revoke any resources issued by ARIN as required to >bring the organization into overall compliance. ARIN shall follow the >same guidelines for revocation that are required for voluntary return in >the previous paragraph. > >12.6 Update to: >Except in cases of fraud, or violations of policy, an organization shall >be given a minimum (30) days to respond. Progress of record(s) >correction(s) must be visible within (60) days after correspondence with >ARIN began or ARIN will start proceeding with removal of DNS services >and/or resources issued by ARIN. ARIN shall negotiate a longer term >with the organization if ARIN believes the organization is working in >good faith to substantially restore compliance and has a valid need for >additional time to renumber out of the affected blocks. > >Rationale: > >To date the community has not documented or firmly established use of an >effective enforcement mechanism. This policy will support current >policy and compel those who are allocated ARIN resources to maintain the >proper WHOIS records in accordance with ARIN NRPM. While it is >recognized this is not an absolute solution to ensure compliance, it is >the best method under current ARIN policies. > >Timetable for implementation: Immediate > > > > > >_______________________________________________ >PPML >You are receiving this message because you are subscribed to >the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >Unsubscribe or manage your mailing list subscription at: >http://lists.arin.net/mailman/listinfo/arin-ppml >Please contact info at arin.net if you experience any issues. From jbates at brightok.net Tue Jan 11 16:45:19 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 11 Jan 2011 15:45:19 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> <2B39EABC-5386-4DFD-8935-1978AC4D8F5C@gizmopartners.com> Message-ID: <4D2CCF6F.3070701@brightok.net> On 1/11/2011 2:12 PM, Chris Grundemann wrote: > As a point of clarification (and as Scott already pointed out), the > original author's intent was specific to IPv6. Although this policy > also affects IPv4, that is not it's intended or stated primary > purpose. > The current language, as applied to v6 isn't very workable or enforceable; nor do I think we really want full blown audits from ARIN. I'd personally support striking the sections, versus amending them. Security through obscurity may not be very effective, but privacy through obscurity sure is. Determining if a range is static, dynamic, home user, business; I prefer to leave people guessing. They have my ARIN POC details for the initial allocation if they have questions. Enforcing additional swips which don't provide additional contact information doesn't serve the community except to provide information that isn't really their business (is it really my responsibility to tell you if you should block a /56 or /48 on your web forum?) I understood the need to a degree on IPv4 for justification. IPv6 justification is handled completely different and should be less dependent on SWIPs which provide next to no utilization information but do provide information which can be useful to people who don't need to know it. whois information is usually kept up-to-date due to cross domain POCs. Absent the POC or the need for rDNS pointers (which fewer will be needed in IPv6 due to nibbles), I don't see a need for additional records if an SP doesn't want to include them. > As such, it may be worthwhile to look at this proposal from the > perspective that we *are* talking about this near the dawn of the IPv6 > Internet. > I dislike the current policy and think it should be abolished. These changes only serve to break rDNS (which being easy to do is more likely to be done) for valid downstream networks. Jack From jcurran at arin.net Tue Jan 11 16:56:22 2011 From: jcurran at arin.net (John Curran) Date: Tue, 11 Jan 2011 21:56:22 +0000 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <246AEB9D-E49D-4F06-8342-C796E8EBA0F7@gmail.com> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> <048DB51D-28FB-45DC-A7CC-5B092DA914DA@gmail.com> <20110111164553.GA69927@ussenterprise.ufp.org> <246AEB9D-E49D-4F06-8342-C796E8EBA0F7@gmail.com> Message-ID: On Jan 11, 2011, at 11:51 AM, Scott Leibrand wrote: > Staff, > > Has this been a problem to date? What's the current threshold for requiring underutilized resource return? We are currently using a 50% threshold for requiring underutilized resource return. This typically comes up during a transfer request and hasn't presented any problems. /John John Curran President and CEO ARIN From jcurran at arin.net Tue Jan 11 17:20:58 2011 From: jcurran at arin.net (John Curran) Date: Tue, 11 Jan 2011 22:20:58 +0000 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <20110111180206.GA75380@ussenterprise.ufp.org> References: <4D2C59B6.4040503@arin.net> <20110111180206.GA75380@ussenterprise.ufp.org> Message-ID: <94BEE81C-AD8B-462A-88F2-146363E9F627@arin.net> On Jan 11, 2011, at 1:02 PM, Leo Bicknell wrote: > This comes from policy 2007-14 > (https://www.arin.net/policy/proposals/2007_14.html) which was > adopted by the Board on February 6th, 2009, and implemented April > 1, 2009. I suspect some of the confusion is due to the fact that > this has been policy less than 8 months. > > 12.2 sets out when this review might happen. > > 12.2.a is for new requests, if folks are requesting more it is unlikely > they have a suplus of free space. > > 12.2.b is fraud/abuse in obtaining space, which is a different problem. > > Which leaves us with 12.2.c as the only case where ARIN might do a > review that turned up under-utilized resources. I'll note that the > policy does not require these reviews it simply states that ARIN > may do them. > > Has ARIN staff ever done a review undertaken on the basis of 12.2.c? > Can we get a report on how many have been done, and the (aggregate) > results? > > If ARIN isn't doing 12.2.c reviews this policy proposal is moot until > reviews start to happen. Did this change come from finding issues with > the reviews? We have utilized NRPM 12 on several occasions but the only time we typically see unused or underutilized resources is during a request for additional resources (12.2.a) or during a transfer, where we may review per 12.2.c. If an organization is requesting new resources and hasn't efficiently utilized what they currently hold, we deny the request and tell them to utilize what they have and come back when they have met the policy requirements. We have not reclaimed their unused or underutilized resources. If this comes up during a transfer, we use a 50% utilization threshold and give them 6 months to one year to fully utilize their resources. We then go back to verify utilization and if the resources are not at least 50% utilized, we will reclaim excess per policy. To date, we have not reclaimed any underutilized resources due to a transfer. We are not proactively seeking out underutilized resources for reclamation per 12.2.c other than as noted above. All of the above excludes use of 12.2.b (fraud), where there are an increasing number of reviews being done & number resources reclaimed. Hope this helps, /John John Curran President and CEO ARIN From stephen at sprunk.org Tue Jan 11 19:05:12 2011 From: stephen at sprunk.org (Stephen Sprunk) Date: Tue, 11 Jan 2011 18:05:12 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <20110111161813.GA66815@ussenterprise.ufp.org> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> Message-ID: <4D2CF038.9010007@sprunk.org> On 11 Jan 2011 10:18, Leo Bicknell wrote: > If I may oversimplify for a moment, giving more space when 80% utilization is passed, and taking it away the organization drops below 80% utilization can lead to thrashing. That scenario is exactly why NRPM 12.4.a says "an organization may remain out of compliance ... as appropriate so as to avoid forcing returns which will result in near-term additional requests". > Additionally, due to the way IP blocks are allocated and used it's likely that someone dropping below 80% would have to do significant renumbering to return a contiguous block, and that block would then subdivide their original allocation. Similarly, that scenario is exactly why NRPM 12.4.b says "Partial address blocks shall be returned in such a way that the portion retained will comprise a single aggregate block." Note the word "retained". Let's say you have a /16. Under NRPM 12, you /cannot/ return a /18, because that would leave you with a /17 and a /18, nor can ARIN /revoke/ a single /18 because their only authority to do so is NRPM 12.5, which /requires/ them to follow the same rule by reference. The registrant could do so voluntarily under another section that allows otherwise, but ARIN cannot /require /it. This was not an accident. > Rather, what is needed is something like you get more when reaching 80% utilization, and ARIN can require the return of space when falling below 40% utilization. As John noted, the "low water mark" is currently 50%. That's not exactly what the policy says, but it seems reasonable enough--and probably takes a lot less work to enforce. > The second is companies that obtained space prior to utilization requirements. For instance, folks who received space in the classful days. There are plenty of universities for instance that needed more than a Class C, so they got a Class B, even though they only need 25% of it even today. This is going to lead to ARIN contacting folks who have had pretty much no interaction with ARIN during the intervening years, who probably don't have an RSA, and so on. That /is /part of the point, if we can ever agree that NRPM 12 does, in fact, extend to legacy resources. I think it does, but Owen thinks it doesn't, hence the word "additional" in 12.8, which makes the text compatible with both views. > Unfortunately, while I like the concept I feel the practical concerns make it of limited value in the IPv4 space. I feel like the level of staff effort is going to be high for minimal gain. Also there is a timing concern, audits take time, renumbering takes time, blocks then sit around to "cool off" before being reissued. Would any IPv4 space get back in the game soon enough to make a meaningful difference? There are many other reasons for reclamation; extending the lifetime of IPv4 is not an important one. S -- Stephen Sprunk "God does not play dice." --Albert Einstein CCIE #3723 "God is an inveterate gambler, and He throws the K5SSS dice at every possible opportunity." --Stephen Hawking -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3646 bytes Desc: S/MIME Cryptographic Signature URL: From stephen at sprunk.org Tue Jan 11 19:13:52 2011 From: stephen at sprunk.org (Stephen Sprunk) Date: Tue, 11 Jan 2011 18:13:52 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <4D2CF240.80801@sprunk.org> On 11 Jan 2011 07:23, ARIN wrote: > ARIN-prop-126: Compliance Requirement Opposed. We do not need another stick; there is a perfectly functional stick already available: revocation. S -- Stephen Sprunk "God does not play dice." --Albert Einstein CCIE #3723 "God is an inveterate gambler, and He throws the K5SSS dice at every possible opportunity." --Stephen Hawking -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3646 bytes Desc: S/MIME Cryptographic Signature URL: From aaron at wholesaleinternet.net Tue Jan 11 19:01:12 2011 From: aaron at wholesaleinternet.net (Aaron Wendel) Date: Tue, 11 Jan 2011 18:01:12 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <046a01cbb1eb$d40aa750$7c1ff5f0$@net> Opposed From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of ARIN Sent: Tuesday, January 11, 2011 7:23 AM To: arin-ppml at arin.net Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-126: Compliance Requirement Proposal Originator: Marla Azinger Proposal Version: 1 Date: 11 January 2011 Proposal type: new Policy term: permanent Policy statement: Resource Review Update the following NRPM Sections: 12.4 Update to: Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources or update reassignment information as needed to bring them into (or reasonably close to) compliance. 12.5 Update to: If the organization does not voluntarily return resources or update reassignment information as requested, ARIN will cease providing reverse DNS services and/or revoke any resources issued by ARIN as required to bring the organization into overall compliance. ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. 12.6 Update to: Except in cases of fraud, or violations of policy, an organization shall be given a minimum (30) days to respond. Progress of record(s) correction(s) must be visible within (60) days after correspondence with ARIN began or ARIN will start proceeding with removal of DNS services and/or resources issued by ARIN. ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. Rationale: To date the community has not documented or firmly established use of an effective enforcement mechanism. This policy will support current policy and compel those who are allocated ARIN resources to maintain the proper WHOIS records in accordance with ARIN NRPM. While it is recognized this is not an absolute solution to ensure compliance, it is the best method under current ARIN policies. Timetable for implementation: Immediate _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. _____ No virus found in this message. Checked by AVG - www.avg.com Version: 10.0.1191 / Virus Database: 1435/3372 - Release Date: 01/10/11 -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Tue Jan 11 20:58:18 2011 From: owen at delong.com (Owen DeLong) Date: Tue, 11 Jan 2011 17:58:18 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2CF038.9010007@sprunk.org> References: <4D2C59B6.4040503@arin.net> <20110111161813.GA66815@ussenterprise.ufp.org> <4D2CF038.9010007@sprunk.org> Message-ID: <5A0AE2F5-F162-4E46-B51A-05C6CD3C8604@delong.com> On Jan 11, 2011, at 4:05 PM, Stephen Sprunk wrote: > On 11 Jan 2011 10:18, Leo Bicknell wrote: >> If I may oversimplify for a moment, giving more space when 80% utilization is passed, and taking it away the organization drops below 80% utilization can lead to thrashing. > > That scenario is exactly why NRPM 12.4.a says "an organization may remain out of compliance ... as appropriate so as to avoid forcing returns which will result in near-term additional requests". > >> Additionally, due to the way IP blocks are allocated and used it's likely that someone dropping below 80% would have to do significant renumbering to return a contiguous block, and that block would then subdivide their original allocation. > > Similarly, that scenario is exactly why NRPM 12.4.b says "Partial address blocks shall be returned in such a way that the portion retained will comprise a single aggregate block." Note the word "retained". > > Let's say you have a /16. Under NRPM 12, you cannot return a /18, because that would leave you with a /17 and a /18, nor can ARIN revoke a single /18 because their only authority to do so is NRPM 12.5, which requires them to follow the same rule by reference. The registrant could do so voluntarily under another section that allows otherwise, but ARIN cannot require it. This was not an accident. > >> Rather, what is needed is something like you get more when reaching 80% utilization, and ARIN can require the return of space when falling below 40% utilization. > > As John noted, the "low water mark" is currently 50%. That's not exactly what the policy says, but it seems reasonable enough--and probably takes a lot less work to enforce. > >> The second is companies that obtained space prior to utilization requirements. For instance, folks who received space in the classful days. There are plenty of universities for instance that needed more than a Class C, so they got a Class B, even though they only need 25% of it even today. This is going to lead to ARIN contacting folks who have had pretty much no interaction with ARIN during the intervening years, who probably don't have an RSA, and so on. > > That is part of the point, if we can ever agree that NRPM 12 does, in fact, extend to legacy resources. I think it does, but Owen thinks it doesn't, hence the word "additional" in 12.8, which makes the text compatible with both views. > To be clear here.... In my opinion, NRPM 12 cannot grant ARIN new authority to revoke space ARIN did not previously have the ability to revoke for other reasons, such as non-payment of fees. NRPM 12 is intended to consider legacy space utilization when contemplating the justification for retaining other address space covered under an RSA. For example, say an organization had a /16 of legacy space which they fully utilized and obtained an additional /20 from ARIN under RSA. Later, it is discovered through NRPM 12 auditing that the organization is now using approximately 1/2 of it's /16 and still using all of its /20. In that case, NRPM 12 would give ARIN the authority and responsibility to reclaim the /20 and the organization would be expected to renumber into the legacy /16. Now, later when the organization further reduces their utilization and is only using 25% of their legacy /16, ARIN would have no new authority under NRPM 12 to partially reclaim that /16. To date, it has not been established that ARIN does or does not have the ability and/or authority to revoke or partially revoke legacy resources which are not voluntarily abandoned by the resource holder. NRPM 12 does not change that in any way. If it is later found that ARIN does have such ability and authority, then, I would presume that NRPM 12 would apply to it. OTOH, if it is found that ARIN does not have such ability and authority, then, we can't change that fact through ARIN policy changes. >> Unfortunately, while I like the concept I feel the practical concerns make it of limited value in the IPv4 space. I feel like the level of staff effort is going to be high for minimal gain. Also there is a timing concern, audits take time, renumbering takes time, blocks then sit around to "cool off" before being reissued. Would any IPv4 space get back in the game soon enough to make a meaningful difference? > > There are many other reasons for reclamation; extending the lifetime of IPv4 is not an important one. > Yep. Owen \ -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Tue Jan 11 17:46:20 2011 From: owen at delong.com (Owen DeLong) Date: Tue, 11 Jan 2011 14:46:20 -0800 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2CB72A.4080101@umn.edu> References: <4D2C59B6.4040503@arin.net> <4D2CA837.4000505@brightok.net> <4D2CB72A.4080101@umn.edu> Message-ID: <9C1B56F6-F0CA-415A-A731-135CCFA1F6A6@delong.com> On Jan 11, 2011, at 12:01 PM, David Farmer wrote: > On 1/11/11 12:57 CST, Jack Bates wrote: > ... >> I dislike the changes, as they promote ARIN seeking to audit or take >> action more swiftly, as it's much easier to break rDNS than it is to >> revoke address space. If the matter is serious enough, they should just >> revoke the space; not deal with rDNS. > > I too am seriously concerned about using rDNS as leverage to gain compliance. If keeping Whois up to date is a real issue, then revoke the resources or apply a financial fine to the offender. Turning off rDNS is equally likely to create an operation impact for someone else as it is for the offending party, therefore penalizing the wrong party. Using rDNS as an enforcement mechanism is likely to have unintended consequences. > You do realize that revocation from an ARIN perspective means: 1. Remove the whois entry 2. Remove the rDNS delegation 3. Make appropriate modifications to billing, if any. > As written I'm opposed to the policy as it is likely to create operation impact on wrong party. > I'm not sure how revocation is less impactful than rDNS removal. Care to elaborate on your thinking here? Owen From mysidia at gmail.com Tue Jan 11 23:20:48 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Tue, 11 Jan 2011 22:20:48 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C7061.3050907@brightok.net> References: <4D2C59B6.4040503@arin.net> <4D2C7061.3050907@brightok.net> Message-ID: On Tue, Jan 11, 2011 at 8:59 AM, Jack Bates wrote: >Opposed > On 1/11/2011 7:23 AM, ARIN wrote: >> 12.4 Update to: >> Organizations found by ARIN to be materially out of compliance with >> current ARIN policy shall be requested or required to return resources >> or update reassignment information as needed to bring them into (or >> reasonably close to) compliance. > To be honest, I'm lazy. The only time I do paperwork is when I have to do > paperwork. ARIN currently enforces compliance of whois information when So people are lazy, therefore have incomplete or out of date reassignment info, is that what you are implying? That would be a reason to consider implementing a proposal such as PP126 or something similar, not a reason to abandon it, because it would be evidence that the policy measures currently provided are not sufficient in themselves to induce compliance with the policy, even by orgs who are innocent of fraud. As you say "The only time I do paperwork is when I have to do paperwork." That would suggest the re-assignment policies currently in effect, and contact information requirements would only be effective with robust enforcement measures. -- -JH From jbates at brightok.net Wed Jan 12 11:15:43 2011 From: jbates at brightok.net (Jack Bates) Date: Wed, 12 Jan 2011 10:15:43 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: References: <4D2C59B6.4040503@arin.net> <4D2C7061.3050907@brightok.net> Message-ID: <4D2DD3AF.20201@brightok.net> On 1/11/2011 10:20 PM, Jimmy Hess wrote: > So people are lazy, therefore have incomplete or out of date > reassignment info, > is that what you are implying? > Depends on what you consider incomplete or out of date. My whois info, which is mostly the original allocations from ARIN entries and perhaps a regional based entry (used for my own tracking and to indicate to law enforcement subpoena information on a telco basis) is very accurate. All contacts are the same. There's no reason to provide more information to the community, as the only additional information which might be provided is the size of each pop DHCP pool or business assignment, which only servers to provide extra information they should have to work to gain knowledge of (for whatever nefarious purposes they want to know it). Otherwise, they can happily contact us as the users of the space and front end service desk to our customers. > That would be a reason to consider implementing a proposal such as PP126 or > something similar, not a reason to abandon it, because it would be evidence > that the policy measures currently provided are not sufficient in > themselves to > induce compliance with the policy, even by orgs who are innocent of fraud. The proposal only adds additional functions and changes time to current policy. The functions that exist are good enough. If it is serious enough for ARIN to revoke rDNS, then it is serious enough for them to revoke the entire allocation/assignment. > As you say "The only time I do paperwork is when I have to do paperwork." > That would suggest the re-assignment policies currently in effect, > and contact > information requirements would only be effective with robust enforcement > measures. > ARIN doesn't overly enforce them now when new allocations are requested. A single generic level of SWIPs generally need to exist, and they are happy. After that, they'll ask for the details of a specific block (usually the last allocated) in the usual host/service layout. The goal of section 12 is about utilizing space from what I've gathered; not that someone didn't issue a whois for every little assignment. Jack From farmer at umn.edu Wed Jan 12 12:52:16 2011 From: farmer at umn.edu (David Farmer) Date: Wed, 12 Jan 2011 11:52:16 -0600 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <9C1B56F6-F0CA-415A-A731-135CCFA1F6A6@delong.com> References: <4D2C59B6.4040503@arin.net> <4D2CA837.4000505@brightok.net> <4D2CB72A.4080101@umn.edu> <9C1B56F6-F0CA-415A-A731-135CCFA1F6A6@delong.com> Message-ID: <4D2DEA50.4080009@umn.edu> On 1/11/11 16:46 CST, Owen DeLong wrote: > > On Jan 11, 2011, at 12:01 PM, David Farmer wrote: > >> On 1/11/11 12:57 CST, Jack Bates wrote: >> ... >>> I dislike the changes, as they promote ARIN seeking to audit or take >>> action more swiftly, as it's much easier to break rDNS than it is to >>> revoke address space. If the matter is serious enough, they should just >>> revoke the space; not deal with rDNS. >> >> I too am seriously concerned about using rDNS as leverage to gain compliance. If keeping Whois up to date is a real issue, then revoke the resources or apply a financial fine to the offender. Turning off rDNS is equally likely to create an operation impact for someone else as it is for the offending party, therefore penalizing the wrong party. Using rDNS as an enforcement mechanism is likely to have unintended consequences. >> > You do realize that revocation from an ARIN perspective means: > 1. Remove the whois entry > 2. Remove the rDNS delegation > 3. Make appropriate modifications to billing, if any. > >> As written I'm opposed to the policy as it is likely to create operation impact on wrong party. >> > I'm not sure how revocation is less impactful than rDNS removal. Care to elaborate on your > thinking here? Yes, I realize revocation has a large impact and that it is a feature in this case. So in the case of revocation when I as third party runs into an issue with rDNS for an address, they do a Whois look-up and find the allocation is no longer valid, stop, done, over, move to next trouble ticket, it is an invalid assignment. If ARIN removes rDNS for an allocation but doesn't revoke the allocation, removed the Whois entry, how as a third party do I have any clue what is going on? This is what I'm objecting to in using rDNS as a leverage to gain compliance. As proposed rDNS will stop working and third parties will not be able to determine why. This create a potentially larger impact on third parties then actual revocation. The only way I can see a proposal like this working is to add some kind of status field into Whois, with a status like "suspended" in this case. I suspect the status would be more or less ignored, but at least a third party can find a clue to the cause of the rDNS disruption created by this proposal. Without some kind of published status change, or a full revocation, the confusion created for third parties by a proposal like creates an unacceptable impact, potentially larger than full revocation of the resources in question. -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From narten at us.ibm.com Wed Jan 12 15:14:33 2011 From: narten at us.ibm.com (Thomas Narten) Date: Wed, 12 Jan 2011 15:14:33 -0500 Subject: [arin-ppml] RFC 3177 has been obsoleted Message-ID: <201101122014.p0CKEXX7019643@cichlid.raleigh.ibm.com> The IETF document "IPv6 Address Assignment to End Sites" (RFC 3177) has been updated and replaced: > The IESG has approved the following document: > - 'IPv6 Address Assignment to End Sites' > (draft-ietf-v6ops-3177bis-end-sites-01.txt) as a BCP Quoting from the Introduction: This document obsoletes RFC 3177, updating its recommendations in the following ways: 1) It is no longer recommended that /128s be given out. While there may be some cases where assigning only a single address may be justified, a site by definition implies multiple subnets and multiple devices. 2) RFC 3177 specifically recommended using prefix lengths of /48, /64 and /128. Specifying a small number of fixed boundaries has raised concerns that implementations and operational practices might become "hard-coded" to recognize only those fixed boundaries (i.e., a return to "classful addressing"). The actual intention has always been that there be no hard-coded boundaries within addresses, and that CIDR continues to apply to all bits of the routing prefixes. 3) This document moves away from the previous recommendation that a single default assignment size (e.g., a /48) makes sense for all end sites in the general case. End sites come in different shapes and sizes, and a one-size-fits-all approach is not necessary or appropriate. This document does, however, reaffirm an important assumption behind RFC 3177: A key principle for address management is that end sites always be able to obtain a reasonable amount of address space for their actual and planned usage, and over time ranges specified in years rather than just months. In practice, that means at least one /64, and in most cases significantly more. One particular situation that must be avoided is having an end site feel compelled to use IPv6-to-IPv6 Network Address Translation or other burdensome address conservation techniques because it could not get sufficient address space. Thomas ------- Forwarded Message From: The IESG To: IETF-Announce Cc: v6ops mailing list , Internet Architecture Board , v6ops chair , RFC Editor Date: Wed, 12 Jan 2011 11:50:42 -0800 Subject: [v6ops] Protocol Action: 'IPv6 Address Assignment to End Sites' to BCP (draft-ietf-v6ops-3177bis-end-sites-01.txt) The IESG has approved the following document: - 'IPv6 Address Assignment to End Sites' (draft-ietf-v6ops-3177bis-end-sites-01.txt) as a BCP This document is the product of the IPv6 Operations Working Group. The IESG contact persons are Ron Bonica and Dan Romascanu. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-ietf-v6ops-3177bis-end-sites/ Technical Summary RFC 3177 argued that in IPv6, end sites should be assigned /48 blocks in most cases. The Regional Internet Registries (RIRs) adopted that recommendation in 2002, but began reconsidering the policy in 2005. This document revisits and updates the RFC 3177 recommendations on the assignment of IPv6 address space to end sites. The exact choice of how much address space to assign end sites is an issue for the operational community. The role of the IETF is limited to providing guidance on IPv6 architectural and operational considerations. This document reviews the architectural and operational considerations of end site assignments as well as the motivations behind the original 3177 recommendations. Moreover, the document clarifies that a one- size-fits-all recommendation of /48 is not nuanced enough for the broad range of end sites and is no longer recommended as a single default. This document updates and replaces RFC 3177. Working Group Summary The IPv6 Operations Working Group very solidly supported the specific changes in proposed policy from RFC 3177. These are: 1) It is no longer recommended that /128s be given out. While ther may be some cases where assigning only a single address may be justified, a site by definition implies multiple subnets and multiple devices. 2) RFC 3177 specifically recommended using prefix lengths of /48, /64 and /128. Specifying a small number of fixed boundaries has raised concerns that implementations and operational practices might become "hard-coded" to recognize only those fixed boundaries (i.e., a return to "classful addressing"). The actual intention has always been that there be no hard-coded boundaries within addresses, and that CIDR continues to apply to all bits of the routing prefixes. 3) This document moves away from the previous recommendation that a single default assignment size (e.g., a /48) makes sense for all end sites in the general case. End sites come in different shapes and sizes, and a one-size-fits-all approach is not necessary or appropriate. This document does, however, reaffirm an important assumption behind RFC 3177: A key principle for address management is that end sites always be able to obtain a reasonable amount of address space for their actual and planned usage, and over time ranges specified in years rather than just months. In practice, that means at least one /64, and in most cases significantly more. One particular situation that must be avoided is having an end site feel compelled to use IPv6-to-IPv6 Network Address Translation or other burdensome address conservation techniques because it could not get sufficient address space. Document Quality The document appears to be of very high quality and essentially unanimous support. Personnel Fred Baker is shepherd for this document. _______________________________________________ v6ops mailing list v6ops at ietf.org https://www.ietf.org/mailman/listinfo/v6ops ------- End of Forwarded Message From info at arin.net Wed Jan 12 16:30:15 2011 From: info at arin.net (ARIN) Date: Wed, 12 Jan 2011 16:30:15 -0500 Subject: [arin-ppml] =?windows-1252?q?NRPM_2011=2E1_=96_New_Policies_Imple?= =?windows-1252?q?mented?= Message-ID: <4D2E1D67.2030605@arin.net> A new version of the ARIN Number Resource Policy Manual (NRPM) has been published to the ARIN website. NRPM version 2011.1 is effective 12 January 2011 and supersedes the previous version. NRPM version 2011.1 contains the implementation of the following policies: ARIN-2010-1: Waiting List for Unmet IPv4 Requests ARIN-2010-12: IPv6 Subsequent Allocation ARIN-2009-6: IANA Policy for Allocation of ASNs to RIRs 2010-1 was adopted by the ARIN Board on 10 August 2010. 2010-12 was adopted by the ARIN Board on 22 November 2010. Board minutes are available at: https://www.arin.net/about_us/bot/index.html 2009-6 was a global policy proposal. It was adopted by the ICANN Board in September 2010: http://www.icann.org/en/announcements/announcement-2-21sep10-en.htm In addition, on 22 November 2010 the ARIN Board of Trustees adopted ARIN-2010-10 (Global Proposal): Global Policy for IPv4 Allocations by the IANA Post Exhaustion. This is a global proposal which awaits the conclusion of the Global Policy Development Process. The NRPM is available at: https://www.arin.net/policy/nrpm.html Draft policies and proposals are available at: https://www.arin.net/policy/proposals/ The ARIN Policy Development Process is available at: https://www.arin.net/policy/pdp.html The Global Policy Development Process is available at: http://aso.icann.org/documents/memorandum-of-understanding/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) From farmer at umn.edu Wed Jan 12 21:52:01 2011 From: farmer at umn.edu (David Farmer) Date: Wed, 12 Jan 2011 20:52:01 -0600 Subject: [arin-ppml] RFC 3177 has been obsoleted In-Reply-To: <201101122014.p0CKEXX7019643@cichlid.raleigh.ibm.com> References: <201101122014.p0CKEXX7019643@cichlid.raleigh.ibm.com> Message-ID: <4D2E68D1.2090507@umn.edu> On 1/12/11 14:14 CST, Thomas Narten wrote: > The IETF document "IPv6 Address Assignment to End Sites" (RFC 3177) > has been updated and replaced: > >> The IESG has approved the following document: >> - 'IPv6 Address Assignment to End Sites' >> (draft-ietf-v6ops-3177bis-end-sites-01.txt) as a BCP Thomas, Thank you for the note and for the work you and the other authors did in producing this IETF Draft. I would be interested in your opinion on Draft Policy ARIN-2010-8: "Rework of IPv6 assignment criteria" that the AC has recently recommended to the Board for adoption, and if you believe it is consistent with the intent of this IETF Draft. https://www.arin.net/policy/proposals/2010_8.html Thanks -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From info at arin.net Wed Jan 19 13:58:01 2011 From: info at arin.net (ARIN) Date: Wed, 19 Jan 2011 13:58:01 -0500 Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient Utilization of IPv4 Requires Dual-Stack - petition not successful In-Reply-To: <4D2781F1.8010602@arin.net> References: <4D125FAE.3050307@arin.net> <4D2781F1.8010602@arin.net> Message-ID: <4D373439.6040801@arin.net> The petition did not receive 10 statements of support and is therefore not successful. ARIN-prop-125 is closed. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ARIN wrote: >> The duration of the petition is until five business days after the AC's >> draft meeting minutes are published. > > The minutes from the ARIN Advisory Council's meeting of 16 December 2010 > have been published and are available at: > https://www.arin.net/about_us/ac/index.html > > The petition of proposal 125 will end on 14 January 2011. > > Draft Policy and Policy Proposal texts are available at: > https://www.arin.net/policy/proposals/index.html > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > ARIN wrote: >> The message below started a petition regarding the ARIN Advisory >> Council's decision to abandon "ARIN-prop-125 Efficient Utilization of >> IPv4 Requires Dual-Stack". The AC's decision was posted by ARIN staff to >> PPML on 21 December 2010. >> >> If successful, this petition will change ARIN-prop-125 into a Draft >> Policy which will be published for adoption discussion on the PPML and >> at the Public Policy Meeting in April. If the petition fails, the >> proposal will be closed. >> >> For this petition to be successful, the petition needs statements of >> support from at least 10 different people from 10 different >> organizations. If you wish to support this petition, post a statement of >> support to PPML on this thread. >> >> The duration of the petition is until five business days after the AC's >> draft meeting minutes are published. ARIN staff will post the result of >> the petition to PPML. >> >> For more information on starting and participating in petitions, see PDP >> Petitions at: >> https://www.arin.net/policy/pdp_petitions.html >> >> The proposal text is below and at: >> https://www.arin.net/policy/proposals/index.html >> >> The ARIN Policy Development Process can be found at: >> https://www.arin.net/policy/pdp.html >> >> Regards, >> >> Communications and Member Services >> American Registry for Internet Numbers (ARIN) >> >> >> ##### >> >> >>> -----Original Message----- >>> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >>> Behalf Of Chris Grundemann >>> Sent: Wednesday, December 22, 2010 3:11 PM >>> To: arin-ppml at arin.net >>> Subject: [arin-ppml] Discussion Petition of ARIN-prop-125 Efficient >>> Utilization of IPv4 Requires Dual-Stack >>> >>> The AC should not have abandoned ARIN-prop-125 Efficient Utilization >>> of IPv4 Requires Dual-Stack. I petition to move the following text >>> forward for discussion on the list and at the next Public Policy >>> Meeting. Please support moving this proposal forward now by posting >>> statements in support of the petition to this list. >>> >>> ### >>> >>> Policy Statement: >>> >>> * Add the following sections to section 4.1: >>> >>> 4.1.2. Efficient Utilization >>> >>> IPv4 addresses are a finite resource and as such are required to be >>> efficiently utilized by resource holders in order to maximize their >>> benefit to the community. >>> >>> 4.1.3. Dual-Stack >>> >>> Dual-stack refers to configuring both an IPv4 and an IPv6 address or >>> network together on the same network infrastructure. >>> >>> All new IPv4 addresses assigned, allocated or transfered to an >>> organization must be deployed on dual-stacked interfaces along with >>> IPv6 addresses. >>> >>> 4.1.4. IPv6 Deployment >>> >>> When addresses are used to provide an Internet facing service, the >>> service must be fully IPv6 accessible (if you deploy an A record, you >>> must also have a AAAA record, and both must answer). >>> >>> * Add the following sentance to the end of sections 4.2.1.6, >>> 4.2.2.1.2, 4.2.2.2.1, 4.2.3.1. and 4.3.4: >>> >>> In accordance with section 4.1.3 and 4.1.4, all new addresses must be >>> deployed on dual-stacked interfaces and all Internet facing services >>> provided by new addresses must be fully IPv6 accessible. >>> >>> * Re-write section 4.2.3.4.1. to: >>> >>> Reassignment information for prior allocations must show that each >>> customer meets the 80% utilization criteria, the dual-stack criteria >>> and must be available via SWIP / RWhois prior to your issuing them >>> additional space. >>> >>> * Add the following section to section 4.2.4: >>> >>> 4.2.4.5. IPv6 Deployment >>> >>> In order to receive additional space ISPs must provide detailed >>> documentation demonstrating that: >>> - for every IPv4 address requested, at least one pre-existing >>> interface is dual stacked, up to 80% of all interfaces and >>> - for every down stream customer site where the new addresses will be >>> deployed, at least one pre-existing down stream customer site is IPv6 >>> enabled, up to 80% of the total customer base. >>> >>> * Add the following to section 4.3.6: >>> >>> 4.3.6.3. IPv6 Deployment >>> >>> In order to receive additional space end-users must provide detailed >>> documentation demonstrating that at least 80% of their existing IPv4 >>> addresses are deployed on dual-stacked interfaces in accordance with >>> section 4.1.3. >>> >>> Rational: >>> >>> In this period of available IPv4 address scarcity and transition to >>> IPv6, IPv4 addresses that are not deployed along with IPv6 are simply >>> not being efficiently utilized. Although we have likely failed to >>> deploy dual-stack in a meaningful way in time to avoid transition >>> problems, we can still choose the correct path for future assignments, >>> allocations and transfers. >>> >>> This proposal has three objectives: >>> -1- Encourage IPv6 deployment prior to and post depletion >>> -2- Enable growth of IPv4 to accelerate IPv6 transition #[only change >>> was to this line]# >>> -3- Improve the utilization of IP addresses >>> >>> It accomplishes these goals by enforcing three basic ideals: >>> -1- ARIN will only make allocations and assignments for networks that >>> have already deployed production IPv6 >>> -2- Any new IPv4 addresses received, must be deployed along side of >>> IPv6 (dual-stacked) >>> -3- Firmly encourages deployment of IPv6 in existing IPv4-only networks >>> >>> The specific requirements to be enforced can be summed up in this way: >>> ~ New addresses must be deployed on dual-stacked interfaces plus one >>> additional pre-existing IPv4-only interface must be dual-stacked per >>> new address, up to 80% of all interfaces. >>> ~ For each down stream customer site where these addresses are >>> deployed, another pre-existing IPv4 only down stream site must also be >>> IPv6 enabled, up to 80% of the total customer base. >>> ~ All end-sites must dual-stack before getting new space. >>> ~ Internet facing services that new IPv4 addresses are used to provide >>> must be fully IPv6 accessible. >>> >>> ### >>> >>> Chris Grundemann >>> www.theIPv6experts.net >>> chris at theIPv6experts.net >>> _______________________________________________ >>> PPML >>> You are receiving this message because you are subscribed to >>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >>> Unsubscribe or manage your mailing list subscription at: >>> http://lists.arin.net/mailman/listinfo/arin-ppml >>> Please contact info at arin.net if you experience any issues. >> >> >> >> >> >> >> > > > > > From john.garris at nasa.gov Thu Jan 20 07:05:42 2011 From: john.garris at nasa.gov (Garris, John (HQ-WIH10)) Date: Thu, 20 Jan 2011 06:05:42 -0600 Subject: [arin-ppml] Support for Policy Proposal 126 Message-ID: I fully support ARIN Policy Proposal 126. John Garris Special Agent In-Charge, Computer Crimes Division NASA Office of Inspector General HQ NASA, 300 E St SW, Wash DC 20546 202.358.4950 ! WARNING !? This email including any attachments is intended only for authorized recipients.? Recipients may only forward this information as authorized.? Opinions expressed in this E-mail are personal opinions and do not represent the position of the agency unless specifically stated as such. -------- Policy Proposal 126 Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources or update reassignment information as needed to bring them into (or reasonably close to) compliance. 12.5 Update to: If the organization does not voluntarily return resources or update reassignment information as requested, ARIN will cease providing reverse DNS services and/or revoke any resources issued by ARIN as required to bring the organization into overall compliance.? ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. 12.6 Update to: Except in cases of fraud, or violations of policy, an organization shall be given a minimum (30) days to respond.? Progress of record(s) correction(s) must be visible within (60) days after correspondence with ARIN began or ARIN will start proceeding with removal of DNS services and/or resources issued by ARIN.? ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. Rationale: To date the community has not documented or firmly established use of an effective enforcement mechanism.? This policy will support current policy and compel those who are allocated ARIN resources to maintain the proper WHOIS records in accordance with ARIN NRPM.? While it is recognized this is not an absolute solution to ensure compliance, it is the best method under current ARIN policies. From info at arin.net Thu Jan 20 11:26:49 2011 From: info at arin.net (ARIN) Date: Thu, 20 Jan 2011 11:26:49 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension Message-ID: <4D386249.5000801@arin.net> ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-127: Shared Transition Space for IPv4 Address Extension Proposal Originator: Chris Donley, CableLabs Proposal Version: 1 Date: 20 January 2011 Proposal type: modify Policy term: permanent Policy statement: Updates 4.10 of the NRPM: A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 address extension. This block will not be allocated or assigned to any single organization, but is to be shared by Service Providers for internal use for IPv4 address extension deployments until connected networks fully support IPv6. Examples of such needs include: IPv4 addresses between home gateways and NAT444 translators. Rationale: The Internet community is rapidly consuming the remaining supply of unallocated IPv4 addresses. During the transition period to IPv6, it is imperative that Service Providers maintain IPv4 service for devices and networks that are currently incapable of upgrading to IPv6. Consumers must be able to reach the largely IPv4 Internet after exhaustion. Without a means to share addresses, people or organizations who gain Internet access for the first time, or those who switch providers, or move to another area, will be unable to reach the IPv4 Internet. Further, many CPE router devices used to provide residential or small-medium business services have been optimized for IPv4 operation, and typically require replacement in order to fully support the transition to IPv6 (either natively or via one of many transition technologies). In addition, various consumer devices including IP-enabled televisions, gaming consoles, medical and family monitoring devices, etc. are IPv4-only, and cannot be upgraded. While these will eventually be replaced with dual-stack or IPv6 capable devices, this transition will take many years. As these are typically consumer-owned devices, service providers do not have control over the speed of their replacement cycle. However, consumers have an expectation that they will continue to receive IPv4 service, and that such devices will continue to have IPv4 Internet connectivity after the IPv4 pool is exhausted, even if the customer contracts for new service with a new provider. Until such customers replace their Home Gateways and all IPv4-only devices with IPv6-capable devices, Service Providers will be required to continue to offer IPv4 services through the use of an IPv4 address sharing technology such as NAT444. A recent study showed that there is no part of RFC1918 space which would not overlap with some IPv4 gateways, and therefore to prevent address conflicts, new address space is needed. Service providers are currently presented with three options for obtaining sufficient IPv4 address space for NAT444/IPv4 extension deployments: (1) Request allocations under the NRPM; (2) share address space with other providers (this proposal); or (3) use address space allocated to another entity (i.e. ?squat?). Of the three options, option 2 (this proposal) is preferable, as it will minimize the number of addresses used for IPv4 extension deployments while preserving the authority of IANA and RIRs. Timetable for implementation: immediately From jbates at brightok.net Thu Jan 20 11:36:50 2011 From: jbates at brightok.net (Jack Bates) Date: Thu, 20 Jan 2011 10:36:50 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386249.5000801@arin.net> References: <4D386249.5000801@arin.net> Message-ID: <4D3864A2.2060700@brightok.net> Oppose prop 127 On 1/20/2011 10:26 AM, ARIN wrote: > Updates 4.10 of the NRPM: > A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 > address extension. This block will not be allocated or assigned to any > single organization, but is to be shared by Service Providers for > internal use for IPv4 address extension deployments until connected > networks fully support IPv6. Examples of such needs include: IPv4 > addresses between home gateways and NAT444 translators. > For the use proposed, /10 is not enough space. It is also a use which is not region specific, and wasteful for each region to specify their own space for such purposes. > Until such customers replace their Home Gateways and all IPv4-only > devices with IPv6-capable devices, Service Providers will be required to > continue to offer IPv4 services through the use of an IPv4 address > sharing technology such as NAT444. A recent study showed that there is > no part of RFC1918 space which would not overlap with some IPv4 > gateways, and therefore to prevent address conflicts, new address space > is needed. Overlap with home gateway addressing is not a concern of ARIN. RFC1918 could be utilized and home gateways reconfigured if necessary. It is wasteful to allow a small percentage of possible conflicts to warrant additional space. The larger conflict of RFC1918 space is cpe management addressing which used RFC1918, in which case, a very large cable company just ran out and had to request addressing to support this case. A /10 wouldn't come close to supporting that many subscribers. Jack From aaronh at bind.com Thu Jan 20 11:56:52 2011 From: aaronh at bind.com (Aaron Hughes) Date: Thu, 20 Jan 2011 08:56:52 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3864A2.2060700@brightok.net> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> Message-ID: <20110120165652.GB80084@trace.bind.com> While I hate the concept of NAT44, I completely understand there is no unique RFC1918 space not used in homes and therefore a new allocation must be available for transition. This should be used, IMHO, globally for NAT44 only. I support this proposal. Cheers, Aaron On Thu, Jan 20, 2011 at 10:36:50AM -0600, Jack Bates wrote: > Oppose prop 127 > > On 1/20/2011 10:26 AM, ARIN wrote: > >Updates 4.10 of the NRPM: > >A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 > >address extension. This block will not be allocated or assigned to any > >single organization, but is to be shared by Service Providers for > >internal use for IPv4 address extension deployments until connected > >networks fully support IPv6. Examples of such needs include: IPv4 > >addresses between home gateways and NAT444 translators. > > > > For the use proposed, /10 is not enough space. It is also a use > which is not region specific, and wasteful for each region to > specify their own space for such purposes. > > >Until such customers replace their Home Gateways and all IPv4-only > >devices with IPv6-capable devices, Service Providers will be required to > >continue to offer IPv4 services through the use of an IPv4 address > >sharing technology such as NAT444. A recent study showed that there is > >no part of RFC1918 space which would not overlap with some IPv4 > >gateways, and therefore to prevent address conflicts, new address space > >is needed. > > Overlap with home gateway addressing is not a concern of ARIN. > RFC1918 could be utilized and home gateways reconfigured if > necessary. It is wasteful to allow a small percentage of possible > conflicts to warrant additional space. The larger conflict of > RFC1918 space is cpe management addressing which used RFC1918, in > which case, a very large cable company just ran out and had to > request addressing to support this case. A /10 wouldn't come close > to supporting that many subscribers. > > > Jack > -- > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From matthew at matthew.at Thu Jan 20 11:59:50 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 20 Jan 2011 08:59:50 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3864A2.2060700@brightok.net> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> Message-ID: <4D386A06.704@matthew.at> On 1/20/2011 8:36 AM, Jack Bates wrote: > Oppose prop 127 Also Oppose. > > On 1/20/2011 10:26 AM, ARIN wrote: >> Updates 4.10 of the NRPM: >> A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 >> address extension. This block will not be allocated or assigned to any >> single organization, but is to be shared by Service Providers for >> internal use for IPv4 address extension deployments until connected >> networks fully support IPv6. Examples of such needs include: IPv4 >> addresses between home gateways and NAT444 translators. >> > > For the use proposed, /10 is not enough space. It is also a use which > is not region specific, and wasteful for each region to specify their > own space for such purposes. /10 may or may not be enough. Agree that use is not region-specific. > >> Until such customers replace their Home Gateways and all IPv4-only >> devices with IPv6-capable devices, Service Providers will be required to >> continue to offer IPv4 services through the use of an IPv4 address >> sharing technology such as NAT444. A recent study showed that there is >> no part of RFC1918 space which would not overlap with some IPv4 >> gateways, and therefore to prevent address conflicts, new address space >> is needed. > > Overlap with home gateway addressing is not a concern of ARIN. RFC1918 > could be utilized and home gateways reconfigured if necessary. It is > wasteful to allow a small percentage of possible conflicts to warrant > additional space. The larger conflict of RFC1918 space is cpe > management addressing which used RFC1918, in which case, a very large > cable company just ran out and had to request addressing to support > this case. A /10 wouldn't come close to supporting that many subscribers. Either RFC1918 space can be used or IETF can direct IANA to allocate additional space for private addressing via the RFC process, extending the existing RFC1918 space. This is a region-independent solution. Note that this is also a case where some providers might be able, due to the characteristics of their devices, to use class E space, some of which could also be set aside for this purpose. Matthew Kaufman From matthew at matthew.at Thu Jan 20 12:00:38 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 20 Jan 2011 09:00:38 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110120165652.GB80084@trace.bind.com> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> <20110120165652.GB80084@trace.bind.com> Message-ID: <4D386A36.8030009@matthew.at> On 1/20/2011 8:56 AM, Aaron Hughes wrote: > While I hate the concept of NAT44, I completely understand there is no unique RFC1918 space not used in homes and therefore a new allocation must be available for transition. This should be used, IMHO, globally for NAT44 only. I support this proposal. > Reserving ARIN space for the purpose is not appropriate for "globally" as you suggest. Matthew Kaufman From bicknell at ufp.org Thu Jan 20 12:00:27 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Thu, 20 Jan 2011 09:00:27 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386249.5000801@arin.net> References: <4D386249.5000801@arin.net> Message-ID: <20110120170027.GC32583@ussenterprise.ufp.org> In a message written on Thu, Jan 20, 2011 at 11:26:49AM -0500, ARIN wrote: > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension I think I understand the potential need for space described by the author. In pondering if it makes sense for ARIN to allocate resources for this I noticed one omission. Why a /10? Or more interestingly, why can't this be done with a /16, or why doesn't it require a /8? -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From aaronh at bind.com Thu Jan 20 12:11:32 2011 From: aaronh at bind.com (Aaron Hughes) Date: Thu, 20 Jan 2011 09:11:32 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110120170027.GC32583@ussenterprise.ufp.org> References: <4D386249.5000801@arin.net> <20110120170027.GC32583@ussenterprise.ufp.org> Message-ID: <20110120171132.GC80084@trace.bind.com> On Thu, Jan 20, 2011 at 09:00:27AM -0800, Leo Bicknell wrote: > In a message written on Thu, Jan 20, 2011 at 11:26:49AM -0500, ARIN wrote: > > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > I think I understand the potential need for space described by the > author. In pondering if it makes sense for ARIN to allocate resources > for this I noticed one omission. > > Why a /10? Or more interestingly, why can't this be done with a /16, or > why doesn't it require a /8? As I understand it, there are large providers that want it to be an /8 and there are smaller folks who want it to be as small as a /16. This topic came up yesterday at the Cablelabs summit. The compromise suggestion was a /10 to try and keep everyone happy. As for global vs. ARIN region.. I am not sure I understand why people care. It's not meant to be routed, it's meant to be used as a NAT pool between customers (Already NATed) and CGNs. That must be different space than your customer base in order to make NAT44 work. Without it, NAT44 will either fail, or people will use space they should not such as DISA space. No one wants to implement NAT44, however, most will have to in order to continue to provide IPv4 services while services and eyeballs are being migrated to IPv6. Cheers, Aaron > > -- > Leo Bicknell - bicknell at ufp.org - CCIE 3440 > PGP keys at http://www.ufp.org/~bicknell/ > -- > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From owen at delong.com Thu Jan 20 13:44:44 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 20 Jan 2011 10:44:44 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3864A2.2060700@brightok.net> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> Message-ID: Sent from my iPad On Jan 20, 2011, at 8:36 AM, Jack Bates wrote: > Oppose prop 127 > > On 1/20/2011 10:26 AM, ARIN wrote: >> Updates 4.10 of the NRPM: >> A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 >> address extension. This block will not be allocated or assigned to any >> single organization, but is to be shared by Service Providers for >> internal use for IPv4 address extension deployments until connected >> networks fully support IPv6. Examples of such needs include: IPv4 >> addresses between home gateways and NAT444 translators. >> > > For the use proposed, /10 is not enough space. It is also a use which is not region specific, and wasteful for each region to specify their own space for such purposes. > Given that this space can be duplicated even within a service providers network as long as each instance of the addressing is isolated to a particular NAT or set of NATs, I think a /10 is plenty and possibly excessive. I would certainly oppose removing more than a /10 from other uses to facilitate this. As to the regional issue, I doubt that every region will create a block like this. I believe that this is currently only being proposed within the ARIN region and that if we do adopt this proposal, I suspect that the space we set aside would be used globally and that other regions would not create separate blocks for the same purpose. >> Until such customers replace their Home Gateways and all IPv4-only >> devices with IPv6-capable devices, Service Providers will be required to >> continue to offer IPv4 services through the use of an IPv4 address >> sharing technology such as NAT444. A recent study showed that there is >> no part of RFC1918 space which would not overlap with some IPv4 >> gateways, and therefore to prevent address conflicts, new address space >> is needed. > > Overlap with home gateway addressing is not a concern of ARIN. RFC1918 could be utilized and home gateways reconfigured if necessary. It is wasteful to allow a small percentage of possible conflicts to warrant additional space. The larger conflict of RFC1918 space is cpe management addressing which used RFC1918, in which case, a very large cable company just ran out and had to request addressing to support this case. A /10 wouldn't come close to supporting that many subscribers. > > In general, I am inclined to agree with this argument. However I think calling it a small percentage of possible conflicts is not an accurate characterization of the problem. The home gateway market seems to have a relatively random distribution of defaults across all of the RFC-1918 prefixes. Owen From spiffnolee at yahoo.com Thu Jan 20 13:51:25 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Thu, 20 Jan 2011 10:51:25 -0800 (PST) Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3864A2.2060700@brightok.net> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> Message-ID: <275440.47391.qm@web63303.mail.re1.yahoo.com> > For the use proposed, /10 is not enough space. A /10 is probably enough for the inside of any single Large-Scale NAT. It's actually a pretty large failure domain. > It is also a use which is not region > specific, and wasteful for each region to specify their own space for such >purposes. ISPs in the ARIN region would use this space. I don't care if ISPs outside the ARIN region also use it, since I'll never see the routes. It would be wasteful if every ISP was allocated a prefix to use for the inside of their NAT. If would also be wasteful for each RIR to allocate a prefix for the same use. > > > Until such customers replace their Home Gateways and all IPv4-only > > devices with IPv6-capable devices, Service Providers will be required to > > continue to offer IPv4 services through the use of an IPv4 address > > sharing technology such as NAT444. A recent study showed that there is > > no part of RFC1918 space which would not overlap with some IPv4 > > gateways, and therefore to prevent address conflicts, new address space > > is needed. > > Overlap with home gateway addressing is not a concern of ARIN. RFC1918 > could be utilized and home gateways reconfigured if necessary. How would that work? Hundreds of millions of home gateways are already deployed; how do they get reconfigured? > It is wasteful > to allow a small percentage of possible conflicts to warrant additional space. > There's a survey at http://member.wide.ad.jp/tr/wide-tr-kato-as112-rep-01.pdf showing conflicts. It's not small. > The larger conflict of RFC1918 space is cpe management addressing which > used RFC1918, in which case, a very large cable company just ran out and > had to request addressing to support this case. A /10 wouldn't come close to > supporting that many subscribers. If LSNs were deployed regionally, and OSS were inside the LSN scope, you could reuse pretty well. Though I have some misgivings about the general idea, and though I will go to great lengths to avoid the use of Large Scale NAT, if it is required, then unique address space will be required for it. Therefore, I support this proposal. Lee > > > Jack > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From Wesley.E.George at sprint.com Thu Jan 20 13:51:28 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Thu, 20 Jan 2011 18:51:28 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386A06.704@matthew.at> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> <4D386A06.704@matthew.at> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E059373@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Matthew Kaufman > Sent: Thursday, January 20, 2011 12:00 PM > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > ... or IETF can direct IANA to allocate > additional space for private addressing via the RFC process, extending > the existing RFC1918 space. This is a region-independent solution. [WES] Tried and failed. http://datatracker.ietf.org/doc/draft-weil-opsawg-provider-address-space/ or http://tools.ietf.org/html/draft-shirasaki-isp-shared-addr-05 I've had lengthy discussions with the authors of the draft and this policy during and after the last IETF, which actually resulted in this draft: http://tools.ietf.org/html/draft-george-ipv6-required-00 So we don't have to rehash this entire argument here, I encourage you to read the archives of the IETF OPSAreaWG, http://www.ietf.org/mail-archive/web/opsawg/current/maillist.html from about 10/26-11/17/2010, specifically the subjects that match draft-weil, and the ones that start with "Heads Up" TL;dr version of the arguments made in those threads- I oppose this. I'll be among the first to admit that NAT44(4) is inevitable, and blocking this policy won't change that. I oppose it because: - a /8 wouldn't even be enough in many cases (Mobile networks), - a /10 won't be enough in even more cases (they dropped to a /10 because a /8 was even more unanimously shot down in IETF), both meaning that you'd still end up with multiple NAT regions where you have to reuse the same space - no conclusive evidence has been shown that there is actually a conflict with all portions of RFC1918 that make it unusable - there is no guarantee that people won't immediately start using it as an extension of RFC1918. - it breaks 6to4 and anything else that knows to behave differently if it's getting RFC1918 (non-unique) space > > Note that this is also a case where some providers might be able, due > to > the characteristics of their devices, to use class E space, some of > which could also be set aside for this purpose. [WES] This has also been discussed in the past. There are too many devices that reject Class E space as invalid. Stupid on the part of the vendors in question, but that ship sailed long ago. The work necessary to fix this (or to tack additional space onto RFC1918) would be much better served replacing the same legacy gear with gear that supports IPv6 properly to reduce the need for NAT44(4). Since I know NAT44(4) will be required (I have to do it too), it's best to just acknowledge that we have to either squat or use 1918 and deal with the repercussions of either. I know ARIN can't officially sanction squatting on legacy space that will never be routed on the public internet, but it's already happening, and reserving this space is too little, too late. Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From bill at herrin.us Thu Jan 20 14:42:35 2011 From: bill at herrin.us (William Herrin) Date: Thu, 20 Jan 2011 14:42:35 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386249.5000801@arin.net> References: <4D386249.5000801@arin.net> Message-ID: On Thu, Jan 20, 2011 at 11:26 AM, ARIN wrote: > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > Updates 4.10 of the NRPM: > A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 > address extension. This block will not be allocated or assigned to any > single organization, but is to be shared by Service Providers for > internal use for IPv4 address extension deployments until connected > networks fully support IPv6. Tentatively SUPPORT. It would have been nice if the IETF had gotten traction with a version of this that didn't originate from a particular region but their effort collapsed and that leaves the question to us. I don't know about the rest of you but the five big-name ISPs I deal with *still* haven't turned up IPv6 for me. This is gonna be a -long- transition and conflicting your carrier NAT with your customers' interior private IPs doesn't strike me as a winning proposition. Setting aside one space that every ISP can use seems like a smarter solution than each ISP carving out a piece of their otherwise publicly routable space for the task. On Thu, Jan 20, 2011 at 1:51 PM, George, Wes E [NTK] wrote: > - a /8 wouldn't even be enough in many cases (Mobile networks), > - a /10 won't be enough in even more cases (they dropped to a /10 because a > /8 was even more unanimously shot down in IETF), both meaning that you'd > still end up with multiple NAT regions where you have to reuse the same > space Hi Wes, As someone else pointed out, the only place you can't have duplication is within the particular NAT domain. That could usefully span a /4 and it could usefully span a /16. It's just a question of how many addressing domains you have to break your CGN into. /10 strikes me as a reasonable compromise number. > - no conclusive evidence has been shown that there is actually a conflict > with all portions of RFC1918 that make it unusable I just programmed 10.0.0.0/8, 172.16,0.0/12 and 192.168.0.0/16 on my network. My ISPs are now conclusively shown to have a conflict with my active and valid internal addressing. Seriously Wes, that's not a sound argument. There are only 70,000 /24's in RFC1918 space and folks who don't take their home routers' default often select much more than a /24. Of _course_ any ISP of non-trivial size is going to conflict with some of his customers if they're both selecting from the same relatively small pool. ULA needed a massive bit space to statistically avoid collisions. It ain't in the numbers for RFC 1918. > - there is no guarantee that people won't immediately start using it as an > extension of RFC1918. This is a red herring. Customers who deliberately break their networks are in a whole different category than the ones where I've inadvertently stomped on their reasonable and legitimate configuration. > - it breaks 6to4 and anything else that knows to behave differently if it's > getting RFC1918 (non-unique) space I'll give you that one for now, though I'm very suspicious of any technology hard-coded to behave differently depending on where in the unicast address space it finds itself. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From marty at akamai.com Thu Jan 20 14:58:14 2011 From: marty at akamai.com (Hannigan, Martin) Date: Thu, 20 Jan 2011 14:58:14 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386249.5000801@arin.net> Message-ID: Tentative support. I understand the problems, technical and financial, that the cable operators are facing and think that this idea is at least worth a discussion. There's room for the proposal to tighten up a bit with respect to overall use, but we can wait and see what the overall feedback is. I took the pointer that Wes gave as well with respect to the IETF mailing list and while I think that while a lot of the issues were hashed out, things change with respect to making this regional and reducing the size to a /10. I'm also sympathetic to the cost implications of failing, for them and for [you]. The proposal is not necessarily unreasonable, but we should be careful to work closely with the authors to insure that what we end up is workable. Best, -M< On 1/20/11 11:26 AM, "ARIN" wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > Proposal Originator: Chris Donley, CableLabs > > Proposal Version: 1 > > Date: 20 January 2011 > > Proposal type: modify > > Policy term: permanent > > Policy statement: > > Updates 4.10 of the NRPM: > A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 > address extension. This block will not be allocated or assigned to any > single organization, but is to be shared by Service Providers for > internal use for IPv4 address extension deployments until connected > networks fully support IPv6. Examples of such needs include: IPv4 > addresses between home gateways and NAT444 translators. > > Rationale: > > The Internet community is rapidly consuming the remaining supply of > unallocated IPv4 addresses. During the transition period to IPv6, it is > imperative that Service Providers maintain IPv4 service for devices and > networks that are currently incapable of upgrading to IPv6. > Consumers must be able to reach the largely IPv4 Internet after > exhaustion. Without a means to share addresses, people or organizations > who gain Internet access for the first time, or those who switch > providers, or move to another area, will be unable to reach the IPv4 > Internet. > > Further, many CPE router devices used to provide residential or > small-medium business services have been optimized for IPv4 operation, > and typically require replacement in order to fully support the > transition to IPv6 (either natively or via one of many transition > technologies). In addition, various consumer devices including > IP-enabled televisions, gaming consoles, medical and family monitoring > devices, etc. are IPv4-only, and cannot be upgraded. While these will > eventually be replaced with dual-stack or IPv6 capable devices, this > transition will take many years. As these are typically consumer-owned > devices, service providers do not have control over the speed of their > replacement cycle. However, consumers have an expectation that they > will continue to receive IPv4 service, and that such devices will > continue to have IPv4 Internet connectivity after the IPv4 pool is > exhausted, even if the customer contracts for new service with a new > provider. > > Until such customers replace their Home Gateways and all IPv4-only > devices with IPv6-capable devices, Service Providers will be required to > continue to offer IPv4 services through the use of an IPv4 address > sharing technology such as NAT444. A recent study showed that there is > no part of RFC1918 space which would not overlap with some IPv4 > gateways, and therefore to prevent address conflicts, new address space > is needed. > > Service providers are currently presented with three options for > obtaining sufficient IPv4 address space for NAT444/IPv4 extension > deployments: (1) Request allocations under the NRPM; (2) share address > space with other providers (this proposal); or (3) use address space > allocated to another entity (i.e. ?squat?). Of the three options, > option 2 (this proposal) is preferable, as it will minimize the number > of addresses used for IPv4 extension deployments while preserving the > authority of IANA and RIRs. > > Timetable for implementation: immediately > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Thu Jan 20 15:11:10 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 20 Jan 2011 12:11:10 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: Message-ID: <1C9BCF4A-3717-40BF-ADEC-3BC871E35272@delong.com> It's not limited to cable ops. In fact, in many ways they are better off than DSL ops in that DOCSIS 3 has had v6 support spec'd out for much longer than any of the DSL specs. However, this will impact ALL ISPs that have to implement NAT444...4 Owen Sent from my iPad On Jan 20, 2011, at 11:58 AM, "Hannigan, Martin" wrote: > > > Tentative support. I understand the problems, technical and financial, that > the cable operators are facing and think that this idea is at least worth a > discussion. There's room for the proposal to tighten up a bit with respect > to overall use, but we can wait and see what the overall feedback is. > > I took the pointer that Wes gave as well with respect to the IETF mailing > list and while I think that while a lot of the issues were hashed out, > things change with respect to making this regional and reducing the size to > a /10. I'm also sympathetic to the cost implications of failing, for them > and for [you]. The proposal is not necessarily unreasonable, but we should > be careful to work closely with the authors to insure that what we end up is > workable. > > > Best, > > -M< > > > > > > On 1/20/11 11:26 AM, "ARIN" wrote: > >> ARIN received the following policy proposal and is posting it to the >> Public Policy Mailing List (PPML) in accordance with the Policy >> Development Process. >> >> The ARIN Advisory Council (AC) will review the proposal at their next >> regularly scheduled meeting (if the period before the next regularly >> scheduled meeting is less than 10 days, then the period may be extended >> to the subsequent regularly scheduled meeting). The AC will decide how >> to utilize the proposal and announce the decision to the PPML. >> >> The AC invites everyone to comment on the proposal on the PPML, >> particularly their support or non-support and the reasoning >> behind their opinion. Such participation contributes to a thorough >> vetting and provides important guidance to the AC in their deliberations. >> >> Draft Policies and Proposals under discussion can be found at: >> https://www.arin.net/policy/proposals/index.html >> >> The ARIN Policy Development Process can be found at: >> https://www.arin.net/policy/pdp.html >> >> Mailing list subscription information can be found >> at: https://www.arin.net/mailing_lists/ >> >> Regards, >> >> Communications and Member Services >> American Registry for Internet Numbers (ARIN) >> >> >> ## * ## >> >> >> ARIN-prop-127: Shared Transition Space for IPv4 Address Extension >> >> Proposal Originator: Chris Donley, CableLabs >> >> Proposal Version: 1 >> >> Date: 20 January 2011 >> >> Proposal type: modify >> >> Policy term: permanent >> >> Policy statement: >> >> Updates 4.10 of the NRPM: >> A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 >> address extension. This block will not be allocated or assigned to any >> single organization, but is to be shared by Service Providers for >> internal use for IPv4 address extension deployments until connected >> networks fully support IPv6. Examples of such needs include: IPv4 >> addresses between home gateways and NAT444 translators. >> >> Rationale: >> >> The Internet community is rapidly consuming the remaining supply of >> unallocated IPv4 addresses. During the transition period to IPv6, it is >> imperative that Service Providers maintain IPv4 service for devices and >> networks that are currently incapable of upgrading to IPv6. >> Consumers must be able to reach the largely IPv4 Internet after >> exhaustion. Without a means to share addresses, people or organizations >> who gain Internet access for the first time, or those who switch >> providers, or move to another area, will be unable to reach the IPv4 >> Internet. >> >> Further, many CPE router devices used to provide residential or >> small-medium business services have been optimized for IPv4 operation, >> and typically require replacement in order to fully support the >> transition to IPv6 (either natively or via one of many transition >> technologies). In addition, various consumer devices including >> IP-enabled televisions, gaming consoles, medical and family monitoring >> devices, etc. are IPv4-only, and cannot be upgraded. While these will >> eventually be replaced with dual-stack or IPv6 capable devices, this >> transition will take many years. As these are typically consumer-owned >> devices, service providers do not have control over the speed of their >> replacement cycle. However, consumers have an expectation that they >> will continue to receive IPv4 service, and that such devices will >> continue to have IPv4 Internet connectivity after the IPv4 pool is >> exhausted, even if the customer contracts for new service with a new >> provider. >> >> Until such customers replace their Home Gateways and all IPv4-only >> devices with IPv6-capable devices, Service Providers will be required to >> continue to offer IPv4 services through the use of an IPv4 address >> sharing technology such as NAT444. A recent study showed that there is >> no part of RFC1918 space which would not overlap with some IPv4 >> gateways, and therefore to prevent address conflicts, new address space >> is needed. >> >> Service providers are currently presented with three options for >> obtaining sufficient IPv4 address space for NAT444/IPv4 extension >> deployments: (1) Request allocations under the NRPM; (2) share address >> space with other providers (this proposal); or (3) use address space >> allocated to another entity (i.e. ?squat?). Of the three options, >> option 2 (this proposal) is preferable, as it will minimize the number >> of addresses used for IPv4 extension deployments while preserving the >> authority of IANA and RIRs. >> >> Timetable for implementation: immediately >> >> >> >> >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From lsawyer at gci.com Thu Jan 20 15:36:46 2011 From: lsawyer at gci.com (Leif Sawyer) Date: Thu, 20 Jan 2011 11:36:46 -0900 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386249.5000801@arin.net> References: <4D386249.5000801@arin.net> Message-ID: <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> As a converged providor (cable, wireless, dsl, leased, dial, etc) I understand fully the pain that this is trying to prevent. I support this proposal. > -----Original Message----- > From: arin-ppml-bounces at arin.net > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > Proposal Originator: Chris Donley, CableLabs > > Proposal Version: 1 > > Date: 20 January 2011 > > Proposal type: modify > > Policy term: permanent > > Policy statement: > > Updates 4.10 of the NRPM: > A second contiguous /10 IPv4 block will be reserved to > facilitate IPv4 address extension. This block will not be > allocated or assigned to any single organization, but is to > be shared by Service Providers for internal use for IPv4 > address extension deployments until connected networks fully > support IPv6. Examples of such needs include: IPv4 addresses > between home gateways and NAT444 translators. > > Rationale: > > The Internet community is rapidly consuming the remaining > supply of unallocated IPv4 addresses. During the transition > period to IPv6, it is imperative that Service Providers > maintain IPv4 service for devices and networks that are > currently incapable of upgrading to IPv6. > Consumers must be able to reach the largely IPv4 Internet > after exhaustion. Without a means to share addresses, people > or organizations who gain Internet access for the first time, > or those who switch providers, or move to another area, will > be unable to reach the IPv4 Internet. > > Further, many CPE router devices used to provide residential > or small-medium business services have been optimized for > IPv4 operation, and typically require replacement in order to > fully support the transition to IPv6 (either natively or via > one of many transition technologies). In addition, various > consumer devices including IP-enabled televisions, gaming > consoles, medical and family monitoring devices, etc. are > IPv4-only, and cannot be upgraded. While these will > eventually be replaced with dual-stack or IPv6 capable > devices, this transition will take many years. As these are > typically consumer-owned devices, service providers do not > have control over the speed of their replacement cycle. > However, consumers have an expectation that they will > continue to receive IPv4 service, and that such devices will > continue to have IPv4 Internet connectivity after the IPv4 > pool is exhausted, even if the customer contracts for new > service with a new provider. > > Until such customers replace their Home Gateways and all > IPv4-only devices with IPv6-capable devices, Service > Providers will be required to continue to offer IPv4 services > through the use of an IPv4 address sharing technology such as > NAT444. A recent study showed that there is no part of > RFC1918 space which would not overlap with some IPv4 > gateways, and therefore to prevent address conflicts, new > address space is needed. > > Service providers are currently presented with three options > for obtaining sufficient IPv4 address space for NAT444/IPv4 extension > deployments: (1) Request allocations under the NRPM; (2) > share address space with other providers (this proposal); or > (3) use address space allocated to another entity (i.e. > ?squat?). Of the three options, option 2 (this proposal) is > preferable, as it will minimize the number of addresses used > for IPv4 extension deployments while preserving the authority > of IANA and RIRs. > > Timetable for implementation: immediately > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From bill at herrin.us Thu Jan 20 16:22:22 2011 From: bill at herrin.us (William Herrin) Date: Thu, 20 Jan 2011 16:22:22 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110121074020.1bb2ff72@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> Message-ID: On Thu, Jan 20, 2011 at 4:10 PM, Mark Smith wrote: > Why should the global Internet community (i.e. the end-users of > the Internet) have to help wear the costs of individual ISPs not > deploying IPv6 quickly enough? Hi Mark, It seems to me that "whose fault is it?" matters less than "what do we do now?" What we do now is lessen the transition problems (so that the end users don't get screwed in the short term) while moving forward on the transition as quickly as practicable (so that the end users don't get screwed in the long term). Do you disagree? > Helping ISPs avoid those costs turns the > situation into one of a Moral Hazard. It won't encourage IPv6 > adoption; it'll delay it because both the incentive to do so, and the > consequence of not doing so, are reduced. Shall we encourage the patient not to hurt himself by setting the bone but refusing him pain medication? Sounds positively monstrous to me. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From gary.buhrmaster at gmail.com Thu Jan 20 16:31:08 2011 From: gary.buhrmaster at gmail.com (Gary Buhrmaster) Date: Thu, 20 Jan 2011 21:31:08 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> Message-ID: While I wish things were in a different place regarding IPv6, this proposal seems to be a pragmatic approach to a real issue that this regions providers are facing. I agree with others that it would have been nice if the IETF was able to move this, but it did not happen. I support it (even if reluctantly). Gary From oberman at es.net Thu Jan 20 16:52:31 2011 From: oberman at es.net (Kevin Oberman) Date: Thu, 20 Jan 2011 13:52:31 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: Your message of "Thu, 20 Jan 2011 11:26:49 EST." <4D386249.5000801@arin.net> Message-ID: <20110120215231.D92C51CC0C@ptavv.es.net> I hate this proposal. It is ugly and painful but I support it because it is still better to have it than to not have it. It really looks to me like this can ease the pain for at least some operators. My support is still tentative and it is possible that I will make arguments that will change my mind, but I have seen any not so far. It would be better if the allocation was from IANA at IETF direction, but I don't favor the cutting off of noses to spite faces. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman at es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751 From owen at delong.com Thu Jan 20 17:06:04 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 20 Jan 2011 14:06:04 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> Message-ID: <464E328E-F0C0-4A77-9A4E-004CCD409675@delong.com> Anyone who has looked at NAT44...4 in any detail realizes that nothing yet seen is likely to be a stronger motivation for a provider to move to IPv6 than their support experiences and the related poor user experiences that are offered by NaT44...4. Owen Sent from my iPad On Jan 20, 2011, at 1:22 PM, William Herrin wrote: > On Thu, Jan 20, 2011 at 4:10 PM, Mark Smith > wrote: >> Why should the global Internet community (i.e. the end-users of >> the Internet) have to help wear the costs of individual ISPs not >> deploying IPv6 quickly enough? > > Hi Mark, > > It seems to me that "whose fault is it?" matters less than "what do we > do now?" What we do now is lessen the transition problems (so that the > end users don't get screwed in the short term) while moving forward on > the transition as quickly as practicable (so that the end users don't > get screwed in the long term). > > Do you disagree? > > >> Helping ISPs avoid those costs turns the >> situation into one of a Moral Hazard. It won't encourage IPv6 >> adoption; it'll delay it because both the incentive to do so, and the >> consequence of not doing so, are reduced. > > Shall we encourage the patient not to hurt himself by setting the bone > but refusing him pain medication? Sounds positively monstrous to me. > > Regards, > Bill Herrin > > > > -- > William D. Herrin ................ herrin at dirtside.com bill at herrin.us > 3005 Crane Dr. ...................... Web: > Falls Church, VA 22042-3004 > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From Wesley.E.George at sprint.com Thu Jan 20 17:28:42 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Thu, 20 Jan 2011 22:28:42 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E059561@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of William Herrin > Sent: Thursday, January 20, 2011 2:43 PM > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > ... the only place you can't have duplication > is within the particular NAT domain. That could usefully span a /4 and > it could usefully span a /16. It's just a question of how many > addressing domains you have to break your CGN into. [WES] Agree, hold onto that thought for a moment... > > I just programmed 10.0.0.0/8, 172.16,0.0/12 and 192.168.0.0/16 on my > network. My ISPs are now conclusively shown to have a conflict with my > active and valid internal addressing. > > Seriously Wes, that's not a sound argument. There are only 70,000 > /24's in RFC1918 space and folks who don't take their home routers' > default often select much more than a /24. Of _course_ any ISP of > non-trivial size is going to conflict with some of his customers if > they're both selecting from the same relatively small pool. [WES] Let's be clear, there are two separate problems here: 1) ISP assigns the same block of 1918 space to the external interface as is already in use on the internal interface of a customer's home GW router and badness ensues. As you say, the NAT domain space could be as small as a /16, you'd just need lots of domains. But that means that you only have to find one /16 that impacts the least number of customers. When I say it has not been conclusively proven that there are problems with all of the blocks, I mean this - no one has put together a list of "vendor/model:default inside address pool" to show that every single of the 70K /24s in 1918, or even every /16 are in use BY DEFAULT. Lee cited a study in his message, but that was done in Japan and I don't view that as representative of the ARIN region due to the widely different group of gear available in each place. NAT444 is *going* to suck, it is *going* to break things, it is *going* to generate calls to tech support. I don't understand the resistance to considering as collateral damage some subset of CPE devices that have to change their internal address block config in order to continue functioning in NAT444. Find the block that has the least number of devices using it by default (avoid Linksys, Netgear and D-Link defaults, for example), and choose that. For the rest, give your techs step-by-step documentation on how to fix it on common routers. This is a long-tail problem that is somehow masquerading as a huge issue. Further, if someone changes the DEFAULT as you suggest, that is the same red herring that you say isn't an issue later in your mail, because clearly they already know how to change it back when it breaks things. If they don't like it, they're welcome to replace their gear with something that properly supports IPv6... 2) Collision between external NAT interface address and internal corporate network addressing. Last I checked, you can't route directly from a broadband ISP to the inside 1918 address of a corporate network without a VPN.* You need a routable external address somewhere on both sides. This negates the issue, because you are then interconnecting the *inside* (home) NAT to the inside of the corporate network. As long as the VPN works through NAT444, the ISP NAT (the middle 4) address doesn't figure into the routing decision. The existing problem of potentially having the same address block in the home network as in the corporate one doesn't change just because there's another NAT in between. *Assuming the one notable exception being corporate customers using broadband, the cleanest solution is to reserve a block of routable addresses for this use so that they continue to have the whole of 1918 available for their internal network use. They pay for business class service, an IP or two should probably be part of that in the post-exhaustion world, especially since chances are quite a bit higher than their stuff will break through NAT444 anyway. And for those who say "I support this because there's no alternative" I need to remind you that the alternative has existed for some time now, and while people are loath to admit it, already in use - squatting on allocated, routable space that is currently not routed on the public internet. While some of the space that is dark today might show up in the routing table for the right price, it's a safe bet that certain parts of "three letter agency" infrastructure is not going to be selling off their IP blocks to the highest bidder and it therefore will stay unrouted. It's risky, no doubt, but the risk is manageable. Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From marty at akamai.com Thu Jan 20 17:56:32 2011 From: marty at akamai.com (Hannigan, Martin) Date: Thu, 20 Jan 2011 17:56:32 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E059561@PLSWM12A.ad.sprint.com> Message-ID: On 1/20/11 5:28 PM, "George, Wes E [NTK]" wrote: [ snip ] > > > And for those who say "I support this because there's no alternative" I need > to remind you that the alternative has existed for some time now, and while > people are loath to admit it, already in use - squatting on allocated, > routable space that is currently not routed on the public internet. While > some of the space that is dark today might show up in the routing table for > the right price, it's a safe bet that certain parts of "three letter agency" > infrastructure is not going to be selling off their IP blocks to the highest > bidder and it therefore will stay unrouted. It's risky, no doubt, but the > risk is manageable. > Hi, Wes. I disagree. This behavior is already occurring and it looks like its going to be rampant on the last bunch of /8's coming out of the IANA and it is definitely problematic. With respect to government /8's, too much risk. Where do folks think the government will get transition addresses if they need them? I wouldn't be betting on any squatting strategy at this point. Wish I had a better idea, but squatting is a *very* bad idea. Best, -m< From jbates at brightok.net Thu Jan 20 18:20:18 2011 From: jbates at brightok.net (Jack Bates) Date: Thu, 20 Jan 2011 17:20:18 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E059561@PLSWM12A.ad.sprint.com> References: <4D386249.5000801@arin.net> <54E900DC635DAB4DB7A6D799B3C4CD8E059561@PLSWM12A.ad.sprint.com> Message-ID: <4D38C332.2010606@brightok.net> On 1/20/2011 4:28 PM, George, Wes E [NTK] wrote: > 1) ISP assigns the same block of 1918 space to the external interface as is > already in use on the internal interface of a customer's home GW router and > badness ensues. For many years (the last isolated network was finally cleaned up 2 years ago), different sections of the telco networks I manage used RFC-1918 and PAT. The last one was a 300+ subscriber wifi service, which renumbered into real IPs when they changed out wireless hardware on the towers a few years ago. Reasons the PAT went away were standard troubleshooting/tracking issues, as well as load on the routers (they were low end software based routers). Largest complaint was breakage of VPN/ipsec software which wouldn't (or they didn't know how to make it) do NAT-T. In one case, NAT went away as I upgraded the router to a code which wouldn't support NAT. ;) For the record, we almost exclusively used 10.0.0.0/20 or longer in these environments. Problems with customer router conflicts was the smallest of problems introduced by using NAT. Jack From matthew at matthew.at Thu Jan 20 18:44:55 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 20 Jan 2011 15:44:55 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> Message-ID: <4D38C8F7.1000703@matthew.at> On 1/20/2011 11:42 AM, William Herrin wrote: > > Setting aside one > space that every ISP can use seems like a smarter solution than each > ISP carving out a piece of their otherwise publicly routable space for > the task. Why? And I'll note that if *any* ISP carves out a piece of their space for this, *any other* ISP can reuse exactly the same space. In fact, a bunch of ISPs could get together and simply apply for space now, or out of the transition-reserved pool, or buy it through the transfer market for this purpose. > > > I just programmed 10.0.0.0/8, 172.16,0.0/12 and 192.168.0.0/16 on my > network. My ISPs are now conclusively shown to have a conflict with my > active and valid internal addressing. > > Seriously Wes, that's not a sound argument. There are only 70,000 > /24's in RFC1918 space and folks who don't take their home routers' > default often select much more than a /24. Of _course_ any ISP of > non-trivial size is going to conflict with some of his customers if > they're both selecting from the same relatively small pool. As far as I can tell, if you don't care about your customers always being able to talk to each other the collision space is only against a single /30, not a whole /24, of RFC1918 space, if you're doing it right. And if your customers do want to talk to each other, you can make that work with much less than a /24 worth of collision space as well, though some customers who make certain internal address assignment and routing decisions will be unable to reach others. > > This is a red herring. Customers who deliberately break their networks > are in a whole different category than the ones where I've > inadvertently stomped on their reasonable and legitimate > configuration. > Well, once my ISP starts assigning out of, say, 10.0.0.0/8, it might not be "reasonable and legitimate" for my customers to expect that using 10.0.0.0/8 indiscriminately internally any more. Transition is going to be painful and require changes. This is, in some cases, one of those changes. Matthew Kaufman From matthew at matthew.at Thu Jan 20 18:46:59 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 20 Jan 2011 15:46:59 -0800 Subject: [arin-ppml] AS number allocation count Message-ID: <4D38C973.8040104@matthew.at> Is the total count of AS numbers currently allocated by ARIN available somewhere? Matthew Kaufman From matthew at matthew.at Thu Jan 20 18:54:09 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 20 Jan 2011 15:54:09 -0800 Subject: [arin-ppml] AS number allocation count In-Reply-To: <4D38C973.8040104@matthew.at> References: <4D38C973.8040104@matthew.at> Message-ID: <4D38CB21.5000405@matthew.at> On 1/20/2011 3:46 PM, Matthew Kaufman wrote: > Is the total count of AS numbers currently allocated by ARIN available > somewhere? FYI I received the answer off-list already, thanks for the help and apologies for the interruption. Matthew Kaufman From aaronh at bind.com Thu Jan 20 18:56:04 2011 From: aaronh at bind.com (Aaron Hughes) Date: Thu, 20 Jan 2011 15:56:04 -0800 Subject: [arin-ppml] AS number allocation count In-Reply-To: <4D38C973.8040104@matthew.at> References: <4D38C973.8040104@matthew.at> Message-ID: <20110120235604.GG80084@trace.bind.com> 20,437 was thelast report in Oct, 2010 https://www.arin.net/participate/meetings/reports/ARIN_XXVI/PDF/Wednesday/nobile_nro_status_report.pdf Cheers, Aaron On Thu, Jan 20, 2011 at 03:46:59PM -0800, Matthew Kaufman wrote: > Is the total count of AS numbers currently allocated by ARIN > available somewhere? > > Matthew Kaufman > -- > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From farmer at umn.edu Thu Jan 20 19:00:41 2011 From: farmer at umn.edu (David Farmer) Date: Thu, 20 Jan 2011 18:00:41 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386249.5000801@arin.net> References: <4D386249.5000801@arin.net> Message-ID: <4D38CCA9.5070000@umn.edu> I've been watching this on the IETF mailing lists for over two months now, kind of wondering if/when it would make it to PPML and the ARIN policy process. The discussion on the IETF mailing lists has been more or less a rehash of the arguments raised regarding this issues from a number of occasions spanning as much as two years, I believe. Many people I respect have come down on one side or the other of this issue. There was a presentation for the previous version of this that wanted to allocate a whole /8 for this purpose at the Atlanta meeting in the Joint NANOG/ARIN session on Wednesday morning. http://nanog.org/meetings/nanog50/presentations/Wednesday/NANOG50.Talk41.Weil.draft-shared_ARIN.pdf Personally, I dislike the idea on a number of levels, but unfortunately I believe it is probably a necessary evil, and a /10 is at least palatable. I wish there was a better answer, but I'm not hearing one. I believe the proper place for this should have been for the IETF to direct IANA to do this, but that didn't happen and its been proposed in the ARIN process now and we need to deal with it one way or another. So I've been thinking about this and if ARIN does this (a VERY BIG IF), I believe the most appropriate way would be to allocate 45.192.0.0/10 or some other block of returned Legacy address space. Why? This close to run-out I find it very hard to justify allocating 4 million virgin IPv4 addresses from a fresh IANA allocation to ARIN for this purpose. However, recycling graciously returned IPv4 address for this purpose would be a little less distasteful in my opinion. Furthermore, ARIN has been and probably will be the only RIR that will see any sizable returned of Legacy address space; This fact provides a uniquely justified nexus for ARIN to consider this proposal instead of the other RIRs and even though the IETF failed to come to a consensus on the issue. Additionally, since this block wouldn't be exclusively used within the ARIN region, one could argue there is a benefit to using returned Legacy resource instead of resource allocated directly to ARIN by IANA. Therefore, I would like to see a recommendation to use 45.192.0.0/10 or another returned Legacy block added to the rationale of this proposal. Additionally, I would be interested in if/how those modeling IPv4 run-out accounted/adjusted for the return of most of 45.0.0.0/8. If ARIN made an allocation from this block for this purpose would it have any effect on your IPv4 run-out models? Also, for those directly interested in using this allocation is there any downside to using 45.192.0.0/10 or a different returned Legacy block? I'm not seeing any, but I don't have a direct need to use this and really haven't considered all the possible issues. Finally, if we are going to consider this proposal at the San Juan meeting, which I believe it has to be, if we are going to bother to consider it at all; The AC needs to fast track this proposal to get it ready for San Juan. I don't believe it is reasonable for this proposal to wait until the fall meeting, allocating a /10 for this purpose after the fall meeting would not be advisable, even if one were available at that point. So, do you believe this proposal should be discuss in San Juan? Is it worth our time? Thanks On 1/20/11 10:26 CST, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > Proposal Originator: Chris Donley, CableLabs > > Proposal Version: 1 > > Date: 20 January 2011 > > Proposal type: modify > > Policy term: permanent > > Policy statement: > > Updates 4.10 of the NRPM: > A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 > address extension. This block will not be allocated or assigned to any > single organization, but is to be shared by Service Providers for > internal use for IPv4 address extension deployments until connected > networks fully support IPv6. Examples of such needs include: IPv4 > addresses between home gateways and NAT444 translators. > > Rationale: > > The Internet community is rapidly consuming the remaining supply of > unallocated IPv4 addresses. During the transition period to IPv6, it is > imperative that Service Providers maintain IPv4 service for devices and > networks that are currently incapable of upgrading to IPv6. > Consumers must be able to reach the largely IPv4 Internet after > exhaustion. Without a means to share addresses, people or organizations > who gain Internet access for the first time, or those who switch > providers, or move to another area, will be unable to reach the IPv4 > Internet. > > Further, many CPE router devices used to provide residential or > small-medium business services have been optimized for IPv4 operation, > and typically require replacement in order to fully support the > transition to IPv6 (either natively or via one of many transition > technologies). In addition, various consumer devices including > IP-enabled televisions, gaming consoles, medical and family monitoring > devices, etc. are IPv4-only, and cannot be upgraded. While these will > eventually be replaced with dual-stack or IPv6 capable devices, this > transition will take many years. As these are typically consumer-owned > devices, service providers do not have control over the speed of their > replacement cycle. However, consumers have an expectation that they > will continue to receive IPv4 service, and that such devices will > continue to have IPv4 Internet connectivity after the IPv4 pool is > exhausted, even if the customer contracts for new service with a new > provider. > > Until such customers replace their Home Gateways and all IPv4-only > devices with IPv6-capable devices, Service Providers will be required to > continue to offer IPv4 services through the use of an IPv4 address > sharing technology such as NAT444. A recent study showed that there is > no part of RFC1918 space which would not overlap with some IPv4 > gateways, and therefore to prevent address conflicts, new address space > is needed. > > Service providers are currently presented with three options for > obtaining sufficient IPv4 address space for NAT444/IPv4 extension > deployments: (1) Request allocations under the NRPM; (2) share address > space with other providers (this proposal); or (3) use address space > allocated to another entity (i.e. ?squat?). Of the three options, > option 2 (this proposal) is preferable, as it will minimize the number > of addresses used for IPv4 extension deployments while preserving the > authority of IANA and RIRs. > > Timetable for implementation: immediately > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From marty at akamai.com Thu Jan 20 19:17:57 2011 From: marty at akamai.com (Hannigan, Martin) Date: Thu, 20 Jan 2011 19:17:57 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D38CCA9.5070000@umn.edu> Message-ID: On 1/20/11 7:00 PM, "David Farmer" wrote: [ clip ] > Why? This close to run-out I find it very hard to justify allocating 4 > million virgin IPv4 addresses from a fresh IANA allocation to ARIN for > this purpose. However, recycling graciously returned IPv4 address for > this purpose would be a little less distasteful in my opinion. > Furthermore, ARIN has been and probably will be the only RIR that will > see any sizable returned of Legacy address space; This fact provides a > uniquely justified nexus for ARIN to consider this proposal instead of > the other RIRs and even though the IETF failed to come to a consensus on > the issue. [ .. ] > Therefore, I would like to see a recommendation to use 45.192.0.0/10 or > another returned Legacy block added to the rationale of this proposal. You've got it sort-of backwards. The IANA blocks are polluted and get worse as they wind down. Being listed in bogons is not a guarantee of pristine condition. 45/8 is probably better than anything that is left and equal to whatever else is out there. There is also global policy on deck that is attempting to deal with the returned legacy address space issue, there's another effort underway now to supplant and possibly reconcile that same global proposal and finally, there is likely to be a regional policy directing ARIN as to how to handle legacy address space in the absence of global policy. I do think that whatever is selected should be encoded in the proposal, but I think it's premature at this point. Best, -M< From owen at delong.com Thu Jan 20 19:48:06 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 20 Jan 2011 16:48:06 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D38CCA9.5070000@umn.edu> References: <4D386249.5000801@arin.net> <4D38CCA9.5070000@umn.edu> Message-ID: <966287D1-72CD-40A9-95FD-79A88D03C8CA@delong.com> The one amendment I would make to your suggestion, David would be that rather than specify legacy vs. Virgin, I would specify the dirtiest block(s) in the IPv4 free pool that total a /10. After all, it seems to me that there is no critical need for this space to be a single aggregate. One option that occurs to me would be to trade a /10 of more usable space such as 45.192.0.0/10 to APNIC and use a /10 from 1.0.0.0/8. I don't know if that's still possible, but, it seems to me that the high background radiation space makes the most sense for this. Owen Sent from my iPad On Jan 20, 2011, at 4:00 PM, David Farmer wrote: > I've been watching this on the IETF mailing lists for over two months now, kind of wondering if/when it would make it to PPML and the ARIN policy process. The discussion on the IETF mailing lists has been more or less a rehash of the arguments raised regarding this issues from a number of occasions spanning as much as two years, I believe. Many people I respect have come down on one side or the other of this issue. > > There was a presentation for the previous version of this that wanted to allocate a whole /8 for this purpose at the Atlanta meeting in the Joint NANOG/ARIN session on Wednesday morning. > > http://nanog.org/meetings/nanog50/presentations/Wednesday/NANOG50.Talk41.Weil.draft-shared_ARIN.pdf > > Personally, I dislike the idea on a number of levels, but unfortunately I believe it is probably a necessary evil, and a /10 is at least palatable. I wish there was a better answer, but I'm not hearing one. > > I believe the proper place for this should have been for the IETF to direct IANA to do this, but that didn't happen and its been proposed in the ARIN process now and we need to deal with it one way or another. > > So I've been thinking about this and if ARIN does this (a VERY BIG IF), I believe the most appropriate way would be to allocate 45.192.0.0/10 or some other block of returned Legacy address space. > > Why? This close to run-out I find it very hard to justify allocating 4 million virgin IPv4 addresses from a fresh IANA allocation to ARIN for this purpose. However, recycling graciously returned IPv4 address for this purpose would be a little less distasteful in my opinion. Furthermore, ARIN has been and probably will be the only RIR that will see any sizable returned of Legacy address space; This fact provides a uniquely justified nexus for ARIN to consider this proposal instead of the other RIRs and even though the IETF failed to come to a consensus on the issue. > > Additionally, since this block wouldn't be exclusively used within the ARIN region, one could argue there is a benefit to using returned Legacy resource instead of resource allocated directly to ARIN by IANA. > > Therefore, I would like to see a recommendation to use 45.192.0.0/10 or another returned Legacy block added to the rationale of this proposal. > > Additionally, I would be interested in if/how those modeling IPv4 run-out accounted/adjusted for the return of most of 45.0.0.0/8. If ARIN made an allocation from this block for this purpose would it have any effect on your IPv4 run-out models? > > Also, for those directly interested in using this allocation is there any downside to using 45.192.0.0/10 or a different returned Legacy block? I'm not seeing any, but I don't have a direct need to use this and really haven't considered all the possible issues. > > Finally, if we are going to consider this proposal at the San Juan meeting, which I believe it has to be, if we are going to bother to consider it at all; The AC needs to fast track this proposal to get it ready for San Juan. I don't believe it is reasonable for this proposal to wait until the fall meeting, allocating a /10 for this purpose after the fall meeting would not be advisable, even if one were available at that point. > > So, do you believe this proposal should be discuss in San Juan? Is it worth our time? > > Thanks > > On 1/20/11 10:26 CST, ARIN wrote: >> ARIN received the following policy proposal and is posting it to the >> Public Policy Mailing List (PPML) in accordance with the Policy >> Development Process. >> >> The ARIN Advisory Council (AC) will review the proposal at their next >> regularly scheduled meeting (if the period before the next regularly >> scheduled meeting is less than 10 days, then the period may be extended >> to the subsequent regularly scheduled meeting). The AC will decide how >> to utilize the proposal and announce the decision to the PPML. >> >> The AC invites everyone to comment on the proposal on the PPML, >> particularly their support or non-support and the reasoning >> behind their opinion. Such participation contributes to a thorough >> vetting and provides important guidance to the AC in their deliberations. >> >> Draft Policies and Proposals under discussion can be found at: >> https://www.arin.net/policy/proposals/index.html >> >> The ARIN Policy Development Process can be found at: >> https://www.arin.net/policy/pdp.html >> >> Mailing list subscription information can be found >> at: https://www.arin.net/mailing_lists/ >> >> Regards, >> >> Communications and Member Services >> American Registry for Internet Numbers (ARIN) >> >> >> ## * ## >> >> >> ARIN-prop-127: Shared Transition Space for IPv4 Address Extension >> >> Proposal Originator: Chris Donley, CableLabs >> >> Proposal Version: 1 >> >> Date: 20 January 2011 >> >> Proposal type: modify >> >> Policy term: permanent >> >> Policy statement: >> >> Updates 4.10 of the NRPM: >> A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 >> address extension. This block will not be allocated or assigned to any >> single organization, but is to be shared by Service Providers for >> internal use for IPv4 address extension deployments until connected >> networks fully support IPv6. Examples of such needs include: IPv4 >> addresses between home gateways and NAT444 translators. >> >> Rationale: >> >> The Internet community is rapidly consuming the remaining supply of >> unallocated IPv4 addresses. During the transition period to IPv6, it is >> imperative that Service Providers maintain IPv4 service for devices and >> networks that are currently incapable of upgrading to IPv6. >> Consumers must be able to reach the largely IPv4 Internet after >> exhaustion. Without a means to share addresses, people or organizations >> who gain Internet access for the first time, or those who switch >> providers, or move to another area, will be unable to reach the IPv4 >> Internet. >> >> Further, many CPE router devices used to provide residential or >> small-medium business services have been optimized for IPv4 operation, >> and typically require replacement in order to fully support the >> transition to IPv6 (either natively or via one of many transition >> technologies). In addition, various consumer devices including >> IP-enabled televisions, gaming consoles, medical and family monitoring >> devices, etc. are IPv4-only, and cannot be upgraded. While these will >> eventually be replaced with dual-stack or IPv6 capable devices, this >> transition will take many years. As these are typically consumer-owned >> devices, service providers do not have control over the speed of their >> replacement cycle. However, consumers have an expectation that they >> will continue to receive IPv4 service, and that such devices will >> continue to have IPv4 Internet connectivity after the IPv4 pool is >> exhausted, even if the customer contracts for new service with a new >> provider. >> >> Until such customers replace their Home Gateways and all IPv4-only >> devices with IPv6-capable devices, Service Providers will be required to >> continue to offer IPv4 services through the use of an IPv4 address >> sharing technology such as NAT444. A recent study showed that there is >> no part of RFC1918 space which would not overlap with some IPv4 >> gateways, and therefore to prevent address conflicts, new address space >> is needed. >> >> Service providers are currently presented with three options for >> obtaining sufficient IPv4 address space for NAT444/IPv4 extension >> deployments: (1) Request allocations under the NRPM; (2) share address >> space with other providers (this proposal); or (3) use address space >> allocated to another entity (i.e. ?squat?). Of the three options, >> option 2 (this proposal) is preferable, as it will minimize the number >> of addresses used for IPv4 extension deployments while preserving the >> authority of IANA and RIRs. >> >> Timetable for implementation: immediately >> >> >> >> >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. > > > -- > =============================================== > David Farmer Email:farmer at umn.edu > Networking & Telecommunication Services > Office of Information Technology > University of Minnesota > 2218 University Ave SE Phone: 612-626-0815 > Minneapolis, MN 55414-3029 Cell: 612-812-9952 > =============================================== > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From ipng at 69706e6720323030352d30312d31340a.nosense.org Thu Jan 20 16:10:20 2011 From: ipng at 69706e6720323030352d30312d31340a.nosense.org (Mark Smith) Date: Fri, 21 Jan 2011 07:40:20 +1030 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> Message-ID: <20110121074020.1bb2ff72@opy.nosense.org> On Thu, 20 Jan 2011 14:42:35 -0500 William Herrin wrote: > On Thu, Jan 20, 2011 at 11:26 AM, ARIN wrote: > > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > > > Updates 4.10 of the NRPM: > > A second contiguous /10 IPv4 block will be reserved to facilitate IPv4 > > address extension. This block will not be allocated or assigned to any > > single organization, but is to be shared by Service Providers for > > internal use for IPv4 address extension deployments until connected > > networks fully support IPv6. > > Tentatively SUPPORT. > > It would have been nice if the IETF had gotten traction with a version > of this that didn't originate from a particular region but their > effort collapsed and that leaves the question to us. I don't know > about the rest of you but the five big-name ISPs I deal with *still* > haven't turned up IPv6 for me. This is gonna be a -long- transition > and conflicting your carrier NAT with your customers' interior private > IPs doesn't strike me as a winning proposition. Setting aside one > space that every ISP can use seems like a smarter solution than each > ISP carving out a piece of their otherwise publicly routable space for > the task. > Why should the global Internet community (i.e. the end-users of the Internet) have to help wear the costs of individual ISPs not deploying IPv6 quickly enough? An ISP having to re-use its own publicly routable address space for this purpose seems perfectly fine to me - they created the problem and the cost by not deploying IPv6 soon enough, now they themselves need to accept and pay the consequences, despite not wanting to. Helping ISPs avoid those costs turns the situation into one of a Moral Hazard. It won't encourage IPv6 adoption; it'll delay it because both the incentive to do so, and the consequence of not doing so, are reduced. This is in effect "bailing out the ISPs" using public address space. > > On Thu, Jan 20, 2011 at 1:51 PM, George, Wes E [NTK] > wrote: > > - a /8 wouldn't even be enough in many cases (Mobile networks), > > - a /10 won't be enough in even more cases (they dropped to a /10 because a > > /8 was even more unanimously shot down in IETF), both meaning that you'd > > still end up with multiple NAT regions where you have to reuse the same > > space > > Hi Wes, > > As someone else pointed out, the only place you can't have duplication > is within the particular NAT domain. That could usefully span a /4 and > it could usefully span a /16. It's just a question of how many > addressing domains you have to break your CGN into. /10 strikes me as > a reasonable compromise number. > > > > - no conclusive evidence has been shown that there is actually a conflict > > with all portions of RFC1918 that make it unusable > > I just programmed 10.0.0.0/8, 172.16,0.0/12 and 192.168.0.0/16 on my > network. My ISPs are now conclusively shown to have a conflict with my > active and valid internal addressing. > > Seriously Wes, that's not a sound argument. There are only 70,000 > /24's in RFC1918 space and folks who don't take their home routers' > default often select much more than a /24. Of _course_ any ISP of > non-trivial size is going to conflict with some of his customers if > they're both selecting from the same relatively small pool. > > ULA needed a massive bit space to statistically avoid collisions. It > ain't in the numbers for RFC 1918. > > > > - there is no guarantee that people won't immediately start using it as an > > extension of RFC1918. > > This is a red herring. Customers who deliberately break their networks > are in a whole different category than the ones where I've > inadvertently stomped on their reasonable and legitimate > configuration. > > > > - it breaks 6to4 and anything else that knows to behave differently if it's > > getting RFC1918 (non-unique) space > > I'll give you that one for now, though I'm very suspicious of any > technology hard-coded to behave differently depending on where in the > unicast address space it finds itself. > > Regards, > Bill Herrin > > > > -- > William D. Herrin ................ herrin at dirtside.com? bill at herrin.us > 3005 Crane Dr. ...................... Web: > Falls Church, VA 22042-3004 > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From bill at herrin.us Thu Jan 20 20:37:23 2011 From: bill at herrin.us (William Herrin) Date: Thu, 20 Jan 2011 20:37:23 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D38CCA9.5070000@umn.edu> Message-ID: On Thu, Jan 20, 2011 at 7:17 PM, Hannigan, Martin wrote: > On 1/20/11 7:00 PM, "David Farmer" wrote: >> Therefore, I would like to see a recommendation to use 45.192.0.0/10 or >> another returned Legacy block added to the rationale of this proposal. > > You've got it sort-of backwards. The IANA blocks are polluted and get worse > as they wind down. Being listed in bogons is not a guarantee of pristine > condition. 45/8 is probably better than anything that is left and equal to > whatever else is out there. I would be in favor of using the "least desirable" /10 ARIN has available (or can acquire) for this purpose, whatever that happens to be. I suggest we punt the question to staff - ask them to make the determination which /10 is least useful as public unicast addresses. No need for us to micromanage that detail at the policy level. On Thu, Jan 20, 2011 at 7:00 PM, David Farmer wrote: > So, do you believe this proposal should be discuss in San Juan? Is it worth > our time? Yes and yes. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From farmer at umn.edu Thu Jan 20 21:26:09 2011 From: farmer at umn.edu (David Farmer) Date: Thu, 20 Jan 2011 20:26:09 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: Message-ID: <4D38EEC1.6030104@umn.edu> On 1/20/11 18:36 CST, Hannigan, Martin wrote: > On 1/20/11 7:00 PM, "David Farmer" wrote: > > One other interesting point, and thanks for posting Sam's slides, I forgot > about these. > >> >> http://nanog.org/meetings/nanog50/presentations/Wednesday/NANOG50.Talk41.Weil. >> draft-shared_ARIN.pdf > > See slide 3. Line 3. NCP to IPv4 = FLASH CUT. Granted, it was a lot smaller > net then, but there was no transition and no chance. We've already proved > once (Kflex v. V90) that dual technology is bad, and dual stacking et. Al. > is going to be worse. By comparison to what the transition from IPv4 to IPv6 has been and will be, the transition from NCP to IPv4 was a FLASH CUT for sure. However, I believe it was more like a year long transition process with a DROP-DEAD date at the end, January 1, 1983, to turn off NCP. An FCC staff working paper that came out recently "Potential Impacts on Communications from IPv4 Exhaustion & IPv6 Transition" includes a section on the NCP to IPv4 transition. This paper is not to bad for the pointy-haired-boss set over all, if you haven't seen it go take a look. http://www.fcc.gov/Daily_Releases/Daily_Business/2010/db1230/DOC-303870A1.pdf Then there is the mother source from John Postel himself, "NCP/TCP TRANSITION PLAN" RFC 801. http://www.ietf.org/rfc/rfc801.txt If only the transition to IPv6 could be that easy. :) Hey, we COULD all agree to turn off IPv4 30 years to the day on January 1, 2013, it might not be a bad plan. :) Possible, but probably not likely. :( -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From farmer at umn.edu Thu Jan 20 23:07:11 2011 From: farmer at umn.edu (David Farmer) Date: Thu, 20 Jan 2011 22:07:11 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: Message-ID: <4D39066F.8040501@umn.edu> On 1/20/11 18:17 CST, Hannigan, Martin wrote: > On 1/20/11 7:00 PM, "David Farmer" wrote: > > [ clip ] > >> Why? This close to run-out I find it very hard to justify allocating 4 >> million virgin IPv4 addresses from a fresh IANA allocation to ARIN for >> this purpose. However, recycling graciously returned IPv4 address for >> this purpose would be a little less distasteful in my opinion. >> Furthermore, ARIN has been and probably will be the only RIR that will >> see any sizable returned of Legacy address space; This fact provides a >> uniquely justified nexus for ARIN to consider this proposal instead of >> the other RIRs and even though the IETF failed to come to a consensus on >> the issue. > > [ .. ] > >> Therefore, I would like to see a recommendation to use 45.192.0.0/10 or >> another returned Legacy block added to the rationale of this proposal. > > > You've got it sort-of backwards. The IANA blocks are polluted and get worse > as they wind down. Being listed in bogons is not a guarantee of pristine > condition. 45/8 is probably better than anything that is left and equal to > whatever else is out there. OK, the virgins aren't so clean and white, I was more think of this from a policy prescriptive more than from how much junk and background radiation there is from the blocks in question. However, maybe going with the least useful block might be the better option. It was the policy nexus that ARIN receiving most of the returned Legacy space that got me thinking. Also, since people we talking about squatting on Legacy space, I thought maybe as a community we could agree which legacy space to squat on. > There is also global policy on deck that is attempting to deal with the > returned legacy address space issue, there's another effort underway now to > supplant and possibly reconcile that same global proposal and finally, there > is likely to be a regional policy directing ARIN as to how to handle legacy > address space in the absence of global policy. I'd be pleasantly surprised to hear of progress, but unfortunately I'm not all that optimistic. > I do think that whatever is selected should be encoded in the proposal, but > I think it's premature at this point. I agree specifying something as specific as a particular block probably isn't right way, especially in the policy text itself. But, maybe providing some suggestions in the rationale like "should allocate from a returned Legacy address space" or "should allocate the least useful blocks available" wouldn't be completely out of line either. So I agree, calling out 45.192.0.0/10 is probably way to specific. -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From gbonser at seven.com Thu Jan 20 23:17:47 2011 From: gbonser at seven.com (George Bonser) Date: Thu, 20 Jan 2011 20:17:47 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E059373@PLSWM12A.ad.sprint.com> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net><4D386A06.704@matthew.at> <54E900DC635DAB4DB7A6D799B3C4CD8E059373@PLSWM12A.ad.sprint.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC134F5@RWC-EX1.corp.seven.com> > [WES] This has also been discussed in the past. There are too many > devices that reject Class E space as invalid. Stupid on the part of the > vendors in question, but that ship sailed long ago. How much of that could be fixed with a code update? From gbonser at seven.com Thu Jan 20 23:40:56 2011 From: gbonser at seven.com (George Bonser) Date: Thu, 20 Jan 2011 20:40:56 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D38CCA9.5070000@umn.edu> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> > > I would be in favor of using the "least desirable" /10 ARIN has > available (or can acquire) for this purpose, whatever that happens to > be. I suggest we punt the question to staff - ask them to make the > determination which /10 is least useful as public unicast addresses. > No need for us to micromanage that detail at the policy level. > The problem I see with this is that it potentially enables v4 in perpetuity. People have had a decade to get v4-only stuff out of their networks. V4 is dead, we need to stop bending over backwards to allow its continued used and allow it to die. From owen at delong.com Thu Jan 20 23:49:46 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 20 Jan 2011 20:49:46 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC134F5@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net><4D386A06.704@matthew.at> <54E900DC635DAB4DB7A6D799B3C4CD8E059373@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC134F5@RWC-EX1.corp.seven.com> Message-ID: <0D5026D6-92AB-4B74-B470-8494BEA31563@delong.com> On Jan 20, 2011, at 8:17 PM, George Bonser wrote: >> [WES] This has also been discussed in the past. There are too many >> devices that reject Class E space as invalid. Stupid on the part of > the >> vendors in question, but that ship sailed long ago. > > How much of that could be fixed with a code update? > > Across the entirety of residential gateways? In 9 months? Probably less than 0.05%. Owen > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From gbonser at seven.com Thu Jan 20 23:52:37 2011 From: gbonser at seven.com (George Bonser) Date: Thu, 20 Jan 2011 20:52:37 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <0D5026D6-92AB-4B74-B470-8494BEA31563@delong.com> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net><4D386A06.704@matthew.at> <54E900DC635DAB4DB7A6D799B3C4CD8E059373@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC134F5@RWC-EX1.corp.seven.com> <0D5026D6-92AB-4B74-B470-8494BEA31563@delong.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC134F7@RWC-EX1.corp.seven.com> > -----Original Message----- > From: Owen DeLong [mailto:owen at delong.com] > Sent: Thursday, January 20, 2011 8:50 PM > To: George Bonser > Cc: George, Wes E [NTK]; matthew at matthew.at; Jack Bates; ARIN-PPML List > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > > On Jan 20, 2011, at 8:17 PM, George Bonser wrote: > > >> [WES] This has also been discussed in the past. There are too many > >> devices that reject Class E space as invalid. Stupid on the part of > > the > >> vendors in question, but that ship sailed long ago. > > > > How much of that could be fixed with a code update? > > > > > Across the entirety of residential gateways? In 9 months? Probably less > than 0.05%. Yeah, I guess that is what happens when nobody does anything until the very last minute. I guess it just isn't a problem until it's a problem. From hannigan at gmail.com Fri Jan 21 00:01:16 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Fri, 21 Jan 2011 00:01:16 -0500 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D39066F.8040501@umn.edu> References: <4D39066F.8040501@umn.edu> Message-ID: David, In the long run, it doesn't matter what gets carved out post exhaustion or for this. All bets are off. I wouldn't worry about this at all. Its effectively a non issue. Even 1/8 pollution will be a non issue. Best, Marty On 1/20/11, David Farmer wrote: > On 1/20/11 18:17 CST, Hannigan, Martin wrote: >> On 1/20/11 7:00 PM, "David Farmer" wrote: >> >> [ clip ] >> >>> Why? This close to run-out I find it very hard to justify allocating 4 >>> million virgin IPv4 addresses from a fresh IANA allocation to ARIN for >>> this purpose. However, recycling graciously returned IPv4 address for >>> this purpose would be a little less distasteful in my opinion. >>> Furthermore, ARIN has been and probably will be the only RIR that will >>> see any sizable returned of Legacy address space; This fact provides a >>> uniquely justified nexus for ARIN to consider this proposal instead of >>> the other RIRs and even though the IETF failed to come to a consensus on >>> the issue. >> >> [ .. ] >> >>> Therefore, I would like to see a recommendation to use 45.192.0.0/10 or >>> another returned Legacy block added to the rationale of this proposal. >> >> >> You've got it sort-of backwards. The IANA blocks are polluted and get >> worse >> as they wind down. Being listed in bogons is not a guarantee of pristine >> condition. 45/8 is probably better than anything that is left and equal to >> whatever else is out there. > > OK, the virgins aren't so clean and white, I was more think of this from > a policy prescriptive more than from how much junk and background > radiation there is from the blocks in question. However, maybe going > with the least useful block might be the better option. > > It was the policy nexus that ARIN receiving most of the returned Legacy > space that got me thinking. Also, since people we talking about > squatting on Legacy space, I thought maybe as a community we could agree > which legacy space to squat on. > >> There is also global policy on deck that is attempting to deal with the >> returned legacy address space issue, there's another effort underway now >> to >> supplant and possibly reconcile that same global proposal and finally, >> there >> is likely to be a regional policy directing ARIN as to how to handle >> legacy >> address space in the absence of global policy. > > I'd be pleasantly surprised to hear of progress, but unfortunately I'm > not all that optimistic. > >> I do think that whatever is selected should be encoded in the proposal, >> but >> I think it's premature at this point. > > I agree specifying something as specific as a particular block probably > isn't right way, especially in the policy text itself. But, maybe > providing some suggestions in the rationale like "should allocate from a > returned Legacy address space" or "should allocate the least useful > blocks available" wouldn't be completely out of line either. So I > agree, calling out 45.192.0.0/10 is probably way to specific. > > -- > =============================================== > David Farmer Email:farmer at umn.edu > Networking & Telecommunication Services > Office of Information Technology > University of Minnesota > 2218 University Ave SE Phone: 612-626-0815 > Minneapolis, MN 55414-3029 Cell: 612-812-9952 > =============================================== > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From mysidia at gmail.com Fri Jan 21 00:34:11 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Thu, 20 Jan 2011 23:34:11 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <0D5026D6-92AB-4B74-B470-8494BEA31563@delong.com> References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> <4D386A06.704@matthew.at> <54E900DC635DAB4DB7A6D799B3C4CD8E059373@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC134F5@RWC-EX1.corp.seven.com> <0D5026D6-92AB-4B74-B470-8494BEA31563@delong.com> Message-ID: On Thu, Jan 20, 2011 at 10:49 PM, Owen DeLong wrote: > On Jan 20, 2011, at 8:17 PM, George Bonser wrote: > Across the entirety of residential gateways? In 9 months? Probably less > than 0.05%. > Owen Very similar to the problem of ISPs getting IPv6 support across the entirety of their residential gateways. Perhaps one code update could add both capabilities. If the ISP has standardized gateway models, and remote update procedures, updating a significant proportion of the gateways in a short time might not be much an issue. Class E address space is really wasted; and opening some of it for such uses could very well be useful to some ISP(s) eventually. However, usefulness for CGN/IPv6 transition is definitely less than a reserved /10. FWIW, I support PP127. CGN is going to be a reality on some networks in advance of, or along with their IPv6 transition; since there is still a need to communicate with IPv4 hosts. Downstream RFC1918 address space usage and resulting conflicts are unnecessary pain for the ISP, and it is obvious that separate address space should be provided to minimize pain with CGN. It's unfortunate that IETF dropped the ball on that one. -- -JH From mysidia at gmail.com Fri Jan 21 00:45:56 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Thu, 20 Jan 2011 23:45:56 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <966287D1-72CD-40A9-95FD-79A88D03C8CA@delong.com> References: <4D386249.5000801@arin.net> <4D38CCA9.5070000@umn.edu> <966287D1-72CD-40A9-95FD-79A88D03C8CA@delong.com> Message-ID: On Thu, Jan 20, 2011 at 6:48 PM, Owen DeLong wrote: > The one amendment I would make to your suggestion, David would be that rather than specify legacy vs. Virgin, I would specify the dirtiest block(s) in the IPv4 free pool that total a /10. > > After all, it seems to me that there is no critical need for this space to be a single aggregate. A single aggregate helps with bogon filtering and human recognition of "shared IP ranges" for troubleshooting, sane design/addressing of ISP network, and other purposes. Picking a hundred disjoint /24s - /16s that add up to a /10 equivalent is not a very palatable idea. Eliminating human recognition of well-known 'shared private' ranges also eliminates one way humans can recognize human errors, such as IP address typos, or obvious bogons such as a 'shared private range' winding up in EGP announcements. I would say a single contiguous /10 should be chosen so it overlaps the portion of unallocated space with the highest density of "dirty" IP addresses. -- -JH From owen at delong.com Fri Jan 21 01:09:38 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 20 Jan 2011 22:09:38 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <4D3864A2.2060700@brightok.net> <4D386A06.704@matthew.at> <54E900DC635DAB4DB7A6D799B3C4CD8E059373@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC134F5@RWC-EX1.corp.seven.com> <0D5026D6-92AB-4B74-B470-8494BEA31563@delong.com> Message-ID: <1A79AF43-9E02-41FE-9FE5-84D21AB410CB@delong.com> On Jan 20, 2011, at 9:34 PM, Jimmy Hess wrote: > On Thu, Jan 20, 2011 at 10:49 PM, Owen DeLong wrote: >> On Jan 20, 2011, at 8:17 PM, George Bonser wrote: >> Across the entirety of residential gateways? In 9 months? Probably less >> than 0.05%. >> Owen > > Very similar to the problem of ISPs getting IPv6 support across the > entirety of their residential gateways. > Perhaps one code update could add both capabilities. If the ISP has > standardized gateway models, and remote update procedures, updating > a significant proportion of the gateways in a short time might not be > much an issue. > The issue here isn't ISPs that can't get IPv6 support to their end users. The issue here is ISPs that even if they got IPv6 support to their end users would have end users that want to reach some of the 95+% of content that isn't yet IPv6 ready. This is not a one-sided problem. > Class E address space is really wasted; and opening some of it for such uses > could very well be useful to some ISP(s) eventually. However, usefulness for > CGN/IPv6 transition is definitely less than a reserved /10. > Yep. Owen From ipng at 69706e6720323030352d30312d31340a.nosense.org Fri Jan 21 04:31:12 2011 From: ipng at 69706e6720323030352d30312d31340a.nosense.org (Mark Smith) Date: Fri, 21 Jan 2011 20:01:12 +1030 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> Message-ID: <20110121200112.3d9917b3@opy.nosense.org> Hi William, On Thu, 20 Jan 2011 16:22:22 -0500 William Herrin wrote: > On Thu, Jan 20, 2011 at 4:10 PM, Mark Smith > wrote: > > Why should the global Internet community (i.e. the end-users of > > the Internet) have to help wear the costs of individual ISPs not > > deploying IPv6 quickly enough? > > Hi Mark, > > It seems to me that "whose fault is it?" matters less than "what do we > do now?" What we do now is lessen the transition problems (so that the > end users don't get screwed in the short term) while moving forward on > the transition as quickly as practicable (so that the end users don't > get screwed in the long term). > They're going to get screwed regardless in the short term because IPv6 hasn't been deployed. NAT444 is going to be bad what ever address space is used between the LSN and the customer CPE. The proposal doesn't mention another source of unique IPv4 addresses that could be used for this purpose - the ISPs' existing assignments. It'll be functionally equivalent to a NAT444 /10, and will preserve more of the remaining public address space for purposes where truly globally unique IPv4 addresses are necessary. It would mean ISPs would have to start sharing their existing addresses sooner rather than later, but that is better for the customers - the longer that ISPs avoid introducing address sharing, the larger the shock to customers when the ISP can't avoid it any longer and has force customers to share addresses all at once. A gradual address sharing roll out would be far better than an abrupt one, for both the ISP and it's customers. (I'd think in principle if ARIN reserve a NAT444 /10, then the other RIRs would be expected to reserve a /10 or similar size in their region - the proposition doesn't say if the ARIN space would be usable in other regions. Assuming all chose a /10, that means 5 x /10s of public address space going in one fell swoop ...) Regards, Mark. > Do you disagree? > > > > Helping ISPs avoid those costs turns the > > situation into one of a Moral Hazard. It won't encourage IPv6 > > adoption; it'll delay it because both the incentive to do so, and the > > consequence of not doing so, are reduced. > > Shall we encourage the patient not to hurt himself by setting the bone > but refusing him pain medication? Sounds positively monstrous to me. > > Regards, > Bill Herrin > > > > -- > William D. Herrin ................ herrin at dirtside.com? bill at herrin.us > 3005 Crane Dr. ...................... Web: > Falls Church, VA 22042-3004 From owen at delong.com Fri Jan 21 05:17:35 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 02:17:35 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110121200112.3d9917b3@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> Message-ID: <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> On Jan 21, 2011, at 1:31 AM, Mark Smith wrote: > Hi William, > > On Thu, 20 Jan 2011 16:22:22 -0500 > William Herrin wrote: > >> On Thu, Jan 20, 2011 at 4:10 PM, Mark Smith >> wrote: >>> Why should the global Internet community (i.e. the end-users of >>> the Internet) have to help wear the costs of individual ISPs not >>> deploying IPv6 quickly enough? >> >> Hi Mark, >> >> It seems to me that "whose fault is it?" matters less than "what do we >> do now?" What we do now is lessen the transition problems (so that the >> end users don't get screwed in the short term) while moving forward on >> the transition as quickly as practicable (so that the end users don't >> get screwed in the long term). >> > > They're going to get screwed regardless in the short term because IPv6 > hasn't been deployed. NAT444 is going to be bad what ever address space > is used between the LSN and the customer CPE. > This has a lot more to do with content not being accessible on IPv6 and not having a solution for IPv4-only customer devices to reach IPv6 content than it does with the access networks not deploying IPv6. The access providers generally agree that native IPv6 or 6rd can be deployed easier and quicker than NAT444 for the problems that can solve. The difficult comes when they deal with users, even users that have IPv6 access, that need to reach IPv4 content for whatever reason. This is where NAT444 is pretty much the only viable alternative currently on the table. I will note that even the people asking for this /10 are saying that they really don't want to use it, but, they don't see any alternative. > The proposal doesn't mention another source of unique IPv4 addresses > that could be used for this purpose - the ISPs' existing assignments. That's really a non-starter. > It'll be functionally equivalent to a NAT444 /10, and will preserve > more of the remaining public address space for purposes where truly > globally unique IPv4 addresses are necessary. It would mean ISPs would > have to start sharing their existing addresses sooner rather than > later, but that is better for the customers - the longer that ISPs avoid > introducing address sharing, the larger the shock to customers when the > ISP can't avoid it any longer and has force customers to share > addresses all at once. A gradual address sharing roll out would be far > better than an abrupt one, for both the ISP and it's customers. > You're joking, right? This sounds great unless you're one of the lucky ones that gets to go first, or, were you volunteering? > (I'd think in principle if ARIN reserve a NAT444 /10, then the other > RIRs would be expected to reserve a /10 or similar size in their region > - the proposition doesn't say if the ARIN space would be usable in other > regions. Assuming all chose a /10, that means 5 x /10s of public > address space going in one fell swoop ...) > That's absurd. If any registry reserves a /10, I'm sure all the registries will encourage their members to use that /10. To the best of my knowledge, there are no plans to submit this proposal to any other registries (and I talked to the proposal author about it the day before yesterday in person). I think in principle, you really can assume that the RIRs are not insane and won't commit wanton acts of destruction on the community. On the other hand, what I think you will see if this policy does get bogged down is a situation where many of the larger providers that are asking for this will each go apply for their own allocations and they may or may not coordinate sharing that with others. I think that is a far less desirable alternative than getting this policy through. > Regards, > Mark. > > >> Do you disagree? >> >> >>> Helping ISPs avoid those costs turns the >>> situation into one of a Moral Hazard. It won't encourage IPv6 >>> adoption; it'll delay it because both the incentive to do so, and the >>> consequence of not doing so, are reduced. >> >> Shall we encourage the patient not to hurt himself by setting the bone >> but refusing him pain medication? Sounds positively monstrous to me. I find myself having to agree with Bill here. I'm not 100% convinced this is the right thing to do, and, I was pretty opposed to it from the understanding I had of the issue when it was presented to IETF. However, at this time, I'm leaning more towards the belief that this is one of the three things in the IPv4 end game that we really need to just hold our noses and do. (The first two were NRPM 8.3 and the policy for 6rd) Owen From ipng at 69706e6720323030352d30312d31340a.nosense.org Fri Jan 21 07:24:11 2011 From: ipng at 69706e6720323030352d30312d31340a.nosense.org (Mark Smith) Date: Fri, 21 Jan 2011 22:54:11 +1030 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> Message-ID: <20110121225411.6427e1b5@opy.nosense.org> On Fri, 21 Jan 2011 02:17:35 -0800 Owen DeLong wrote: > > On Jan 21, 2011, at 1:31 AM, Mark Smith wrote: > > > Hi William, > > > > On Thu, 20 Jan 2011 16:22:22 -0500 > > William Herrin wrote: > > > >> On Thu, Jan 20, 2011 at 4:10 PM, Mark Smith > >> wrote: > >>> Why should the global Internet community (i.e. the end-users of > >>> the Internet) have to help wear the costs of individual ISPs not > >>> deploying IPv6 quickly enough? > >> > >> Hi Mark, > >> > >> It seems to me that "whose fault is it?" matters less than "what do we > >> do now?" What we do now is lessen the transition problems (so that the > >> end users don't get screwed in the short term) while moving forward on > >> the transition as quickly as practicable (so that the end users don't > >> get screwed in the long term). > >> > > > > They're going to get screwed regardless in the short term because IPv6 > > hasn't been deployed. NAT444 is going to be bad what ever address space > > is used between the LSN and the customer CPE. > > > This has a lot more to do with content not being accessible on IPv6 and > not having a solution for IPv4-only customer devices to reach IPv6 > content than it does with the access networks not deploying IPv6. > > The access providers generally agree that native IPv6 or 6rd can be deployed > easier and quicker than NAT444 for the problems that can solve. > > The difficult comes when they deal with users, even users that have IPv6 > access, that need to reach IPv4 content for whatever reason. This is where > NAT444 is pretty much the only viable alternative currently on the table. > > I will note that even the people asking for this /10 are saying that they > really don't want to use it, but, they don't see any alternative. > Maybe they need to be a bit more creative then. I've been thinking of and on about how to deploy LSN for a few years, and I've been assuming sharing existing ISP address space. The biggest issues I see right now are how to manage, control and record port range allocations, as the supposed CGN functionality on the platforms I'm working with appears to have no knobs for these things. Recovering and recycling addresses is an just unavoidable part of the process of introducing address sharing. > > The proposal doesn't mention another source of unique IPv4 addresses > > that could be used for this purpose - the ISPs' existing assignments. > > That's really a non-starter. > Why not? > > It'll be functionally equivalent to a NAT444 /10, and will preserve > > more of the remaining public address space for purposes where truly > > globally unique IPv4 addresses are necessary. It would mean ISPs would > > have to start sharing their existing addresses sooner rather than > > later, but that is better for the customers - the longer that ISPs avoid > > introducing address sharing, the larger the shock to customers when the > > ISP can't avoid it any longer and has force customers to share > > addresses all at once. A gradual address sharing roll out would be far > > better than an abrupt one, for both the ISP and it's customers. > > > You're joking, right? No. > This sounds great unless you're one of the lucky > ones that gets to go first, or, were you volunteering? > So you have a better alternative? I don't like the idea of switching a whole customer base over to shared addresses and LSN at once, and I doubt ISP helpdesks will like it either once the inevitable stampede of calls from a percentage of customers starts coming in all at once. Easing customers onto it would be a better approach. Netflow based analysis to identify customers who've set up NAPT port forwards for common ports might be a good way to start forming a list of customers who haven't setup port forwards, who'd then become initial candidates to switch to address sharing. > > (I'd think in principle if ARIN reserve a NAT444 /10, then the other > > RIRs would be expected to reserve a /10 or similar size in their region > > - the proposition doesn't say if the ARIN space would be usable in other > > regions. Assuming all chose a /10, that means 5 x /10s of public > > address space going in one fell swoop ...) > > > That's absurd. If any registry reserves a /10, I'm sure all the registries will > encourage their members to use that /10. Hopefully so. > To the best of my knowledge, > there are no plans to submit this proposal to any other registries (and > I talked to the proposal author about it the day before yesterday in > person). > Apparently it was originally proposed to APNIC and rejected, then the IETF and rejected, and now ARIN. It's being shopped around. As I said before, I don't understand what the problem is with ISPs using their own space, so this proposal smells a bit like a way to "greenfield" a NAT444 deployment, using new address space, instead of recovering and recycling their own address space. It doesn't make the function of sharing addresses any better, and it certainly doesn't prevent address sharing being inevitable once the RIRs run out of global address space. It reduces the work these ISPs have to do, with those avoided costs instead being borne by the people who in the future would have had a legitimate and greater need for space in the /10 that has now disappeared. > I think in principle, you really can assume that the RIRs are not insane > and won't commit wanton acts of destruction on the community. > I'd think so. I thought it may be plausible because the might be rules against one RIR making recommendations on the use of other RIRs' address space. > On the other hand, what I think you will see if this policy does get bogged > down is a situation where many of the larger providers that are asking > for this will each go apply for their own allocations and they may or may > not coordinate sharing that with others. I think that is a far less desirable > alternative than getting this policy through. > I'm all for that. They'd be paying for those allocations even if they are sharing those costs amongst each other. For those other providers who don't need addresses for that purpose, there'd be no externalised costs that they've had no choice in bearing. Regards, mark. > > Regards, > > Mark. > > > > > >> Do you disagree? > >> > >> > >>> Helping ISPs avoid those costs turns the > >>> situation into one of a Moral Hazard. It won't encourage IPv6 > >>> adoption; it'll delay it because both the incentive to do so, and the > >>> consequence of not doing so, are reduced. > >> > >> Shall we encourage the patient not to hurt himself by setting the bone > >> but refusing him pain medication? Sounds positively monstrous to me. > > I find myself having to agree with Bill here. I'm not 100% convinced this is > the right thing to do, and, I was pretty opposed to it from the understanding > I had of the issue when it was presented to IETF. However, at this time, I'm > leaning more towards the belief that this is one of the three things in the > IPv4 end game that we really need to just hold our noses and do. > > (The first two were NRPM 8.3 and the policy for 6rd) > > Owen > > From Wesley.E.George at sprint.com Fri Jan 21 08:56:37 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 13:56:37 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of George Bonser > Sent: Thursday, January 20, 2011 11:41 PM > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > The problem I see with this is that it potentially enables v4 in > perpetuity. People have had a decade to get v4-only stuff out of their > networks. V4 is dead, we need to stop bending over backwards to allow > its continued used and allow it to die. > [WES] The IPv6 purist in me couldn't agree more. The pragmatist in me understands that this is an oversimplification of the situation, especially when you start looking at this from the consumer/residential perspective, rather than the enterprise. How many of the network-connected devices in your house support IPv6 right now, besides your PC/Mac/Linux box and/or Android/iPhone (wifi only)? [In my case, exactly none, mainly because I couldn't *find* things that did when it was time to purchase]. You want to replace them all to make the network-connected parts keep working? How about your mobile phone? No? Would you look for another ISP if you called me to complain and I told you that you *had* to replace one or more of the devices that *you* paid for in order to make them work on my network? Ok, then independent of any IPv6 support on the content side, we need a solution to allow IPv4's continued use. Yes, NAT444 may still break some of that stuff, and yes, *extremely* poor form on the vendors' parts for not making their devices IPv6-capable 5 or 10 years ago, but it's still an installed base that is totally beyond the control of the ISP. Regardless of what we do, NAT444 is a necessary evil. It's just a question of how much remaining address space (if any) we want to use in the commission of said evil. Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From jbates at brightok.net Fri Jan 21 09:17:54 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 08:17:54 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110121200112.3d9917b3@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> Message-ID: <4D399592.3000204@brightok.net> On 1/21/2011 3:31 AM, Mark Smith wrote: > The proposal doesn't mention another source of unique IPv4 addresses > that could be used for this purpose - the ISPs' existing assignments. > It'll be functionally equivalent to a NAT444 /10, and will preserve > more of the remaining public address space for purposes where truly > globally unique IPv4 addresses are necessary. It would mean ISPs would > have to start sharing their existing addresses sooner rather than > later, but that is better for the customers - the longer that ISPs avoid > introducing address sharing, the larger the shock to customers when the > ISP can't avoid it any longer and has force customers to share > addresses all at once. A gradual address sharing roll out would be far > better than an abrupt one, for both the ISP and it's customers. This was our original idea. I disagree with the gradual roll out, though. From a support view point, it's better to hard cut the network after the trial network issues and performance have been worked out. The idea, and hope in holding off is to minimize the shock to customers by allowing others to support IPv6 (including those home routers). As IPv6 becomes more prevalent, we can quick shift v4 into CGN to cover the left behinds. Jack From Wesley.E.George at sprint.com Fri Jan 21 09:30:53 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 14:30:53 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E063E7C@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Owen DeLong > Sent: Friday, January 21, 2011 5:18 AM > > That's absurd. If any registry reserves a /10, I'm sure all the > registries will > encourage their members to use that /10. To the best of my knowledge, > there are no plans to submit this proposal to any other registries (and > I talked to the proposal author about it the day before yesterday in > person). [WES] *IF* we consider this policy, it should be a global policy in order to remove all doubt that this is the intent. I don't like the idea of ARIN reserving a block and *hoping* that folks from other regions will know about it and use it. > > I think in principle, you really can assume that the RIRs are not > insane > and won't commit wanton acts of destruction on the community. > [WES] Perhaps, but you can't necessarily assume that they will be in lock-step coordination on this, especially since a similar proposal has already been shot down at least once in another region. What are they going to do, ask each applicant "is this for an inside NAT444 pool?" so that they can redirect them to the shared address space instead of just approving their request for space? Without any policy mandate to do so? Now who's being absurd? > On the other hand, what I think you will see if this policy does get > bogged > down is a situation where many of the larger providers that are asking > for this will each go apply for their own allocations and they may or > may > not coordinate sharing that with others. I think that is a far less > desirable > alternative than getting this policy through. [WES] As I have said in the IETF discussion, this is sabre-rattling and empty threats. It's not like some cabal of ISPs has been holding back on requesting more addresses hoping that this passes and when it doesn't could show up tomorrow and jointly request enough address space to empty ARIN's (and IANA's) coffers. If they could justify the space, they would have already done so, knowing full well that IPv4 address space was about to become much more difficult to come by. The altruistic angle of this is being oversold - they're running a business, and if they deliberately put that business in jeopardy by not getting the resources they need and can justify while they were available, their employment would be in jeopardy. Broadband providers *already* have enough IPv4 space for their existing customers, so they only need enough space for customer growth. Given that most of them are in the business of providing internet service over a physical connection, they are limited by the footprint of their service area, and that growth potential is similarly limited. Even if they grow via absorption of smaller players, those players should come with some IP addressing resources. Since this is also a discussion framed by the need to support *legacy* equipment, the concern about retroactive support for IPv4 is also losing veracity. Greenfield network expansions, or even new customer acquisitions within existing footprint can't complain about legacy installed-base that can't support IPv6, meaning that the need for NAT444 is limited to support for devices in the home that can't support IPv6 - which should start to become an ever-shrinking number. The major exception I can think of in this case is mobile providers, who are seeing a dramatic increase in the amount of data usage in their existing customer footprint, meaning that their IP address pool oversubscription ratios keep dropping. However, many mobile providers are already doing NAT44 using either RFC1918 or squatting on Bogon space. So again, we're oversensationalizing the urgency of this issue. Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From jbates at brightok.net Fri Jan 21 09:32:08 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 08:32:08 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> Message-ID: <4D3998E8.1090306@brightok.net> On 1/21/2011 4:17 AM, Owen DeLong wrote: > This has a lot more to do with content not being accessible on IPv6 and > not having a solution for IPv4-only customer devices to reach IPv6 > content than it does with the access networks not deploying IPv6. > I suspect content will hard switch to v6 faster than home routers will. > The access providers generally agree that native IPv6 or 6rd can be deployed > easier and quicker than NAT444 for the problems that can solve. We can provide, doesn't mean customers will switch their home gear. > The difficult comes when they deal with users, even users that have IPv6 > access, that need to reach IPv4 content for whatever reason. This is where > NAT444 is pretty much the only viable alternative currently on the table. Agreed. There will still be some v4 content, even if most will switch to v6 as soon as it's viable QOS wise for them to do so. > I will note that even the people asking for this /10 are saying that they > really don't want to use it, but, they don't see any alternative. Reuse their existing space. A single /18 of all my address space would be fine for me to handle NAT444, and not a big deal to duplicate it around the different network areas. I suspect I'll actually go with something smaller, and probably from the DHCP pools which don't utilize static addressing (perhaps that /20 in use by the cell phones). >> The proposal doesn't mention another source of unique IPv4 addresses >> that could be used for this purpose - the ISPs' existing assignments. > > That's really a non-starter. > Why? We have address space already. Why not duplicate it around the network? What does some arbitrary /10 give me that my existing space doesn't? > On the other hand, what I think you will see if this policy does get bogged > down is a situation where many of the larger providers that are asking > for this will each go apply for their own allocations and they may or may > not coordinate sharing that with others. I think that is a far less desirable > alternative than getting this policy through. > They will apply for allocations anyways. They will ask for address space for as long as they possibly can. The fact is, most of the networks who need NAT444 run vast amounts of dynamic space, and we can easily reuse that space for NAT444. > I find myself having to agree with Bill here. I'm not 100% convinced this is > the right thing to do, and, I was pretty opposed to it from the understanding > I had of the issue when it was presented to IETF. However, at this time, I'm > leaning more towards the belief that this is one of the three things in the > IPv4 end game that we really need to just hold our noses and do. > I think ARIN should push for education of NAT444 address reuse with existing address space. Once an ISP does decide to shift to NAT444, they will quit hitting up the freepool for more space. I expect the major shift of NAT444 as soon as v6 is the mainstream protocol, reducing the load and problems associated with NAT. Jack From gbonser at seven.com Fri Jan 21 12:50:39 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 09:50:39 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> > > > [WES] The IPv6 purist in me couldn't agree more. The pragmatist in me > understands that this is an oversimplification of the situation, > especially > when you start looking at this from the consumer/residential > perspective, > rather than the enterprise. > How many of the network-connected devices in your house support IPv6 > right > now, besides your PC/Mac/Linux box and/or Android/iPhone (wifi only)? > [In my > case, exactly none, mainly because I couldn't *find* things that did > when it > was time to purchase]. You want to replace them all to make the > network-connected parts keep working? How about your mobile phone? > No? It has been my experience that many manufacturers don't change anything unless they *have* to. They might this minute be scrambling to get IPv6 into their products but that could all come to a screeching halt and they breathe a collective sigh of relief if something like this comes about and they continue shipping v4 only devices in perpetuity. I suppose I wish there was a way to *temporarily* allow this and not create a mechanism for the perpetuating of manufacturers to continue to produce v4-only devices, which they probably will if something like this passes, particularly if done on a global scale. > Would you look for another ISP if you called me to complain and I told > you > that you *had* to replace one or more of the devices that *you* paid > for in > order to make them work on my network? I would phrase it differently. There should be an education process with the users that the "old" IP addresses will soon be running out and the new system is incompatible with the old. This shouldn't be a "surprise" to the users. Operators and manufacturers have known this was coming for a very long time. In fact, I would support a regulation at the federal level that makes it illegal to sell an IPv4-only device in the United States much like they did with TVs. Maybe something like this could be used to enable a "converter" solution until the v4 only devices attrit but right now we have no mechanism to ensure that v4 devices go away and something like this could enable them forever. > > Regardless of what we do, NAT444 is a necessary evil. It's just a > question > of how much remaining address space (if any) we want to use in the > commission of said evil. > > Wes George I see it as a temporary necessity, not a permanent necessity. The hard part to crack is how to ensure it is temporary. From owen at delong.com Fri Jan 21 13:08:11 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 10:08:11 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> Message-ID: <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> > > Regardless of what we do, NAT444 is a necessary evil. It's just a question > of how much remaining address space (if any) we want to use in the > commission of said evil. > In case anyone missed the subtlety of Wes's statement here... The answer to that question is: A. A single /10 shared by everyone worldwide B. Lots of smaller block (likely totaling quite a bit more than a /10) that are not shared between the different providers each of whom is forced to go acquire their own. In the event that B transpires, there is exactly 0 gain to any ISP for sharing and many many downsides if they do. As this is unfolding and I consider what will happen if this is not deployed, I now support this proposal. Owen From gbonser at seven.com Fri Jan 21 13:13:10 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 10:13:10 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> > > > In case anyone missed the subtlety of Wes's statement here... The > answer to that question is: > > A. A single /10 shared by everyone worldwide > B. Lots of smaller block (likely totaling quite a bit more than a > /10) > that are not shared between the different providers each of whom > is forced to go acquire their own. > > In the event that B transpires, there is exactly 0 gain to any ISP for > sharing and many many downsides if they do. > > As this is unfolding and I consider what will happen if this is not > deployed, I now support this proposal. > > Owen I am coming around but not quite there yet. I would like to see a sunset on it even if it is 5 years or even 10. From aaronh at bind.com Fri Jan 21 13:18:08 2011 From: aaronh at bind.com (Aaron Hughes) Date: Fri, 21 Jan 2011 10:18:08 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> Message-ID: <20110121181808.GL80084@trace.bind.com> George, I do not believe anyone would disagree with anything you said below. We all want all objects to support IPv6 and the transition to be easy and smooth. Wouldn't it be nice if we could turn off IPv4 when we were done in a reasonably short period of time... However: 1) CPEs that do support IPv6 will provide SLAAC or DCHPv6 only to objects that will accept it. 2) Some objects behind the CPE will accept IPv6 / Dual stack, most will not. 3) Many objects behind the CPE are not capable of being upgraded via software to support IPv6. 4) The average person does not know how to take a software update unless a window pops up and says 'click here to install updates'. (Extremely unlikely to be able to perform a firmware upgrade). 5) Many CPEs must be replaced to support IPv6. 6) Many customers will not replace their CPE even if a new one arrives for free. All of these things are bad and I am sure the list could go on far longer than this one. - My grandfather still had a pulse phone until last year when the telephone company finally forced him to pay for touch tone and replaced his phone for him. - X.25 is still heavily in use today (ATM machines etc) - People still have VCRs - People still have broadcast television - People still have pagers IPv4 will very likely be around for 20+ years.. Sad, but still true. Cheers, Aaron On Fri, Jan 21, 2011 at 09:50:39AM -0800, George Bonser wrote: > > > > > [WES] The IPv6 purist in me couldn't agree more. The pragmatist in me > > understands that this is an oversimplification of the situation, > > especially > > when you start looking at this from the consumer/residential > > perspective, > > rather than the enterprise. > > How many of the network-connected devices in your house support IPv6 > > right > > now, besides your PC/Mac/Linux box and/or Android/iPhone (wifi only)? > > [In my > > case, exactly none, mainly because I couldn't *find* things that did > > when it > > was time to purchase]. You want to replace them all to make the > > network-connected parts keep working? How about your mobile phone? > > No? > > It has been my experience that many manufacturers don't change anything > unless they *have* to. They might this minute be scrambling to get IPv6 > into their products but that could all come to a screeching halt and > they breathe a collective sigh of relief if something like this comes > about and they continue shipping v4 only devices in perpetuity. > > I suppose I wish there was a way to *temporarily* allow this and not > create a mechanism for the perpetuating of manufacturers to continue to > produce v4-only devices, which they probably will if something like this > passes, particularly if done on a global scale. > > > > Would you look for another ISP if you called me to complain and I told > > you > > that you *had* to replace one or more of the devices that *you* paid > > for in > > order to make them work on my network? > > I would phrase it differently. There should be an education process > with the users that the "old" IP addresses will soon be running out and > the new system is incompatible with the old. This shouldn't be a > "surprise" to the users. Operators and manufacturers have known this > was coming for a very long time. In fact, I would support a regulation > at the federal level that makes it illegal to sell an IPv4-only device > in the United States much like they did with TVs. Maybe something like > this could be used to enable a "converter" solution until the v4 only > devices attrit but right now we have no mechanism to ensure that v4 > devices go away and something like this could enable them forever. > > > > > > Regardless of what we do, NAT444 is a necessary evil. It's just a > > question > > of how much remaining address space (if any) we want to use in the > > commission of said evil. > > > > Wes George > > I see it as a temporary necessity, not a permanent necessity. > > The hard part to crack is how to ensure it is temporary. > > -- > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From aaronh at bind.com Fri Jan 21 13:20:42 2011 From: aaronh at bind.com (Aaron Hughes) Date: Fri, 21 Jan 2011 10:20:42 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> <5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> Message-ID: <20110121182042.GM80084@trace.bind.com> On Fri, Jan 21, 2011 at 10:13:10AM -0800, George Bonser wrote: > I am coming around but not quite there yet. I would like to see a > sunset on it even if it is 5 years or even 10. Glad you are coming around, but please see my previous e-mail. This will be no less than 20+ years. Hopefully far less objects being double NATed, but there will be NAT44/CGN in place until the tail is so small that service providers don't care about the impact of shutting it off. At that time IPv4 will have little or no value anyway. Cheers, Aaron > > > -- > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From cgrundemann at gmail.com Fri Jan 21 13:22:59 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Fri, 21 Jan 2011 11:22:59 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> <5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> Message-ID: On Fri, Jan 21, 2011 at 11:13, George Bonser wrote: >> > >> In case anyone missed the subtlety of Wes's statement here... The >> answer to that question is: >> >> A. ? ?A single /10 shared by everyone worldwide >> B. ? ?Lots of smaller block (likely totaling quite a bit more than a >> /10) >> ? ? ? that are not shared between the different providers each of whom >> ? ? ? is forced to go acquire their own. >> >> In the event that B transpires, there is exactly 0 gain to any ISP for >> sharing and many many downsides if they do. >> >> As this is unfolding and I consider what will happen if this is not >> deployed, I now support this proposal. >> >> Owen > > I am coming around but not quite there yet. ?I would like to see a > sunset on it even if it is 5 years or even 10. The sunset is built into NAT444 itself, because it breaks stuff: http://tools.ietf.org/html/draft-donley-nat444-impacts-01. Folks will only do it as long as they have to (and they will have to, regardless of this block being available). ~Chris PS - It is probably not a coincidence that one of the folks who has done a bulk of the research on NAT444 authored this proposal. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From owen at delong.com Fri Jan 21 13:22:08 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 10:22:08 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3998E8.1090306@brightok.net> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> Message-ID: <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> On Jan 21, 2011, at 6:32 AM, Jack Bates wrote: > > On 1/21/2011 4:17 AM, Owen DeLong wrote: >> This has a lot more to do with content not being accessible on IPv6 and >> not having a solution for IPv4-only customer devices to reach IPv6 >> content than it does with the access networks not deploying IPv6. >> > > I suspect content will hard switch to v6 faster than home routers will. > I'll be surprised. Yes, content can move faster, but, I don't think content will feel the pressure of runout as fast as the residential provider market will. >> The access providers generally agree that native IPv6 or 6rd can be deployed >> easier and quicker than NAT444 for the problems that can solve. > > We can provide, doesn't mean customers will switch their home gear. > It's unlikely they will have a choice relatively quickly. It's also unlikely that faced with a NAT444 environment that any consumer would not prefer to switch their gear. >> The difficult comes when they deal with users, even users that have IPv6 >> access, that need to reach IPv4 content for whatever reason. This is where >> NAT444 is pretty much the only viable alternative currently on the table. > > Agreed. There will still be some v4 content, even if most will switch to v6 as soon as it's viable QOS wise for them to do so. > There will also be MANY consumer devices that don't support IPv6 that must be considered. >> I will note that even the people asking for this /10 are saying that they >> really don't want to use it, but, they don't see any alternative. > > Reuse their existing space. A single /18 of all my address space would be fine for me to handle NAT444, and not a big deal to duplicate it around the different network areas. I suspect I'll actually go with something smaller, and probably from the DHCP pools which don't utilize static addressing (perhaps that /20 in use by the cell phones). > You are running a much smaller network than many of these guys. They are planning to duplicate this /10 around their different network areas. >>> The proposal doesn't mention another source of unique IPv4 addresses >>> that could be used for this purpose - the ISPs' existing assignments. >> >> That's really a non-starter. >> > > Why? We have address space already. Why not duplicate it around the network? What does some arbitrary /10 give me that my existing space doesn't? > In a given region, deploying NAT444 requires you to have the following: 1 public IP address per N customers 1 NAT box intermediate address for each CGN/LSN -- part of the proposed /10 or from where? 1 intermediate address for each customer -- part of the proposed /10 or from where? To do this from existing space, you would basically need to turn off 2 regions and renumber all of the subscribers in one to match the addresses of the other. Then you would need to come up with additional addresses for all of the LSN/CGN boxes on the interior side and for the shared external addresses. I suppose you could use the addresses recovered from the second region, but, if your region contains more than 1,000,000 customers, it seems to me like it would be pretty difficult to do this juggling without significant down time. Instead, it's much easier to write up a use-case for the addresses you need for this and submit it to the RIR. Sure, probably nobody gets a /10 for this, but, not hard to imagine ways several /14s, possibly a few /12s, and certainly a number of /15s and /16s go out the door that way. If it goes that way, none of the ISPs have any incentive to share those intermediate addresses with the other ISPs and a few downsides to doing so. >> On the other hand, what I think you will see if this policy does get bogged >> down is a situation where many of the larger providers that are asking >> for this will each go apply for their own allocations and they may or may >> not coordinate sharing that with others. I think that is a far less desirable >> alternative than getting this policy through. >> > > They will apply for allocations anyways. They will ask for address space for as long as they possibly can. The fact is, most of the networks who need NAT444 run vast amounts of dynamic space, and we can easily reuse that space for NAT444. > I am unconvinced that it is as easy as you think in many of the scenarios I have seen. >> I find myself having to agree with Bill here. I'm not 100% convinced this is >> the right thing to do, and, I was pretty opposed to it from the understanding >> I had of the issue when it was presented to IETF. However, at this time, I'm >> leaning more towards the belief that this is one of the three things in the >> IPv4 end game that we really need to just hold our noses and do. >> > > I think ARIN should push for education of NAT444 address reuse with existing address space. Once an ISP does decide to shift to NAT444, they will quit hitting up the freepool for more space. I expect the major shift of NAT444 as soon as v6 is the mainstream protocol, reducing the load and problems associated with NAT. > I think many providers are goint to hit the wall with need for NAT444 well before IPv6 is the mainstream protocol and not before we have run out of IPv4. Owen From gbonser at seven.com Fri Jan 21 13:28:06 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 10:28:06 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <20110121181808.GL80084@trace.bind.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> <20110121181808.GL80084@trace.bind.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1350D@RWC-EX1.corp.seven.com> > -----Original Message----- > From: Aaron Hughes [mailto:aaronh at bind.com] > Sent: Friday, January 21, 2011 10:18 AM > To: George Bonser > Cc: George, Wes E [NTK]; William Herrin; Hannigan, Martin; arin- > ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4Address Extension > > George, > > I do not believe anyone would disagree with anything you said below. We > all want all objects to support IPv6 and the transition to be easy and > smooth. Wouldn't it be nice if we could turn off IPv4 when we were done > in a reasonably short period of time... > > > However: > > 1) CPEs that do support IPv6 will provide SLAAC or DCHPv6 only to > objects that will accept it. > 2) Some objects behind the CPE will accept IPv6 / Dual stack, most will > not. > 3) Many objects behind the CPE are not capable of being upgraded via > software to support IPv6. > 4) The average person does not know how to take a software update > unless a window pops up and says 'click here to install updates'. > (Extremely unlikely to be able to perform a firmware upgrade). > 5) Many CPEs must be replaced to support IPv6. > 6) Many customers will not replace their CPE even if a new one arrives > for free. > > All of these things are bad and I am sure the list could go on far > longer than this one. > > - My grandfather still had a pulse phone until last year when the > telephone company finally forced him to pay for touch tone and replaced > his phone for him. > - X.25 is still heavily in use today (ATM machines etc) > - People still have VCRs > - People still have broadcast television > - People still have pagers > > IPv4 will very likely be around for 20+ years.. Sad, but still true. > > Cheers, > Aaron And I still believe we need to drive a stake through its heart at some point and actively kill it. Basically to say "you can use v4 if you want in private networks or between individual networks but it isn't going to be supported ubiquitously on the global Internet after $DATE". The reason is that the bailing wire, super glue, rubber bands, and chewing gum needed to continue supporting it results in a mess. At some point networks will be staffed with techs that never even learned v4 in school. From gbonser at seven.com Fri Jan 21 13:31:14 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 10:31:14 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> > > The sunset is built into NAT444 itself, because it breaks stuff: > http://tools.ietf.org/html/draft-donley-nat444-impacts-01. Folks will > only do it as long as they have to (and they will have to, regardless > of this block being available). > > ~Chris > > PS - It is probably not a coincidence that one of the folks who has > done a bulk of the research on NAT444 authored this proposal. Isn't this basically the same proposal that APNIC turned down and referred to IETF who then turned it down as well? Basically you end up with a system in place that allows v4 communications only between places in North America and only between operators who choose to deploy it? It still doesn't guarantee you will be able to communicate with anyone outside of North America. From owen at delong.com Fri Jan 21 13:31:11 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 10:31:11 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E063E7C@PLSWM12A.ad.sprint.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E063E7C@PLSWM12A.ad.sprint.com> Message-ID: <69E6BC9E-F86B-4E70-8A47-FFEA144E9A7D@delong.com> On Jan 21, 2011, at 6:30 AM, George, Wes E [NTK] wrote: >> -----Original Message----- >> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >> Behalf Of Owen DeLong >> Sent: Friday, January 21, 2011 5:18 AM >> >> That's absurd. If any registry reserves a /10, I'm sure all the >> registries will >> encourage their members to use that /10. To the best of my knowledge, >> there are no plans to submit this proposal to any other registries (and >> I talked to the proposal author about it the day before yesterday in >> person). > > [WES] *IF* we consider this policy, it should be a global policy in order to > remove all doubt that this is the intent. I don't like the idea of ARIN > reserving a block and *hoping* that folks from other regions will know about > it and use it. I think a global policy has too much overhead and it doesn't actually work for this purpose anyway. I will guarantee you that the other RIRs will be informed of the state of this policy in the ARIN region if it passes. I will also guarantee you that if this space is publicized as being available for shared usage by ARIN, the other RIRs will encourage their registrants to make use of it where applicable. Every RIRs policy development process includes an analysis of each proposal that includes the state of similar policies in the other regions. If this were proposed somewhere else after it has passed in the ARIN region, that analysis would show that the ARIN space has already been reserved and made available for that purpose. >> >> I think in principle, you really can assume that the RIRs are not >> insane >> and won't commit wanton acts of destruction on the community. >> > [WES] Perhaps, but you can't necessarily assume that they will be in > lock-step coordination on this, especially since a similar proposal has > already been shot down at least once in another region. What are they going > to do, ask each applicant "is this for an inside NAT444 pool?" so that they > can redirect them to the shared address space instead of just approving > their request for space? Without any policy mandate to do so? Now who's > being absurd? > Can you provide a reference to this? I know about it being shot down in IETF, but, somehow I missed it if it was on any of the other RIR policy mailing lists. I can assure you that the other RIRs will be made aware of it if this policy passes in the ARIN region. Owen From aaronh at bind.com Fri Jan 21 13:36:56 2011 From: aaronh at bind.com (Aaron Hughes) Date: Fri, 21 Jan 2011 10:36:56 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350D@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> <20110121181808.GL80084@trace.bind.com> <5A6D953473350C4B9995546AFE9939EE0BC1350D@RWC-EX1.corp.seven.com> Message-ID: <20110121183656.GN80084@trace.bind.com> On Fri, Jan 21, 2011 at 10:28:06AM -0800, George Bonser wrote: > And I still believe we need to drive a stake through its heart at some > point and actively kill it. Basically to say "you can use v4 if you > want in private networks or between individual networks but it isn't > going to be supported ubiquitously on the global Internet after $DATE". > > The reason is that the bailing wire, super glue, rubber bands, and > chewing gum needed to continue supporting it results in a mess. At some > point networks will be staffed with techs that never even learned v4 in > school. This will happen on it's own and per company. It really does not matter if there is a date associated as this space is not routed. There is no way to enforce it and no one will ever want to use the /10 after it was used for this purpose. In addition, by the time NAT444 technologies would no longer be need, IPv4 will no longer be needed. Cheers, Aaron -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From bicknell at ufp.org Fri Jan 21 13:37:48 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Fri, 21 Jan 2011 10:37:48 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D386249.5000801@arin.net> References: <4D386249.5000801@arin.net> Message-ID: <20110121183748.GA17880@ussenterprise.ufp.org> I realize the desire to not use 1918 space for this comes from the fact that a customer may also be using 1918 space already and a conflict causes reachability issues. In the context of doing this for say enterprises, that makes sense. In the context of home users, not so much. The vast majority of the home users who buy a Linksys or similar are in a small number of ranges, e.g. 192.168.0.0/24 and 192.168.1.0/24. Prompting the quesiton, if you figured out what 99% of the home CPE uses, subtracted from 1918 space, wouldn't you be left with well more than a /10 from 10/8? Couldn't you just avoid the parts used by common CPE and use 10/8 for NAT444? Yes, you still need to detect and deal with the odd customer who has a collision, but no solution is free. If that is rare, it may be a lower cost to the community than setting aside a /10. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From farmer at umn.edu Fri Jan 21 13:43:05 2011 From: farmer at umn.edu (David Farmer) Date: Fri, 21 Jan 2011 12:43:05 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E063E7C@PLSWM12A.ad.sprint.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E063E7C@PLSWM12A.ad.sprint.com> Message-ID: <4D39D3B9.5090500@umn.edu> On 1/21/11 08:30 CST, George, Wes E [NTK] wrote: >> -----Original Message----- >> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >> Behalf Of Owen DeLong >> Sent: Friday, January 21, 2011 5:18 AM >> >> That's absurd. If any registry reserves a /10, I'm sure all the >> registries will >> encourage their members to use that /10. To the best of my knowledge, >> there are no plans to submit this proposal to any other registries (and >> I talked to the proposal author about it the day before yesterday in >> person). > > [WES] *IF* we consider this policy, it should be a global policy in order to > remove all doubt that this is the intent. I don't like the idea of ARIN > reserving a block and *hoping* that folks from other regions will know about > it and use it. If ARIN does this (again this is a BIG IF), I agree how we do it matters a lot. However, if we do it as a Global Policy, it is my understanding that ARIN and the other RIRs, as the NRO of ICANN would essentially be directing IANA to do it, instead of the IETF directing IANA to do it. We ARIN wouldn't be doing it per se. In some ways that is an interesting idea, but means that all the RIRs have to pass the Global Policy and be reviewed by the NRO AC and the ICANN board before it could happen, which may be to late from a practical perspective. There is the notion of a globally coordinated policy where the other RIRs could pas a policy that is compatible with ARIN's policy, probably simply recognizing the allocation ARIN make. Or maybe another option is for ARIN (not sure who the individuals should be) to submit an Informational RFC identifying the allocation it makes for this purpose, similar to RFC 3849 "IPv6 Address Prefix Reserved for Documentation", that was more or less lead by APNIC I believe. I didn't follow that process at the time so maybe this situation isn't analogous at all, I just don't know. Also a procedural question, is it necessary for this kind of policy to go into the NRPM? Basically the policy just directing ARIN staff to make a special allocation that would be document by Whois, wouldn't that be sufficient documentation? Especially, if we further document it with a Informational RFC submitted to the IETF or a web page similar to what APNIC has for the IPv6 Documentation prefix. http://www.apnic.net/info/faq/ipv6-documentation-prefix-faq.html Thanks. -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From cgrundemann at gmail.com Fri Jan 21 13:43:19 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Fri, 21 Jan 2011 11:43:19 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> <5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> Message-ID: On Fri, Jan 21, 2011 at 11:31, George Bonser wrote: >> >> The sunset is built into NAT444 itself, because it breaks stuff: >> http://tools.ietf.org/html/draft-donley-nat444-impacts-01. Folks will >> only do it as long as they have to (and they will have to, regardless >> of this block being available). >> >> ~Chris >> >> PS - It is probably not a coincidence that one of the folks who has >> done a bulk of the research on NAT444 authored this proposal. > > Isn't this basically the same proposal that APNIC turned down and > referred to IETF who then turned it down as well? ?Basically you end up > with a system in place that allows v4 communications only between places > in North America and only between operators who choose to deploy it? > > It still doesn't guarantee you will be able to communicate with anyone > outside of North America. I believe that you're mistaken. This would be "internal" space and wouldn't affect "public"/outside communications regardless of deployment or region. It allows a NAT444 to look something like this: [device]-(RFC1918)-[CPE]-(this space)-[CGN]-(Global Addressing)-{Internet} The idea is to avoid collisions between networks on the LAN and WAN sides of the CPE when adding a layer of NAT44. By definition this space should never be routed (and therefor never contribute to communication with outside networks). But I could be missing your point..? ~Chris -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From matthew at matthew.at Fri Jan 21 13:50:58 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 21 Jan 2011 10:50:58 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110121183748.GA17880@ussenterprise.ufp.org> References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> Message-ID: <4D39D592.904@matthew.at> On 1/21/2011 10:37 AM, Leo Bicknell wrote: > > Prompting the quesiton, if you figured out what 99% of the home CPE > uses, subtracted from 1918 space, wouldn't you be left with well more > than a /10 from 10/8? Couldn't you just avoid the parts used by common > CPE and use 10/8 for NAT444? Yes. There will be edge cases where consumers will need to renumber their internal networks in order to operate in this environment, but that pain is small compared to the work they will need to do in order to enable IPv6 in their internal network. I still object to the proposal on the basis that it is not needed. Matthew Kaufman From jbates at brightok.net Fri Jan 21 14:32:07 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 13:32:07 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> Message-ID: <4D39DF37.3020109@brightok.net> On 1/21/2011 12:22 PM, Owen DeLong wrote: > You are running a much smaller network than many of these guys. > > They are planning to duplicate this /10 around their different network areas. > My point is that if they are large enough to utilize a /10, they probably already have much larger than a /10 in their network. Duping existing assignments would be just fine. > To do this from existing space, you would basically need to turn off 2 regions and renumber > all of the subscribers in one to match the addresses of the other. Then you would need > to come up with additional addresses for all of the LSN/CGN boxes on the interior side > and for the shared external addresses. I suppose you could use the addresses recovered > from the second region, but, if your region contains more than 1,000,000 customers, it > seems to me like it would be pretty difficult to do this juggling without significant down > time. The interior addressing would be an already existing network. It would also be the first network to undergo NAT444. That network can then be duplicated onto other networks. > Instead, it's much easier to write up a use-case for the addresses you need for this > and submit it to the RIR. Sure, probably nobody gets a /10 for this, but, not hard > to imagine ways several /14s, possibly a few /12s, and certainly a number of > /15s and /16s go out the door that way. If it goes that way, none of the ISPs have > any incentive to share those intermediate addresses with the other ISPs and > a few downsides to doing so. If they ask, they'll be asking for the public facing addressing (which must be unique) while they work on renumbering the millions of internal addressing. The request for external addressing is much less. > I think many providers are goint to hit the wall with need for NAT444 well before IPv6 is the mainstream protocol and not before we have run out of IPv4. > Perhaps, and they easily can use their existing addresses. The additional addressing you need is to cover the external side of the NAT444. Once that is established, you can renumber inside to heart's delight. Could be that you have multiple /8's worth of inside addressing. The NAT444 system isn't really going to care what's on the inside much. The /10 shared won't work for the outside. People will request for outside facing addressing to deal with the transition to NAT444. The inside addressing can be anything, and as NAT444 is deployed, they can start replicating their entire address space. Jack From owen at delong.com Fri Jan 21 14:31:22 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 11:31:22 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> Message-ID: On Jan 21, 2011, at 10:31 AM, George Bonser wrote: >> >> The sunset is built into NAT444 itself, because it breaks stuff: >> http://tools.ietf.org/html/draft-donley-nat444-impacts-01. Folks will >> only do it as long as they have to (and they will have to, regardless >> of this block being available). >> >> ~Chris >> >> PS - It is probably not a coincidence that one of the folks who has >> done a bulk of the research on NAT444 authored this proposal. > > Isn't this basically the same proposal that APNIC turned down and > referred to IETF who then turned it down as well? Basically you end up > with a system in place that allows v4 communications only between places > in North America and only between operators who choose to deploy it? > > It still doesn't guarantee you will be able to communicate with anyone > outside of North America. > Uh, no... This space is intended sort of like RFC-1918, a new private address space to provide private addresses for that layer between the residential NAT gateway exterior to reach the interior interface of the carriers NAT box. It would not be limited to use in North America, it could be used globally by any carrier for that purpose. It could also be used by other private networks that don't need to reach carrier NATs, though I don't see much benefit to that particular application. Owen From gbonser at seven.com Fri Jan 21 14:37:00 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 11:37:00 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> > > It allows a NAT444 to look something like this: > [device]-(RFC1918)-[CPE]-(this space)-[CGN]-(Global Addressing)- > {Internet} > > The idea is to avoid collisions between networks on the LAN and WAN > sides of the CPE when adding a layer of NAT44. By definition this > space should never be routed (and therefor never contribute to > communication with outside networks). > > But I could be missing your point..? > ~Chris No, I was misunderstanding a portion of what was going on. Ok, so the idea is to mitigate RFC1918 collisions between customers within the provider's domain by providing a "safe" NAT block to use. Still, my major source of discomfort is enabling v4 forever. From Wesley.E.George at sprint.com Fri Jan 21 14:44:56 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 19:44:56 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350D@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> <20110121181808.GL80084@trace.bind.com> <5A6D953473350C4B9995546AFE9939EE0BC1350D@RWC-EX1.corp.seven.com> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E0653B1@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: George Bonser [mailto:gbonser at seven.com] > Sent: Friday, January 21, 2011 1:28 PM > To: Aaron Hughes > Cc: George, Wes E [NTK]; William Herrin; Hannigan, Martin; arin- > ppml at arin.net > Subject: RE: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4Address Extension > > And I still believe we need to drive a stake through its heart at some > point and actively kill it. Basically to say "you can use v4 if you > want in private networks or between individual networks but it isn't > going to be supported ubiquitously on the global Internet after $DATE". > [WES] I mentioned it in passing earlier, but after I spent a lot of time discussing this issue with the authors of the IETF address reservation draft, we decided to write another draft. It started out being a draft to formally deprecate IPv4, and ended up morphing into a simple draft which updates the standards for "IP devices" to require IPv6, rather than it being simply optional. It's largely symbolic, because the decision to support or not support IPv6 is largely a business decision, but it will at least provide guidance at the IETF level that IPv6 is important to support, instead of IETF being largely agnostic on the matter. There are other people who since reviewing http://tools.ietf.org/html/draft-george-ipv6-required-00 have said that they think that it is probably a good idea to write the draft deprecating IPv4, but that they agree that we should start with the simpler thing that is easier to gain consensus on. That is, IPv4 is exhausted, IPv6 isn't going anywhere, and if you want to build an IP-capable device, you had better not stop with IPv4; and then work towards gaining consensus to deprecate IPv4 once that groundwork is laid. So I guess you could say that we're working on that stake in the ground. Aaron's right that it won't eliminate it completely, but it might help to nudge IPv6 towards the dominant protocol sooner. If you are looking for a reason to get involved at IETF, the authors of this draft would be happy for your support on the IntAREA WG email list ;-) Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From Wesley.E.George at sprint.com Fri Jan 21 14:47:11 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 19:47:11 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D39D592.904@matthew.at> References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> <4D39D592.904@matthew.at> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E0653CC@PLSWM12A.ad.sprint.com> +1 Thank you for saying this more succinctly than I did in a previous message. Wes > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Matthew Kaufman > Sent: Friday, January 21, 2011 1:51 PM > To: arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > On 1/21/2011 10:37 AM, Leo Bicknell wrote: > > > > Prompting the quesiton, if you figured out what 99% of the home CPE > > uses, subtracted from 1918 space, wouldn't you be left with well more > > than a /10 from 10/8? Couldn't you just avoid the parts used by > common > > CPE and use 10/8 for NAT444? > > Yes. > > There will be edge cases where consumers will need to renumber their > internal networks in order to operate in this environment, but that > pain > is small compared to the work they will need to do in order to enable > IPv6 in their internal network. > > I still object to the proposal on the basis that it is not needed. > > Matthew Kaufman -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From Wesley.E.George at sprint.com Fri Jan 21 15:03:15 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 20:03:15 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E06540F@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: Owen DeLong [mailto:owen at delong.com] > Sent: Friday, January 21, 2011 1:08 PM > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > > > > Regardless of what we do, NAT444 is a necessary evil. It's just a > question > > of how much remaining address space (if any) we want to use in the > > commission of said evil. > > > In case anyone missed the subtlety of Wes's statement here... The > answer to that question is: > > A. A single /10 shared by everyone worldwide > B. Lots of smaller block (likely totaling quite a bit more than a > /10) > that are not shared between the different providers each of whom > is forced to go acquire their own. [WES] I maintain that there is also C) 1918 space that is not being used by standard CPE devices by default and D) a subset of the provider's *existing* IPv4 space. I remain unconvinced that providers will be able to justify a significant amount of new space to make B happen on account of needing to do NAT444. > > In the event that B transpires, there is exactly 0 gain to any ISP for > sharing and many many downsides if they do. > [WES] Please explain this. Why would there be no gain for an ISP to acquire and share addresses with other similarly situated ISPs *without* ARIN formally reserving it, but somehow it's a great and wonderful thing *with* ARIN (or IETF/IANA)'s blessing? They can just as easily populate the right info in whois making it clear that this is a shared block as ARIN can... Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From info at arin.net Fri Jan 21 15:23:32 2011 From: info at arin.net (ARIN) Date: Fri, 21 Jan 2011 15:23:32 -0500 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 Message-ID: <4D39EB44.10702@arin.net> ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-128: Replacement of Section 4.2.4.4 Proposal Originator: Martin Hannigan, Chris Grundemann Proposal Version: 1.0 Date: 21 January 2011 Proposal type: Modify, complete replacement of 4.2.4.4 Policy term: Permanent Policy statement: 4.2.4.4. Subscriber Members After One Year After an organization has been a subscriber member of ARIN for one year,that organization may choose to request up to a 12 month supply of IP addresses. On the date that ARIN's IPv4 aggregate inventory of IPv4 address space drops below the equivalent of 2/8's and after ARIN receives its last /8 as a result of the IANA executing section 10.4.2.2 of the NRPM and in accordance with the Global Policy for the Allocation of the Remaining IPv4 Address Space, the length of supply that any organization may request from ARIN from that moment forward will be reduced to three months. Inventory is defined as all unused IPv4 addresses held by ARIN. This includes legacy address space which will be added to the available inventory and used after no longer than a one month hold period. Any addresses that the organization declares unavailable will be detailed publicly on a monthly basis that includes a detailed justification. Unavailable IPv4 addresses shall be considered to be an exception, not a rule. This reduction does not apply to resources received through the utilization of NRPM Section 8.3 of the NRPM. An organization receiving a transfer under NRPM Section 8.3 may continue to request up to a 12-month supply of IP addresses. Rationale: ARIN's pending operational practice is that if an organization has a request in the ARIN hostmaster queue for IPv4 resources when the IANA declares the exhaustion phase (10.4.2.2), their request will be automatically truncated from a twelve month supply to a three month supply since policy in effect at the time of exhaustion will apply. 8.3 and 4.2.4.4 are currently "in effect". Example: If an entity is asking for 4 x /24 for a 12 month period and IANA exhaustion occurs, a requester will receive, if justified, 1 x /24. If an entity is asking for 120 x /24 at the time that exhaustion occurs, they would only receive 30 x /24 if justified. If ARIN determines that this same entity would only qualify for 90 of the 120 x /24 requested, then that entity would only receive 22 x /24. ARIN has the equivalent of approximately 7 /8's in their current inventory of address space equaling roughly 117M addresses. This includes addresses churning (revocations, returned), legacy addresses returned and the final /8 ARIN has received as a result of the execution of policy directing the IANA to exhaust inventory when it reaches 5 /8s. The intention of this proposal is simple. To define how as a community we will wind-down IPv4 inventory in an fair, orderly and predictable manner and to prevent the organization from being in a state of unreasonably stockpiling IPv4 addresses. It is also intends to insure that any confusion around legacy address utilization is clear; in the absence of a global policy dealing with this issue and need exists in the ARIN region any unused address in ARIN's inventory must be used. The ARIN AC should review and determine what action if any should be taken at their next available opportunity, or sooner if they deem warranted. From info at arin.net Fri Jan 21 15:23:59 2011 From: info at arin.net (ARIN) Date: Fri, 21 Jan 2011 15:23:59 -0500 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants Message-ID: <4D39EB5F.2070600@arin.net> ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-129: IPv4 Addresses for Process Participants Proposal Originator: Matthew Kaufman Proposal Version: 1 Date: 21 January 2011 Proposal type: New Policy term: Permanent Policy statement: Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute one quarter (a single /10) of the space immediately to "active participants" in the ARIN policy development process. An "active participant" for this purpose is defined as an individual who expresses support for OR objection to this proposal. Each "active participant" shall receive a single block of the same size, the size chosen so as to maximally use the /10 allocated for this purpose, but in no case shall the block be smaller than /24. No more than one such block shall be distributed per organization if a single organization has more than one "active participant". In the case where the number of "active participants" exceeds the number of minimum-sized (/24) blocks available, priority shall be given to those who responded first. Rationale: In order to accelerate IPv6 deployment, it is critical that IPv4 space be consumed as rapidly as possible. Several possible approaches exist. One would be to distribute the final space proportionately to existing assignment size. Another might be to randomly assign the remaining space. Yet another might be to award the space based on merit, after reviewing possible uses for the final IPv4 space. This proposal instead simply consumes some of the remaining space by directly rewarding the participants in the policy development process for their participation. Timetable for implementation: Immediate From info at arin.net Fri Jan 21 15:24:15 2011 From: info at arin.net (ARIN) Date: Fri, 21 Jan 2011 15:24:15 -0500 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN Message-ID: <4D39EB6F.3040802@arin.net> ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-130: IPv4 Transition Reservation for Every ASN Proposal Originator: Matthew Kaufman Proposal Version: 1 Date: 21 January 2011 Proposal type: New Policy term: Permanent Policy statement: Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one /24 of IPv4 space from that block for every ARIN-registered AS number, including assigned legacy AS numbers in the ARIN region. Organizations may apply to receive the space that has been reserved under the existing address space justification policy. Rationale: IPv4 space is running out. Most organizations will find that their IPv4 to IPv6 transition plans require a small amount of additional IPv4 space, but given the current pace of IPv6 deployment and transition it is highly likely that most organizations will discover this fact AFTER no additional IPv4 space is available, including space that has been set aside in a transition technology pool. This policy ensures that every organization that previously qualified due to unique routing policy and/or multihoming will be able to request and receive a small amount of transition space at any time after runout. This policy also has the beneficial side effect of accelerating general IPv4 runout, which will encourage IPv6 deployment. These reservations will consume less than 1/3rd of the final /8. Timetable for implementation: Immediate From bicknell at ufp.org Fri Jan 21 15:29:17 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Fri, 21 Jan 2011 12:29:17 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: <20110121202917.GA25286@ussenterprise.ufp.org> In a message written on Fri, Jan 21, 2011 at 03:23:59PM -0500, ARIN wrote: > An "active participant" for this purpose is defined as an individual > who expresses support for OR objection to this proposal. [snip] > In the case where the number of "active participants" exceeds the > number of minimum-sized (/24) blocks available, priority shall be given > to those who responded first. I object, and would like the timestamp of my message recorded. :) Seriously though, what happened to need? -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From aaronh at bind.com Fri Jan 21 15:31:23 2011 From: aaronh at bind.com (Aaron Hughes) Date: Fri, 21 Jan 2011 12:31:23 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <20110121202917.GA25286@ussenterprise.ufp.org> References: <4D39EB5F.2070600@arin.net> <20110121202917.GA25286@ussenterprise.ufp.org> Message-ID: <20110121203123.GO80084@trace.bind.com> I love it! For all the wrong reasons. I object to this proposal. Cheers, Aaron On Fri, Jan 21, 2011 at 12:29:17PM -0800, Leo Bicknell wrote: > In a message written on Fri, Jan 21, 2011 at 03:23:59PM -0500, ARIN wrote: > > An "active participant" for this purpose is defined as an individual > > who expresses support for OR objection to this proposal. > [snip] > > In the case where the number of "active participants" exceeds the > > number of minimum-sized (/24) blocks available, priority shall be given > > to those who responded first. > > I object, and would like the timestamp of my message recorded. :) > > Seriously though, what happened to need? > > -- > Leo Bicknell - bicknell at ufp.org - CCIE 3440 > PGP keys at http://www.ufp.org/~bicknell/ > -- > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From glenn at wholesaledatacenter.com Fri Jan 21 15:33:29 2011 From: glenn at wholesaledatacenter.com (Glenn Morrison) Date: Fri, 21 Jan 2011 14:33:29 -0600 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for ProcessParticipants In-Reply-To: <20110121202917.GA25286@ussenterprise.ufp.org> References: <4D39EB5F.2070600@arin.net> <20110121202917.GA25286@ussenterprise.ufp.org> Message-ID: I too object to this proposal... Glenn Morrison DC Manager 816-389-5200 -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Leo Bicknell Sent: Friday, January 21, 2011 2:29 PM To: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-129: IPv4 Addresses for ProcessParticipants In a message written on Fri, Jan 21, 2011 at 03:23:59PM -0500, ARIN wrote: > An "active participant" for this purpose is defined as an individual > who expresses support for OR objection to this proposal. [snip] > In the case where the number of "active participants" exceeds the > number of minimum-sized (/24) blocks available, priority shall be > given to those who responded first. I object, and would like the timestamp of my message recorded. :) Seriously though, what happened to need? -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ From gcoco at cstel.com Fri Jan 21 15:34:41 2011 From: gcoco at cstel.com (Gareth Coco) Date: Fri, 21 Jan 2011 15:34:41 -0500 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <20110121203123.GO80084@trace.bind.com> References: <4D39EB5F.2070600@arin.net><20110121202917.GA25286@ussenterprise.ufp.org> <20110121203123.GO80084@trace.bind.com> Message-ID: I object as well for all the wrond reasons also. -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Aaron Hughes Sent: Friday, January 21, 2011 3:31 PM To: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants I love it! For all the wrong reasons. I object to this proposal. Cheers, Aaron On Fri, Jan 21, 2011 at 12:29:17PM -0800, Leo Bicknell wrote: > In a message written on Fri, Jan 21, 2011 at 03:23:59PM -0500, ARIN wrote: > > An "active participant" for this purpose is defined as an > > individual who expresses support for OR objection to this proposal. > [snip] > > In the case where the number of "active participants" exceeds the > > number of minimum-sized (/24) blocks available, priority shall be > > given to those who responded first. > > I object, and would like the timestamp of my message recorded. :) > > Seriously though, what happened to need? > > -- > Leo Bicknell - bicknell at ufp.org - CCIE 3440 > PGP keys at http://www.ufp.org/~bicknell/ > -- > PPML > You are receiving this message because you are subscribed to the ARIN > Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From owen at delong.com Fri Jan 21 15:34:27 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 12:34:27 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: <9F0B74AF-88B5-4E78-A2F9-C2E6BBBFD665@delong.com> I oppose this policy. As much as I'd love a free /24, this is truly a case of reductio ad absurdum and quite contrary to the community's best interest. Additionally, the policy is vague and would be difficult to implement. > > Each "active participant" shall receive a single block of the same > size, the size chosen so as to maximally use the /10 allocated for this > purpose, but in no case shall the block be smaller than /24. No more > than one such block shall be distributed per organization if a single > organization has more than one "active participant". > I am affiliated with multiple organizations. Which one would my /24 be counted against? How is that determined? IPv4 runout will be a traumatic experience for a majority of the internet population with repercussions distributed across ISVs, Content Providers, Distribution Networks, Transit Networks, Access Networks, Consumers, Regulators, and more. Hardly anyone will be untouched by this transition. This event is inevitable and coming soon (probably 6-9 months from now). We should be focusing on ways to make the remaining address space benefit the largest userbase possible, not ways to make the transition more painful to more people. Owen From mysidia at gmail.com Fri Jan 21 15:38:38 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Fri, 21 Jan 2011 14:38:38 -0600 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: On Fri, Jan 21, 2011 at 2:23 PM, ARIN wrote: > I object to PP129 assigning IP address space based on response order to a policy proposal. The proposal does not consider need. The definition of 'active participant' is kind of bad. Criteria for assignment is capricious and arbitrary, and creates issues for anyone wanting to support the proposal, as claims of support or opposition can be described as self-serving. Good stewardship does not generally imply taking measures to accelerate consumption of IPv4 space. ARIN's role is not to impose IPv6 at all costs. -- -J From schiller at uu.net Fri Jan 21 15:40:38 2011 From: schiller at uu.net (Jason Schiller) Date: Fri, 21 Jan 2011 15:40:38 -0500 (EST) Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: I expresses support for OR objection to this proposal. 20:38 UTC 01/21/2011 This policy will not advance the deployment of IPv6 by accelerating IPv4 depltion unless it is also coupled with a policy to prevent transfers within the ARIN region, and prevent the ARIN from aquiring space from other RIRs and using it within the ARIN region. Frankly I am with Leo (who is ahead of me in line)... Where is the stewardship here? __Jason ========================================================================== Jason Schiller (703)886.6648 Senior Internet Network Engineer fax:(703)886.0512 Public IP Global Network Engineering schiller at uu.net UUNET / Verizon jason.schiller at verizonbusiness.com The good news about having an email address that is twice as long is that it increases traffic on the Internet. On Fri, 21 Jan 2011, ARIN wrote: |Date: Fri, 21 Jan 2011 15:23:59 -0500 |From: ARIN |To: arin-ppml at arin.net |Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants | |ARIN received the following policy proposal and is posting it to the |Public Policy Mailing List (PPML) in accordance with the Policy |Development Process. | |The ARIN Advisory Council (AC) will review the proposal at their next |regularly scheduled meeting (if the period before the next regularly |scheduled meeting is less than 10 days, then the period may be extended |to the subsequent regularly scheduled meeting). The AC will decide how |to utilize the proposal and announce the decision to the PPML. | |The AC invites everyone to comment on the proposal on the PPML, |particularly their support or non-support and the reasoning |behind their opinion. Such participation contributes to a thorough |vetting and provides important guidance to the AC in their deliberations. | |Draft Policies and Proposals under discussion can be found at: |https://www.arin.net/policy/proposals/index.html | |The ARIN Policy Development Process can be found at: |https://www.arin.net/policy/pdp.html | |Mailing list subscription information can be found |at: https://www.arin.net/mailing_lists/ | |Regards, | |Communications and Member Services |American Registry for Internet Numbers (ARIN) | | |## * ## | | |ARIN-prop-129: IPv4 Addresses for Process Participants | |Proposal Originator: Matthew Kaufman | |Proposal Version: 1 | |Date: 21 January 2011 | |Proposal type: New | |Policy term: Permanent | |Policy statement: | | Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute |one quarter (a single /10) of the space immediately to "active |participants" in the ARIN policy development process. | | An "active participant" for this purpose is defined as an individual |who expresses support for OR objection to this proposal. | | Each "active participant" shall receive a single block of the same |size, the size chosen so as to maximally use the /10 allocated for this |purpose, but in no case shall the block be smaller than /24. No more |than one such block shall be distributed per organization if a single |organization has more than one "active participant". | | In the case where the number of "active participants" exceeds the |number of minimum-sized (/24) blocks available, priority shall be given |to those who responded first. | |Rationale: | | In order to accelerate IPv6 deployment, it is critical that IPv4 |space be consumed as rapidly as possible. | | Several possible approaches exist. One would be to distribute the |final space proportionately to existing assignment size. Another might |be to randomly assign the remaining space. Yet another might be to award |the space based on merit, after reviewing possible uses for the final |IPv4 space. | | This proposal instead simply consumes some of the remaining space by |directly rewarding the participants in the policy development process |for their participation. | |Timetable for implementation: Immediate | | | | |_______________________________________________ |PPML |You are receiving this message because you are subscribed to |the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). |Unsubscribe or manage your mailing list subscription at: |http://lists.arin.net/mailman/listinfo/arin-ppml |Please contact info at arin.net if you experience any issues. | From owen at delong.com Fri Jan 21 15:40:55 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 12:40:55 -0800 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <4D39EB44.10702@arin.net> References: <4D39EB44.10702@arin.net> Message-ID: <6E671C70-3446-42F4-9321-5063867BC819@delong.com> I oppose this proposal. The current policy is clear and reasonably predictable. This policy makes the date of implementation much harder to predict and also creates a situation where the existing requests in queue when it happens will still receive a 12 month supply, potentially taking the remaining pool beyond exhaustion. I do not believe this proposal improves the current policy. Quite the opposite. Owen On Jan 21, 2011, at 12:23 PM, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-128: Replacement of Section 4.2.4.4 > > Proposal Originator: Martin Hannigan, Chris Grundemann > > Proposal Version: 1.0 > > Date: 21 January 2011 > > Proposal type: Modify, complete replacement of 4.2.4.4 > > Policy term: Permanent > > Policy statement: > > 4.2.4.4. Subscriber Members After One Year > > After an organization has been a subscriber member of ARIN for one > year,that organization may choose to request up to a 12 month supply of > IP addresses. > > On the date that ARIN's IPv4 aggregate inventory of IPv4 address > space drops below the equivalent of 2/8's and after ARIN receives its > last /8 as a result of the IANA executing section 10.4.2.2 of the NRPM > and in accordance with the Global Policy for the Allocation of the > Remaining IPv4 Address Space, the length of supply that any organization > may request from ARIN from that moment forward will be reduced to three > months. > > Inventory is defined as all unused IPv4 addresses held by ARIN. This > includes legacy address space which will be added to the available > inventory and used after no longer than a one month hold period. Any > addresses that the organization declares unavailable will be detailed > publicly on a monthly basis that includes a detailed justification. > Unavailable IPv4 addresses shall be considered to be an exception, not > a rule. > > This reduction does not apply to resources received through the > utilization of NRPM Section 8.3 of the NRPM. An organization receiving a > transfer under NRPM Section 8.3 may continue to request up to a 12-month > supply of IP addresses. > > Rationale: > > ARIN's pending operational practice is that if an organization has a > request in the ARIN hostmaster queue for IPv4 resources when the IANA > declares the exhaustion phase (10.4.2.2), their request will be > automatically truncated from a twelve month supply to a three month > supply since policy in effect at the time of exhaustion will apply. 8.3 > and 4.2.4.4 are currently "in effect". > > Example: If an entity is asking for 4 x /24 for a 12 month period and > IANA exhaustion occurs, a requester will receive, if justified, 1 x /24. > If an entity is asking for 120 x /24 at the time that exhaustion occurs, > they would only receive 30 x /24 if justified. If ARIN determines that > this same entity would only qualify for 90 of the 120 x /24 requested, > then that entity would only receive 22 x /24. > > ARIN has the equivalent of approximately 7 /8's in their current > inventory of address space equaling roughly 117M addresses. This > includes addresses churning (revocations, returned), legacy addresses > returned and the final /8 ARIN has received as a result of the execution > of policy directing the IANA to exhaust inventory when it reaches 5 /8s. > > The intention of this proposal is simple. To define how as a community > we will wind-down IPv4 inventory in an fair, orderly and predictable > manner and to prevent the organization from being in a state of > unreasonably stockpiling IPv4 addresses. It is also intends to insure > that any confusion around legacy address utilization is clear; in the > absence of a global policy dealing with this issue and need exists in > the ARIN region any unused address in ARIN's inventory must be used. > > The ARIN AC should review and determine what action if any should be > taken at their next available opportunity, or sooner if they deem warranted. > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Fri Jan 21 15:43:38 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 12:43:38 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: I oppose this proposal. The current policy NRPM 4.10 does a better job of addressing this need without the added risks of creating a large pool of space reserved for ASNs that will not likely ever use it. Owen On Jan 21, 2011, at 12:24 PM, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-130: IPv4 Transition Reservation for Every ASN > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one > /24 of IPv4 space from that block for every ARIN-registered AS number, > including assigned legacy AS numbers in the ARIN region. Organizations > may apply to receive the space that has been reserved under the existing > address space justification policy. > > Rationale: > > IPv4 space is running out. Most organizations will find that their > IPv4 to IPv6 transition plans require a small amount of additional IPv4 > space, but given the current pace of IPv6 deployment and transition it > is highly likely that most organizations will discover this fact AFTER > no additional IPv4 space is available, including space that has been set > aside in a transition technology pool. > > This policy ensures that every organization that previously qualified > due to unique routing policy and/or multihoming will be able to request > and receive a small amount of transition space at any time after runout. > > This policy also has the beneficial side effect of accelerating > general IPv4 runout, which will encourage IPv6 deployment. > > These reservations will consume less than 1/3rd of the final /8. > > > Timetable for implementation: Immediate > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From glenn at wholesaledatacenter.com Fri Jan 21 15:47:52 2011 From: glenn at wholesaledatacenter.com (Glenn Morrison) Date: Fri, 21 Jan 2011 14:47:52 -0600 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: I Object to this proposal as well... The main reason is no timetable for how long the "reservation" is good for, that is a lot of space to "reserve" for people that may not want or need it. Glenn Morrison DC Manager 816-389-5200 -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of ARIN Sent: Friday, January 21, 2011 2:24 PM To: arin-ppml at arin.net Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-130: IPv4 Transition Reservation for Every ASN Proposal Originator: Matthew Kaufman Proposal Version: 1 Date: 21 January 2011 Proposal type: New Policy term: Permanent Policy statement: Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one /24 of IPv4 space from that block for every ARIN-registered AS number, including assigned legacy AS numbers in the ARIN region. Organizations may apply to receive the space that has been reserved under the existing address space justification policy. Rationale: IPv4 space is running out. Most organizations will find that their IPv4 to IPv6 transition plans require a small amount of additional IPv4 space, but given the current pace of IPv6 deployment and transition it is highly likely that most organizations will discover this fact AFTER no additional IPv4 space is available, including space that has been set aside in a transition technology pool. This policy ensures that every organization that previously qualified due to unique routing policy and/or multihoming will be able to request and receive a small amount of transition space at any time after runout. This policy also has the beneficial side effect of accelerating general IPv4 runout, which will encourage IPv6 deployment. These reservations will consume less than 1/3rd of the final /8. Timetable for implementation: Immediate _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From Wesley.E.George at sprint.com Fri Jan 21 15:49:02 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 20:49:02 +0000 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E06550D@PLSWM12A.ad.sprint.com> Opposed. I don't subscribe to the "band-aid removal" method of IPv6 transition. Wes George > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of ARIN > Sent: Friday, January 21, 2011 3:24 PM > To: arin-ppml at arin.net > Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process > Participants > > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their > deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-129: IPv4 Addresses for Process Participants > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute > one quarter (a single /10) of the space immediately to "active > participants" in the ARIN policy development process. > > An "active participant" for this purpose is defined as an individual > who expresses support for OR objection to this proposal. > > Each "active participant" shall receive a single block of the same > size, the size chosen so as to maximally use the /10 allocated for this > purpose, but in no case shall the block be smaller than /24. No more > than one such block shall be distributed per organization if a single > organization has more than one "active participant". > > In the case where the number of "active participants" exceeds the > number of minimum-sized (/24) blocks available, priority shall be given > to those who responded first. > > Rationale: > > In order to accelerate IPv6 deployment, it is critical that IPv4 > space be consumed as rapidly as possible. > > Several possible approaches exist. One would be to distribute the > final space proportionately to existing assignment size. Another might > be to randomly assign the remaining space. Yet another might be to > award > the space based on merit, after reviewing possible uses for the final > IPv4 space. > > This proposal instead simply consumes some of the remaining space by > directly rewarding the participants in the policy development process > for their participation. > > Timetable for implementation: Immediate > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From Wesley.E.George at sprint.com Fri Jan 21 15:52:52 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 20:52:52 +0000 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E065526@PLSWM12A.ad.sprint.com> At the risk of overposting to PPML, I oppose this as well, though it is less potentially damaging than PP129. Wes George > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of ARIN > Sent: Friday, January 21, 2011 3:24 PM > To: arin-ppml at arin.net > Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for > Every ASN > > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their > deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-130: IPv4 Transition Reservation for Every ASN > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one > /24 of IPv4 space from that block for every ARIN-registered AS number, > including assigned legacy AS numbers in the ARIN region. Organizations > may apply to receive the space that has been reserved under the > existing > address space justification policy. > > Rationale: > > IPv4 space is running out. Most organizations will find that their > IPv4 to IPv6 transition plans require a small amount of additional IPv4 > space, but given the current pace of IPv6 deployment and transition it > is highly likely that most organizations will discover this fact AFTER > no additional IPv4 space is available, including space that has been > set > aside in a transition technology pool. > > This policy ensures that every organization that previously > qualified > due to unique routing policy and/or multihoming will be able to request > and receive a small amount of transition space at any time after > runout. > > This policy also has the beneficial side effect of accelerating > general IPv4 runout, which will encourage IPv6 deployment. > > These reservations will consume less than 1/3rd of the final /8. > > > Timetable for implementation: Immediate > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From kevin at steadfast.net Fri Jan 21 16:03:38 2011 From: kevin at steadfast.net (Kevin Stange) Date: Fri, 21 Jan 2011 15:03:38 -0600 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: <4D39F4AA.4020608@steadfast.net> On 01/21/2011 02:23 PM, ARIN wrote: > In the case where the number of "active participants" exceeds the > number of minimum-sized (/24) blocks available, priority shall be given > to those who responded first. Was this just proposed to bring the "first post" mentality from Slashdot to the ARIN PPML? :) Opposed. -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature URL: From gbonser at seven.com Fri Jan 21 16:00:13 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 13:00:13 -0800 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <4D39EB44.10702@arin.net> References: <4D39EB44.10702@arin.net> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1351D@RWC-EX1.corp.seven.com> Opposed. More "bailing wire". > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of ARIN > Sent: Friday, January 21, 2011 12:24 PM > To: arin-ppml at arin.net > Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 > > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their > deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-128: Replacement of Section 4.2.4.4 > > Proposal Originator: Martin Hannigan, Chris Grundemann > > Proposal Version: 1.0 > > Date: 21 January 2011 > > Proposal type: Modify, complete replacement of 4.2.4.4 > > Policy term: Permanent > > Policy statement: > > 4.2.4.4. Subscriber Members After One Year > > After an organization has been a subscriber member of ARIN for one > year,that organization may choose to request up to a 12 month supply of > IP addresses. > > On the date that ARIN's IPv4 aggregate inventory of IPv4 address > space drops below the equivalent of 2/8's and after ARIN receives its > last /8 as a result of the IANA executing section 10.4.2.2 of the NRPM > and in accordance with the Global Policy for the Allocation of the > Remaining IPv4 Address Space, the length of supply that any > organization > may request from ARIN from that moment forward will be reduced to three > months. > > Inventory is defined as all unused IPv4 addresses held by ARIN. This > includes legacy address space which will be added to the available > inventory and used after no longer than a one month hold period. Any > addresses that the organization declares unavailable will be detailed > publicly on a monthly basis that includes a detailed justification. > Unavailable IPv4 addresses shall be considered to be an exception, not > a rule. > > This reduction does not apply to resources received through the > utilization of NRPM Section 8.3 of the NRPM. An organization receiving > a > transfer under NRPM Section 8.3 may continue to request up to a 12- > month > supply of IP addresses. > > Rationale: > > ARIN's pending operational practice is that if an organization has a > request in the ARIN hostmaster queue for IPv4 resources when the IANA > declares the exhaustion phase (10.4.2.2), their request will be > automatically truncated from a twelve month supply to a three month > supply since policy in effect at the time of exhaustion will apply. 8.3 > and 4.2.4.4 are currently "in effect". > > Example: If an entity is asking for 4 x /24 for a 12 month period and > IANA exhaustion occurs, a requester will receive, if justified, 1 x > /24. > If an entity is asking for 120 x /24 at the time that exhaustion > occurs, > they would only receive 30 x /24 if justified. If ARIN determines that > this same entity would only qualify for 90 of the 120 x /24 requested, > then that entity would only receive 22 x /24. > > ARIN has the equivalent of approximately 7 /8's in their current > inventory of address space equaling roughly 117M addresses. This > includes addresses churning (revocations, returned), legacy addresses > returned and the final /8 ARIN has received as a result of the > execution > of policy directing the IANA to exhaust inventory when it reaches 5 > /8s. > > The intention of this proposal is simple. To define how as a community > we will wind-down IPv4 inventory in an fair, orderly and predictable > manner and to prevent the organization from being in a state of > unreasonably stockpiling IPv4 addresses. It is also intends to insure > that any confusion around legacy address utilization is clear; in the > absence of a global policy dealing with this issue and need exists in > the ARIN region any unused address in ARIN's inventory must be used. > > The ARIN AC should review and determine what action if any should be > taken at their next available opportunity, or sooner if they deem > warranted. > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From jlewis at lewis.org Fri Jan 21 15:40:44 2011 From: jlewis at lewis.org (Jon Lewis) Date: Fri, 21 Jan 2011 15:40:44 -0500 (EST) Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: I'd exclude legacy AS holders unless they have non-legacy PI ARIN space. IME, most legacy space holders got more space than they needed or even currently need due to classfull/classless transition. They don't need one last /24 reserved to help with a v4->v6 transition. On Fri, 21 Jan 2011, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-130: IPv4 Transition Reservation for Every ASN > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one > /24 of IPv4 space from that block for every ARIN-registered AS number, > including assigned legacy AS numbers in the ARIN region. Organizations > may apply to receive the space that has been reserved under the existing > address space justification policy. > > Rationale: > > IPv4 space is running out. Most organizations will find that their > IPv4 to IPv6 transition plans require a small amount of additional IPv4 > space, but given the current pace of IPv6 deployment and transition it > is highly likely that most organizations will discover this fact AFTER > no additional IPv4 space is available, including space that has been set > aside in a transition technology pool. > > This policy ensures that every organization that previously qualified > due to unique routing policy and/or multihoming will be able to request > and receive a small amount of transition space at any time after runout. > > This policy also has the beneficial side effect of accelerating > general IPv4 runout, which will encourage IPv6 deployment. > > These reservations will consume less than 1/3rd of the final /8. > > > Timetable for implementation: Immediate > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ From jlewis at lewis.org Fri Jan 21 15:36:34 2011 From: jlewis at lewis.org (Jon Lewis) Date: Fri, 21 Jan 2011 15:36:34 -0500 (EST) Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: This is nuts. We're running out of IPv4...so lets piss away some of the last bit of it. NO. On Fri, 21 Jan 2011, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-129: IPv4 Addresses for Process Participants > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute > one quarter (a single /10) of the space immediately to "active > participants" in the ARIN policy development process. > > An "active participant" for this purpose is defined as an individual > who expresses support for OR objection to this proposal. > > Each "active participant" shall receive a single block of the same > size, the size chosen so as to maximally use the /10 allocated for this > purpose, but in no case shall the block be smaller than /24. No more > than one such block shall be distributed per organization if a single > organization has more than one "active participant". > > In the case where the number of "active participants" exceeds the > number of minimum-sized (/24) blocks available, priority shall be given > to those who responded first. > > Rationale: > > In order to accelerate IPv6 deployment, it is critical that IPv4 > space be consumed as rapidly as possible. > > Several possible approaches exist. One would be to distribute the > final space proportionately to existing assignment size. Another might > be to randomly assign the remaining space. Yet another might be to award > the space based on merit, after reviewing possible uses for the final > IPv4 space. > > This proposal instead simply consumes some of the remaining space by > directly rewarding the participants in the policy development process > for their participation. > > Timetable for implementation: Immediate > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ From gbonser at seven.com Fri Jan 21 16:05:47 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 13:05:47 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1351E@RWC-EX1.corp.seven.com> Opposed. Apparently stuck in a mail queue someplace since last April. > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of ARIN > Sent: Friday, January 21, 2011 12:24 PM > To: arin-ppml at arin.net > Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process > Participants > > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their > deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-129: IPv4 Addresses for Process Participants > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute > one quarter (a single /10) of the space immediately to "active > participants" in the ARIN policy development process. > > An "active participant" for this purpose is defined as an individual > who expresses support for OR objection to this proposal. > > Each "active participant" shall receive a single block of the same > size, the size chosen so as to maximally use the /10 allocated for this > purpose, but in no case shall the block be smaller than /24. No more > than one such block shall be distributed per organization if a single > organization has more than one "active participant". > > In the case where the number of "active participants" exceeds the > number of minimum-sized (/24) blocks available, priority shall be given > to those who responded first. > > Rationale: > > In order to accelerate IPv6 deployment, it is critical that IPv4 > space be consumed as rapidly as possible. > > Several possible approaches exist. One would be to distribute the > final space proportionately to existing assignment size. Another might > be to randomly assign the remaining space. Yet another might be to > award > the space based on merit, after reviewing possible uses for the final > IPv4 space. > > This proposal instead simply consumes some of the remaining space by > directly rewarding the participants in the policy development process > for their participation. > > Timetable for implementation: Immediate > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From gary.buhrmaster at gmail.com Fri Jan 21 16:07:33 2011 From: gary.buhrmaster at gmail.com (Gary Buhrmaster) Date: Fri, 21 Jan 2011 21:07:33 +0000 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: > ARIN-prop-129: IPv4 Addresses for Process Participants Opposed. Participation in the process does not imply need, and we have a need based allocation process. Making run out happen a little sooner does not seem to be in anyones interest (it is already going to happen real soon now). The transition will be painful for some, and there is no reason to increase the pain by giving away resources that others may need. Gary From matthew at matthew.at Fri Jan 21 16:12:18 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 21 Jan 2011 13:12:18 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: References: <4D39EB6F.3040802@arin.net> Message-ID: <4D39F6B2.40007@matthew.at> On 1/21/2011 12:43 PM, Owen DeLong wrote: > I oppose this proposal. > > The current policy NRPM 4.10 does a better job of addressing this need without > the added risks of creating a large pool of space reserved for ASNs that will > not likely ever use it. The NRPM 4.10 block will be rapidly consumed by the organizations that move first. This leaves every other organization without a means for acquiring transition addresses. Proposal 130 is specifically about addressing *every other organization*. There is no danger of "creating a large pool of space reserved for ASNs that will not likely ever use it" because, if IPv6 transition is successful, there will be a huge surplus of IPv4 space and these reservations will just be a drop in the bucket at that point. I would support putting a deadline by which the space must be claimed, but I fear that any reasonable deadline would be after the point where it doesn't matter. Matthew Kaufman From kevin at steadfast.net Fri Jan 21 16:13:47 2011 From: kevin at steadfast.net (Kevin Stange) Date: Fri, 21 Jan 2011 15:13:47 -0600 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: <4D39F70B.4080408@steadfast.net> On 01/21/2011 02:24 PM, ARIN wrote: > This policy also has the beneficial side effect of accelerating > general IPv4 runout, which will encourage IPv6 deployment. I don't like this idea that we should want to artificially force runout faster to encourage IPv6 adoption. The runout is coming soon enough as it is and I don't see how speeding it up helps improve IPv6 adoption. It just starts the same scramble months earlier. Opposed. -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature URL: From matthew at matthew.at Fri Jan 21 16:14:22 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 21 Jan 2011 13:14:22 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: References: <4D39EB5F.2070600@arin.net> Message-ID: <4D39F72E.8070809@matthew.at> On 1/21/2011 1:07 PM, Gary Buhrmaster wrote: >> ARIN-prop-129: IPv4 Addresses for Process Participants > Opposed. > > Participation in the process does not imply need, and > we have a need based allocation process. We won't when IPv4 address space runs out. We'll have a need-based lack-of-allocation process, perhaps... but we certainly won't have what we have now... so there's no reason to attempt to preserve the status quo for IPv4 allocation at this point. Matthew Kaufman From kevin at steadfast.net Fri Jan 21 16:20:50 2011 From: kevin at steadfast.net (Kevin Stange) Date: Fri, 21 Jan 2011 15:20:50 -0600 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39F72E.8070809@matthew.at> References: <4D39EB5F.2070600@arin.net> <4D39F72E.8070809@matthew.at> Message-ID: <4D39F8B2.8090406@steadfast.net> On 01/21/2011 03:14 PM, Matthew Kaufman wrote: > On 1/21/2011 1:07 PM, Gary Buhrmaster wrote: >>> ARIN-prop-129: IPv4 Addresses for Process Participants >> Opposed. >> >> Participation in the process does not imply need, and >> we have a need based allocation process. > > We won't when IPv4 address space runs out. We'll have a need-based > lack-of-allocation process, perhaps... but we certainly won't have what > we have now... so there's no reason to attempt to preserve the status > quo for IPv4 allocation at this point. That wasn't the point. We as participants don't have any greater need than those that do not. You're suggesting that my organization gets to greedily take space ahead of some other organization that may need it first, more urgently, when I still have a free pool left I'm allocating from and that organization may not. While I would love to hoard some IPv4 to stave off my local runout, this is completely against the spirit of the existing allocation process. -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 261 bytes Desc: OpenPGP digital signature URL: From matthew at matthew.at Fri Jan 21 16:23:49 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 21 Jan 2011 13:23:49 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39F8B2.8090406@steadfast.net> References: <4D39EB5F.2070600@arin.net> <4D39F72E.8070809@matthew.at> <4D39F8B2.8090406@steadfast.net> Message-ID: <4D39F965.2080700@matthew.at> On 1/21/2011 1:20 PM, Kevin Stange wrote: > > That wasn't the point. We as participants don't have any greater need > than those that do not. You're suggesting that my organization gets to > greedily take space ahead of some other organization that may need it > first, more urgently, when I still have a free pool left I'm allocating > from and that organization may not. Yes. Just a few days before... > While I would love to hoard some IPv4 to stave off my local runout, this > is completely against the spirit of the existing allocation process. The behavior of ARIN post-runout with regard to IPv4 space will *also* be completely against the spirit of the existing allocation process. The other organization will come with a perfectly valid justification, and ARIN won't fill it. How is *that* fair? (It is unavoidable, but that doesn't mean it is fair or nice) Matthew Kaufman From gary.buhrmaster at gmail.com Fri Jan 21 16:26:29 2011 From: gary.buhrmaster at gmail.com (Gary Buhrmaster) Date: Fri, 21 Jan 2011 21:26:29 +0000 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <4D39EB44.10702@arin.net> References: <4D39EB44.10702@arin.net> Message-ID: > ARIN-prop-128: Replacement of Section 4.2.4.4 Opposed. Reasons include: * It is an IPv4 policy. Deck chairs. Titanic. * Length of membership does not define needs. One's time in the club should not mean your needs are more important then others. * I really do not think this is a better policy than the existing one. * I think I remember a post (from John Curran?), where it was stated that there is (almost) an agreement regarding legacy space between the RIRs. I would certainly like to know more about that before trying to throw it into a new policy. Gary From gary.buhrmaster at gmail.com Fri Jan 21 16:35:16 2011 From: gary.buhrmaster at gmail.com (Gary Buhrmaster) Date: Fri, 21 Jan 2011 21:35:16 +0000 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: > ARIN-prop-130: IPv4 Transition Reservation for Every ASN Opposed. Having an ASN does not mean need. Existing policy seems adequate here. Trying to accelerate run out does not seem to be something that policy should encourage or (in this case) partially enforce. From jbates at brightok.net Fri Jan 21 16:36:24 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 15:36:24 -0600 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: <4D39FC58.7030905@brightok.net> opposed. others stated the obvious reasons On 1/21/2011 2:24 PM, ARIN wrote: > ARIN-prop-130: IPv4 Transition Reservation for Every ASN From jbates at brightok.net Fri Jan 21 16:36:57 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 15:36:57 -0600 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: <4D39FC79.40206@brightok.net> opposed. others stated the obvious reasons On 1/21/2011 2:23 PM, ARIN wrote: > ARIN-prop-129: IPv4 Addresses for Process Participants From BillD at cait.wustl.edu Fri Jan 21 16:42:35 2011 From: BillD at cait.wustl.edu (Bill Darte) Date: Fri, 21 Jan 2011 15:42:35 -0600 Subject: [arin-ppml] PP 129 Message-ID: Is tongue in cheek (tongue-in-cheek) hyphenated? BTW, I volunteer to be primary shepherd for this proposal... bd -------------- next part -------------- An HTML attachment was scrubbed... URL: From JBallerini at copsmonitoring.com Fri Jan 21 16:37:59 2011 From: JBallerini at copsmonitoring.com (John Ballerini) Date: Fri, 21 Jan 2011 16:37:59 -0500 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN Message-ID: <4D39B66002000093000EC7E3@mail.copsmonitoring.com> Not opposed..am asn owner -----Original Message----- From: Jack Bates {jbates at brightok.net} [jbates at brightok.net] Received: Friday, 21 Jan 2011, 4:36pm To: ARIN-PPML List [arin-ppml at arin.net] Subject: Re: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN >>> "Jack Bates " 2011-01-21T16:36:52.858677 >>> opposed. others stated the obvious reasons On 1/21/2011 2:24 PM, ARIN wrote: > ARIN-prop-130: IPv4 Transition Reservation for Every ASN _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From jbates at brightok.net Fri Jan 21 16:38:03 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 15:38:03 -0600 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <4D39EB44.10702@arin.net> References: <4D39EB44.10702@arin.net> Message-ID: <4D39FCBB.4030007@brightok.net> Opposed. Promotes even more last minute rush for assignments. On 1/21/2011 2:23 PM, ARIN wrote: > ARIN's pending operational practice is that if an organization has a > request in the ARIN hostmaster queue for IPv4 resources when the IANA > declares the exhaustion phase (10.4.2.2), their request will be > automatically truncated from a twelve month supply to a three month > supply since policy in effect at the time of exhaustion will apply. 8.3 > and 4.2.4.4 are currently "in effect". From bicknell at ufp.org Fri Jan 21 16:46:15 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Fri, 21 Jan 2011 13:46:15 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: References: <4D39EB5F.2070600@arin.net> Message-ID: <20110121214615.GB27699@ussenterprise.ufp.org> In a message written on Fri, Jan 21, 2011 at 03:40:38PM -0500, Jason Schiller wrote: > Frankly I am with Leo (who is ahead of me in line)... Where is the > stewardship here? I just happened to be reading PPML as it came in. Don't worry, you're still early enough to get your /24. :) I wonder if it will be like buying an iPhone. ARIN folks will bring those of us in line bottles of water, and when we finally get our /24 they will cheer and clap for us. I'm glad it's friday! -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From C.Donley at cablelabs.com Fri Jan 21 16:49:03 2011 From: C.Donley at cablelabs.com (Chris Donley) Date: Fri, 21 Jan 2011 14:49:03 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> Message-ID: <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> Still, my major source of discomfort is enabling v4 forever. [CD] I think the market will take care of that. NAT444 is going to suck for all but the most basic services. It will offer a degraded quality of experience for video streaming, gaming, voice, etc. - services customers want to use. IPv6 will offer a better quality of experience through bypassing the NAT. Customers will get the message and start using IPv6 as they replace legacy devices. As Owen said, NAT444 is a great business case for IPv6. I don't see any way around NAT444, though. It's the only IPv4 extension technology that's readily deployable and doesn't require a new home gateway. Chris From cgrundemann at gmail.com Fri Jan 21 16:51:43 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Fri, 21 Jan 2011 14:51:43 -0700 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: References: <4D39EB44.10702@arin.net> Message-ID: Hi Gary, Thanks for the comments, I would like to clarify a couple things though; comments in-line below. Cheers, ~Chris On Fri, Jan 21, 2011 at 14:26, Gary Buhrmaster wrote: >> ARIN-prop-128: Replacement of Section 4.2.4.4 > > Opposed. > > Reasons include: > > * It is an IPv4 policy. ?Deck chairs. ?Titanic. If you are still relying on IPv4 (to receive this message for example), it is possible that IPv4 policy still has some relevance to you. > * Length of membership does not define needs. > ?One's time in the club should not mean your > ?needs are more important then others. Point of clarity here; the one year term is existing policy, not a change: https://www.arin.net/policy/nrpm.html#four244 > * I really do not think this is a better policy than > ?the existing one. Fair enough. > * I think I remember a post (from John Curran?), where it > ?was stated that there is (almost) an agreement regarding > ?legacy space between the RIRs. ?I would certainly like > ?to know more about that before trying to throw it into a > ?new policy. There is a global policy that would facilitate the return of legacy space from ARIN to the IANA but it is moving slow (as global policies do). More importantly, ARIN-prop-128 does not preclude ARIN returning space to IANA, it simply states that if they do not return it, it must be counted. > > Gary > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From Marla.Azinger at FTR.com Fri Jan 21 16:38:37 2011 From: Marla.Azinger at FTR.com (Azinger, Marla) Date: Fri, 21 Jan 2011 16:38:37 -0500 Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement In-Reply-To: <4D2C59B6.4040503@arin.net> References: <4D2C59B6.4040503@arin.net> Message-ID: <2E2FECEBAE57CC4BAACDE67638305F10492E5E9519@ROCH-EXCH1.corp.pvt> An alternative would be to adopt what RIPE has done: http://www.ripe.net/legal/Closure-of-LIR-and-deregistration-of-INRs_final-draft.pdf -Marla -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of ARIN Sent: Tuesday, January 11, 2011 5:23 AM To: arin-ppml at arin.net Subject: [arin-ppml] ARIN-prop-126: Compliance Requirement ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-126: Compliance Requirement Proposal Originator: Marla Azinger Proposal Version: 1 Date: 11 January 2011 Proposal type: new Policy term: permanent Policy statement: Resource Review Update the following NRPM Sections: 12.4 Update to: Organizations found by ARIN to be materially out of compliance with current ARIN policy shall be requested or required to return resources or update reassignment information as needed to bring them into (or reasonably close to) compliance. 12.5 Update to: If the organization does not voluntarily return resources or update reassignment information as requested, ARIN will cease providing reverse DNS services and/or revoke any resources issued by ARIN as required to bring the organization into overall compliance. ARIN shall follow the same guidelines for revocation that are required for voluntary return in the previous paragraph. 12.6 Update to: Except in cases of fraud, or violations of policy, an organization shall be given a minimum (30) days to respond. Progress of record(s) correction(s) must be visible within (60) days after correspondence with ARIN began or ARIN will start proceeding with removal of DNS services and/or resources issued by ARIN. ARIN shall negotiate a longer term with the organization if ARIN believes the organization is working in good faith to substantially restore compliance and has a valid need for additional time to renumber out of the affected blocks. Rationale: To date the community has not documented or firmly established use of an effective enforcement mechanism. This policy will support current policy and compel those who are allocated ARIN resources to maintain the proper WHOIS records in accordance with ARIN NRPM. While it is recognized this is not an absolute solution to ensure compliance, it is the best method under current ARIN policies. Timetable for implementation: Immediate _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. This communication is confidential. Frontier only sends and receives email on the basis of the terms set out at http://www.frontier.com/email_disclaimer. From gbonser at seven.com Fri Jan 21 16:53:51 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 13:53:51 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> > From: Chris Donley > Sent: Friday, January 21, 2011 1:49 PM > To: George Bonser; Chris Grundemann > Cc: arin-ppml at arin.net > Subject: RE: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4Address Extension > > > Still, my major source of discomfort is enabling v4 forever. > [CD] I think the market will take care of that. NAT444 is going to > suck for all but the most basic services. It will offer a degraded > quality of experience for video streaming, gaming, voice, etc. - > services customers want to use. IPv6 will offer a better quality of > experience through bypassing the NAT. Customers will get the message > and start using IPv6 as they replace legacy devices. As Owen said, > NAT444 is a great business case for IPv6. I don't see any way around > NAT444, though. It's the only IPv4 extension technology that's readily > deployable and doesn't require a new home gateway. > > Chris Why is it going to suck? We are actually doing it now, pretty much. A computer in an office opens a connection to a content provider. That RFC1918 packet gets NATed to a global IP somewhere. That packet then hits a load balancer at the content provider where it is again translated and directed to a machine in 1918 space again. For all practical purposes most of the traffic in the v4 Internet today is already NAT444 In and of itself it isn't going to break anything that doesn't already break today unless someone tries to use an underpowered box to do the NAT. From matthew at matthew.at Fri Jan 21 17:00:52 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 21 Jan 2011 14:00:52 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: References: <4D39EB6F.3040802@arin.net> Message-ID: <4D3A0214.4070803@matthew.at> On 1/21/2011 1:35 PM, Gary Buhrmaster wrote: >> ARIN-prop-130: IPv4 Transition Reservation for Every ASN > Opposed. > > Having an ASN does not mean need. Agreed. This is why 130 requires need prior to assignment. > Existing policy > seems adequate here. What will an org do when it needs transition space but all the 4.10 space is used? > Trying to accelerate run out > does not seem to be something that policy should > encourage or (in this case) partially enforce. That's only a minor side effect. Matthew Kaufman From Wesley.E.George at sprint.com Fri Jan 21 17:08:57 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Fri, 21 Jan 2011 22:08:57 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E06579C@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of George Bonser > Sent: Friday, January 21, 2011 4:54 PM > To: Chris Donley; Chris Grundemann > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4Address Extension > > > Why is it going to suck? We are actually doing it now, pretty much. A > computer in an office opens a connection to a content provider. That > RFC1918 packet gets NATed to a global IP somewhere. That packet then > hits a load balancer at the content provider where it is again > translated and directed to a machine in 1918 space again. > > For all practical purposes most of the traffic in the v4 Internet today > is already NAT444 > > In and of itself it isn't going to break anything that doesn't already > break today unless someone tries to use an underpowered box to do the > NAT. [WES] No. What you describe is two separate instances of NAT44 talking to each other. NAT444 is specifically where there are two layers of NAT before the end host's packets see the light of day on the public Internet. That is, host (CPE NATbox) (ISP NATbox) Internet. The CPE NATbox doesn't get a unique address and its NATted traffic must be NATted through the ISP NATbox in order to do anything useful, and the first unique routable address is on the outside of the ISP NATbox. Many of the things that work properly through one layer of NAT do so because of helper protocols like UPnP that punch holes in the NAT, and because programmers have worked very hard to find ways to make their stuff continue working with NAT. NAT444 is not going to work like that for a lot of different reasons. Citations of useful reading material, a lot of it from the joint sessions from ARIN/NANOG last fall: http://tools.ietf.org/html/draft-donley-nat444-impacts-00 Cox Communications Service Provider NAT44 http://nanog.org/meetings/nanog50/presentations/Wednesday/NANOG50.Talk65.wei l-SP%20NAT44.pdf Time Warner Cable Address Sharing issues: http://nanog.org/meetings/nanog50/presentations/Wednesday/NANOG50.Talk65.How ard-Addresssharingproblems.pdf Comcast DS-lite: http://nanog.org/meetings/nanog50/presentations/Wednesday/NANOG50.Talk65.DS- lite%20NANOG50%20v1.1.pdf Note - panel discussion that several of these source presentations are from can be streamed here: https://www.arin.net/participate/meetings/reports/ARIN_XXVI/webcast/howard_i pv4_to_ipv6_mechanisms.mov Research into the Viability of Service-Provider NAT (session lifetime and average sessions per user): http://www.wand.net.nz/~salcock/someisp/flow_counting/result_page.html -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From daniel at noc24.com Fri Jan 21 16:15:51 2011 From: daniel at noc24.com (Daniel) Date: Fri, 21 Jan 2011 15:15:51 -0600 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39F70B.4080408@steadfast.net> References: <4D39EB6F.3040802@arin.net> <4D39F70B.4080408@steadfast.net> Message-ID: <011301cbb9b0$6227cfb0$26776f10$@com> I am opposed aswell -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Kevin Stange Sent: Friday, January 21, 2011 3:14 PM To: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN On 01/21/2011 02:24 PM, ARIN wrote: > This policy also has the beneficial side effect of accelerating > general IPv4 runout, which will encourage IPv6 deployment. I don't like this idea that we should want to artificially force runout faster to encourage IPv6 adoption. The runout is coming soon enough as it is and I don't see how speeding it up helps improve IPv6 adoption. It just starts the same scramble months earlier. Opposed. -- Kevin Stange Chief Technology Officer Steadfast Networks http://steadfast.net Phone: 312-602-2689 ext. 203 | Fax: 312-602-2688 | Cell: 312-320-5867 From owen at delong.com Fri Jan 21 17:13:21 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 14:13:21 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39F6B2.40007@matthew.at> References: <4D39EB6F.3040802@arin.net> <4D39F6B2.40007@matthew.at> Message-ID: On Jan 21, 2011, at 1:12 PM, Matthew Kaufman wrote: > On 1/21/2011 12:43 PM, Owen DeLong wrote: >> I oppose this proposal. >> >> The current policy NRPM 4.10 does a better job of addressing this need without >> the added risks of creating a large pool of space reserved for ASNs that will >> not likely ever use it. > > The NRPM 4.10 block will be rapidly consumed by the organizations that move first. This leaves every other organization without a means for acquiring transition addresses. Proposal 130 is specifically about addressing *every other organization*. > There are 16,384 /24s (maximum allocation size in NRPM 4.10) in the reserved space. There are (IIRC) something like 12,000 total ORGs with IP delegations from ARIN. I believe the collective result of these two statistics is that your statement cannot be true. > There is no danger of "creating a large pool of space reserved for ASNs that will not likely ever use it" because, if IPv6 transition is successful, there will be a huge surplus of IPv4 space and these reservations will just be a drop in the bucket at that point. > No, that's when IPv6 transition is successful. However, in the meantime, DURING the transition, there will be lots of need for IPv4 addresses by organizations not served by this policy while this policy holds large amounts of address space fallow in case those organizations that don't care ever happen to notice this policy and decide to take advantage of it. > I would support putting a deadline by which the space must be claimed, but I fear that any reasonable deadline would be after the point where it doesn't matter. > If you were to put a deadline on this, I would say that any organization that fails to act to claim their space under this policy within 180 days of the latter of IANA exhaustion or policy implementation would be a reasonable deadline and likely well before such an expiration is moot. Owen From cgrundemann at gmail.com Fri Jan 21 17:22:52 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Fri, 21 Jan 2011 15:22:52 -0700 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <20110121214615.GB27699@ussenterprise.ufp.org> References: <4D39EB5F.2070600@arin.net> <20110121214615.GB27699@ussenterprise.ufp.org> Message-ID: On Fri, Jan 21, 2011 at 14:46, Leo Bicknell wrote: > In a message written on Fri, Jan 21, 2011 at 03:40:38PM -0500, Jason Schiller wrote: >> Frankly I am with Leo (who is ahead of me in line)... ?Where is the >> stewardship here? > > I just happened to be reading PPML as it came in. ?Don't worry, you're > still early enough to get your /24. :) Yep, still about 16,350 some odd up for grabs... Still, I oppose this proposal (for obvious reasons) and vote instead that we just burn the remaining addresses, or dump them in international waters (perhaps we could give them to an offshore drilling company?). ;P ~Chris > I wonder if it will be like buying an iPhone. ?ARIN folks will bring > those of us in line bottles of water, and when we finally get our /24 > they will cheer and clap for us. > > I'm glad it's friday! > > -- > ? ? ? Leo Bicknell - bicknell at ufp.org - CCIE 3440 > ? ? ? ?PGP keys at http://www.ufp.org/~bicknell/ > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From C.Donley at cablelabs.com Fri Jan 21 17:24:51 2011 From: C.Donley at cablelabs.com (Chris Donley) Date: Fri, 21 Jan 2011 15:24:51 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> Message-ID: <76AC5FEF83F1E64491446437EA81A61F7D20A09902@srvxchg> -----Original Message----- From: George Bonser [mailto:gbonser at seven.com] Sent: Friday, January 21, 2011 2:54 PM To: Chris Donley; Chris Grundemann Cc: arin-ppml at arin.net Subject: RE: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension > From: Chris Donley > Sent: Friday, January 21, 2011 1:49 PM > To: George Bonser; Chris Grundemann > Cc: arin-ppml at arin.net > Subject: RE: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4Address Extension > > > Still, my major source of discomfort is enabling v4 forever. > [CD] I think the market will take care of that. NAT444 is going to > suck for all but the most basic services. It will offer a degraded > quality of experience for video streaming, gaming, voice, etc. - > services customers want to use. IPv6 will offer a better quality of > experience through bypassing the NAT. Customers will get the message > and start using IPv6 as they replace legacy devices. As Owen said, > NAT444 is a great business case for IPv6. I don't see any way around > NAT444, though. It's the only IPv4 extension technology that's readily > deployable and doesn't require a new home gateway. > > Chris Why is it going to suck? We are actually doing it now, pretty much. A computer in an office opens a connection to a content provider. That RFC1918 packet gets NATed to a global IP somewhere. That packet then hits a load balancer at the content provider where it is again translated and directed to a machine in 1918 space again. For all practical purposes most of the traffic in the v4 Internet today is already NAT444 In and of itself it isn't going to break anything that doesn't already break today unless someone tries to use an underpowered box to do the NAT. [CD] http://tools.ietf.org/html/draft-donley-nat444-impacts-01 [CD] We tested it in the lab. Among other problems, NAT444 breaks UPnP - the application in the home can open the port in the first NAT gateway, but not in the CGN. Also, NAT444 breaks geolocation (geo points back to the CGN, not the customer), abuse response (reporter now needs port/timestamp as well), DDoS protection, etc. Further, some websites throttle the number of connections/simultaneous streams per IP address. Voice calls fail, video streams degrade, games break, FTP sessions time out, and peer-to-peer seeding is blocked. Basic web surfing and email works, but customers are looking for more than that. Chris From owen at delong.com Fri Jan 21 17:28:06 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 14:28:06 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39F965.2080700@matthew.at> References: <4D39EB5F.2070600@arin.net> <4D39F72E.8070809@matthew.at> <4D39F8B2.8090406@steadfast.net> <4D39F965.2080700@matthew.at> Message-ID: <11A26537-C4B7-4C6F-A4A1-B0548B082CA1@delong.com> On Jan 21, 2011, at 1:23 PM, Matthew Kaufman wrote: > On 1/21/2011 1:20 PM, Kevin Stange wrote: >> >> That wasn't the point. We as participants don't have any greater need >> than those that do not. You're suggesting that my organization gets to >> greedily take space ahead of some other organization that may need it >> first, more urgently, when I still have a free pool left I'm allocating >> from and that organization may not. > > Yes. Just a few days before... > >> While I would love to hoard some IPv4 to stave off my local runout, this >> is completely against the spirit of the existing allocation process. > > The behavior of ARIN post-runout with regard to IPv4 space will *also* be completely against the spirit of the existing allocation process. > Not true. The spirit of the current allocation process is "first come first served, limited to anticipated need in a reasonable time frame". The current allocation process even provides for shortening that time frame from 12 to 3 months upon IANA exhaustion. Once ARIN runs out, that spirit remains in effect through the Waiting List policy and if ARIN receives returned address space, it will be issued on that basis to those on the waiting list. While ARIN will not be able to make very many (if any) allocations after runout, the spirit of the policy will remain in effect. > The other organization will come with a perfectly valid justification, and ARIN won't fill it. How is *that* fair? (It is unavoidable, but that doesn't mean it is fair or nice) > It is generally considered fair that if you got in line behind the guy who bought the last widget, you don't get one. True, it would be considered somewhat unfair if the guy in front of you bought 1,000 widgets and you were out in the cold to buy just 1. However, the approach usually taken to resolving this issue is to limit the number of widgets you can purchase per position in the line to N (where N is dependent on the context and the nature of the widgets in question). I believe that our limitation to anticipated need in the current policy is a reasonable value of N and that the shortening of the anticipation period in current policy represents a reasonable adjustment to N based on changing circumstances. How is this situation different from standing in line to buy widgets and discovering that the last one was purchased by someone that happened to be ahead of you in the line? That's not unfair, it's just reality. Owen From cgrundemann at gmail.com Fri Jan 21 17:31:49 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Fri, 21 Jan 2011 15:31:49 -0700 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39F6B2.40007@matthew.at> References: <4D39EB6F.3040802@arin.net> <4D39F6B2.40007@matthew.at> Message-ID: What about new organizations formed between IPv4 depletion and IPv6 parity? Don't they also need a /24 to get started, even if they focus on IPv6 connectivity. Once you consider them, this might start to look like APNIC's last /8 policy, where the whole thing is reserved and everybody (new and existing) gets a single dip... ~Chris On Fri, Jan 21, 2011 at 14:12, Matthew Kaufman wrote: > > The NRPM 4.10 block will be rapidly consumed by the organizations that move > first. This leaves every other organization without a means for acquiring > transition addresses. Proposal 130 is specifically about addressing *every > other organization*. > > There is no danger of "creating a large pool of space reserved for ASNs that > will not likely ever use it" because, if IPv6 transition is successful, > there will be a huge surplus of IPv4 space and these reservations will just > be a drop in the bucket at that point. > > I would support putting a deadline by which the space must be claimed, but I > fear that any reasonable deadline would be after the point where it doesn't > matter. > > Matthew Kaufman > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From BillD at cait.wustl.edu Fri Jan 21 17:58:42 2011 From: BillD at cait.wustl.edu (Bill Darte) Date: Fri, 21 Jan 2011 16:58:42 -0600 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN References: <4D39B66002000093000EC7E3@mail.copsmonitoring.com> Message-ID: Other than the boon and wanting one, can you speak more to how you believe this policy of grants based on ASN use contrasts with the regime of needs-based allocations and assignments? Bill Darte -----Original Message----- From: arin-ppml-bounces at arin.net on behalf of John Ballerini Sent: Fri 1/21/2011 3:37 PM To: arin-ppml at arin.net; jbates at brightok.net Subject: Re: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN Not opposed..am asn owner -----Original Message----- From: Jack Bates {jbates at brightok.net} [jbates at brightok.net] Received: Friday, 21 Jan 2011, 4:36pm To: ARIN-PPML List [arin-ppml at arin.net] Subject: Re: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN >>> "Jack Bates " 2011-01-21T16:36:52.858677 >>> opposed. others stated the obvious reasons On 1/21/2011 2:24 PM, ARIN wrote: > ARIN-prop-130: IPv4 Transition Reservation for Every ASN _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Fri Jan 21 17:59:27 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 14:59:27 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39B66002000093000EC7E3@mail.copsmonitoring.com> References: <4D39B66002000093000EC7E3@mail.copsmonitoring.com> Message-ID: Does that mean you think it is good policy, or, just that you want the address space without justification? Owen On Jan 21, 2011, at 1:37 PM, John Ballerini wrote: > Not opposed..am asn owner > > > > > -----Original Message----- > From: Jack Bates {jbates at brightok.net} [jbates at brightok.net] > Received: Friday, 21 Jan 2011, 4:36pm > To: ARIN-PPML List [arin-ppml at arin.net] > Subject: Re: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN > > > >>>> "Jack Bates " 2011-01-21T16:36:52.858677 >>> > opposed. others stated the obvious reasons > > On 1/21/2011 2:24 PM, ARIN wrote: >> ARIN-prop-130: IPv4 Transition Reservation for Every ASN > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Fri Jan 21 18:02:15 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 15:02:15 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> Message-ID: <91E71B9E-5610-4EC7-A001-1DF883D15134@delong.com> Let's face it... We've spent decades looking for the killer app. to encourage IPv6 migration. NAT444 is that killer app. Owen On Jan 21, 2011, at 1:49 PM, Chris Donley wrote: > > Still, my major source of discomfort is enabling v4 forever. > [CD] I think the market will take care of that. NAT444 is going to suck for all but the most basic services. It will offer a degraded quality of experience for video streaming, gaming, voice, etc. - services customers want to use. IPv6 will offer a better quality of experience through bypassing the NAT. Customers will get the message and start using IPv6 as they replace legacy devices. As Owen said, NAT444 is a great business case for IPv6. I don't see any way around NAT444, though. It's the only IPv4 extension technology that's readily deployable and doesn't require a new home gateway. > > Chris > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Fri Jan 21 18:13:41 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 15:13:41 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> Message-ID: On Jan 21, 2011, at 1:53 PM, George Bonser wrote: > >> From: Chris Donley >> Sent: Friday, January 21, 2011 1:49 PM >> To: George Bonser; Chris Grundemann >> Cc: arin-ppml at arin.net >> Subject: RE: [arin-ppml] ARIN-prop-127: Shared Transition Space for >> IPv4Address Extension >> >> >> Still, my major source of discomfort is enabling v4 forever. >> [CD] I think the market will take care of that. NAT444 is going to >> suck for all but the most basic services. It will offer a degraded >> quality of experience for video streaming, gaming, voice, etc. - >> services customers want to use. IPv6 will offer a better quality of >> experience through bypassing the NAT. Customers will get the message >> and start using IPv6 as they replace legacy devices. As Owen said, >> NAT444 is a great business case for IPv6. I don't see any way around >> NAT444, though. It's the only IPv4 extension technology that's > readily >> deployable and doesn't require a new home gateway. >> >> Chris > > Why is it going to suck? We are actually doing it now, pretty much. A > computer in an office opens a connection to a content provider. That > RFC1918 packet gets NATed to a global IP somewhere. That packet then > hits a load balancer at the content provider where it is again > translated and directed to a machine in 1918 space again. > Yeah, well... Try this experiment to decide how much your customers would like it: Xbox -> RFC-1918 network -> NAT Box (with UPnP) -> different RFC-1918 network -> NAT Box (without UPnP) -> Internet Now, try to host an Xbox live game for your friends to join. Try this with World of Warcraft, including downloading an update or two, and a couple of 25-man raids. Try AIM, Yahoo Instant Messenger, Skype (be sure to test each of these messengers with audio and video and file exchanges). Try to stream a Netflix video over IPv4 in that environment. Try to use your Vonage phone (or any of several other VOIP telephony services). > For all practical purposes most of the traffic in the v4 Internet today > is already NAT444 > Not in the meaningful and harmful way that it will be under what we are calling NAT444. No. > > In and of itself it isn't going to break anything that doesn't already > break today unless someone tries to use an underpowered box to do the > NAT. > This simply is NOT true. See above. Today, what you have at worst is: customer <-> NAT (controlled by customer) <-> Internet <-> NAT (controlled by content provider) <-> Content What people mean when they say NAT444 is cust<->NAT (Ctl by Cust)<->ProviderNet <->NAT (ctl by Provider)<->NAT (Ctl by CP) <-> Content That NAT not controlled by either the cust or the CP in the middle will actually break lots of things and because neither side can intervene to control the behavior of the NAT that is breaking things or gain additional hints about the translation of state on either side of the box, the number of workarounds available is much more limited. Owen From gbonser at seven.com Fri Jan 21 18:16:14 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 15:16:14 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation forEvery ASN In-Reply-To: References: <4D39B66002000093000EC7E3@mail.copsmonitoring.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13530@RWC-EX1.corp.seven.com> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Bill Darte Sent: Friday, January 21, 2011 2:59 PM To: John Ballerini; arin-ppml at arin.net; jbates at brightok.net Subject: Re: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation forEvery ASN Other than the boon and wanting one, can you speak more to how you believe this policy of grants based on ASN use contrasts with the regime of needs-based allocations and assignments? Bill Darte I fail to see how having an extra /24 per ASN, particularly for organizations with several ASNs can be "fair". That would simply generate a mad rush for people to register additional ASNs. From owen at delong.com Fri Jan 21 18:16:22 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 15:16:22 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D3A0214.4070803@matthew.at> References: <4D39EB6F.3040802@arin.net> <4D3A0214.4070803@matthew.at> Message-ID: <2F8F2237-DF94-44A3-BC73-1CC4334F14EA@delong.com> On Jan 21, 2011, at 2:00 PM, Matthew Kaufman wrote: > On 1/21/2011 1:35 PM, Gary Buhrmaster wrote: >>> ARIN-prop-130: IPv4 Transition Reservation for Every ASN >> Opposed. >> >> Having an ASN does not mean need. > > Agreed. This is why 130 requires need prior to assignment. > Correction... It requires need prior to delivery. The assignment is set aside whether it is issued or not by 130. The space is consumed by the assignment, even if it isn't actually given to the ASN holder. >> Existing policy >> seems adequate here. > > What will an org do when it needs transition space but all the 4.10 space is used? > 1. Market 2. Develop a new strategy for transition 3. Panic 4. Cry Pick any subset. What will the organizations without ASNs do in that circumstance if this policy is passed? There are a lot more organizations on the internet without ASNs than with. >> Trying to accelerate run out >> does not seem to be something that policy should >> encourage or (in this case) partially enforce. > > That's only a minor side effect. > You stated it as a benefit of the policy. As such, it is fair to point out that it is a negative, not a positive aspect of the policy. Owen From matthew at matthew.at Fri Jan 21 18:24:33 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 21 Jan 2011 15:24:33 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <2F8F2237-DF94-44A3-BC73-1CC4334F14EA@delong.com> References: <4D39EB6F.3040802@arin.net> <4D3A0214.4070803@matthew.at> <2F8F2237-DF94-44A3-BC73-1CC4334F14EA@delong.com> Message-ID: <4D3A15B1.8030305@matthew.at> On 1/21/2011 3:16 PM, Owen DeLong wrote: > > You stated it as a benefit of the policy. As such, it is fair to point out > that it is a negative, not a positive aspect of the policy. > Then how do you feel about the fact that 127 has *exactly* the same effect? Matthew Kaufman From mysidia at gmail.com Fri Jan 21 19:07:29 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Fri, 21 Jan 2011 18:07:29 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> Message-ID: On Fri, Jan 21, 2011 at 11:50 AM, George Bonser wrote: > I suppose I wish there was a way to *temporarily* allow this and not > create a mechanism for the perpetuating of manufacturers to continue to > produce v4-only devices, which they probably will if something like this > passes, particularly if done on a global scale. There is a way, but it might be costly. What do you think of this model? Model: Don't designate the entire /10 for _anyone_ org use any portion of at their own will for any purpose; e.g. don't tell ISPs to pick some random /24 in the /10 like they would be allowed with RFC1918 space; indicate they must register, so every ISP sharing space has to first get a registration of some allocation within the reserved /10, they have to say how they will use the space (why they need shared IPs), and every different organization is assigned from that big /10 in the same order, some allocation ranging from /24 to /20 from the reserved /10. And there is no commitment that the entire /10 is reserved or will always be available for the purpose. In other words: no user of the shared space picks for themselves which addresses in the range they will be allowed to use, but it is assigned to each registrant in an order that will improve the chances that some of the /10 can be free in the future. E.g. Don't make it a free-for-all like RFC1918. Don't make it a direct permanent assignment from ARIN for a purpose; make it a permanent assignment to a maintainer of this reserved address space who will dole it out, and maintain records + contact info about who is using what portion, to applicants in all regions. Allow ARIN to choose whether an entire /10 is reserved, or a /10 equivalent is reserved. Require the WHOIS listing to show assignment from ARIN to a "Shared IP Registry" ORG handle. Possibly allow another actual organization or division to be created, and require the outside organization through agreement with ARIN to apply for and obtain space from this /10, and administer the space in an appropriate way. They will be making non globally distinctive assignments; meaning every new assignment made will overlap to the extent possible, with every other assignment (to a different organization), so that at all times, the minimum amount of the /10 required is to be used. Require a return of any shared space no longer needed. In other words: a new global IP registry. I suggest NRPM policy be sorted so that any "internal use address space" [private space] utilized for NAT cannot be used to justify global IP allocations, and should have to be made from the shared registry instead; since this address space can be shared space, it becomes a waste to provide global allocations for this private usage. Any user of NAT444 should be required to justify NAT public IPs for users based on a formula that takes into account the reduced requirements for IP address space that NAT allows. IOW: mitigate IP exhaustion by making the shared space mandatory for designs that involve NAT444, and make it clear a proposed NAT'ed configuration with 60000 users behind it does not justify a public /16 (for example). Require a return of any address space no longer justified due to implementation of NAT, or migration to IPv6 only. Then the only way the entire /10 for NAT444 private IPs is "locked", is if at least one registrant needs the entire /10 for their purposes. And it only stays that way, while they continue to have that need. Require ISPs needing any shared space from the /10 to register, with that new global IP registry, much like a standard LIR IP subdelegation; with the VERY special stipulation, that the subdelegation is non-exclusive, and the addresses are not to have RDNS service and not to be announced, there will be no WHOIS service either. Only allocate the portion of the /10 that the ISP needs. Impose an annual fee, just as with unique globally routable IPs, based on cost of the "shared registry" existing, and that could help sustain ARIN as well, in the face of few new IP allocations; however with no WHOIS or RDNS service to maintain, I would anticipate cost to be minimal per registrant. When all ISPs that registered to use shared space from the /10 are no longer registered, or have returned their 'shared space' delegations, the entire /10 can be returned to ARIN. If no ISP requires an entire /10 at any point in time, portions of the /10 could then be released in the future. or If at any time after the end of year 2012, the 'shared GIR' does not require at least 80% of the /10, then the excess portion must be returned to ARIN for use with future assignments. If the shared registry require more than a /10, then they have to justify it, with the slight variation that additional address space requirements are based on the _largest_ necessary subdelegation, and cannot be based on an applicant wanting non-overlapping/ non-dulicate assignments. -- -JH From aaronh at bind.com Fri Jan 21 19:20:17 2011 From: aaronh at bind.com (Aaron Hughes) Date: Fri, 21 Jan 2011 16:20:17 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> Message-ID: <20110122002017.GS80084@trace.bind.com> Jimmy, Many providers actually need far more than a /10 of space for NAT444. However, since an /8 or more was too much for the community to handle, the compromise is for these providers to use the same /10 in many places within their own network. This space then becomes regional NAT444 space. e.g. East coast will use the same /10 as mid-west and east-coast. This is going to be a challenge for providers already. They are going to have to track reporting, authentication, combination of address and port combination paired with time stamp and even potentially real src/dst information as well as which region within their own network the space was used in. The model you are describing simply will not work. This is not shared space to be cut up. This is a new layer of 1918 space to be used over and over again at times within the same provider and at times less than a /10 in a single provider. It will be used as new 1918 space customers / end users do not know about so there is no conflict with their CPE 1918 space. Again, large quantities of space will be required for NAT444. NAT444 is going to happen. The space used to accomplish this should be coming from a global policy, however, we are out of time for this to work. If we don't do something soon, people will use space inappropriately. This proposal gets providers to use a known /10 we can filter on and implement it correctly / legitimately, the first time. Please give it support. Cheers, Aaron On Fri, Jan 21, 2011 at 06:07:29PM -0600, Jimmy Hess wrote: > There is a way, but it might be costly. What do you think of this model? > > Model: > Don't designate the entire /10 for _anyone_ org use any portion of > at their own will for any purpose; > e.g. don't tell ISPs to pick some random /24 in the /10 like they > would be allowed with RFC1918 > space; indicate they must register, so every ISP sharing space has > to first get a registration of some > allocation within the reserved /10, they have to say how they will > use the space > (why they need shared IPs), and every different organization is > assigned from that big /10 > in the same order, some allocation ranging from /24 to /20 from > the reserved /10. > > And there is no commitment that the entire /10 is reserved or will > always be available for the purpose. > In other words: no user of the shared space picks for themselves which > addresses > in the range they will be allowed to use, but it is assigned to each > registrant in an order > that will improve the chances that some of the /10 can be free in the future. > > E.g. > Don't make it a free-for-all like RFC1918. Don't make it a direct > permanent assignment from ARIN > for a purpose; make it a permanent assignment to a maintainer of this > reserved address space who > will dole it out, and maintain records + contact info about who is > using what portion, to applicants in all regions. > > Allow ARIN to choose whether an entire /10 is reserved, or a /10 > equivalent is reserved. > Require the WHOIS listing to show assignment from ARIN to a "Shared > IP Registry" ORG handle. > > Possibly allow another actual organization or division to be created, > and require > the outside organization through agreement with ARIN to apply for and > obtain space from this /10, > and administer the space in an appropriate way. > > They will be making non globally distinctive assignments; meaning > every new assignment made will overlap to the extent possible, > with every other assignment (to a different organization), so that at > all times, the minimum amount of the /10 required is to be used. > > Require a return of any shared space no longer needed. > In other words: a new global IP registry. > > > I suggest NRPM policy be sorted so that any "internal use address > space" [private space] utilized for NAT cannot be used > to justify global IP allocations, and should have to be made from the > shared registry instead; since this address space can be > shared space, it becomes a waste to provide global allocations for > this private usage. Any user of NAT444 should > be required to justify NAT public IPs for users based on a formula > that takes into account the reduced requirements for IP address space > that NAT allows. > > IOW: mitigate IP exhaustion by making the shared space mandatory > for designs that involve NAT444, > and make it clear a proposed NAT'ed configuration with 60000 users > behind it does not justify a public /16 (for example). > > Require a return of any address space no longer justified due to > implementation of NAT, or migration to IPv6 only. > > > Then the only way the entire /10 for NAT444 private IPs is "locked", > is if at least one registrant needs the entire /10 for their > purposes. > > And it only stays that way, while they continue to have that need. > > > Require ISPs needing any shared space from the /10 to register, with > that new global IP registry, much like a standard LIR IP > subdelegation; with the VERY special stipulation, that the > subdelegation is non-exclusive, and the addresses > are not to have RDNS service and not to be announced, there will be > no WHOIS service either. > Only allocate the portion of the /10 that the ISP needs. > > Impose an annual fee, just as with unique globally routable IPs, > based on cost of the "shared registry" existing, > and that could help sustain ARIN as well, in the face of few new IP > allocations; however with no WHOIS or RDNS > service to maintain, I would anticipate cost to be minimal per > registrant. When all ISPs that registered to use > shared space from the /10 are no longer registered, or have > returned their 'shared space' delegations, > the entire /10 can be returned to ARIN. > > > If no ISP requires an entire /10 at any point in time, portions > of the /10 could then be released in the future. > > or If at any time after the end of year 2012, the 'shared GIR' does > not require at least 80% of the /10, then > the excess portion must be returned to ARIN for use with future assignments. > > > If the shared registry require more than a /10, then they have to > justify it, with the slight variation that additional address space > requirements are based on the _largest_ necessary subdelegation, > and cannot be based on an applicant wanting non-overlapping/ > non-dulicate assignments. > > -- > -JH > -- > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Aaron Hughes aaronh at bind.com +1-831-824-4161 Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8 http://www.bind.com/ From gbonser at seven.com Fri Jan 21 19:28:41 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 16:28:41 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <20110122002017.GS80084@trace.bind.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> <20110122002017.GS80084@trace.bind.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1353D@RWC-EX1.corp.seven.com> > > Again, large quantities of space will be required for NAT444. NAT444 is > going to happen. The space used to accomplish this should be coming > from a global policy, however, we are out of time for this to work. If > we don't do something soon, people will use space inappropriately. This > proposal gets providers to use a known /10 we can filter on and > implement it correctly / legitimately, the first time. Please give it > support. > > Cheers, > Aaron There should be ways to reduce the space needed for 444. If, for example, you are a national provider, you could reuse that same 444 space in each region. But I suppose the other thing is, who cares if a provider chooses to use 444, they can use their own address space for it. A small operator might get by with a /24 someone else might need a /16. Seems to me the real goal here is to deploy it in a manner where it doesn't actually eat any of the provider's own resources. Making the provider provision it out of their own resources might actually keep the implementation down to only where it is absolutely necessary. Creating this global /10 would, in my opinion, encourage the deployment of it. If it is "going to happen anyway", then so be it, it is what it is. But if the providers need to use a chunk of their own space for it, it forces an economy in the use of it. From mysidia at gmail.com Fri Jan 21 19:33:03 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Fri, 21 Jan 2011 18:33:03 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <20110122002017.GS80084@trace.bind.com> References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> <20110122002017.GS80084@trace.bind.com> Message-ID: On Fri, Jan 21, 2011 at 6:20 PM, Aaron Hughes wrote: > Jimmy, > > Many providers actually need far more than a /10 of space for NAT444. However, since an /8 or more was too much for the community to handle, the compromise is for these providers to use the same /10 in many places within their own network. This space then becomes regional NAT444 space. e.g. East coast will use the same /10 as mid-west and east-coast. > Which is why there should be a separate registry.... so they can apply for and get more than just one /10. A single /10 permanently allocated is what's proposed, but it's not really enough It makes more sense for a 'shared registry' to get a /8 equivalent, than for a bunch of ISPs to get thousands of /16s for the same private-only IP addressing purpose. The total consumption of public IP addresses is reduced, by having more of them allocated in a 'shared' mode instead of an exclusive mode -- -JH From gbonser at seven.com Fri Jan 21 19:34:29 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 16:34:29 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension References: <4D38CCA9.5070000@umn.edu> <5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com> <54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com> <5A6D953473350C4B9995546AFE9939EE0BC1350A@RWC-EX1.corp.seven.com> <20110122002017.GS80084@trace.bind.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1353E@RWC-EX1.corp.seven.com> Just a note that I am going to run various things up the flagpole as I think this through and come to a final conclusion and the below was one of those things. I realize it is pretty moot after *complete* runout as a new provider won't be able to get any IP addresses but a new provider also has the leeway to tell someone "don't use 10/8 for your internal addressing, we are going to use that for NAT for you". In fact, I have a link to one provider right now that is in 10/8 space (grumble). > -----Original Message----- > From: George Bonser > Sent: Friday, January 21, 2011 4:29 PM > To: 'Aaron Hughes'; Jimmy Hess > Cc: arin-ppml at arin.net > Subject: RE: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4Address Extension > > > > > Again, large quantities of space will be required for NAT444. NAT444 > is > > going to happen. The space used to accomplish this should be coming > > from a global policy, however, we are out of time for this to work. > If > > we don't do something soon, people will use space inappropriately. > This > > proposal gets providers to use a known /10 we can filter on and > > implement it correctly / legitimately, the first time. Please give it > > support. > > > > Cheers, > > Aaron > > > There should be ways to reduce the space needed for 444. If, for > example, you are a national provider, you could reuse that same 444 > space in each region. But I suppose the other thing is, who cares if > a provider chooses to use 444, they can use their own address space for > it. A small operator might get by with a /24 someone else might need a > /16. > > Seems to me the real goal here is to deploy it in a manner where it > doesn't actually eat any of the provider's own resources. Making the > provider provision it out of their own resources might actually keep > the implementation down to only where it is absolutely necessary. > Creating this global /10 would, in my opinion, encourage the deployment > of it. If it is "going to happen anyway", then so be it, it is what it > is. But if the providers need to use a chunk of their own space for > it, it forces an economy in the use of it. > > > > From frnkblk at iname.com Fri Jan 21 19:36:52 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Fri, 21 Jan 2011 18:36:52 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> Message-ID: I support this proposal. I'd ask those who cannot support this proposal to suggest a pragmatic alternative to NAT44/LSN/CGN. Nobody wants NAT444 -- the content providers, ISPs, nor eyeballs, but it's something that certain operators may be forced to do. A few more thoughts: * I do understand the concern that if NAT444 is not too bad (for certain categories of customers) that it may slow down the adoption of IPv6 by some stragglers. While service providers could use pricing to move those customers away, if only the stragglers are using it (low levels of usage) and the equipment is paid for, it would be hard to justify. Look how long it took for dial-up pricing to go up after broadband was widely available. * In regards to the use of this space by others residing in other RIRs: this policy doesn't need to give explicit permission or have restrictions. This policy is not trying to circumvent IANA or the IETF. No "IP police" will be sent out if other use this space. * Yes, while operators could draw from their own allocated space to accomplish NAT444, their combined efforts would likely result in more than a /10 of IPv4 space being used and require an extraordinary amount of effort. Rather than force them to renumber or go through all that work, let's just allocate a /10 for this and be done with it. * As others have said, let the ARIN staff choose the /10. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Leif Sawyer Sent: Thursday, January 20, 2011 2:37 PM To: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension As a converged providor (cable, wireless, dsl, leased, dial, etc) I understand fully the pain that this is trying to prevent. I support this proposal. > -----Original Message----- > From: arin-ppml-bounces at arin.net > ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > Proposal Originator: Chris Donley, CableLabs > > Proposal Version: 1 > > Date: 20 January 2011 > > Proposal type: modify > > Policy term: permanent > > Policy statement: > > Updates 4.10 of the NRPM: > A second contiguous /10 IPv4 block will be reserved to > facilitate IPv4 address extension. This block will not be > allocated or assigned to any single organization, but is to > be shared by Service Providers for internal use for IPv4 > address extension deployments until connected networks fully > support IPv6. Examples of such needs include: IPv4 addresses > between home gateways and NAT444 translators. > > Rationale: > > The Internet community is rapidly consuming the remaining > supply of unallocated IPv4 addresses. During the transition > period to IPv6, it is imperative that Service Providers > maintain IPv4 service for devices and networks that are > currently incapable of upgrading to IPv6. > Consumers must be able to reach the largely IPv4 Internet > after exhaustion. Without a means to share addresses, people > or organizations who gain Internet access for the first time, > or those who switch providers, or move to another area, will > be unable to reach the IPv4 Internet. > > Further, many CPE router devices used to provide residential > or small-medium business services have been optimized for > IPv4 operation, and typically require replacement in order to > fully support the transition to IPv6 (either natively or via > one of many transition technologies). In addition, various > consumer devices including IP-enabled televisions, gaming > consoles, medical and family monitoring devices, etc. are > IPv4-only, and cannot be upgraded. While these will > eventually be replaced with dual-stack or IPv6 capable > devices, this transition will take many years. As these are > typically consumer-owned devices, service providers do not > have control over the speed of their replacement cycle. > However, consumers have an expectation that they will > continue to receive IPv4 service, and that such devices will > continue to have IPv4 Internet connectivity after the IPv4 > pool is exhausted, even if the customer contracts for new > service with a new provider. > > Until such customers replace their Home Gateways and all > IPv4-only devices with IPv6-capable devices, Service > Providers will be required to continue to offer IPv4 services > through the use of an IPv4 address sharing technology such as > NAT444. A recent study showed that there is no part of > RFC1918 space which would not overlap with some IPv4 > gateways, and therefore to prevent address conflicts, new > address space is needed. > > Service providers are currently presented with three options > for obtaining sufficient IPv4 address space for NAT444/IPv4 extension > deployments: (1) Request allocations under the NRPM; (2) > share address space with other providers (this proposal); or > (3) use address space allocated to another entity (i.e. > 'squat'). Of the three options, option 2 (this proposal) is > preferable, as it will minimize the number of addresses used > for IPv4 extension deployments while preserving the authority > of IANA and RIRs. > > Timetable for implementation: immediately > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From frnkblk at iname.com Fri Jan 21 19:36:52 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Fri, 21 Jan 2011 18:36:52 -0600 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: I object to this proposal for the reason that having ASN does not constitute need and that accelerating IPv4 depletion would only be looked on by the public as irresponsible. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of ARIN Sent: Friday, January 21, 2011 2:24 PM To: arin-ppml at arin.net Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-130: IPv4 Transition Reservation for Every ASN Proposal Originator: Matthew Kaufman Proposal Version: 1 Date: 21 January 2011 Proposal type: New Policy term: Permanent Policy statement: Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one /24 of IPv4 space from that block for every ARIN-registered AS number, including assigned legacy AS numbers in the ARIN region. Organizations may apply to receive the space that has been reserved under the existing address space justification policy. Rationale: IPv4 space is running out. Most organizations will find that their IPv4 to IPv6 transition plans require a small amount of additional IPv4 space, but given the current pace of IPv6 deployment and transition it is highly likely that most organizations will discover this fact AFTER no additional IPv4 space is available, including space that has been set aside in a transition technology pool. This policy ensures that every organization that previously qualified due to unique routing policy and/or multihoming will be able to request and receive a small amount of transition space at any time after runout. This policy also has the beneficial side effect of accelerating general IPv4 runout, which will encourage IPv6 deployment. These reservations will consume less than 1/3rd of the final /8. Timetable for implementation: Immediate _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From frnkblk at iname.com Fri Jan 21 19:36:52 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Fri, 21 Jan 2011 18:36:52 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110121183748.GA17880@ussenterprise.ufp.org> References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> Message-ID: The problem is that many service providers are using non-192.168.0.0/24 RFC-1918 space device management. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Leo Bicknell Sent: Friday, January 21, 2011 12:38 PM To: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension I realize the desire to not use 1918 space for this comes from the fact that a customer may also be using 1918 space already and a conflict causes reachability issues. In the context of doing this for say enterprises, that makes sense. In the context of home users, not so much. The vast majority of the home users who buy a Linksys or similar are in a small number of ranges, e.g. 192.168.0.0/24 and 192.168.1.0/24. Prompting the quesiton, if you figured out what 99% of the home CPE uses, subtracted from 1918 space, wouldn't you be left with well more than a /10 from 10/8? Couldn't you just avoid the parts used by common CPE and use 10/8 for NAT444? Yes, you still need to detect and deal with the odd customer who has a collision, but no solution is free. If that is rare, it may be a lower cost to the community than setting aside a /10. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ From frnkblk at iname.com Fri Jan 21 19:36:52 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Fri, 21 Jan 2011 18:36:52 -0600 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: I object to this proposal for the reason that being part of the ARIN policy process does not constitute need, and that accelerating IPv4 depletion would only be looked on by the public as irresponsible. There is a level of public trust that we need to keep in mind. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of ARIN Sent: Friday, January 21, 2011 2:24 PM To: arin-ppml at arin.net Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-129: IPv4 Addresses for Process Participants Proposal Originator: Matthew Kaufman Proposal Version: 1 Date: 21 January 2011 Proposal type: New Policy term: Permanent Policy statement: Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute one quarter (a single /10) of the space immediately to "active participants" in the ARIN policy development process. An "active participant" for this purpose is defined as an individual who expresses support for OR objection to this proposal. Each "active participant" shall receive a single block of the same size, the size chosen so as to maximally use the /10 allocated for this purpose, but in no case shall the block be smaller than /24. No more than one such block shall be distributed per organization if a single organization has more than one "active participant". In the case where the number of "active participants" exceeds the number of minimum-sized (/24) blocks available, priority shall be given to those who responded first. Rationale: In order to accelerate IPv6 deployment, it is critical that IPv4 space be consumed as rapidly as possible. Several possible approaches exist. One would be to distribute the final space proportionately to existing assignment size. Another might be to randomly assign the remaining space. Yet another might be to award the space based on merit, after reviewing possible uses for the final IPv4 space. This proposal instead simply consumes some of the remaining space by directly rewarding the participants in the policy development process for their participation. Timetable for implementation: Immediate _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From frnkblk at iname.com Fri Jan 21 19:36:52 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Fri, 21 Jan 2011 18:36:52 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension Message-ID: No need to sunset if most of the world is running IPv6. It could be sunsetted, but nobody would care. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of George Bonser Sent: Friday, January 21, 2011 12:13 PM To: Owen DeLong; George, Wes E [NTK] Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > > > In case anyone missed the subtlety of Wes's statement here... The > answer to that question is: > > A. A single /10 shared by everyone worldwide > B. Lots of smaller block (likely totaling quite a bit more than a > /10) > that are not shared between the different providers each of whom > is forced to go acquire their own. > > In the event that B transpires, there is exactly 0 gain to any ISP for > sharing and many many downsides if they do. > > As this is unfolding and I consider what will happen if this is not > deployed, I now support this proposal. > > Owen I am coming around but not quite there yet. I would like to see a sunset on it even if it is 5 years or even 10. _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From andrew.koch at tdstelecom.com Fri Jan 21 20:19:41 2011 From: andrew.koch at tdstelecom.com (Koch, Andrew) Date: Fri, 21 Jan 2011 19:19:41 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1353D@RWC-EX1.corp.seven.com> Message-ID: <84F7634862692847B463C7934B86ECD9E22C7550@CMX001.corp.tds.local> On Fri, Jan 21, 2011 at 6:29 PM, George Bonser wrote: > > Again, large quantities of space will be required for NAT444. NAT444 is > > going to happen. The space used to accomplish this should be coming > > from a global policy, however, we are out of time for this to work. If > > we don't do something soon, people will use space inappropriately. This > > proposal gets providers to use a known /10 we can filter on and > > implement it correctly / legitimately, the first time. Please give it > > support. > > > > Cheers, > > Aaron > > > There should be ways to reduce the space needed for 444. If, > for example, you are a national provider, you could reuse > that same 444 space in each region. But I suppose the other > thing is, who cares if a provider chooses to use 444, they > can use their own address space for it. A small operator > might get by with a /24 someone else might need a /16. > > Seems to me the real goal here is to deploy it in a manner > where it doesn't actually eat any of the provider's own > resources. Making the provider provision it out of their own > resources might actually keep the implementation down to only > where it is absolutely necessary. Creating this global /10 > would, in my opinion, encourage the deployment of it. If it > is "going to happen anyway", then so be it, it is what it is. > But if the providers need to use a chunk of their own space > for it, it forces an economy in the use of it. While, it may be possible to eek out CGN space from our existing allocations, this is not efficient use as only my network will be able to this addressing for inevitable CGN, and so on for everyone else's networks. I know searching out the final crumbs is poor planning, but I see many folks that will need IPv4 space for quite some time - including an increasing number of users requesting static public IP space. This proposal makes for efficient use of space as it can be reused amongst many networks. I support this proposal. Regards, Andy Koch TDS Telecom From jbates at brightok.net Fri Jan 21 20:32:10 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 19:32:10 -0600 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation forEvery ASN In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13530@RWC-EX1.corp.seven.com> References: <4D39B66002000093000EC7E3@mail.copsmonitoring.com> <5A6D953473350C4B9995546AFE9939EE0BC13530@RWC-EX1.corp.seven.com> Message-ID: <4D3A339A.80707@brightok.net> On 1/21/2011 5:16 PM, George Bonser wrote: > I fail to see how having an extra /24 per ASN, particularly for > organizations with several ASNs can be "fair". That would simply > generate a mad rush for people to register additional ASNs. > > I have 4 ASN's, and I fail to see how 4x /24 would be worth my time anyways; and I'm a small network. Jack From andrew.koch at tdstelecom.com Fri Jan 21 20:35:37 2011 From: andrew.koch at tdstelecom.com (Koch, Andrew) Date: Fri, 21 Jan 2011 19:35:37 -0600 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> Message-ID: <84F7634862692847B463C7934B86ECD9E22C7551@CMX001.corp.tds.local> On Fri, Jan 21, 2011 at 02:23 PM, ARIN wrote: > An "active participant" for this purpose is defined as an > individual who expresses support for OR objection to this proposal. > > Each "active participant" shall receive a single block of > the same size, the size chosen so as to maximally use the /10 > allocated for this purpose, but in no case shall the block be > smaller than /24. No more than one such block shall be > distributed per organization if a single organization has > more than one "active participant". Opposed. Can I reply from my other 30 "individual" email accounts? Andy Koch From tony at lava.net Fri Jan 21 20:37:34 2011 From: tony at lava.net (Antonio Querubin) Date: Fri, 21 Jan 2011 15:37:34 -1000 (HST) Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: On Fri, 21 Jan 2011, ARIN wrote: > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute > one quarter (a single /10) of the space immediately to "active > participants" in the ARIN policy development process. Too subjective and arbitrary... Antonio Querubin e-mail/xmpp: tony at lava.net From tony at lava.net Fri Jan 21 20:40:13 2011 From: tony at lava.net (Antonio Querubin) Date: Fri, 21 Jan 2011 15:40:13 -1000 (HST) Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: On Fri, 21 Jan 2011, ARIN wrote: > Policy statement: > > Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one > /24 of IPv4 space from that block for every ARIN-registered AS number, > including assigned legacy AS numbers in the ARIN region. Organizations > may apply to receive the space that has been reserved under the existing > address space justification policy. And what happens if they don't apply? Antonio Querubin e-mail/xmpp: tony at lava.net From jbates at brightok.net Fri Jan 21 20:54:33 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 19:54:33 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> Message-ID: <4D3A38D9.3010300@brightok.net> On 1/21/2011 5:13 PM, Owen DeLong wrote: > What people mean when they say NAT444 is > > cust<->NAT (Ctl by Cust)<->ProviderNet<->NAT (ctl by Provider)<->NAT (Ctl by CP)<-> Content > When some of my telco's ran NAT, the breakage was considered a "feature" (early days of p2p broke hard). Jack From jbates at brightok.net Fri Jan 21 21:26:35 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 20:26:35 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> Message-ID: <4D3A405B.1040907@brightok.net> On 1/21/2011 6:36 PM, Frank Bulk - iName.com wrote: > * Yes, while operators could draw from their own allocated space to > accomplish NAT444, their combined efforts would likely result in more than a > /10 of IPv4 space being used and require an extraordinary amount of effort. > Rather than force them to renumber or go through all that work, let's just > allocate a /10 for this and be done with it. They'll be forced to renumber with /10. Using their own space, they could regionalize existing blocks, effectively doubling, tripling, quadrupling their existing allocated space. What is the complaint? That we must feed more than a single /10 netblock into the NAT444 device's config? The initial conversion blocks may require thought and planning, but once implemented, it should flow smoothly. I've heard a lot of "but we can punish only some people with the /10 allowing us to reuse our global space for more important areas where we won't punish people." Let's be honest. What we are saying is, give us a /10 to punish the cheap residential guys, so we can utilize all our other space for those who pay us money. Eyeball networks are the ones that can deploy NAT444 effectively, and I see no reason to give them more global address space, which they won't be handing back to ARIN for content providers to use (they'll just pad their own pockets with their side hosting businesses since they reclaimed millions of broadband IP's which are of high value). Jack From owen at delong.com Fri Jan 21 22:18:20 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 21 Jan 2011 19:18:20 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <4D3A38D9.3010300@brightok.net> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> <4D3A38D9.3010300@brightok.net> Message-ID: <0B37251B-9AB0-4960-B094-C340B80005DD@delong.com> On Jan 21, 2011, at 5:54 PM, Jack Bates wrote: > On 1/21/2011 5:13 PM, Owen DeLong wrote: >> What people mean when they say NAT444 is >> >> cust<->NAT (Ctl by Cust)<->ProviderNet<->NAT (ctl by Provider)<->NAT (Ctl by CP)<-> Content >> > > When some of my telco's ran NAT, the breakage was considered a "feature" (early days of p2p broke hard). > Why would you consider breaking p2p a feature? Owen From jbates at brightok.net Fri Jan 21 22:24:39 2011 From: jbates at brightok.net (Jack Bates) Date: Fri, 21 Jan 2011 21:24:39 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <0B37251B-9AB0-4960-B094-C340B80005DD@delong.com> References: <4D38CCA9.5070000@umn.edu><5A6D953473350C4B9995546AFE9939EE0BC134F6@RWC-EX1.corp.seven.com><54E900DC635DAB4DB7A6D799B3C4CD8E062E2E@PLSWM12A.ad.sprint.com><8BE75F35-8494-42D7-BB73-FFCE17AB3B6C@delong.com><5A6D953473350C4B9995546AFE9939EE0BC1350B@RWC-EX1.corp.seven.com><5A6D953473350C4B9995546AFE9939EE0BC1350E@RWC-EX1.corp.seven.com> <5A6D953473350C4B9995546AFE9939EE0BC13517@RWC-EX1.corp.seven.com> <76AC5FEF83F1E64491446437EA81A61F7D20A098F9@srvxchg> <5A6D953473350C4B9995546AFE9939EE0BC13520@RWC-EX1.corp.seven.com> <4D3A38D9.3010300@brightok.net> <0B37251B-9AB0-4960-B094-C340B80005DD@delong.com> Message-ID: <4D3A4DF7.7090102@brightok.net> On 1/21/2011 9:18 PM, Owen DeLong wrote: > > Why would you consider breaking p2p a feature? > I have no clue. Some of my customer's are really weird. Perhaps it was the original "p2p is evil!" philosophy. I dunno. Jack From matthew at matthew.at Fri Jan 21 22:51:30 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Fri, 21 Jan 2011 19:51:30 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: References: <4D39EB6F.3040802@arin.net> Message-ID: <4D3A5442.7030505@matthew.at> On 1/21/2011 5:40 PM, Antonio Querubin wrote: > On Fri, 21 Jan 2011, ARIN wrote: > >> Policy statement: >> >> Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one >> /24 of IPv4 space from that block for every ARIN-registered AS number, >> including assigned legacy AS numbers in the ARIN region. Organizations >> may apply to receive the space that has been reserved under the existing >> address space justification policy. > > And what happens if they don't apply? > Then the address space stays reserved. There could be a timer on this, but it would need to be long enough to cover every org that might realize later that they need it... and by then IPv4 should be both useless and plentiful. Matthew Kaufman From dogwallah at gmail.com Fri Jan 21 23:49:58 2011 From: dogwallah at gmail.com (McTim) Date: Sat, 22 Jan 2011 07:49:58 +0300 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: References: <4D39EB5F.2070600@arin.net> Message-ID: On Sat, Jan 22, 2011 at 4:37 AM, Antonio Querubin wrote: > > On Fri, 21 Jan 2011, ARIN wrote: > >> Proposal type: New >> >> Policy term: Permanent >> >> Policy statement: >> >> ?Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute >> one quarter (a single /10) of the space immediately to "active >> participants" in the ARIN policy development process. > > Too subjective and arbitrary... agreed, how about?An "active participant" for this purpose is defined as an individual who expresses support for OR objection to this proposal in this thread". Seriously, though, I guess this post couldn't have waited until April 1st, as IANA runout will have occurred by then, and it wouldn't have been as humorous at that point. -- Cheers, McTim "A name indicates what we seek. An address indicates where it is. A route indicates how we get there."? Jon Postel From frnkblk at iname.com Sat Jan 22 01:06:39 2011 From: frnkblk at iname.com (Frank Bulk) Date: Sat, 22 Jan 2011 00:06:39 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3A405B.1040907@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> Message-ID: <000501cbb9fa$88882f20$99988d60$@iname.com> Every operator would be forced through that painful initial conversion. While nothing is impossible, I'd rather have the industry spend resources moving ahead with IPv6. Yes, eyeball networks benefit from this policy proposal more than content providers. I don't believe that eyeball networks will leverage NAT444 to sell "extra" IPv4 -- the breakage that accompanies NAT444 is too painful. And if NAT444 was so successful, what market value would that IPv4 address space have? It would be cheaper for those supposed buyers to implement a CGN. Frank -----Original Message----- From: Jack Bates [mailto:jbates at brightok.net] Sent: Friday, January 21, 2011 8:27 PM To: frnkblk at iname.com Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension On 1/21/2011 6:36 PM, Frank Bulk - iName.com wrote: > * Yes, while operators could draw from their own allocated space to > accomplish NAT444, their combined efforts would likely result in more than a > /10 of IPv4 space being used and require an extraordinary amount of effort. > Rather than force them to renumber or go through all that work, let's just > allocate a /10 for this and be done with it. They'll be forced to renumber with /10. Using their own space, they could regionalize existing blocks, effectively doubling, tripling, quadrupling their existing allocated space. What is the complaint? That we must feed more than a single /10 netblock into the NAT444 device's config? The initial conversion blocks may require thought and planning, but once implemented, it should flow smoothly. I've heard a lot of "but we can punish only some people with the /10 allowing us to reuse our global space for more important areas where we won't punish people." Let's be honest. What we are saying is, give us a /10 to punish the cheap residential guys, so we can utilize all our other space for those who pay us money. Eyeball networks are the ones that can deploy NAT444 effectively, and I see no reason to give them more global address space, which they won't be handing back to ARIN for content providers to use (they'll just pad their own pockets with their side hosting businesses since they reclaimed millions of broadband IP's which are of high value). Jack From gbonser at seven.com Sat Jan 22 01:06:32 2011 From: gbonser at seven.com (George Bonser) Date: Fri, 21 Jan 2011 22:06:32 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3A405B.1040907@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13547@RWC-EX1.corp.seven.com> I suppose my position is one of neutral at this point for the following reasons: 1. I don't maintain that sort of network so I probably don't have the kind of insight into what it is going to require during the transition. I will defer to the operators of that sort of network to know what they need. 2. v4 is dead anyway so in my opinion, the whole thing is a big waste of time and if someone wants to waste their time, fine with me. I was not placed in this world to protect people from themselves. 3. Runout of v4 is probably not going to impact the network I am responsible for as we plan to migrate to v6 fairly quickly once the ball starts rolling. As we migrate more services to v6, we will start removing v4 IPs from service as the traffic peters out. My experience with v6 is likely to be one of reduced v4 IP space requirements, not an increase, so the removal of the /10 from the pool won't have any impact. But having said that, in the context of what I believe is best for the community as a whole, I still have my doubts that this is in the best interest, but again will defer to those who work in that space to know best what they need to get their job done. George From jbates at brightok.net Sat Jan 22 02:39:27 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 01:39:27 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <000501cbb9fa$88882f20$99988d60$@iname.com> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> Message-ID: <4D3A89AF.3010403@brightok.net> On 1/22/2011 12:06 AM, Frank Bulk wrote: > Yes, eyeball networks benefit from this policy proposal more than content > providers. I don't believe that eyeball networks will leverage NAT444 to > sell "extra" IPv4 -- the breakage that accompanies NAT444 is too painful. > And if NAT444 was so successful, what market value would that IPv4 address > space have? It would be cheaper for those supposed buyers to implement a > CGN. 1) Is it your opinion that the eyeball networks deserve to benefit from this proposal and eat up a /10 which could be utilized by content providers who don't get near the transition capabilities as eyeball networks? 2) Given that eyeball networks for support reasons will likely push their cheapest plans into NAT444 quickly (so as to support a uniform topology), what do you believe they will do with all this extra space gained? Others in the thread have mentioned v4 value projected to be $40 per? Many eyeball networks also sideline these days with content services as well. Will they utilize this massive block of free IPv4 they recover to push out the content only providers? 3) While NAT444 is painful and there is hope that many things will utilize v6, what percentage of services do you see remaining v4, where NAT444 ceases to be painful? For example, http works rather well with NAT444, so the pain threshold is much higher than say... skype/p2p. I expect skype and other p2p programs (many already do) to support ipv6 quickly to protect their business model from dealing with NAT444, while many services which don't have breakage from NAT have no driving force to push them quicker to IPv6. The same goes for the eyeball customers. They are likely to quit using home routers if it means gaining IPv6 connectivity to make their xbox/skype/wow patch work (or upgrade to an IPv6 capable device). This will v6 enable them, and then they'll just utilize v4 for the services which haven't migrated as quickly as NAT444 doesn't break them (or the break, such as geolocation, ip specific rules, etc are acceptable by both parties). At this stage of the game, I'm sure it's too late to correct policies. ARIN should have had policies in place already to help protect the content providers over the eyeball networks, due to the unbalanced transition tools available. Perhaps this policy is the sacrifice (we'll give you a /10, if you'll just be quiet and not eat up more space; accept all that extra space you'll reclaim on NAT444 and not even worry about the 1-10% needed to do NAT444). Or perhaps implementing this policy won't stop the flood of requests, and it will just sacrifice another /10 to eyeballs that content providers could have used. I didn't see anything in the policy that mandated all justifications must show NAT444 using this /10 for the customer facing side. Without such wording, a provider could still utilize NAT444 to justify more space, and then turn around and utilize the /10; giving themselves a better buffer on runout (or more of those so call $40 addresses). For the record. I'm an eyeball network, and content I provide falls under standard eyeball network services (and the bare minimum at that). I don't suffer from the issues many content providers will face, but I will see the effects when they have issues obtaining IPv4 space while my network and many other eyeball networks free up IPv4 space through NAT444 and are still loathe to give up claim to the space (or bank by selling it to the content networks at premium rates). I'm all for my own network paying the tax of sacrificing existing space for utilization in NAT444. Jack From marka at isc.org Sat Jan 22 07:45:47 2011 From: marka at isc.org (Mark Andrews) Date: Sat, 22 Jan 2011 23:45:47 +1100 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: Your message of "Fri, 21 Jan 2011 22:06:32 -0800." <5A6D953473350C4B9995546AFE9939EE0BC13547@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net><5A6D953473350C4B9995546AFE9939EE0BC13547@RWC-EX1.corp.seven.com> Message-ID: <20110122124547.B6B479145C2@drugs.dv.isc.org> In message <5A6D953473350C4B9995546AFE9939EE0BC13547 at RWC-EX1.corp.seven.com>, " George Bonser" writes: > I suppose my position is one of neutral at this point for the following > reasons: > > 1. I don't maintain that sort of network so I probably don't have the > kind of insight into what it is going to require during the transition. > I will defer to the operators of that sort of network to know what they > need. > > 2. v4 is dead anyway so in my opinion, the whole thing is a big waste of > time and if someone wants to waste their time, fine with me. I was not > placed in this world to protect people from themselves. > > 3. Runout of v4 is probably not going to impact the network I am > responsible for as we plan to migrate to v6 fairly quickly once the ball > starts rolling. As we migrate more services to v6, we will start > removing v4 IPs from service as the traffic peters out. My experience > with v6 is likely to be one of reduced v4 IP space requirements, not an > increase, so the removal of the /10 from the pool won't have any impact. The ball started rolling 10+ years ago. Even the root servers (a very conservative bunch) added AAAA records two years ago and had been running on IPv6 for years before that but you needed to tweak your nameserver configuration to reach the IPv6 instance. > But having said that, in the context of what I believe is best for the > community as a whole, I still have my doubts that this is in the best > interest, but again will defer to those who work in that space to know > best what they need to get their job done. > > George > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org From frnkblk at iname.com Sat Jan 22 11:36:58 2011 From: frnkblk at iname.com (Frank Bulk) Date: Sat, 22 Jan 2011 10:36:58 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3A89AF.3010403@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> Message-ID: <000101cbba52$96bb4110$c431c330$@iname.com> Comments in-line. -----Original Message----- From: Jack Bates [mailto:jbates at brightok.net] Sent: Saturday, January 22, 2011 1:39 AM To: frnkblk at iname.com Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension On 1/22/2011 12:06 AM, Frank Bulk wrote: > Yes, eyeball networks benefit from this policy proposal more than content > providers. I don't believe that eyeball networks will leverage NAT444 to > sell "extra" IPv4 -- the breakage that accompanies NAT444 is too painful. > And if NAT444 was so successful, what market value would that IPv4 address > space have? It would be cheaper for those supposed buyers to implement a > CGN. 1) Is it your opinion that the eyeball networks deserve to benefit from this proposal and eat up a /10 which could be utilized by content providers who don't get near the transition capabilities as eyeball networks? FB> No, the eyeball networks don't deserve it, but I'm more interested in moving the Internet forward through this crunch and the segment that seems to be in the greatest need is the eyeball networks. The content providers have (fortunately) been able to scale using load-balancers and anycast. If you have a proposal for ARIN that would assist the content providers in growing their business in the face of IPv4 depletion, please send one in. 2) Given that eyeball networks for support reasons will likely push their cheapest plans into NAT444 quickly (so as to support a uniform topology), what do you believe they will do with all this extra space gained? Others in the thread have mentioned v4 value projected to be $40 per? Many eyeball networks also sideline these days with content services as well. Will they utilize this massive block of free IPv4 they recover to push out the content only providers? FB> I'm not sure if service providers will apply NAT444 to their "cheapest plan" customers first. The extra support required for NAT444 customers would only further reduce their margins on this customer segment. Eyeball networks won't consider any IPv4 they've freed up as 'free'. They had to buy equipment to do the NAT444 and field extra support calls, while their competitors, who had sufficient space, don't do any CGN at all and boast about it. But the future could prove me wrong. 3) While NAT444 is painful and there is hope that many things will utilize v6, what percentage of services do you see remaining v4, where NAT444 ceases to be painful? For example, http works rather well with NAT444, so the pain threshold is much higher than say... skype/p2p. I expect skype and other p2p programs (many already do) to support ipv6 quickly to protect their business model from dealing with NAT444, while many services which don't have breakage from NAT have no driving force to push them quicker to IPv6. The same goes for the eyeball customers. They are likely to quit using home routers if it means gaining IPv6 connectivity to make their xbox/skype/wow patch work (or upgrade to an IPv6 capable device). This will v6 enable them, and then they'll just utilize v4 for the services which haven't migrated as quickly as NAT444 doesn't break them (or the break, such as geolocation, ip specific rules, etc are acceptable by both parties). FB> Many good points here. We can't know what impact NAT444 will have on extending the long tail of IPv4 content because IPv4 eyeballs remain. But there will be eyeballs, eventually, that are IPv6 only, so anyone who keeps their content IPv4-only will miss some eyeballs. At this stage of the game, I'm sure it's too late to correct policies. ARIN should have had policies in place already to help protect the content providers over the eyeball networks, due to the unbalanced transition tools available. Perhaps this policy is the sacrifice (we'll give you a /10, if you'll just be quiet and not eat up more space; accept all that extra space you'll reclaim on NAT444 and not even worry about the 1-10% needed to do NAT444). Or perhaps implementing this policy won't stop the flood of requests, and it will just sacrifice another /10 to eyeballs that content providers could have used. I didn't see anything in the policy that mandated all justifications must show NAT444 using this /10 for the customer facing side. Without such wording, a provider could still utilize NAT444 to justify more space, and then turn around and utilize the /10; giving themselves a better buffer on runout (or more of those so call $40 addresses). FB> Yes, there will be service providers who do just as you described, but we shouldn't penalize all those who can't currently justify additional requests, anticipate future growth, acknowledge that NAT444 is the transition technology they need, and need a path moving forward. For the record. I'm an eyeball network, and content I provide falls under standard eyeball network services (and the bare minimum at that). I don't suffer from the issues many content providers will face, but I will see the effects when they have issues obtaining IPv4 space while my network and many other eyeball networks free up IPv4 space through NAT444 and are still loathe to give up claim to the space (or bank by selling it to the content networks at premium rates). I'm all for my own network paying the tax of sacrificing existing space for utilization in NAT444. FB> I hope that you can avoid NAT444. I'm hoping to, too. In the words of Randy Bush, I encourage my competitors to pursue NAT444. Jack From jbates at brightok.net Sat Jan 22 12:58:33 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 11:58:33 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <000101cbba52$96bb4110$c431c330$@iname.com> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> Message-ID: <4D3B1AC9.1080405@brightok.net> On 1/22/2011 10:36 AM, Frank Bulk wrote: > FB> Yes, there will be service providers who do just as you described, but > we shouldn't penalize all those who can't currently justify additional > requests, anticipate future growth, acknowledge that NAT444 is the > transition technology they need, and need a path moving forward. > I'm not saying penalize. I'm saying that we either don't support the /10 and make the eyeballs retask their existing IPv4 address space (which will still free up some of their address space, just not as much as if we gave them the /10), or the policy must MANDATE that all NAT444 justifications must utilize the /10. This differs from RFC-1918, in that it specifically tasks the /10 to a purpose and mandates that it be used for said purpose when people justify for IPv4 space. The policy should not be wide open with an optional /10 which will be tasked with serving a purpose, but people can just ignore that purpose as well. This would leave a new opening for abuse. > FB> I hope that you can avoid NAT444. I'm hoping to, too. In the words of > Randy Bush, I encourage my competitors to pursue NAT444. > Benefits of being a small ISP. I have a lot of flexibility. Benefits of being the only provider in many areas, I have a lot of flexibility and no Randy's encouraging me. The first place I expect to see NAT44, and it generally will not be NAT444 though still subject to upnp breaking, is on modem banks (yes, there are still vast pools of modem bank IP addresses and even people that dial into them). Due to the limitation of connectivity, modem bank users utilize a subset of protocols which NAT444 breaks. It will, however, free up vast amounts of space. Jack From cgrundemann at gmail.com Sat Jan 22 13:07:40 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Sat, 22 Jan 2011 11:07:40 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B1AC9.1080405@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> <4D3B1AC9.1080405@brightok.net> Message-ID: On Sat, Jan 22, 2011 at 10:58, Jack Bates wrote: > > I'm not saying penalize. I'm saying that we either don't support the /10 and > make the eyeballs retask their existing IPv4 address space (which will still > free up some of their address space, just not as much as if we gave them the > /10), or the policy must MANDATE that all NAT444 justifications must utilize > the /10. This differs from RFC-1918, in that it specifically tasks the /10 > to a purpose and mandates that it be used for said purpose when people > justify for IPv4 space. > > The policy should not be wide open with an optional /10 which will be tasked > with serving a purpose, but people can just ignore that purpose as well. > This would leave a new opening for abuse. Thanks for clarifying Jack, I think I now understand your suggestion. Basically add a sentence or two stating that internal LSN addressing is not a valid justification of need for new IPv4 requests. I believe that it's worth considering including that - if it were included, would you support the proposal? ~Chris > > Jack > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From jbates at brightok.net Sat Jan 22 13:29:28 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 12:29:28 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> <4D3B1AC9.1080405@brightok.net> Message-ID: <4D3B2208.3040507@brightok.net> On 1/22/2011 12:07 PM, Chris Grundemann wrote: > > Thanks for clarifying Jack, I think I now understand your suggestion. > Basically add a sentence or two stating that internal LSN addressing > is not a valid justification of need for new IPv4 requests. I believe > that it's worth considering including that - if it were included, > would you support the proposal? > I'd disagree with it still (as I'd much prefer to have that /10 open for other uses such as content providers), but I WOULD support it for two reasons: 1) It would at least be better than losing a /10 plus the other space LSN would cost ARIN (not concerned with other regions use of the /10 or policies, only ours); ie, it already has decent support, and I'd rather a better policy go into effect than what this currently is. 2) It makes it a much grittier policy. It says, take it as a whole or we don't implement it at all. This is not freebie space to be abused. This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. Jack From frnkblk at iname.com Sat Jan 22 14:20:41 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Sat, 22 Jan 2011 13:20:41 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension Message-ID: > or the policy must MANDATE that all NAT444 justifications > must utilize the /10 I'm not sure if CGN deployment is justification for a request. Can someone in the know comment on that? Even if it is justification, that restriction might be considered overreaching by the community. Frank -----Original Message----- From: Jack Bates [mailto:jbates at brightok.net] Sent: Saturday, January 22, 2011 11:59 AM To: frnkblk at iname.com Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension On 1/22/2011 10:36 AM, Frank Bulk wrote: > FB> Yes, there will be service providers who do just as you described, but > we shouldn't penalize all those who can't currently justify additional > requests, anticipate future growth, acknowledge that NAT444 is the > transition technology they need, and need a path moving forward. > I'm not saying penalize. I'm saying that we either don't support the /10 and make the eyeballs retask their existing IPv4 address space (which will still free up some of their address space, just not as much as if we gave them the /10), or the policy must MANDATE that all NAT444 justifications must utilize the /10. This differs from RFC-1918, in that it specifically tasks the /10 to a purpose and mandates that it be used for said purpose when people justify for IPv4 space. The policy should not be wide open with an optional /10 which will be tasked with serving a purpose, but people can just ignore that purpose as well. This would leave a new opening for abuse. > FB> I hope that you can avoid NAT444. I'm hoping to, too. In the words of > Randy Bush, I encourage my competitors to pursue NAT444. > Benefits of being a small ISP. I have a lot of flexibility. Benefits of being the only provider in many areas, I have a lot of flexibility and no Randy's encouraging me. The first place I expect to see NAT44, and it generally will not be NAT444 though still subject to upnp breaking, is on modem banks (yes, there are still vast pools of modem bank IP addresses and even people that dial into them). Due to the limitation of connectivity, modem bank users utilize a subset of protocols which NAT444 breaks. It will, however, free up vast amounts of space. Jack From frnkblk at iname.com Sat Jan 22 14:23:10 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Sat, 22 Jan 2011 13:23:10 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B2208.3040507@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> <4D3B1AC9.1080405@brightok.net> <4D3B2208.3040507@brightok.net> Message-ID: Knowing how much content provider space is used by spammers (and is in my e-mail gateways' blocklists), my guess is that content providers have lots of IPv4 space to use to *host* content. Spammers might find using IPv4 space more expensive. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Jack Bates Sent: Saturday, January 22, 2011 12:29 PM To: Chris Grundemann Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. Jack _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From owen at delong.com Sat Jan 22 14:48:32 2011 From: owen at delong.com (Owen DeLong) Date: Sat, 22 Jan 2011 11:48:32 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <000101cbba52$96bb4110$c431c330$@iname.com> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> Message-ID: <326CB90C-250B-4DFE-8CEF-0328780A2490@delong.com> > > 2) Given that eyeball networks for support reasons will likely push > their cheapest plans into NAT444 quickly (so as to support a uniform > topology), what do you believe they will do with all this extra space > gained? Others in the thread have mentioned v4 value projected to be $40 > per? Many eyeball networks also sideline these days with content > services as well. Will they utilize this massive block of free IPv4 they > recover to push out the content only providers? For support, cost, and many other reasons, I think that eyeball networks will put as few customers as they possibly can on NAT444, but, as their need for addresses for higher value services grows, you can be almost certain that they will move low-end customers to NAT444 to make those addresses available for those higher value services. I don't think you'll see them using NAT444 to free up vast quantities of addresses to just monetize the addresses, but, even if that happens, at least it means the addresses are going someplace they can be used. > 3) While NAT444 is painful and there is hope that many things will > utilize v6, what percentage of services do you see remaining v4, where > NAT444 ceases to be painful? For example, http works rather well with > NAT444, so the pain threshold is much higher than say... skype/p2p. I > expect skype and other p2p programs (many already do) to support ipv6 > quickly to protect their business model from dealing with NAT444, while > many services which don't have breakage from NAT have no driving force > to push them quicker to IPv6. The same goes for the eyeball customers. > They are likely to quit using home routers if it means gaining IPv6 > connectivity to make their xbox/skype/wow patch work (or upgrade to an > IPv6 capable device). This will v6 enable them, and then they'll just > utilize v4 for the services which haven't migrated as quickly as NAT444 > doesn't break them (or the break, such as geolocation, ip specific > rules, etc are acceptable by both parties). > The places where NAT444 works OK are also the places where it is actually easiest for the server side to convert to IPv6. NAT444 will still provide a degraded user experience for those services, so, I don't think that it will serve as a detractor from IPv6 migration for those services. As has been mentioned, NAT444 still degrades geolocation, creates security and audit challenges, reduces the ability to do reputation based access control, etc. Owen From jbates at brightok.net Sat Jan 22 14:59:05 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 13:59:05 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: Message-ID: <4D3B3709.2090600@brightok.net> On 1/22/2011 1:20 PM, Frank Bulk - iName.com wrote: >> or the policy must MANDATE that all NAT444 justifications >> > must utilize the /10 > I'm not sure if CGN deployment is justification for a request. Can someone > in the know comment on that? > > Even if it is justification, that restriction might be considered > overreaching by the community. I don't consider it to be overreaching. If we mandated CGN deployments, that would be overreaching. However, I'm not suggesting that we state you must utilize CGN and the /10. I'm suggesting that we mandate use of the /10 when you have deployed CGN for justifications purposes. Jack From owen at delong.com Sat Jan 22 14:58:27 2011 From: owen at delong.com (Owen DeLong) Date: Sat, 22 Jan 2011 11:58:27 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B1AC9.1080405@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> <4D3B1AC9.1080405@brightok.net> Message-ID: <0D76EB13-8E56-456A-A871-BF10414D5635@delong.com> On Jan 22, 2011, at 9:58 AM, Jack Bates wrote: > On 1/22/2011 10:36 AM, Frank Bulk wrote: >> FB> Yes, there will be service providers who do just as you described, but >> we shouldn't penalize all those who can't currently justify additional >> requests, anticipate future growth, acknowledge that NAT444 is the >> transition technology they need, and need a path moving forward. >> > > I'm not saying penalize. I'm saying that we either don't support the /10 and make the eyeballs retask their existing IPv4 address space (which will still free up some of their address space, just not as much as if we gave them the /10), or the policy must MANDATE that all NAT444 justifications must utilize the /10. This differs from RFC-1918, in that it specifically tasks the /10 to a purpose and mandates that it be used for said purpose when people justify for IPv4 space. > I'm pretty sure that instead of retasking their existing IPv4 space (which won't free up so much address space as you think, it will just increase the number of users they are forced to put behind NAT444), it will cause them to individually get space from ARIN for this purpose. While I don't think any of them will be able to get a /10 for this purpose, I'm pretty sure that the total aggregate of what they will be able to get will greatly exceed a /10. > The policy should not be wide open with an optional /10 which will be tasked with serving a purpose, but people can just ignore that purpose as well. This would leave a new opening for abuse. > Since this would be a block that noone in their right mind would accept a route for from any of their peers, what kind of abuse are you expecting it to be open to? Are you saying that there is significant abuse of RFC-1918 addresses today? >> FB> I hope that you can avoid NAT444. I'm hoping to, too. In the words of >> Randy Bush, I encourage my competitors to pursue NAT444. >> > > Benefits of being a small ISP. I have a lot of flexibility. Benefits of being the only provider in many areas, I have a lot of flexibility and no Randy's encouraging me. The first place I expect to see NAT44, and it generally will not be NAT444 though still subject to upnp breaking, is on modem banks (yes, there are still vast pools of modem bank IP addresses and even people that dial into them). Due to the limitation of connectivity, modem bank users utilize a subset of protocols which NAT444 breaks. It will, however, free up vast amounts of space. > There are not a lot of networks still supporting dial up. There may still be lot of modem banks with users, but, they are in a relatively small number of networks. Owen From owen at delong.com Sat Jan 22 15:02:39 2011 From: owen at delong.com (Owen DeLong) Date: Sat, 22 Jan 2011 12:02:39 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B2208.3040507@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> <4D3B1AC9.1080405@brightok.net> <4D3B2208.3040507@brightok.net> Message-ID: <3F613FC7-7BEB-48C2-A242-595359959609@delong.com> On Jan 22, 2011, at 10:29 AM, Jack Bates wrote: > On 1/22/2011 12:07 PM, Chris Grundemann wrote: >> >> Thanks for clarifying Jack, I think I now understand your suggestion. >> Basically add a sentence or two stating that internal LSN addressing >> is not a valid justification of need for new IPv4 requests. I believe >> that it's worth considering including that - if it were included, >> would you support the proposal? >> > > I'd disagree with it still (as I'd much prefer to have that /10 open for other uses such as content providers), but I WOULD support it for two reasons: > It's not like content providers would be unable to use this /10, but most content providers don't need that much non-routable space. > 1) It would at least be better than losing a /10 plus the other space LSN would cost ARIN (not concerned with other regions use of the /10 or policies, only ours); ie, it already has decent support, and I'd rather a better policy go into effect than what this currently is. > > 2) It makes it a much grittier policy. It says, take it as a whole or we don't implement it at all. This is not freebie space to be abused. > I support the idea of amending the proposal to prohibit ARIN from granting requests for other space for this aspect of LSN implementation. > > This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. > I'm not sure that dwindling addresses for CPs is a bad thing. The needs of CPs should dwindle as end users gain more access to IPv6. CPs, as you have pointed out, could be the hardest group to motivate to IPv6. Owen From jbates at brightok.net Sat Jan 22 15:20:19 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 14:20:19 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <0D76EB13-8E56-456A-A871-BF10414D5635@delong.com> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> <000101cbba52$96bb4110$c431c330$@iname.com> <4D3B1AC9.1080405@brightok.net> <0D76EB13-8E56-456A-A871-BF10414D5635@delong.com> Message-ID: <4D3B3C03.9020709@brightok.net> On 1/22/2011 1:58 PM, Owen DeLong wrote: > >> The policy should not be wide open with an optional /10 which will be tasked with serving a purpose, but people can just ignore that purpose as well. This would leave a new opening for abuse. >> > Since this would be a block that noone in their right mind would accept a route for from any of their peers, what kind of abuse are you expecting it to be open to? Are you saying that there is significant abuse of RFC-1918 addresses today? > I'm saying that as it stands, they could request space from ARIN for internal LSN space and then turn around and use the /10, which would be false justification, but there isn't a way for us to defend against it without the policy limiting LSN justifications. It's important to note that this limitation only would stop people from justifying IPv4 utilization on the inside of their LSN implementation; compensated with us giving a /10 to the world for that specific purpose. I think you gathered this on my other email. > I support the idea of amending the proposal to prohibit ARIN from granting requests for other space for this aspect of LSN implementation. > Jack From frnkblk at iname.com Sat Jan 22 15:22:37 2011 From: frnkblk at iname.com (Frank Bulk - iName.com) Date: Sat, 22 Jan 2011 14:22:37 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B3709.2090600@brightok.net> References: <4D3B3709.2090600@brightok.net> Message-ID: If current policy allows for IPv4 requests to be fulfilled based on the need for numbering a CGN network, I would be willing to support an amendment to prop-127 that would nullify this justification, but that's about as far as I think we can go. Please correct me if I'm wrong, but I don't think ARIN mandates the use of specific type of addressing within a member's operation; the closest concept I could find is micro-allocations. Frank -----Original Message----- From: Jack Bates [mailto:jbates at brightok.net] Sent: Saturday, January 22, 2011 1:59 PM To: frnkblk at iname.com Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension On 1/22/2011 1:20 PM, Frank Bulk - iName.com wrote: >> or the policy must MANDATE that all NAT444 justifications >> > must utilize the /10 > I'm not sure if CGN deployment is justification for a request. Can someone > in the know comment on that? > > Even if it is justification, that restriction might be considered > overreaching by the community. I don't consider it to be overreaching. If we mandated CGN deployments, that would be overreaching. However, I'm not suggesting that we state you must utilize CGN and the /10. I'm suggesting that we mandate use of the /10 when you have deployed CGN for justifications purposes. Jack From jbates at brightok.net Sat Jan 22 16:02:49 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 15:02:49 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D3B3709.2090600@brightok.net> Message-ID: <4D3B45F9.4000207@brightok.net> On 1/22/2011 2:22 PM, Frank Bulk - iName.com wrote: > If current policy allows for IPv4 requests to be fulfilled based on the need > for numbering a CGN network, I would be willing to support an amendment to > prop-127 that would nullify this justification, but that's about as far as I > think we can go. Please correct me if I'm wrong, but I don't think ARIN > mandates the use of specific type of addressing within a member's operation; > the closest concept I could find is micro-allocations. I don't see where current policy would forbid it. This restriction to justification is a safety measure to insure the /10 has maximum effect when dealing with CGN networks. It would not prohibit them from using RFC-1918 either. ARIN has not normally mandated specific address types, as there is a limitation in types. I suspect that using class D addressing as a justification for an allocation might be met with some resistance. This /10 allocation is a new type designed to meet a specific need by ARIN. The policy still will not mandate the use of CGN; only mandate that you cannot use the addressing behind the CGN in your IPv4 address justifications (though they are still technically applicable to IPv6 justifications, though not directly since we gauge IPv6 differently). Case in point. Some networks, despite being behind NAT (or are completely isolated without NAT) utilize globally unique addressing internally to deal with interconnecting networks. It is these private interconnections that justifies the use of globally unique addresses even though the networks will not be publicly routed. CGN works on a completely different premise and is based on non-unique addressing. As such, we need to insure that we recognize this and don't allow justification to apply to the internal side of a CGN. We could, I believe, even take it a step further and mandate a ratio for CGN in the public side justifications (I believe this was done for modem bank ratios at one point?). Such a mandate would fit in a different policy proposal, though. Not this one. Jack From ipng at 69706e6720323030352d30312d31340a.nosense.org Sat Jan 22 17:22:13 2011 From: ipng at 69706e6720323030352d30312d31340a.nosense.org (Mark Smith) Date: Sun, 23 Jan 2011 08:52:13 +1030 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D39DF37.3020109@brightok.net> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> Message-ID: <20110123085213.6ce8ec63@opy.nosense.org> On Fri, 21 Jan 2011 13:32:07 -0600 Jack Bates wrote: > On 1/21/2011 12:22 PM, Owen DeLong wrote: > > You are running a much smaller network than many of these guys. > > > > They are planning to duplicate this /10 around their different network areas. > > > > My point is that if they are large enough to utilize a /10, they > probably already have much larger than a /10 in their network. Duping > existing assignments would be just fine. > > > To do this from existing space, you would basically need to turn off 2 regions and renumber > > all of the subscribers in one to match the addresses of the other. Then you would need > > to come up with additional addresses for all of the LSN/CGN boxes on the interior side > > and for the shared external addresses. I suppose you could use the addresses recovered > > from the second region, but, if your region contains more than 1,000,000 customers, it > > seems to me like it would be pretty difficult to do this juggling without significant down > > time. > > The interior addressing would be an already existing network. It would > also be the first network to undergo NAT444. That network can then be > duplicated onto other networks. > > > Instead, it's much easier to write up a use-case for the addresses you need for this > > and submit it to the RIR. Sure, probably nobody gets a /10 for this, but, not hard > > to imagine ways several /14s, possibly a few /12s, and certainly a number of > > /15s and /16s go out the door that way. If it goes that way, none of the ISPs have > > any incentive to share those intermediate addresses with the other ISPs and > > a few downsides to doing so. > > If they ask, they'll be asking for the public facing addressing (which > must be unique) while they work on renumbering the millions of internal > addressing. The request for external addressing is much less. > > > > I think many providers are goint to hit the wall with need for NAT444 well before IPv6 is the mainstream protocol and not before we have run out of IPv4. > > > > Perhaps, and they easily can use their existing addresses. The > additional addressing you need is to cover the external side of the > NAT444. Once that is established, you can renumber inside to heart's > delight. Could be that you have multiple /8's worth of inside > addressing. The NAT444 system isn't really going to care what's on the > inside much. > > The /10 shared won't work for the outside. People will request for > outside facing addressing to deal with the transition to NAT444. The > inside addressing can be anything, and as NAT444 is deployed, they can > start replicating their entire address space. > To further expand on this, here would the scenario within an primarily residential ISP - [CPE NAPT]<--->[LS NAPT]-{ISP network/Internet} The address space being discussed is what is used between the [CPE NAPT] and [LSN(BRAS)] device - in the segment shown as "<--->". The requirements for this addressing are - doesn't overlap with any RFC1918, to be sure the CPE uses it's default route for outbound traffic. - doesn't overlap with any Internet/ISP destinations outside the LSN domain, so that the CPE doesn't think the addresses are onlink on it's WAN interface, and ARP for them instead of using the LS NAPT to reach public Internet/ISP destinations. - is enough addresses to uniquely address every CPE's WAN interface and the LS NAPTs downstream interface, so that for inbound traffic, post NAPT, is sent to the correct CPE. Note, this uniqueness requirement is limited to the CPE/LS NAPT domain. Outside of it / upstream of it, this CPE/LS NAPT address space can be duplicated, because it is hidden behind the NAPT function being performed by the LS NAPT device. So, assuming the LS NAPT device is either a BRAS or CMTS, the size of the address space needed between the CPE and LS NAPT is dictated by the number of subscribers that can be realistically served by the BRAS/CMTS LS NAPT device or pool of devices. I'm pretty sure it isn't 4 194 304 (/10), and more likely absolute maximum of 128K, and probably more commonly no more than 32K. Bear in mind that a new constraint on the capacity of an BRAS/CMTS also performing LS NAPT is the maximum size of the NAPT state tables and the processing involved in maintaining them, such as watching TCP flags, aging out UDP "connections", translating addresses in headers and payloads etc. So if ARIN were to give away public address space for this specific purpose, a /17 should be a reasonable maximum size, or possibly a /16 - a /10 is obviously excessive. However, I still think ISPs should be using their own existing, or newly requested via existing mechanisms, address space for this purpose, duplicating it for how ever many instances of CPE/LS NAPT the need for their customer base size. That scenario will look as follows [CPE NAPT]<--->[LS NAPT]-{ISP network/Internet} / / / [CPE NAPT]<--->[LS NAPT]-/ / / / / [CPE NAPT]<--->[LS NAPT]--/ / / [CPE NAPT]<--->[LS NAPT]---/ The pool of global addresses shared by the downstream CPE are provided at the LS NAPTs. If an ISP adopts a 1 to 2 address/CPE sharing ratio at the LS NAPT location, they've immediately halved their global address requirements for the CPE LS NAPT domain. Assuming they don't put business customers behind the LS NAPT, and if they have a large residential customer base, they're likely to be able to nearly halve their existing global address requirements, which should free up plenty of their own existing address space for use in the CPE /LS NAPT domains. For ISPs who are providing services via PPP/PPPoE, they may actually only need one single address for this purpose - the unique CPE identification requirement between the LS NAPT and the CPE could be served by the point-to-point session/interface descriptor, rather than using an IP address assigned to the CPE. All customers would be assigned the same WAN address on their CPE, with only that single IP address needing to meet the requirements I outlined above. Regards, mark. From owen at delong.com Sat Jan 22 17:26:28 2011 From: owen at delong.com (Owen DeLong) Date: Sat, 22 Jan 2011 14:26:28 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B45F9.4000207@brightok.net> References: <4D3B3709.2090600@brightok.net> <4D3B45F9.4000207@brightok.net> Message-ID: On Jan 22, 2011, at 1:02 PM, Jack Bates wrote: > On 1/22/2011 2:22 PM, Frank Bulk - iName.com wrote: >> If current policy allows for IPv4 requests to be fulfilled based on the need >> for numbering a CGN network, I would be willing to support an amendment to >> prop-127 that would nullify this justification, but that's about as far as I >> think we can go. Please correct me if I'm wrong, but I don't think ARIN >> mandates the use of specific type of addressing within a member's operation; >> the closest concept I could find is micro-allocations. > I don't see where current policy would forbid it. This restriction to justification is a safety measure to insure the /10 has maximum effect when dealing with CGN networks. It would not prohibit them from using RFC-1918 either. > Jack, Current policy doesn't forbid it. I think that ARIN staff would infer from this policy that the community intent is not to consume other space and would actually take care of the issue you are describing anyway. However, I support making it clear in the proposal. > ARIN has not normally mandated specific address types, as there is a limitation in types. I suspect that using class D addressing as a justification for an allocation might be met with some resistance. This /10 allocation is a new type designed to meet a specific need by ARIN. The policy still will not mandate the use of CGN; only mandate that you cannot use the addressing behind the CGN in your IPv4 address justifications (though they are still technically applicable to IPv6 justifications, though not directly since we gauge IPv6 differently). > Yep. You and Frank are in violent agreement. You're saying the same thing. > We could, I believe, even take it a step further and mandate a ratio for CGN in the public side justifications (I believe this was done for modem bank ratios at one point?). Such a mandate would fit in a different policy proposal, though. Not this one. > I don't remember any ARIN policy for modem bank ratios. If there was ever such a thing, it was before my time. We should not make policy for ratios. Ratios are a performance tuning issue and the ratio needed will change over time, starting relatively low as few customers are forced to NAT444, growing as that userbase increases, and then shrinking as the need for IPv4 service access declines. Owen From jbates at brightok.net Sat Jan 22 17:31:46 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 16:31:46 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110123085213.6ce8ec63@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> Message-ID: <4D3B5AD2.2030709@brightok.net> On 1/22/2011 4:22 PM, Mark Smith wrote: > So, assuming the LS NAPT device is either a BRAS or CMTS, the size of > the address space needed between the CPE and LS NAPT is dictated by the > number of subscribers that can be realistically served by the BRAS/CMTS > LS NAPT device or pool of devices. I'm pretty sure it isn't 4 194 304 > (/10), and more likely absolute maximum of 128K, and probably more > commonly no more than 32K. Bear in mind that a new constraint on the Remember, the limitations on LSN is the actual number of connections; however, you must still assign IPv4 addressing to all entities handled by the BRAS/CMTS. As IPv4 winds down, there will be (and many will want to prepare for it), larger portions of the network served by common LSNs. This would utilize considerably more address space between CPE and LSN while at the same time serving fewer connections. Jack From owen at delong.com Sat Jan 22 17:44:23 2011 From: owen at delong.com (Owen DeLong) Date: Sat, 22 Jan 2011 14:44:23 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110123085213.6ce8ec63@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> Message-ID: <756F3B43-66D5-425B-A84F-82E81300705F@delong.com> >> > > To further expand on this, here would the scenario within an > primarily residential ISP - > > [CPE NAPT]<--->[LS NAPT]-{ISP network/Internet} > > The address space being discussed is what is used between the [CPE > NAPT] and [LSN(BRAS)] device - in the segment shown as "<--->". > I'm not sure everyone wants to move the LSN as far out as the BRAS. > The requirements for this addressing are > > - doesn't overlap with any RFC1918, to be sure the CPE uses it's > default route for outbound traffic. > More accurately to make sure that the CPE thinks the default next hop is reachable via the external interface. > > So, assuming the LS NAPT device is either a BRAS or CMTS, the size of > the address space needed between the CPE and LS NAPT is dictated by the > number of subscribers that can be realistically served by the BRAS/CMTS > LS NAPT device or pool of devices. I'm pretty sure it isn't 4 194 304 > (/10), and more likely absolute maximum of 128K, and probably more > commonly no more than 32K. Bear in mind that a new constraint on the > capacity of an BRAS/CMTS also performing LS NAPT is the maximum size of > the NAPT state tables and the processing involved in maintaining them, > such as watching TCP flags, aging out UDP "connections", translating > addresses in headers and payloads etc. > This is not an entirely accurate assumption. I think many providers intend to use dedicated hardware for LSN deployed on a regional basis. This means that you have a pool of LSN devices and groups of subscribers over a larger area that all need to be unique within that larger area. In such an implementation, it is not hard to imagine areas that contain 3 million+ customers. > So if ARIN were to give away public address space for this specific > purpose, a /17 should be a reasonable maximum size, or possibly a /16 - > a /10 is obviously excessive. However, I still think ISPs should be > using their own existing, or newly requested via existing mechanisms, > address space for this purpose, duplicating it for how ever many > instances of CPE/LS NAPT the need for their customer base size. That > scenario will look as follows > It's only excessive if everyone designs around your particular approach. There are other approaches that are more cost effective for many networks as they exist today. The intent here is that the space under this policy would be shared among those multiple instances within those carriers and that various carriers could share the same space rather than each requesting their own. > > The pool of global addresses shared by the downstream CPE are provided > at the LS NAPTs. If an ISP adopts a 1 to 2 address/CPE sharing ratio at the > LS NAPT location, they've immediately halved their global address > requirements for the CPE LS NAPT domain. Assuming they don't put > business customers behind the LS NAPT, and if they have a large > residential customer base, they're likely to be able to nearly halve > their existing global address requirements, which should free up plenty > of their own existing address space for use in the CPE /LS NAPT domains. > If they force 100% of their customers to NAT444, yes. Most providers want to subject as few customers as possible to NAT444 implementing it slowly only where necessarily, primarily for new subscribers post runout. > For ISPs who are providing services via PPP/PPPoE, they may actually only > need one single address for this purpose - the unique CPE identification > requirement between the LS NAPT and the CPE could be served by the > point-to-point session/interface descriptor, rather than using an IP > address assigned to the CPE. All customers would be assigned the same > WAN address on their CPE, with only that single IP address needing to > meet the requirements I outlined above. > Again, you are making HUGE assumptions about where the LSN occurs which are not entirely valid. Take out this incorrect assumption and your entire scenario crumbles. So, unless you're offering funding for all of the retrofits that would be required for carriers to redesign their networks around your model, I think what you are proposing is a non-starter for many of the larger networks. Owen From gbonser at seven.com Sat Jan 22 17:48:23 2011 From: gbonser at seven.com (George Bonser) Date: Sat, 22 Jan 2011 14:48:23 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B5AD2.2030709@brightok.net> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> > > Remember, the limitations on LSN is the actual number of connections; > however, you must still assign IPv4 addressing to all entities handled > by the BRAS/CMTS. As IPv4 winds down, there will be (and many will want > to prepare for it), larger portions of the network served by common > LSNs. This would utilize considerably more address space between CPE > and > LSN while at the same time serving fewer connections. > > > Jack There is no way to enforce who uses this and how. Once the /10 is allocated for this purpose, no communication with ARIN is required to start using it. In fact, an organization that does their own Internet service could turn this into a defacto RFC-1918 net by numbering all their internal nets in this space and there is no way to track it. We end up with what amounts to a private /10 that anyone can use at any time for any purpose and many will. Then you will run into exactly the same collision issues you have with RFC-1918 space with this space. Now one might argue that anyone who does that gets exactly what they were asking for if such a collision occurs but maybe that doesn't happen until years after the person that set it up has gone. So some genius sets up their network using a /8 for each of EU/AF, APAC, NA/LATAM and bingo, you have the same problem that you were trying to avoid and there is absolutely no way to enforce the proper use of such address space. Once it is allocated, anyone on the planet can use it for what amounts to any purpose they want because it is "guaranteed" to be no regionally routed and if they do their own Internet connectivity, they will never see a collision from their upstream. I am willing to bet a cheeseburger and a coke that as soon as that /10 is set aside that it will be used for unintended purposes. From jbates at brightok.net Sat Jan 22 17:55:43 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 16:55:43 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> Message-ID: <4D3B606F.7060809@brightok.net> On 1/22/2011 4:48 PM, George Bonser wrote: > I am willing to bet a cheeseburger and a coke that as soon as that /10 > is set aside that it will be used for unintended purposes. > I have no doubt, but the concern and what is trying to be avoided is collisions with RFC-1918 which has already been deployed in CPEs. A CPE vendor would be idiotic to utilize this /10 in their product. jack From gbonser at seven.com Sat Jan 22 18:00:43 2011 From: gbonser at seven.com (George Bonser) Date: Sat, 22 Jan 2011 15:00:43 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B606F.7060809@brightok.net> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> \ > > > I have no doubt, but the concern and what is trying to be avoided is > collisions with RFC-1918 which has already been deployed in CPEs. A CPE > vendor would be idiotic to utilize this /10 in their product. > > > jack I am not talking about a CPE vendor. I am talking about Joe's Fish Farm opening up a new office someplace. They note that they already use most of 10/8 in their existing infrastructure and don't have enough address space to do what they want at the new office so they number their internal office in this space. 10 years down the road, Joe's Fish Farm wants to establish a VPN with Bob's Fish Feed and low and behold, Bob's Fish Feed is using exactly the same address space internally that the Fish Farm is. That is one reason why I would favor use of the old Class E space for this. Vendors of CPE and NAT devices could hack the stack to allow this space but end user workstations would be unable to use it. From jbates at brightok.net Sat Jan 22 18:05:38 2011 From: jbates at brightok.net (Jack Bates) Date: Sat, 22 Jan 2011 17:05:38 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> Message-ID: <4D3B62C2.7080401@brightok.net> On 1/22/2011 5:00 PM, George Bonser wrote: > 10 years down the road, Joe's Fish Farm wants to establish a VPN with > Bob's Fish Feed and low and behold, Bob's Fish Feed is using exactly the > same address space internally that the Fish Farm is. > No different than if they'd used RFC-1918 and established a VPN. What we care about is Bob's Fish Feed connecting to LSN ISP who's using the /10, which would break him unless he paid for public space. > That is one reason why I would favor use of the old Class E space for > this. Vendors of CPE and NAT devices could hack the stack to allow this > space but end user workstations would be unable to use it. > I'm afraid E has been so polluted by code restraints, there is no proper recovery of it. You're asking for a support nightmare. Jack From cgrundemann at gmail.com Sat Jan 22 18:16:36 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Sat, 22 Jan 2011 16:16:36 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110123085213.6ce8ec63@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> Message-ID: On Sat, Jan 22, 2011 at 15:22, Mark Smith may have written: > more likely absolute maximum of 128K, and probably more > commonly no more than 32K. For a little insight into how much of the industry is thinking about deploying LSN/CGN, you may want to take a look at a couple of the bigger vendors current pitches (other vendors have similar stories but these where the most recent two I have read): https://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6553/brochure_c02-560497_ns1017_Networking_Solutions_Brochure.html http://www.juniper.net/us/en/local/pdf/implementation-guides/8010076-en.pdf A snippet from the Cisco site: "1+ million connections setup per second for stateful NAT44." Food for thought, ~Chris > Regards, > mark. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From ipng at 69706e6720323030352d30312d31340a.nosense.org Sat Jan 22 18:42:44 2011 From: ipng at 69706e6720323030352d30312d31340a.nosense.org (Mark Smith) Date: Sun, 23 Jan 2011 10:12:44 +1030 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <756F3B43-66D5-425B-A84F-82E81300705F@delong.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> <756F3B43-66D5-425B-A84F-82E81300705F@delong.com> Message-ID: <20110123101244.7432375c@opy.nosense.org> On Sat, 22 Jan 2011 14:44:23 -0800 Owen DeLong wrote: > >> > > > > To further expand on this, here would the scenario within an > > primarily residential ISP - > > > Take out this incorrect assumption and your entire scenario crumbles. > > So, unless you're offering funding for all of the retrofits that would be > required for carriers to redesign their networks around your model, > I think what you are proposing is a non-starter for many of the larger > networks. > I have very little sympathy for the "poor little rich kids" you're defending as they've had the time, money, resources and vendor influence to be leaders in IPv6 deployment over the last 5 or more years*. Large amounts of a public resource like global address space should not be used to cheapen the transition for those who can most afford to pay for it. That's the fundamental truth behind this proposal - it's about avoiding spending money. You confirm that by using words like "funding", "costs" and absurd suggestions that I should help them pay for it if they have to adopt a NAT444 model that is more expensive than what they'd prefer. The thing is that my model is actually better for subscribers - if address sharing is inevitable, then it seems to me that sharing addresses between the minimal number of customers is the design goal - 1 address to 2 subscribers is the ideal. If $LARGE_PROVIDERS want to put their LS NAPT devices far deeper in the network then they're going to be reducing the quality of experience their subscribers are going to have. * the proposal reads like it was written 5 years ago - "Further, many CPE router devices used to provide residential or small-medium business services have been optimized for IPv4 operation, and typically require replacement in order to fully support the transition to IPv6 (either natively or via one of many transition technologies). In addition, various consumer devices including IP-enabled televisions, gaming consoles, medical and family monitoring devices, etc. are IPv4-only, and cannot be upgraded. While these will eventually be replaced with dual-stack or IPv6 capable devices, this transition will take many years. " They've only realised that now?!!! From ipng at 69706e6720323030352d30312d31340a.nosense.org Sat Jan 22 18:55:33 2011 From: ipng at 69706e6720323030352d30312d31340a.nosense.org (Mark Smith) Date: Sun, 23 Jan 2011 10:25:33 +1030 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> Message-ID: <20110123102533.3a5f9b3a@opy.nosense.org> On Sat, 22 Jan 2011 16:16:36 -0700 Chris Grundemann wrote: > On Sat, Jan 22, 2011 at 15:22, Mark Smith may have written: > > more likely absolute maximum of 128K, and probably more > > commonly no more than 32K. > > For a little insight into how much of the industry is thinking about > deploying LSN/CGN, you may want to take a look at a couple of the > bigger vendors current pitches (other vendors have similar stories but > these where the most recent two I have read): > https://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6553/brochure_c02-560497_ns1017_Networking_Solutions_Brochure.html Well aware of that one. No use to anybody who can't afford a CRS1. Not a good place to put this function anyway, presuming you're using CRS1 as core or distribution routers - the best way to scale network functions is to perform it as close as possible to the edge. Even Cisco agree with that - remember the "no ACLs in the core, put them at the distribution or access layer" model? The only rational reason I can think of building one of those blades for a CRS1 is to prove that you can do it, and that scaling something down (i.e building a smaller one) is usually a significantly easier task than scaling something up. I've been expecting either the code or the hardware to be released for lower end platforms such as the ASRs. It hasn't happened yet, as far as I can tell, based on the recent release manuals. Renaming traditional NAPT functionality "carrier grade" doesn't make it so - mechanisms such as recording who was using what address and port range at a particular time for law enforcement purposes are what makes a NAPT solution "carrier grade". > http://www.juniper.net/us/en/local/pdf/implementation-guides/8010076-en.pdf > > A snippet from the Cisco site: "1+ million connections setup per > second for stateful NAT44." > > Food for thought, > ~Chris > > > > Regards, > > mark. > > _______________________________________________ > > PPML > > You are receiving this message because you are subscribed to > > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > > Unsubscribe or manage your mailing list subscription at: > > http://lists.arin.net/mailman/listinfo/arin-ppml > > Please contact info at arin.net if you experience any issues. > > > > -- > @ChrisGrundemann > weblog.chrisgrundemann.com > www.burningwiththebush.com > www.theIPv6experts.net > www.coisoc.org From gbonser at seven.com Sat Jan 22 19:12:19 2011 From: gbonser at seven.com (George Bonser) Date: Sat, 22 Jan 2011 16:12:19 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13559@RWC-EX1.corp.seven.com> > > A snippet from the Cisco site: "1+ million connections setup per > second for stateful NAT44." > > Food for thought, > ~Chris > > A10 has some CGN gear as well (the AX series) From gbonser at seven.com Sat Jan 22 19:26:56 2011 From: gbonser at seven.com (George Bonser) Date: Sat, 22 Jan 2011 16:26:56 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3B62C2.7080401@brightok.net> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> <4D3B62C2.7080401@brightok.net> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> > I'm afraid E has been so polluted by code restraints, there is no > proper > recovery of it. You're asking for a support nightmare. > > Jack I don't believe so. So lets say Vendor C produces both a line of NAT devices and a line of CPE that supports the use of E space. Now lets say other vendors in their newer gear (and software updates for their older gear) also support E space. Now you won't necessarily be able to renumber people out of their current global space in all cases. But you can keep the problem from getting worse by specifying the CPE for NEW connections that does support it. Anyone attempting to use such space internally will find that their workstations and servers won't work with it. What is going to happen with this scheme is everyone and their brother are going to end up using this middle-4 /10 net for all sorts of purposes. To the extent that you can say you have no sympathy for people who do that and eventually run into trouble, you can also say you have no sympathy for people who have gone this long with v4 only stuff in their network. Mark my words, it will become defacto 1918 space within weeks after this being accepted and people are going to start running into those addresses in all sorts of places they aren't supposed to. It is going to take an imaginative network engineer no more than about 15 minutes to realize they can reclaim all of their space they are currently using for /30 or /31 WAN links even where they aren't doing NAT at all and replace it with this address space. From cgrundemann at gmail.com Sat Jan 22 19:32:14 2011 From: cgrundemann at gmail.com (Chris Grundemann) Date: Sat, 22 Jan 2011 17:32:14 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13559@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> <5A6D953473350C4B9995546AFE9939EE0BC13559@RWC-EX1.corp.seven.com> Message-ID: On Sat, Jan 22, 2011 at 17:12, George Bonser wrote: >> >> A snippet from the Cisco site: "1+ million connections setup per >> second for stateful NAT44." >> >> Food for thought, >> ~Chris >> >> > > A10 has some CGN gear as well (the AX series) Yep, and the A-Lu 7750 SR as well, speaking of which they have a decent paper on this topic too, although it is a couple years old now: http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Docs_and_Resource_Ctr&LMSG_CONTENT_FILE=Application_Notes/IPv6_migration_AN.pdf&lu_lang_code=en_WW One tasty tid-bit considering the topic at hand: "The biggest challenge with LSN is managing the address space between the customer gateway and LSN, as well as ensuring consistent Internet application behavior. There is a stated desire from service providers to support existing IPv4 customer gateways, and because of restrictions imposed by these legacy devices address space that does not overlap or collide with the carrier must be found." I assume most other players in this space have gear as well, or have it in the works. ~Chris > > -- @ChrisGrundemann weblog.chrisgrundemann.com www.burningwiththebush.com www.theIPv6experts.net www.coisoc.org From gbonser at seven.com Sat Jan 22 21:33:19 2011 From: gbonser at seven.com (George Bonser) Date: Sat, 22 Jan 2011 18:33:19 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org><4D3B5AD2.2030709@brightok.net><5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com><4D3B606F.7060809@brightok.net><5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com><4D3B62C2.7080401@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13566@RWC-EX1.corp.seven.com> > It is going to take an imaginative network engineer no more than about > 15 minutes to realize they can reclaim all of their space they are > currently using for /30 or /31 WAN links even where they aren't doing > NAT at all and replace it with this address space. And in that spirit, let's just call it what it is: Provider Private Address Space that they can use for whatever they want. In fact, for numbering local WAN connections inside a provider's space, this could free up a very large amount of IP space in some providers. In other words, just let them use it for whatever they want to use it for with the following conditions: 1. An end user network should never use that space 2. It should never be used for links between providers. 3. It should never be used for links directly between end systems. The problem with doing this is: Providing a /10 and specifying a purpose for it globally is outside the jurisdiction of ARIN. Once the space is allocated, it is going to be used globally, even outside of ARIN's jurisdiction. ARIN has no control over the use of that space outside of ARIN's jurisdiction. Creating an address space for global use is probably the bailiwick of the IETF. Using it for NAT is probably not a good enough justification for creating it but using it to free up large amounts of address space used currently for general WAN links in addition to the NAT application might be enough. What is being proposed here is not really NAT444 middle 4 address space, it is general "provider private IP space" that could be (and likely will be) pressed into service in any number of ways. From frnkblk at iname.com Sat Jan 22 23:48:05 2011 From: frnkblk at iname.com (Frank Bulk) Date: Sat, 22 Jan 2011 22:48:05 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110123101244.7432375c@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> <756F3B43-66D5-425B-A84F-82E81300705F@delong.com> <20110123101244.7432375c@opy.nosense.org> Message-ID: <000201cbbab8$b9562350$2c0269f0$@iname.com> The eyeball networks have no direct control over CPE router/device, especially the gaming consoles, OTT video boxes, Wi-Fi phones, etc. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Mark Smith Sent: Saturday, January 22, 2011 5:43 PM To: Owen DeLong Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension * the proposal reads like it was written 5 years ago - "Further, many CPE router devices used to provide residential or small-medium business services have been optimized for IPv4 operation, and typically require replacement in order to fully support the transition to IPv6 (either natively or via one of many transition technologies). In addition, various consumer devices including IP-enabled televisions, gaming consoles, medical and family monitoring devices, etc. are IPv4-only, and cannot be upgraded. While these will eventually be replaced with dual-stack or IPv6 capable devices, this transition will take many years. " They've only realised that now?!!! _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From frnkblk at iname.com Sat Jan 22 23:53:02 2011 From: frnkblk at iname.com (Frank Bulk) Date: Sat, 22 Jan 2011 22:53:02 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> <4D3B62C2.7080401@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> Message-ID: <000301cbbab9$6a4d7b90$3ee872b0$@iname.com> While new CPE gear could designed to support E space, what about all the network devices between the CPE and the LSN? On top of the CGN hardware, network redesign, and extra support costs, service providers aren't looking to force customers to use newer CPE gear. Plus who says they can get the CPE vendors to even go along with this E space change? Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of George Bonser Sent: Saturday, January 22, 2011 6:27 PM To: Jack Bates Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension > I'm afraid E has been so polluted by code restraints, there is no > proper > recovery of it. You're asking for a support nightmare. > > Jack I don't believe so. So lets say Vendor C produces both a line of NAT devices and a line of CPE that supports the use of E space. Now lets say other vendors in their newer gear (and software updates for their older gear) also support E space. Now you won't necessarily be able to renumber people out of their current global space in all cases. But you can keep the problem from getting worse by specifying the CPE for NEW connections that does support it. Anyone attempting to use such space internally will find that their workstations and servers won't work with it. From frnkblk at iname.com Sat Jan 22 23:57:39 2011 From: frnkblk at iname.com (Frank Bulk) Date: Sat, 22 Jan 2011 22:57:39 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension Message-ID: <000401cbbaba$0f9a6090$2ecf21b0$@iname.com> As I mentioned before, ARIN cannot specific global IP address policy and can only be responsible for its own. But who cares if other organizations in other RIRs use it? If it's a problem, the other RIRs can deal with it in the same way if someone misuses ARIN space in their own region today. And who cares if other organizations use it for purposes other than NAT444? Neither IANA nor the RIRs are going to send out their IP police to specify use, just like they haven't gone after those manufacturers and hospitality that use 1.1.1.1. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of George Bonser Sent: Saturday, January 22, 2011 8:33 PM To: George Bonser; Jack Bates Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4Address Extension > It is going to take an imaginative network engineer no more than about > 15 minutes to realize they can reclaim all of their space they are > currently using for /30 or /31 WAN links even where they aren't doing > NAT at all and replace it with this address space. And in that spirit, let's just call it what it is: Provider Private Address Space that they can use for whatever they want. In fact, for numbering local WAN connections inside a provider's space, this could free up a very large amount of IP space in some providers. In other words, just let them use it for whatever they want to use it for with the following conditions: 1. An end user network should never use that space 2. It should never be used for links between providers. 3. It should never be used for links directly between end systems. The problem with doing this is: Providing a /10 and specifying a purpose for it globally is outside the jurisdiction of ARIN. Once the space is allocated, it is going to be used globally, even outside of ARIN's jurisdiction. ARIN has no control over the use of that space outside of ARIN's jurisdiction. Creating an address space for global use is probably the bailiwick of the IETF. Using it for NAT is probably not a good enough justification for creating it but using it to free up large amounts of address space used currently for general WAN links in addition to the NAT application might be enough. What is being proposed here is not really NAT444 middle 4 address space, it is general "provider private IP space" that could be (and likely will be) pressed into service in any number of ways. _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From owen at delong.com Sun Jan 23 00:03:32 2011 From: owen at delong.com (Owen DeLong) Date: Sat, 22 Jan 2011 21:03:32 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> <4D3B62C2.7080401@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> Message-ID: <35B5C8DF-97BF-4EFD-BFFA-8FA04CCB34FF@delong.com> > > Mark my words, it will become defacto 1918 space within weeks after this > being accepted and people are going to start running into those > addresses in all sorts of places they aren't supposed to. > So what... The people who misuse it in this way are hurting only themselves. Owen From gbonser at seven.com Sun Jan 23 00:19:04 2011 From: gbonser at seven.com (George Bonser) Date: Sat, 22 Jan 2011 21:19:04 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <35B5C8DF-97BF-4EFD-BFFA-8FA04CCB34FF@delong.com> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> <4D3B62C2.7080401@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> <35B5C8DF-97BF-4EFD-BFFA-8FA04CCB34FF@delong.com> Message-ID: <5A6D953473350C4B9995546AFE9939EE0BC13567@RWC-EX1.corp.seven.com> > -----Original Message----- > From: Owen DeLong [mailto:owen at delong.com] > Sent: Saturday, January 22, 2011 9:04 PM > To: George Bonser > Cc: Jack Bates; arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > > > > Mark my words, it will become defacto 1918 space within weeks after > this > > being accepted and people are going to start running into those > > addresses in all sorts of places they aren't supposed to. > > > So what... The people who misuse it in this way are hurting only > themselves. > > Owen Exactly what lead me to the conclusion that it wasn't purpose on this Earth to protect people from themselves but this was overall not good policy. Why should the network come out of ARIN's hide? If APNIC and IETF won't support it, why should ARIN? Anyway, I'm pretty much done with the subject and raised all the concerns I have. Neutral on the proposal. Neither for nor against. From joelja at bogus.com Sun Jan 23 12:51:37 2011 From: joelja at bogus.com (Joel Jaeggli) Date: Sun, 23 Jan 2011 09:51:37 -0800 Subject: [arin-ppml] ARIN-prop-129: IPv4 Addresses for Process Participants In-Reply-To: <4D39EB5F.2070600@arin.net> References: <4D39EB5F.2070600@arin.net> Message-ID: <4D3C6AA9.6070702@bogus.com> Oppose joel jaeggli On 1/21/11 12:23 PM, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-129: IPv4 Addresses for Process Participants > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of that last IPv4 /8 from IANA, ARIN shall distribute > one quarter (a single /10) of the space immediately to "active > participants" in the ARIN policy development process. > > An "active participant" for this purpose is defined as an individual > who expresses support for OR objection to this proposal. > > Each "active participant" shall receive a single block of the same > size, the size chosen so as to maximally use the /10 allocated for this > purpose, but in no case shall the block be smaller than /24. No more > than one such block shall be distributed per organization if a single > organization has more than one "active participant". > > In the case where the number of "active participants" exceeds the > number of minimum-sized (/24) blocks available, priority shall be given > to those who responded first. > > Rationale: > > In order to accelerate IPv6 deployment, it is critical that IPv4 > space be consumed as rapidly as possible. > > Several possible approaches exist. One would be to distribute the > final space proportionately to existing assignment size. Another might > be to randomly assign the remaining space. Yet another might be to award > the space based on merit, after reviewing possible uses for the final > IPv4 space. > > This proposal instead simply consumes some of the remaining space by > directly rewarding the participants in the policy development process > for their participation. > > Timetable for implementation: Immediate > > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From joelja at bogus.com Sun Jan 23 12:52:05 2011 From: joelja at bogus.com (Joel Jaeggli) Date: Sun, 23 Jan 2011 09:52:05 -0800 Subject: [arin-ppml] ARIN-prop-130: IPv4 Transition Reservation for Every ASN In-Reply-To: <4D39EB6F.3040802@arin.net> References: <4D39EB6F.3040802@arin.net> Message-ID: <4D3C6AC5.4090107@bogus.com> Oppose Joel Jaeggli On 1/21/11 12:24 PM, ARIN wrote: > ARIN received the following policy proposal and is posting it to the > Public Policy Mailing List (PPML) in accordance with the Policy > Development Process. > > The ARIN Advisory Council (AC) will review the proposal at their next > regularly scheduled meeting (if the period before the next regularly > scheduled meeting is less than 10 days, then the period may be extended > to the subsequent regularly scheduled meeting). The AC will decide how > to utilize the proposal and announce the decision to the PPML. > > The AC invites everyone to comment on the proposal on the PPML, > particularly their support or non-support and the reasoning > behind their opinion. Such participation contributes to a thorough > vetting and provides important guidance to the AC in their deliberations. > > Draft Policies and Proposals under discussion can be found at: > https://www.arin.net/policy/proposals/index.html > > The ARIN Policy Development Process can be found at: > https://www.arin.net/policy/pdp.html > > Mailing list subscription information can be found > at: https://www.arin.net/mailing_lists/ > > Regards, > > Communications and Member Services > American Registry for Internet Numbers (ARIN) > > > ## * ## > > > ARIN-prop-130: IPv4 Transition Reservation for Every ASN > > Proposal Originator: Matthew Kaufman > > Proposal Version: 1 > > Date: 21 January 2011 > > Proposal type: New > > Policy term: Permanent > > Policy statement: > > Upon receipt of the last IPv4 /8 from IANA, ARIN shall reserve one > /24 of IPv4 space from that block for every ARIN-registered AS number, > including assigned legacy AS numbers in the ARIN region. Organizations > may apply to receive the space that has been reserved under the existing > address space justification policy. > > Rationale: > > IPv4 space is running out. Most organizations will find that their > IPv4 to IPv6 transition plans require a small amount of additional IPv4 > space, but given the current pace of IPv6 deployment and transition it > is highly likely that most organizations will discover this fact AFTER > no additional IPv4 space is available, including space that has been set > aside in a transition technology pool. > > This policy ensures that every organization that previously qualified > due to unique routing policy and/or multihoming will be able to request > and receive a small amount of transition space at any time after runout. > > This policy also has the beneficial side effect of accelerating > general IPv4 runout, which will encourage IPv6 deployment. > > These reservations will consume less than 1/3rd of the final /8. > > > Timetable for implementation: Immediate > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From frnkblk at iname.com Sun Jan 23 13:01:39 2011 From: frnkblk at iname.com (Frank Bulk) Date: Sun, 23 Jan 2011 12:01:39 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <5A6D953473350C4B9995546AFE9939EE0BC13567@RWC-EX1.corp.seven.com> References: <4D386249.5000801@arin.net><20110121074020.1bb2ff72@opy.nosense.org><20110121200112.3d9917b3@opy.nosense.org><0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com><4D3998E8.1090306@brightok.net><878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com><4D39DF37.3020109@brightok.net><20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> <4D3B62C2.7080401@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> <35B5C8DF-97BF-4EFD-BFFA-8FA04CCB34FF@delong.com> <5A6D953473350C4B9995546AFE9939EE0BC13567@RWC-EX1.corp.seven.com> Message-ID: <000a01cbbb27$95c00860$c1401920$@iname.com> So that operators in ARIN's region have a reasonable path to NAT444. No one likes NAT444 and we acknowledge that this designated space could be used for purposes other than what the reasons that led to this policy proposal, even if the policy proposal specified otherwise. But as Owen said, the operator would be shooting themselves in the foot. By the time they use this space for *something else* and then wanted to do NAT444, they would not be able to justify a request for IPv4 space for NAT444. Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of George Bonser Sent: Saturday, January 22, 2011 11:19 PM To: Owen DeLong Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension Why should the network come out of ARIN's hide? If APNIC and IETF won't support it, why should ARIN? From ipng at 69706e6720323030352d30312d31340a.nosense.org Sun Jan 23 16:10:19 2011 From: ipng at 69706e6720323030352d30312d31340a.nosense.org (Mark Smith) Date: Mon, 24 Jan 2011 07:40:19 +1030 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <000a01cbbb27$95c00860$c1401920$@iname.com> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> <4D3B62C2.7080401@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> <35B5C8DF-97BF-4EFD-BFFA-8FA04CCB34FF@delong.com> <5A6D953473350C4B9995546AFE9939EE0BC13567@RWC-EX1.corp.seven.com> <000a01cbbb27$95c00860$c1401920$@iname.com> Message-ID: <20110124074019.73abd9b3@opy.nosense.org> On Sun, 23 Jan 2011 12:01:39 -0600 "Frank Bulk" wrote: > So that operators in ARIN's region have a reasonable path to NAT444. No one > likes NAT444 and we acknowledge that this designated space could be used for > purposes other than what the reasons that led to this policy proposal, even > if the policy proposal specified otherwise. But as Owen said, the operator > would be shooting themselves in the foot. By the time they use this space > for *something else* and then wanted to do NAT444, they would not be able to > justify a request for IPv4 space for NAT444. > There's been plenty of foot shooting in the past with private and non-allocated address space. Why is this time going to be any different? Giving away more address space with RFC1918's properties will only provide a level of legitimacy to further foot shooting - people will ignore what this space is specifically for because by its nature it can't be policed - I'm guessing the Hamachi people will start using it straight away since they "lost" 5/8. If this /10 never exists, then whenever people try to shoot themselves in the foot they'll unavoidably know they're about to do it. Of course you can't prevent stupidity, but you can make it more obvious that it is occurring. > Frank > > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of George Bonser > Sent: Saturday, January 22, 2011 11:19 PM > To: Owen DeLong > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 > Address Extension > > > > Why should the network come out of ARIN's hide? If APNIC and > IETF won't support it, why should ARIN? > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Sun Jan 23 17:10:18 2011 From: owen at delong.com (Owen DeLong) Date: Sun, 23 Jan 2011 14:10:18 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20110124074019.73abd9b3@opy.nosense.org> References: <4D386249.5000801@arin.net> <20110121074020.1bb2ff72@opy.nosense.org> <20110121200112.3d9917b3@opy.nosense.org> <0F609A0C-415D-4470-AA0F-13C009DA2435@delong.com> <4D3998E8.1090306@brightok.net> <878C6C92-3B07-4E2A-A338-2CB5113B0252@delong.com> <4D39DF37.3020109@brightok.net> <20110123085213.6ce8ec63@opy.nosense.org> <4D3B5AD2.2030709@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13557@RWC-EX1.corp.seven.com> <4D3B606F.7060809@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC13558@RWC-EX1.corp.seven.com> <4D3B62C2.7080401@brightok.net> <5A6D953473350C4B9995546AFE9939EE0BC1355A@RWC-EX1.corp.seven.com> <35B5C8DF-97BF-4EFD-BFFA-8FA04CCB34FF@delong.com> <5A6D953473350C4B9995546AFE9939EE0BC13567@RWC-EX1.corp.seven.com> <000a01cbbb27$95c00860$c1401920$@iname.com> <20110124074019.73abd9b3@opy.nosense.org> Message-ID: <2A43A3B8-C055-43EA-B134-B5EEE56D05A1@delong.com> On Jan 23, 2011, at 1:10 PM, Mark Smith wrote: > On Sun, 23 Jan 2011 12:01:39 -0600 > "Frank Bulk" wrote: > >> So that operators in ARIN's region have a reasonable path to NAT444. No one >> likes NAT444 and we acknowledge that this designated space could be used for >> purposes other than what the reasons that led to this policy proposal, even >> if the policy proposal specified otherwise. But as Owen said, the operator >> would be shooting themselves in the foot. By the time they use this space >> for *something else* and then wanted to do NAT444, they would not be able to >> justify a request for IPv4 space for NAT444. >> > > There's been plenty of foot shooting in the past with private and > non-allocated address space. Why is this time going to be any > different? Giving away more address space with RFC1918's properties > will only provide a level of legitimacy to further foot shooting - The question is who is doing the shooting and whose foot is being shot. In this case, you've got a situation where the IETF and the end users have managed to shoot the ability to deploy NAT444 in the foot. If we set aside this /10, that restores the ability for the ISPs to deploy NAT444 (bullet removal). Now, if an end-user proceeds to use this space, then they have shot off their own foot and I doubt anyone will have much sympathy for them. In other words, they can only harm themselves, not their ISP, not the rest of the community, so, who cares? > people will ignore what this space is specifically for because by its > nature it can't be policed - I'm guessing the Hamachi people > will start using it straight away since they "lost" 5/8. If this /10 > never exists, then whenever people try to shoot themselves in the foot > they'll unavoidably know they're about to do it. Of course you can't > prevent stupidity, but you can make it more obvious that it is > occurring. > This isn't about people who shot themselves in the foot. This is about people who are loosing feet from shots fired by other people. Owen >> Frank >> >> -----Original Message----- >> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >> Behalf Of George Bonser >> Sent: Saturday, January 22, 2011 11:19 PM >> To: Owen DeLong >> Cc: arin-ppml at arin.net >> Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 >> Address Extension >> >> >> >> Why should the network come out of ARIN's hide? If APNIC and >> IETF won't support it, why should ARIN? >> >> >> >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. From charityg at diplomacy.edu Sun Jan 23 22:38:33 2011 From: charityg at diplomacy.edu (Charity Gamboa) Date: Sun, 23 Jan 2011 21:38:33 -0600 Subject: [arin-ppml] Invitation to the 2011 Philippine IPv6 Conference and Trainings Message-ID: Dear all, Hope everyone is having or had a great weekend. I would like to invite those interested to listen to the live broadcast of the 2011 Philippine IPv6 Conference and Trainings to be held starting January 24th to the 27th (which is going on right now at Makati Shangri-la Hotel Manila). Time difference for instance is: *09:30:00 p.m. Sunday January 23, 2011* in *US/Central * is *11:30:00 a.m. Monday January 24, 2011* in *Asia/Manila * Organizers of this event are ISOC PH chapter, Internet Society, APNIC and ASTI (Advanced Science and Technology Institute of the Philippine Department of Science & Technology). The broadcast link is below: http://www.pregi.net/broadcaster/ The event programme can also be found below: http://ipv6.isoc.ph/programme Thank you! Regards, Charity Gamboa-Embley -- -------------- next part -------------- An HTML attachment was scrubbed... URL: From joelja at bogus.com Sun Jan 23 23:34:51 2011 From: joelja at bogus.com (Joel Jaeggli) Date: Sun, 23 Jan 2011 20:34:51 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension Message-ID: Consider whose foot is beeing shot when you take some previously globaly scoped ipv4 space give it a private scope and don't give the host stacks time to figure it out. I'm of the opinion that this was a bad idea at the IETF and it's a bad idea here to. I made a suggestion as to how a opertor consortia or even an individual entity could cough up the space necessary to make it work and I'm convinced that if the need for it were that dire we'd see a proposal altering the transfer rules such that a new entity could be created without penalty, rather asking for an assignment by fiat that ultimately is simply another private use prefix that happens to confuse nat traveral hacks until hosts catch up with it. Owen DeLong wrote: > >On Jan 23, 2011, at 1:10 PM, Mark Smith wrote: > >> On Sun, 23 Jan 2011 12:01:39 -0600 >> "Frank Bulk" wrote: >> >>> So that operators in ARIN's region have a reasonable path to NAT444. No one >>> likes NAT444 and we acknowledge that this designated space could be used for >>> purposes other than what the reasons that led to this policy proposal, even >>> if the policy proposal specified otherwise. But as Owen said, the operator >>> would be shooting themselves in the foot. By the time they use this space >>> for *something else* and then wanted to do NAT444, they would not be able to >>> justify a request for IPv4 space for NAT444. >>> >> >> There's been plenty of foot shooting in the past with private and >> non-allocated address space. Why is this time going to be any >> different? Giving away more address space with RFC1918's properties >> will only provide a level of legitimacy to further foot shooting - > >The question is who is doing the shooting and whose foot is being shot. > >In this case, you've got a situation where the IETF and the end users >have managed to shoot the ability to deploy NAT444 in the foot. > >If we set aside this /10, that restores the ability for the ISPs to deploy >NAT444 (bullet removal). Now, if an end-user proceeds to use this >space, then they have shot off their own foot and I doubt anyone will >have much sympathy for them. In other words, they can only harm >themselves, not their ISP, not the rest of the community, so, who cares? > >> people will ignore what this space is specifically for because by its >> nature it can't be policed - I'm guessing the Hamachi people >> will start using it straight away since they "lost" 5/8. If this /10 >> never exists, then whenever people try to shoot themselves in the foot >> they'll unavoidably know they're about to do it. Of course you can't >> prevent stupidity, but you can make it more obvious that it is >> occurring. >> >This isn't about people who shot themselves in the foot. This is about >people who are loosing feet from shots fired by other people. > >Owen > >>> Frank >>> >>> -----Original Message----- >>> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >>> Behalf Of George Bonser >>> Sent: Saturday, January 22, 2011 11:19 PM >>> To: Owen DeLong >>> Cc: arin-ppml at arin.net >>> Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 >>> Address Extension >>> >>> >>> >>> Why should the network come out of ARIN's hide? If APNIC and >>> IETF won't support it, why should ARIN? >>> >>> >>> >>> _______________________________________________ >>> PPML >>> You are receiving this message because you are subscribed to >>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >>> Unsubscribe or manage your mailing list subscription at: >>> http://lists.arin.net/mailman/listinfo/arin-ppml >>> Please contact info at arin.net if you experience any issues. > >_______________________________________________ >PPML >You are receiving this message because you are subscribed to >the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >Unsubscribe or manage your mailing list subscription at: >http://lists.arin.net/mailman/listinfo/arin-ppml >Please contact info at arin.net if you experience any issues. > From bill at herrin.us Sun Jan 23 23:38:11 2011 From: bill at herrin.us (William Herrin) Date: Sun, 23 Jan 2011 23:38:11 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? Message-ID: On Sat, Jan 22, 2011 at 3:02 PM, Owen DeLong wrote: >I support the idea of amending the proposal to prohibit ARIN >from granting requests for other space for this aspect of LSN >implementation. Hi Owen, This raises a question that I find interesting. ARIN still allows IPv4 address assignments for individual registrant networks which are not routed on the public Internet. The registrant has to supply some kind of vaguely defined technical justification for it and I gather that's not easy but it remains possible. Is it time to bring that era to a close? Grandfather in the folks who've justified non-connected assignments in the past but make no new ones regardless of justification? Let me reverse the question: in light of the situation on the ground today, is there anything you would view as a reasonable justification for an IPv4 allocation or assignment to a single entity which will not be routed on the public Internet? What? Regards, Bill Herrin > >> >> This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. >> > I'm not sure that dwindling addresses for CPs is a bad thing. The needs of CPs should dwindle as end users gain more access to IPv6. > CPs, as you have pointed out, could be the hardest group to motivate to IPv6. > > Owen > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From frnkblk at iname.com Sun Jan 23 23:51:01 2011 From: frnkblk at iname.com (Frank Bulk) Date: Sun, 23 Jan 2011 22:51:01 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: Message-ID: <001d01cbbb82$4d009ee0$e701dca0$@iname.com> Bill: I'm not sure I follow you here. Can you explain why you are exploring the ending of assigning non-public IPv4 assignments? Is it to force eyeball network operators to scrape out address space from somewhere else in order to implement NAT444? Frank -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of William Herrin Sent: Sunday, January 23, 2011 10:38 PM To: Owen DeLong Cc: arin-ppml at arin.net Subject: [arin-ppml] End non-public IPv4 assignments? On Sat, Jan 22, 2011 at 3:02 PM, Owen DeLong wrote: >I support the idea of amending the proposal to prohibit ARIN >from granting requests for other space for this aspect of LSN >implementation. Hi Owen, This raises a question that I find interesting. ARIN still allows IPv4 address assignments for individual registrant networks which are not routed on the public Internet. The registrant has to supply some kind of vaguely defined technical justification for it and I gather that's not easy but it remains possible. Is it time to bring that era to a close? Grandfather in the folks who've justified non-connected assignments in the past but make no new ones regardless of justification? Let me reverse the question: in light of the situation on the ground today, is there anything you would view as a reasonable justification for an IPv4 allocation or assignment to a single entity which will not be routed on the public Internet? What? Regards, Bill Herrin > >> >> This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. >> > I'm not sure that dwindling addresses for CPs is a bad thing. The needs of CPs should dwindle as end users gain more access to IPv6. > CPs, as you have pointed out, could be the hardest group to motivate to IPv6. > > Owen > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From marka at isc.org Mon Jan 24 00:03:34 2011 From: marka at isc.org (Mark Andrews) Date: Mon, 24 Jan 2011 16:03:34 +1100 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: Your message of "Sun, 23 Jan 2011 23:38:11 CDT." References: Message-ID: <20110124050334.AA5CC91CE48@drugs.dv.isc.org> In message , Will iam Herrin writes: > On Sat, Jan 22, 2011 at 3:02 PM, Owen DeLong wrote: > >I support the idea of amending the proposal to prohibit ARIN > >from granting requests for other space for this aspect of LSN > >implementation. > > Hi Owen, > > This raises a question that I find interesting. ARIN still allows IPv4 > address assignments for individual registrant networks which are not > routed on the public Internet. The registrant has to supply some kind > of vaguely defined technical justification for it and I gather that's > not easy but it remains possible. Is it time to bring that era to a > close? Grandfather in the folks who've justified non-connected > assignments in the past but make no new ones regardless of > justification? No. As IPv6 takes off there will be less and less need for most of us to have IPv4 addresses at all. Eventually lots of IPv4 assignments should be returned. Who of us worries about our email domain having a A or AAAA record anymore? There was a time when you would have both a A and MX record at the domain. These days just a MX will do. Similarly the need for IPv4 addreses will go away. IPv4 addresses will be used by private networks. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org From mysidia at gmail.com Mon Jan 24 00:04:56 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Sun, 23 Jan 2011 23:04:56 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: Message-ID: On Sun, Jan 23, 2011 at 10:38 PM, William Herrin wrote: > On Sat, Jan 22, 2011 at 3:02 PM, Owen DeLong wrote: > Let me reverse the question: in light of the situation on the ground > today, is there anything you would view as a reasonable justification > for an IPv4 allocation or assignment to a single entity which will not > be routed on the public Internet? What? There is only one category of global addressing I can think of that would be reasonable for ARIN to allocate for today... very small amounts of address space for use at an IX, but not globally reachable by design. > Regards, > Bill Herrin -- -JH From bill at herrin.us Mon Jan 24 00:20:57 2011 From: bill at herrin.us (William Herrin) Date: Mon, 24 Jan 2011 00:20:57 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <001d01cbbb82$4d009ee0$e701dca0$@iname.com> References: <001d01cbbb82$4d009ee0$e701dca0$@iname.com> Message-ID: On Mon, Jan 24, 2011 at 12:04 AM, Jimmy Hess wrote: > On Sun, Jan 23, 2011 at 10:38 PM, William Herrin wrote: >> Let me reverse the question: in light of the situation on the ground >> today, is there anything you would view as a reasonable justification >> for an IPv4 allocation or assignment to a single entity which will not >> be routed on the public Internet? What? > > There is only one category of global addressing I can think of that > would be reasonable for ARIN to allocate for today... very small > amounts of address space for use at an IX, but not globally reachable > by design. Hi Jimmy, I would think that IX addresses are used on the public Internet, just not globally. They're reachable by everybody who peers at that IX and all of those folks' customers. I'm more thinking about uses that don't appear on the public Internet at all or are reachable only from inside one public AS. For example, if DoD wanted addresses for the SIPRnet today, would it still be appropriate for ARIN to allocate them? The SIPRnet is a classified TCP/IP network which is not permitted to swap packets with the public Internet. On Sun, Jan 23, 2011 at 11:51 PM, Frank Bulk wrote: > I'm not sure I follow you here. ?Can you explain why you are exploring the > ending of assigning non-public IPv4 assignments? Hi Frank, Pure curiousity. I want to know if there are any reasons for the practice that are still good enough in light of the address shortage. Whether the answer suggests any policy changes I leave to someone else. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From rmoore at infiniteblue.net Mon Jan 24 02:25:21 2011 From: rmoore at infiniteblue.net (Rodgers Moore) Date: Mon, 24 Jan 2011 02:25:21 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: Message-ID: <1B28B82C24A428458AB09A86467EF106E0618EBD2A@ex01.vbscloud.net> The only case I can think of is NNI scenarios. I must use public space for my MPLS NNI's because we connect to multiple carriers. I use part of my internal allocation for infrastructure. It seems reasonable that a large provider might need to request space just for this purpose and it might be a different business unit than that running the Internet side of things. Another thought just hit me. How does Internet2 handle IP allocations? They aren't running off of ARIN space are they? If so, then that would be another case. Rodgers Moore, CCIE# 8153 -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of William Herrin Sent: Sunday, January 23, 2011 11:38 PM To: Owen DeLong Cc: arin-ppml at arin.net Subject: [arin-ppml] End non-public IPv4 assignments? On Sat, Jan 22, 2011 at 3:02 PM, Owen DeLong wrote: >I support the idea of amending the proposal to prohibit ARIN >from granting requests for other space for this aspect of LSN >implementation. Hi Owen, This raises a question that I find interesting. ARIN still allows IPv4 address assignments for individual registrant networks which are not routed on the public Internet. The registrant has to supply some kind of vaguely defined technical justification for it and I gather that's not easy but it remains possible. Is it time to bring that era to a close? Grandfather in the folks who've justified non-connected assignments in the past but make no new ones regardless of justification? Let me reverse the question: in light of the situation on the ground today, is there anything you would view as a reasonable justification for an IPv4 allocation or assignment to a single entity which will not be routed on the public Internet? What? Regards, Bill Herrin > >> >> This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. >> > I'm not sure that dwindling addresses for CPs is a bad thing. The needs of CPs should dwindle as end users gain more access to IPv6. > CPs, as you have pointed out, could be the hardest group to motivate to IPv6. > > Owen > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From JOHN at egh.com Mon Jan 24 03:15:40 2011 From: JOHN at egh.com (John Santos) Date: Mon, 24 Jan 2011 03:15:40 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: Message-ID: <1110124031108.13513A-100000@Ives.egh.com> On Sun, 23 Jan 2011, William Herrin wrote: > On Sat, Jan 22, 2011 at 3:02 PM, Owen DeLong wrote: > >I support the idea of amending the proposal to prohibit ARIN > >from granting requests for other space for this aspect of LSN > >implementation. > > Hi Owen, > > This raises a question that I find interesting. ARIN still allows IPv4 > address assignments for individual registrant networks which are not > routed on the public Internet. The registrant has to supply some kind > of vaguely defined technical justification for it and I gather that's > not easy but it remains possible. Is it time to bring that era to a > close? Grandfather in the folks who've justified non-connected > assignments in the past but make no new ones regardless of > justification? > > Let me reverse the question: in light of the situation on the ground > today, is there anything you would view as a reasonable justification > for an IPv4 allocation or assignment to a single entity which will not > be routed on the public Internet? What? Why should private networks that have to interoperate with other private networks have any less right to unique addresses than any other networks? > > Regards, > Bill Herrin > > > > > >> > >> This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. > >> > > I'm not sure that dwindling addresses for CPs is a bad thing. The needs of CPs should dwindle as end users gain more access to IPv6. > > CPs, as you have pointed out, could be the hardest group to motivate to IPv6. > > > > Owen > > > > _______________________________________________ > > PPML > > You are receiving this message because you are subscribed to > > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > > Unsubscribe or manage your mailing list subscription at: > > http://lists.arin.net/mailman/listinfo/arin-ppml > > Please contact info at arin.net if you experience any issues. > > > > > > -- > William D. Herrin ................ herrin at dirtside.com? bill at herrin.us > 3005 Crane Dr. ...................... Web: > Falls Church, VA 22042-3004 > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > > -- John Santos Evans Griffiths & Hart, Inc. 781-861-0670 ext 539 From owen at delong.com Mon Jan 24 04:03:44 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 24 Jan 2011 01:03:44 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: Message-ID: <5BEBA808-9C9C-4B34-A76F-D0EB2AA83FDE@delong.com> On Jan 23, 2011, at 8:38 PM, William Herrin wrote: > On Sat, Jan 22, 2011 at 3:02 PM, Owen DeLong wrote: >> I support the idea of amending the proposal to prohibit ARIN >> from granting requests for other space for this aspect of LSN >> implementation. > > Hi Owen, > > This raises a question that I find interesting. ARIN still allows IPv4 > address assignments for individual registrant networks which are not > routed on the public Internet. The registrant has to supply some kind > of vaguely defined technical justification for it and I gather that's > not easy but it remains possible. Is it time to bring that era to a > close? Grandfather in the folks who've justified non-connected > assignments in the past but make no new ones regardless of > justification? > I don't believe so, but, if you do, feel free to submit a policy proposal. It's one I think worthy of community discussion even though I would not support it. > Let me reverse the question: in light of the situation on the ground > today, is there anything you would view as a reasonable justification > for an IPv4 allocation or assignment to a single entity which will not > be routed on the public Internet? What? > Yes... Several situations I can think of. I won't go into specifics in public, but, if you want to have a conversation in PR, pull me aside. Owen > Regards, > Bill Herrin > > >> >>> >>> This policy can't have a form which reduces my concerns of the eyeball networks regaining large chunks of space while the content providers will continue to dwindle. Unfortunately, it's too late in the game to fix policies to favor protecting content networks (ie, eyeballs don't have to utilize NAT444 if they don't want to and can request address space until we are out, at which time they can convert, but the content providers do not have any new tools to deal with migration on their side). Trying to implement policy to deal with this unbalanced set of tools at this point would only cause a fast rush to ARIN by eyeball networks prior to policy ratification and defeat the purpose. As such, there will be a time that content providers cannot offer IPv4, and their competitors (especially eyeball networks who sideline content) will have IPv4. We will have effectively killed the little guy. >>> >> I'm not sure that dwindling addresses for CPs is a bad thing. The needs of CPs should dwindle as end users gain more access to IPv6. >> CPs, as you have pointed out, could be the hardest group to motivate to IPv6. >> >> Owen >> >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. >> > > > > -- > William D. Herrin ................ herrin at dirtside.com bill at herrin.us > 3005 Crane Dr. ...................... Web: > Falls Church, VA 22042-3004 From owen at delong.com Mon Jan 24 04:19:43 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 24 Jan 2011 01:19:43 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: Message-ID: On Jan 23, 2011, at 8:34 PM, Joel Jaeggli wrote: > Consider whose foot is beeing shot when you take some previously globaly scoped ipv4 space give it a private scope and don't give the host stacks time to figure it out. > Um, nobody's... At least that's what happened with RFC-1918. It was in wide use well before the RFC was finalized. To the best of my knowledge, nobody's host stack treats RFC-1918 space any different from any other global unicast. As such, I'm not sure what you're getting at here. > I'm of the opinion that this was a bad idea at the IETF and it's a bad idea here to. I made a suggestion as to how a opertor consortia or even an individual entity could cough up the space necessary to make it work and I'm convinced that if the need for it were that dire we'd see a proposal altering the transfer rules such that a new entity could be created without penalty, rather asking for an assignment by fiat that ultimately is simply another private use prefix that happens to confuse nat traveral hacks until hosts catch up with it. > I'm not sure why you think NAT traversal hacks care about which addresses are private vs. public. If they do, then, they don't work in NAT cases where neither side of the NAT is within RFC-1918 today, which is a perfectly valid use case. Owen > Owen DeLong wrote: > >> >> On Jan 23, 2011, at 1:10 PM, Mark Smith wrote: >> >>> On Sun, 23 Jan 2011 12:01:39 -0600 >>> "Frank Bulk" wrote: >>> >>>> So that operators in ARIN's region have a reasonable path to NAT444. No one >>>> likes NAT444 and we acknowledge that this designated space could be used for >>>> purposes other than what the reasons that led to this policy proposal, even >>>> if the policy proposal specified otherwise. But as Owen said, the operator >>>> would be shooting themselves in the foot. By the time they use this space >>>> for *something else* and then wanted to do NAT444, they would not be able to >>>> justify a request for IPv4 space for NAT444. >>>> >>> >>> There's been plenty of foot shooting in the past with private and >>> non-allocated address space. Why is this time going to be any >>> different? Giving away more address space with RFC1918's properties >>> will only provide a level of legitimacy to further foot shooting - >> >> The question is who is doing the shooting and whose foot is being shot. >> >> In this case, you've got a situation where the IETF and the end users >> have managed to shoot the ability to deploy NAT444 in the foot. >> >> If we set aside this /10, that restores the ability for the ISPs to deploy >> NAT444 (bullet removal). Now, if an end-user proceeds to use this >> space, then they have shot off their own foot and I doubt anyone will >> have much sympathy for them. In other words, they can only harm >> themselves, not their ISP, not the rest of the community, so, who cares? >> >>> people will ignore what this space is specifically for because by its >>> nature it can't be policed - I'm guessing the Hamachi people >>> will start using it straight away since they "lost" 5/8. If this /10 >>> never exists, then whenever people try to shoot themselves in the foot >>> they'll unavoidably know they're about to do it. Of course you can't >>> prevent stupidity, but you can make it more obvious that it is >>> occurring. >>> >> This isn't about people who shot themselves in the foot. This is about >> people who are loosing feet from shots fired by other people. >> >> Owen >> >>>> Frank >>>> >>>> -----Original Message----- >>>> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On >>>> Behalf Of George Bonser >>>> Sent: Saturday, January 22, 2011 11:19 PM >>>> To: Owen DeLong >>>> Cc: arin-ppml at arin.net >>>> Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 >>>> Address Extension >>>> >>>> >>>> >>>> Why should the network come out of ARIN's hide? If APNIC and >>>> IETF won't support it, why should ARIN? >>>> >>>> >>>> >>>> _______________________________________________ >>>> PPML >>>> You are receiving this message because you are subscribed to >>>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >>>> Unsubscribe or manage your mailing list subscription at: >>>> http://lists.arin.net/mailman/listinfo/arin-ppml >>>> Please contact info at arin.net if you experience any issues. >> >> _______________________________________________ >> PPML >> You are receiving this message because you are subscribed to >> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). >> Unsubscribe or manage your mailing list subscription at: >> http://lists.arin.net/mailman/listinfo/arin-ppml >> Please contact info at arin.net if you experience any issues. >> From bicknell at ufp.org Mon Jan 24 09:28:24 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Mon, 24 Jan 2011 06:28:24 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: Message-ID: <20110124142824.GA61378@ussenterprise.ufp.org> In a message written on Sun, Jan 23, 2011 at 11:38:11PM -0500, William Herrin wrote: > Let me reverse the question: in light of the situation on the ground > today, is there anything you would view as a reasonable justification > for an IPv4 allocation or assignment to a single entity which will not > be routed on the public Internet? What? I have run into a number of situations that make perfect sense. I'll describe one. Several companies in the financial services sector operate "exchanges". To you and I these look just like an internet peering point, the operator runs a layer 2 fabric where multiple parties connect. The one I have personal experience with had about 150 companies connected last time I checked. The companies are allowed to talk to each other, the one I worked on was used for check clearing between banks. If you were to use 1918 space for this application it would require coordination with 150+ entities to ensure no conflicts. That's not really practical. Companies route the exchange some portion of the way into their network (typically to their DMZ) and thus need space that doesn't conflcit with their normal needs. Gobally unique does the job nicely. This block though will never appear on the Internet you can reach from your home DSL line. I think it would be interesting for ARIN to provide some statistics, but my gut tells me that the number of situations like this that pass muster with the ARIN staff is small, so I think this is an area that isn't even worth thinking about. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From jbates at brightok.net Mon Jan 24 09:46:34 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 24 Jan 2011 08:46:34 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <20110124142824.GA61378@ussenterprise.ufp.org> References: <20110124142824.GA61378@ussenterprise.ufp.org> Message-ID: <4D3D90CA.5030206@brightok.net> On 1/24/2011 8:28 AM, Leo Bicknell wrote: > I think it would be interesting for ARIN to provide some statistics, > but my gut tells me that the number of situations like this that > pass muster with the ARIN staff is small, so I think this is an > area that isn't even worth thinking about. > I agree. Even more taxing is when a company connects to multiple exchanges. Even if a single exchange could manage RFC-1918 conflicts, it would be extremely difficult to handle with a company that connects to 2 or more exchanges (check clearing here, cc clearing here, DoD something or other here). Jack From Wesley.E.George at sprint.com Mon Jan 24 10:17:11 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Mon, 24 Jan 2011 15:17:11 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Owen DeLong > Sent: Monday, January 24, 2011 4:20 AM > To: Joel Jaeggli > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > On Jan 23, 2011, at 8:34 PM, Joel Jaeggli wrote: > > > Consider whose foot is beeing shot when you take some previously > globaly scoped ipv4 space give it a private scope and don't give the > host stacks time to figure it out. > > > Um, nobody's... At least that's what happened with RFC-1918. It was in > wide use well > before the RFC was finalized. To the best of my knowledge, nobody's > host stack > treats RFC-1918 space any different from any other global unicast. As > such, I'm not > sure what you're getting at here. > > > > I'm not sure why you think NAT traversal hacks care about which > addresses are > private vs. public. If they do, then, they don't work in NAT cases > where neither > side of the NAT is within RFC-1918 today, which is a perfectly valid > use case. > [WES] We have a syntax problem here. People are using private/public as shorthand for globally unique vs not, and that's confusing the matter. 6to4 is the example that I use, but anything that needs to know if it has a globally unique address to do some sort of direct connection to a remote host cares rather a lot. The rub is that typically today people make the (reasonable) assumption that if it's not in 1918 space, it's globally unique. Else, not. I would expect that there are a lot of applications that have something like: If (RFC1918($address)) then nat-hack() Else function() Read https://datatracker.ietf.org/doc/draft-ietf-intarea-shared-addressing-issues / for more discussion on the matter. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From Wesley.E.George at sprint.com Mon Jan 24 10:19:53 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Mon, 24 Jan 2011 15:19:53 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E066C6F@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Frank Bulk - iName.com > Sent: Friday, January 21, 2011 7:37 PM > To: 'Leo Bicknell'; arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > The problem is that many service providers are using non-192.168.0.0/24 > RFC-1918 space device management. > > Frank [WES] Devices which are under the *service provider's* control to renumber into non-conflicting IPv4 space, to move to IPv6, or to put in a separate NAT444 pool from the user devices. Still not convinced 1918 is unusable for this application. Wes George > > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > Behalf Of Leo Bicknell > Sent: Friday, January 21, 2011 12:38 PM > To: arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 > Address Extension > > > I realize the desire to not use 1918 space for this comes from the > fact that a customer may also be using 1918 space already and a > conflict causes reachability issues. In the context of doing this > for say enterprises, that makes sense. > > In the context of home users, not so much. The vast majority of > the home users who buy a Linksys or similar are in a small number > of ranges, e.g. 192.168.0.0/24 and 192.168.1.0/24. > > Prompting the quesiton, if you figured out what 99% of the home CPE > uses, subtracted from 1918 space, wouldn't you be left with well more > than a /10 from 10/8? Couldn't you just avoid the parts used by common > CPE and use 10/8 for NAT444? > > Yes, you still need to detect and deal with the odd customer who has a > collision, but no solution is free. If that is rare, it may be a lower > cost to the community than setting aside a /10. > > -- > Leo Bicknell - bicknell at ufp.org - CCIE 3440 > PGP keys at http://www.ufp.org/~bicknell/ > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From kkargel at polartel.com Mon Jan 24 10:43:44 2011 From: kkargel at polartel.com (Kevin Kargel) Date: Mon, 24 Jan 2011 09:43:44 -0600 Subject: [arin-ppml] *Spam?* Re: ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> Message-ID: <8695009A81378E48879980039EEDAD288C048CE1@MAIL1.polartel.local> > In the context of home users, not so much. The vast majority of > the home users who buy a Linksys or similar are in a small number > of ranges, e.g. 192.168.0.0/24 and 192.168.1.0/24. > An alternate example would be the not insignificant Apple Airport users who NAT through 10.0.x.x by default . From bicknell at ufp.org Mon Jan 24 10:47:30 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Mon, 24 Jan 2011 07:47:30 -0800 Subject: [arin-ppml] *Spam?* Re: ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <8695009A81378E48879980039EEDAD288C048CE1@MAIL1.polartel.local> References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> <8695009A81378E48879980039EEDAD288C048CE1@MAIL1.polartel.local> Message-ID: <20110124154730.GA68071@ussenterprise.ufp.org> In a message written on Mon, Jan 24, 2011 at 09:43:44AM -0600, Kevin Kargel wrote: > > In the context of home users, not so much. The vast majority of > > the home users who buy a Linksys or similar are in a small number > > of ranges, e.g. 192.168.0.0/24 and 192.168.1.0/24. > > > An alternate example would be the not insignificant Apple Airport users who NAT through 10.0.x.x by default . That's still pretty compact. Removing one /16 from a /8 leaves a ton of space, well more than the /10 folks are requesting here. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ From farmer at umn.edu Mon Jan 24 11:12:39 2011 From: farmer at umn.edu (David Farmer) Date: Mon, 24 Jan 2011 10:12:39 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <1B28B82C24A428458AB09A86467EF106E0618EBD2A@ex01.vbscloud.net> References: <1B28B82C24A428458AB09A86467EF106E0618EBD2A@ex01.vbscloud.net> Message-ID: <4D3DA4F7.4030200@umn.edu> On 1/24/11 01:25 CST, Rodgers Moore wrote: > Another thought just hit me. How does Internet2 handle IP allocations? They aren't running off of ARIN space are they? If so, then that would be another case. The Internet2 network (the Backbone itself) runs on globally unique address space that is not announced to the whole global Internet. However, the backbone is reachable to all participants and a number of other research and education networks world wide. I would estimate something like 5% to 10% of the global Internet has reachability to the Internet2 backbone. FYI, there is approximately 12,000 routes in the global research and education route table. Internet2 does not generally provide address space to it's participants. All Internet2 participants have their own address space from another source, legacy assignment, direct ARIN assignment or allocation, another RIR in the case of international partner networks, or an assignment from the participants commercial ISP. With a few minor exceptions all address space of Internet2 participants is reachable to the global Internet via the participant's commercial ISP, which participants are required to maintain to participate in Internet2. So Internet2 and it's participants are generally not significant users of NRPM section 4.3.5. "Non-connected Networks". -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From bill at herrin.us Mon Jan 24 12:08:01 2011 From: bill at herrin.us (William Herrin) Date: Mon, 24 Jan 2011 12:08:01 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <20110124142824.GA61378@ussenterprise.ufp.org> References: <20110124142824.GA61378@ussenterprise.ufp.org> Message-ID: On Mon, Jan 24, 2011 at 9:28 AM, Leo Bicknell wrote: > Several companies in the financial services sector operate "exchanges". > To you and I these look just like an internet peering point, the > operator runs a layer 2 fabric where multiple parties connect. ?The > one I have personal experience with had about 150 companies connected > last time I checked. ?The companies are allowed to talk to each > other, the one I worked on was used for check clearing between > banks. > > This block though will never appear on the Internet you can reach > from your home DSL line. Thanks Leo. Playing devil's advocate here: if blocks from these networks will never appear on the Internet, why isn't the entire 32-bit address space available to them? What's wrong with overlap between addressing on the public Internet and addressing on strictly private networks like financial exchanges, check-clearing networks, electric smartmeter networks or DoD's SIPRnet? More to the point: what's wrong enough that it justifies removing those addresses from use on the largest TCP/IP network (the Internet) where there's a critical shortage? > I think it would be interesting for ARIN to provide some statistics, > but my gut tells me that the number of situations like this that > pass muster with the ARIN staff is small, so I think this is an > area that isn't even worth thinking about. It is and it isn't. There's a very large amount of address space out there which is allocated but does not appear on the public Internet. The first step to reclaiming part of it for use on the public Internet would be to stop authorizing new uses. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From owen at delong.com Mon Jan 24 12:10:43 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 24 Jan 2011 09:10:43 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> Message-ID: <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> > > [WES] We have a syntax problem here. People are using private/public as > shorthand for globally unique vs not, and that's confusing the matter. 6to4 > is the example that I use, but anything that needs to know if it has a > globally unique address to do some sort of direct connection to a remote > host cares rather a lot. The rub is that typically today people make the > (reasonable) assumption that if it's not in 1918 space, it's globally > unique. Else, not. I would expect that there are a lot of applications that > have something like: > > If (RFC1918($address)) > then nat-hack() > Else function() > > Read > https://datatracker.ietf.org/doc/draft-ietf-intarea-shared-addressing-issues > / for more discussion on the matter. In which case, this address space only presents an issue for those using it in a manner other than intended. Owen From bicknell at ufp.org Mon Jan 24 12:26:59 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Mon, 24 Jan 2011 09:26:59 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <20110124142824.GA61378@ussenterprise.ufp.org> Message-ID: <20110124172659.GA74881@ussenterprise.ufp.org> In a message written on Mon, Jan 24, 2011 at 12:08:01PM -0500, William Herrin wrote: > Playing devil's advocate here: if blocks from these networks will > never appear on the Internet, why isn't the entire 32-bit address > space available to them? What's wrong with overlap between addressing > on the public Internet and addressing on strictly private networks > like financial exchanges, check-clearing networks, electric smartmeter > networks or DoD's SIPRnet? More to the point: what's wrong enough that > it justifies removing those addresses from use on the largest TCP/IP > network (the Internet) where there's a critical shortage? The enterprise networks all connect to the public internet as well. If the exchange network used the same range as say, Facebook then the enterprrise would be unable to reach those web sites. So while the actual exchange is not connected, everything that connects to them is connected, thus the need to be unique. It's similar to the Internet 2 backbone issue someone else described. In diagram form: Private Exchange Network | | | | Ent 1 Ent 2 Ent 3 Ent 4 | | | | Public Internet Connectivity None of the enterprises advertises the private exchange to the public internet, so if you're on the public internet you can't see it at all. However, they all connect (reason it must be unique) and they also all connect to the public Internet (reason it must be gobally unique). I think from the description, replace my private exchange with Internet 2's backbone and you have the same sort of situation over there. Could either one be architected a different way, probably. However I'm not going to wade down that slippery slope right now. We could say this doesn't pass some hypothetical bar for "good use of addresses", but that opens the can of worms of what is a good use? Maybe dialup should now be denied. How about no more addresses for porn hosters? Social networks are clearly just a waste of time, so we should deny addresses to those folks. We're out of IPv4. Even if we denied all non-connected addresses I think you're going to "save" a few /24's over the next year. It's not enough to even extend IPv4's lifetime by a few minutes. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From jbates at brightok.net Mon Jan 24 13:30:41 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 24 Jan 2011 12:30:41 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <20110124172659.GA74881@ussenterprise.ufp.org> References: <20110124142824.GA61378@ussenterprise.ufp.org> <20110124172659.GA74881@ussenterprise.ufp.org> Message-ID: <4D3DC551.6040603@brightok.net> On 1/24/2011 11:26 AM, Leo Bicknell wrote: > None of the enterprises advertises the private exchange to the > public internet, so if you're on the public internet you can't see > it at all. However, they all connect (reason it must be unique) > and they also all connect to the public Internet (reason it must > be gobally unique). IPv4 is also not good at supporting multiple address bonding. As such, there are issues when an enterprise connects to multiple private exchanges. These connections are also not static and pre-planned ahead of time. An enterprise cannot check with all exchanges they might connect to to make sure they have unique addressing if and when they do connect. Jack From Wesley.E.George at sprint.com Mon Jan 24 13:43:25 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Mon, 24 Jan 2011 18:43:25 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: Owen DeLong [mailto:owen at delong.com] > Sent: Monday, January 24, 2011 12:11 PM > To: George, Wes E [NTK] > Cc: Joel Jaeggli; arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > > Read > > https://datatracker.ietf.org/doc/draft-ietf-intarea-shared-addressing-issues > > / for more discussion on the matter. > > In which case, this address space only presents an issue for those > using > it in a manner other than intended. > > Owen > [WES] That's an oversimplification. This block will break 6to4 even if it's used for its intended purpose as long as the block is not part of RFC1918 space, it just might break at a slightly different place in the path. A CPE router doing 6to4 for its network using the non-1918 IP it gets from the broadband provider will break just as much as an end host who gets a public-looking but non-unique/routable address. But whether ARIN/IANA reserves a block, the ISPs cooperate and use a block amongst themselves, or they use some of the space that was previously allocated to them by an RIR on an individual basis, the same problem exists. So it's not a surprise, but that's part of why I'm so adamant about using 1918 space for this if at all possible. Not to speak for Joel, but I think that the point he's making is that if this block isn't codified as an update/addition to RFC1918 space, it'll be treated incorrectly by applications which care about global uniqueness in addressing, regardless of where they live. Even if it is codified in that manner, it'll take the applications (host stack and otherwise) a while to catch up. Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From jbates at brightok.net Mon Jan 24 13:53:48 2011 From: jbates at brightok.net (Jack Bates) Date: Mon, 24 Jan 2011 12:53:48 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> Message-ID: <4D3DCABC.70408@brightok.net> On 1/24/2011 12:43 PM, George, Wes E [NTK] wrote: > on an individual basis, the same problem exists. So it's not a surprise, but > that's part of why I'm so adamant about using 1918 space for this if at all > possible. > So your thought is that a CPE might have code which won't do 6to4 if there's RFC-1918 assigned to the WAN, but otherwise might use 6to4 and break. > Not to speak for Joel, but I think that the point he's making is that if > this block isn't codified as an update/addition to RFC1918 space, it'll be > treated incorrectly by applications which care about global uniqueness in > addressing, regardless of where they live. Even if it is codified in that > manner, it'll take the applications (host stack and otherwise) a while to > catch up. Using a specific block will allow these applications to catch up. Using RFC-1918 would be best, but there are so many possible conflicts that using it in large deployments would cause even more support issues. If the /10 isn't assigned for this purpose, organizations will use their own allocated space (not RFC-1918) and there will still be breakage, but the applications won't be able to rewrite their code to recognize the addressing. Given the high probability that RFC-1918 won't be used for LSN, assigning a new block is more application friendly than using random assignments. Jack From owen at delong.com Mon Jan 24 14:54:08 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 24 Jan 2011 11:54:08 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> Message-ID: <20FD1946-3838-4AD8-8D6A-75D46DF7D982@delong.com> On Jan 24, 2011, at 10:43 AM, George, Wes E [NTK] wrote: >> -----Original Message----- >> From: Owen DeLong [mailto:owen at delong.com] >> Sent: Monday, January 24, 2011 12:11 PM >> To: George, Wes E [NTK] >> Cc: Joel Jaeggli; arin-ppml at arin.net >> Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for >> IPv4 Address Extension >> >>> Read >>> > https://datatracker.ietf.org/doc/draft-ietf-intarea-shared-addressing-issues >>> / for more discussion on the matter. >> >> In which case, this address space only presents an issue for those >> using >> it in a manner other than intended. >> >> Owen >> > [WES] That's an oversimplification. This block will break 6to4 even if it's > used for its intended purpose as long as the block is not part of RFC1918 > space, it just might break at a slightly different place in the path. A CPE > router doing 6to4 for its network using the non-1918 IP it gets from the > broadband provider will break just as much as an end host who gets a > public-looking but non-unique/routable address. But whether ARIN/IANA > reserves a block, the ISPs cooperate and use a block amongst themselves, or > they use some of the space that was previously allocated to them by an RIR > on an individual basis, the same problem exists. So it's not a surprise, but > that's part of why I'm so adamant about using 1918 space for this if at all > possible. > That's a pretty good argument for having a defined block that people can adjust the 6to4 routers to know about. Arguably, anycast 6to4 is moderately broken in a wide variety of circumstances anyway. I don't think it's quite as bad as Lorenzo would have us all believe, but, there are definite problems. > Not to speak for Joel, but I think that the point he's making is that if > this block isn't codified as an update/addition to RFC1918 space, it'll be > treated incorrectly by applications which care about global uniqueness in > addressing, regardless of where they live. Even if it is codified in that > manner, it'll take the applications (host stack and otherwise) a while to > catch up. > In which case, we're better off with this than with random provider-specific assignments which is the most likely alternative scenario. Owen From Wesley.E.George at sprint.com Mon Jan 24 16:05:20 2011 From: Wesley.E.George at sprint.com (George, Wes E [NTK]) Date: Mon, 24 Jan 2011 21:05:20 +0000 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <20FD1946-3838-4AD8-8D6A-75D46DF7D982@delong.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> <20FD1946-3838-4AD8-8D6A-75D46DF7D982@delong.com> Message-ID: <54E900DC635DAB4DB7A6D799B3C4CD8E0670A7@PLSWM12A.ad.sprint.com> > -----Original Message----- > From: Owen DeLong [mailto:owen at delong.com] > Sent: Monday, January 24, 2011 2:54 PM > To: George, Wes E [NTK] > Cc: Joel Jaeggli; arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > IPv4 Address Extension > > That's a pretty good argument for having a defined block that people > can > adjust the 6to4 routers to know about. Arguably, anycast 6to4 is > moderately > broken in a wide variety of circumstances anyway. I don't think it's > quite > as bad as Lorenzo would have us all believe, but, there are definite > problems. > [WES] sigh. We've gone round the circle again. If we could update those boxes to understand that this block isn't a valid external address to use for 6to4, we could also update them to do real IPv6, or to use class E space, or 6RD, or DSLite, etc, etc. The only thing that I can think of that makes this less broken would be if the CGN box is smart enough to serve as an ALG for 6to4 packets (not just a 6to4 relay) and locally terminate them so that it can send real IPv6 packets between itself and the destination, or otherwise rewrite the 6to4 packet headers and track the state so that 6to4 actually works properly with the external address. But I haven't heard of any vendors peddling that particular hack yet, nor are any of the usual suspects generating a draft in IETF for it (that I know of). The idea here is that regardless of what anyone thinks about it, to quote Brian Carpenter, "the toothpaste is out of the tube now." That is, we're stuck with 6to4, and we're better off trying to make it work better for those who are using it than to continue treating it as a completely second-class citizen, because ultimately it is still a means to increase IPv6 deployment in places where it otherwise wouldn't exist. Most of the brokenness is because there aren't enough properly run 6to4 relays close enough to the sources and sinks of traffic. Only a small percentage is due to broken implementations that try to do 6to4 with 1918 addresses or the like. Last I heard, Brian was working on a draft to make some recommendations about how to make 6to4 suck less, but if Comcast's experiences with 6to4 are any indication, simply saying "eh, 6to4 is broken anyway" is a cop-out. Wes George -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6793 bytes Desc: not available URL: From owen at delong.com Mon Jan 24 16:20:53 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 24 Jan 2011 13:20:53 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <54E900DC635DAB4DB7A6D799B3C4CD8E0670A7@PLSWM12A.ad.sprint.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> <20FD1946-3838-4AD8-8D6A-75D46DF7D982@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E0670A7@PLSWM12A.ad.sprint.com> Message-ID: On Jan 24, 2011, at 1:05 PM, George, Wes E [NTK] wrote: > >> -----Original Message----- >> From: Owen DeLong [mailto:owen at delong.com] >> Sent: Monday, January 24, 2011 2:54 PM >> To: George, Wes E [NTK] >> Cc: Joel Jaeggli; arin-ppml at arin.net >> Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for >> IPv4 Address Extension >> >> That's a pretty good argument for having a defined block that people >> can >> adjust the 6to4 routers to know about. > Arguably, anycast 6to4 is >> moderately >> broken in a wide variety of circumstances anyway. I don't think it's >> quite >> as bad as Lorenzo would have us all believe, but, there are definite >> problems. >> > > [WES] sigh. We've gone round the circle again. If we could update those > boxes to understand that this block isn't a valid external address to use > for 6to4, we could also update them to do real IPv6, or to use class E > space, or 6RD, or DSLite, etc, etc. Sigh... Perhaps, but, I think the closure on your circle is broken... The boxes that can do 6to4 can probably do real IPv6. However, there are many many many more home gateways that don't do either one and wouldn't be broken by the example you are citing. Sure, the boxes that break for 6to4 could be an issue with this. However... They aren't the majority of residential gateways. Class E or real IPv6 requires updating all those OTHER gateways, not just the ones that break in this scenario. > The only thing that I can think of that makes this less broken would be if > the CGN box is smart enough to serve as an ALG for 6to4 packets (not just a > 6to4 relay) and locally terminate them so that it can send real IPv6 packets > between itself and the destination, or otherwise rewrite the 6to4 packet > headers and track the state so that 6to4 actually works properly with the > external address. But I haven't heard of any vendors peddling that > particular hack yet, nor are any of the usual suspects generating a draft in > IETF for it (that I know of). > There's no reason it couldn't be this way, but, even that isn't necessary. All that is actually necessary is for the ISP to provide routing to a 6to4 gateway within the NAT444 intermediary zone such that 6to4 anycast packets reach that 6to4 gateway and have that gateway provide the ALG functionality needed to avoid the intermediary address being embedded in the IPV6_SRC field. > The idea here is that regardless of what anyone thinks about it, to quote > Brian Carpenter, "the toothpaste is out of the tube now." That is, we're > stuck with 6to4, and we're better off trying to make it work better for > those who are using it than to continue treating it as a completely > second-class citizen, because ultimately it is still a means to increase > IPv6 deployment in places where it otherwise wouldn't exist. Most of the Maybe yes, maybe no. In reality, if NAT444 breaks 6to4 further and people are forced to chose one over the other, my money would not be on 6to4 no matter how much I would prefer it. > brokenness is because there aren't enough properly run 6to4 relays close > enough to the sources and sinks of traffic. Only a small percentage is due > to broken implementations that try to do 6to4 with 1918 addresses or the > like. Last I heard, Brian was working on a draft to make some > recommendations about how to make 6to4 suck less, but if Comcast's > experiences with 6to4 are any indication, simply saying "eh, 6to4 is broken > anyway" is a cop-out. > As you point out, the 6to4 issues are fairly easy to overcome. They are a small percentage of the affected userbase in any case. As such, you're still making pretty good arguments in favor of the proposal while continuing to oppose it. Owen From spiffnolee at yahoo.com Mon Jan 24 18:18:06 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Mon, 24 Jan 2011 15:18:06 -0800 (PST) Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: References: Message-ID: <278673.91868.qm@web63308.mail.re1.yahoo.com> > I'm of the opinion that this was a bad idea at the IETF and it's a bad idea >here to. > > I made a suggestion as to how a opertor consortia or even an individual entity >could > > cough up the space necessary to make it work I don't see what part of the NRPM would allow an entity to justify an allocation that way. Can ISP A set aside a /10 for common use for LSN, and still get address space from ARIN? If it's possible, then perhaps a policy proposal isn't needed, but I need to know what policy meets the need. > and I'm convinced that if the need > for it were that dire we'd see a proposal altering the transfer rules such >that a new > > entity could be created without penalty, If that new entity could justify the address space, then creating it would not be the problem. But ARIN won't allow a transfer unless the space can be justified, and I don't see where current rules allow for it. Again, if the rules do allow for it, maybe the proposal isn't needed. > rather asking for an assignment by fiat that > ultimately is simply another private use prefix that happens to confuse nat >traveral > > hacks until hosts catch up with it. It's ironic that NAT traversal hacks can't handle NAT. Lee > > Owen DeLong wrote: > > > > >On Jan 23, 2011, at 1:10 PM, Mark Smith wrote: > > > >> On Sun, 23 Jan 2011 12:01:39 -0600 > >> "Frank Bulk" wrote: > >> > >>> So that operators in ARIN's region have a reasonable path to NAT444. No >one > >>> likes NAT444 and we acknowledge that this designated space could be used >for > >>> purposes other than what the reasons that led to this policy proposal, >even > >>> if the policy proposal specified otherwise. But as Owen said, the >operator > >>> would be shooting themselves in the foot. By the time they use this space > >>> for *something else* and then wanted to do NAT444, they would not be able >to > >>> justify a request for IPv4 space for NAT444. > >>> > >> > >> There's been plenty of foot shooting in the past with private and > >> non-allocated address space. Why is this time going to be any > >> different? Giving away more address space with RFC1918's properties > >> will only provide a level of legitimacy to further foot shooting - > > > >The question is who is doing the shooting and whose foot is being shot. > > > >In this case, you've got a situation where the IETF and the end users > >have managed to shoot the ability to deploy NAT444 in the foot. > > > >If we set aside this /10, that restores the ability for the ISPs to deploy > >NAT444 (bullet removal). Now, if an end-user proceeds to use this > >space, then they have shot off their own foot and I doubt anyone will > >have much sympathy for them. In other words, they can only harm > >themselves, not their ISP, not the rest of the community, so, who cares? > > > >> people will ignore what this space is specifically for because by its > >> nature it can't be policed - I'm guessing the Hamachi people > >> will start using it straight away since they "lost" 5/8. If this /10 > >> never exists, then whenever people try to shoot themselves in the foot > >> they'll unavoidably know they're about to do it. Of course you can't > >> prevent stupidity, but you can make it more obvious that it is > >> occurring. > >> > >This isn't about people who shot themselves in the foot. This is about > >people who are loosing feet from shots fired by other people. > > > >Owen > > > >>> Frank > >>> > >>> -----Original Message----- > >>> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On > >>> Behalf Of George Bonser > >>> Sent: Saturday, January 22, 2011 11:19 PM > >>> To: Owen DeLong > >>> Cc: arin-ppml at arin.net > >>> Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 > >>> Address Extension > >>> > >>> > >>> > >>> Why should the network come out of ARIN's hide? If APNIC and > >>> IETF won't support it, why should ARIN? > >>> > >>> > >>> > >>> _______________________________________________ > >>> PPML > >>> You are receiving this message because you are subscribed to > >>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > >>> Unsubscribe or manage your mailing list subscription at: > >>> http://lists.arin.net/mailman/listinfo/arin-ppml > >>> Please contact info at arin.net if you experience any issues. > > > >_______________________________________________ > >PPML > >You are receiving this message because you are subscribed to > >the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > >Unsubscribe or manage your mailing list subscription at: > >http://lists.arin.net/mailman/listinfo/arin-ppml > >Please contact info at arin.net if you experience any issues. > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From spiffnolee at yahoo.com Mon Jan 24 18:49:55 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Mon, 24 Jan 2011 15:49:55 -0800 (PST) Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3A89AF.3010403@brightok.net> References: <4D386249.5000801@arin.net> <18B2C6E38A3A324986B392B2D18ABC51F29FCE0E@fnb1mbx01.gci.com> <4D3A405B.1040907@brightok.net> <000501cbb9fa$88882f20$99988d60$@iname.com> <4D3A89AF.3010403@brightok.net> Message-ID: <198.11244.qm@web63308.mail.re1.yahoo.com> ----- Original Message ---- > From: Jack Bates > 2) Many eyeball networks also sideline these days with content > services as well. Will they utilize this massive block of free IPv4 > they recover to push out the content only providers? That honestly hadn't occurred to me, since the eyeball networks I know aren't in that business. I would assume that as IPv4 addresses become scarcer, ISPs would save them for the applications where they are most needed. Numbering servers would be included there, probably. > > 3) ...eyeball customers. They are likely to quit using home routers > if it means gaining IPv6 connectivity to make their xbox/skype/wow > patch work (or upgrade to an IPv6 capable device). This will v6 > enable them, This would be great, if Xbox, Skype, etc. supported IPv6. Since they don't, how does an ISP respond when a customer calls and says, "My PlayStation 3 doesn't work."? There are some 20 million Xbox 360, and 14 million PS3 in the ARIN region. Those 34 million people can't play online anymore? (granted, those devices don't work through some kinds of large-scale NAT either) ( http://en.wikipedia.org/wiki/History_of_video_game_consoles_%28seventh_generation%29 ) >From what I understand, none of the IP-enabled TVs in the past few years are field upgradable. I expect they'd be pretty NAT- tolerant, but not IPv6-capable. Lee From spiffnolee at yahoo.com Mon Jan 24 19:03:50 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Mon, 24 Jan 2011 16:03:50 -0800 (PST) Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <4D39EB44.10702@arin.net> References: <4D39EB44.10702@arin.net> Message-ID: <8112.29542.qm@web63306.mail.re1.yahoo.com> > the length of supply that any organization > may request from ARIN from that moment forward will be reduced to three > months. This is the key line of this proposal. My first thought had been to support (or even propose) this. But when I thought about it, I decided that this proposal would encourage organizations to submit poorly-documented or spurious requests for address space, just so they would be "in queue" at the time of runout. So, an org with 70% utilization would submit an application, and dawdle in responses to ARIN; after IANA runout, and after they hit 80%, they would complete their documentation. I therefore oppose this proposal. Lee From marka at isc.org Mon Jan 24 19:15:49 2011 From: marka at isc.org (Mark Andrews) Date: Tue, 25 Jan 2011 11:15:49 +1100 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: Your message of "Mon, 24 Jan 2011 18:43:25 -0000." <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com><54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> Message-ID: <20110125001549.7195F921B12@drugs.dv.isc.org> In message <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD at PLSWM12A.ad.sprint.com>, "Ge orge, Wes E [NTK]" writes: > > -----Original Message----- > > From: Owen DeLong [mailto:owen at delong.com] > > Sent: Monday, January 24, 2011 12:11 PM > > To: George, Wes E [NTK] > > Cc: Joel Jaeggli; arin-ppml at arin.net > > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > > IPv4 Address Extension > > > > > Read > > > > https://datatracker.ietf.org/doc/draft-ietf-intarea-shared-addressing-issues > > > / for more discussion on the matter. > > > > In which case, this address space only presents an issue for those > > using > > it in a manner other than intended. > > > > Owen > > > [WES] That's an oversimplification. This block will break 6to4 even if it's > used for its intended purpose as long as the block is not part of RFC1918 > space, it just might break at a slightly different place in the path. A CPE > router doing 6to4 for its network using the non-1918 IP it gets from the > broadband provider will break just as much as an end host who gets a > public-looking but non-unique/routable address. But whether ARIN/IANA > reserves a block, the ISPs cooperate and use a block amongst themselves, or > they use some of the space that was previously allocated to them by an RIR > on an individual basis, the same problem exists. So it's not a surprise, but > that's part of why I'm so adamant about using 1918 space for this if at all > possible. > > Not to speak for Joel, but I think that the point he's making is that if > this block isn't codified as an update/addition to RFC1918 space, it'll be > treated incorrectly by applications which care about global uniqueness in > addressing, regardless of where they live. Even if it is codified in that > manner, it'll take the applications (host stack and otherwise) a while to > catch up. > > Wes George Which is why ISP's should also provision 6rd relay routers and advertise the appropriate DHCPv4 option if they do this. 6rd should be preferred over 6to4 by any sane CPE. 6rd can be automatically enabled safely as you shouldn't get the option returned if it is not supported/ Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org From mysidia at gmail.com Mon Jan 24 19:23:18 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Mon, 24 Jan 2011 18:23:18 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <1110124031108.13513A-100000@Ives.egh.com> References: <1110124031108.13513A-100000@Ives.egh.com> Message-ID: On Mon, Jan 24, 2011 at 2:15 AM, John Santos wrote: > On Sun, 23 Jan 2011, William Herrin wrote: > > Why should private networks that have to interoperate with other private > networks have any less right to unique addresses than any other networks? They don't have less a "right" to unique IPv4 addresses; however no network operator has a "right" to any IPv4 addresses to begin with, and due to exhaustion, not everyone who has a use for unique addresses will get them. >From the internet community's perspective.... Why should we reserve Internet addresses for nodes that are not going to be reachable to us? If not every network can get the addresses they need... what should ARIN _not_ assign resources to first, even if they do ask first? ARIN's mission is really not stewardship of unique private address spaces; it's stewardship of the internet address space. If an applicant has no intention of connecting those addresses to the internet, _ever_, then given that there is impending exhaustion, I would say these are the requests that should be rejected first.... even if they ask first. even if they ask while there is still one last /8 for ARIN to allocate from. -- -JH From marty at akamai.com Mon Jan 24 19:41:38 2011 From: marty at akamai.com (Hannigan, Martin) Date: Mon, 24 Jan 2011 19:41:38 -0500 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <8112.29542.qm@web63306.mail.re1.yahoo.com> Message-ID: On 1/24/11 7:03 PM, "Lee Howard" wrote: >> the length of supply that any organization > >> may request from ARIN from that moment forward will be reduced to three >> months. > > This is the key line of this proposal. > > My first thought had been to support (or even propose) this. But when I > thought about it, I decided that this proposal would encourage organizations > to submit poorly-documented or spurious requests for address space, just > so they would be "in queue" at the time of runout. So, an org with 70% > utilization would submit an application, and dawdle in responses to ARIN; > after IANA runout, and after they hit 80%, they would complete their > documentation. > > I therefore oppose this proposal. > In the predecessor to this, we suggested that there would be some discretion with respect to staff deciding if an application was in good order at the time of the reduction. In retrospect, that's not a good idea at least without some criteria for them to be held to. There are many reasons why an application may be in suspense at the time of the reduction, including ARIN dawdling on responding, a surprise audit that would complete successfully if the application were in an accepted stage, etc. Do you have any suggestions for some criteria that we might be able to insert into the text to make this more palatable? Best, -M< From marka at isc.org Mon Jan 24 19:46:32 2011 From: marka at isc.org (Mark Andrews) Date: Tue, 25 Jan 2011 11:46:32 +1100 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: Your message of "Mon, 24 Jan 2011 12:53:48 MDT." <4D3DCABC.70408@brightok.net> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> <4D3DCABC.70408@brightok.net> Message-ID: <20110125004632.BC6C4921D68@drugs.dv.isc.org> In message <4D3DCABC.70408 at brightok.net>, Jack Bates writes: > On 1/24/2011 12:43 PM, George, Wes E [NTK] wrote: > > on an individual basis, the same problem exists. So it's not a surprise, bu > t > > that's part of why I'm so adamant about using 1918 space for this if at all > > possible. > > > > So your thought is that a CPE might have code which won't do 6to4 if > there's RFC-1918 assigned to the WAN, but otherwise might use 6to4 and > break. The 6to4 implementations I'm aware of check for rfc 1918 addresses and refuse to configure themselves one attempts to use such a address. One shouldn't enable 6to4 automatically and if you do attempt to do so you should perform sanity checks before announcing any prefixes. > > Not to speak for Joel, but I think that the point he's making is that if > > this block isn't codified as an update/addition to RFC1918 space, it'll be > > treated incorrectly by applications which care about global uniqueness in > > addressing, regardless of where they live. Even if it is codified in that > > manner, it'll take the applications (host stack and otherwise) a while to > > catch up. > > Using a specific block will allow these applications to catch up. Using > RFC-1918 would be best, but there are so many possible conflicts that > using it in large deployments would cause even more support issues. If > the /10 isn't assigned for this purpose, organizations will use their > own allocated space (not RFC-1918) and there will still be breakage, but > the applications won't be able to rewrite their code to recognize the > addressing. > > Given the high probability that RFC-1918 won't be used for LSN, > assigning a new block is more application friendly than using random > assignments. A new well known block will also allow CPE vendors to add additional sanity checks before enabling 6to4. So many things are going to break when ISPs turn on double NAT that we shouldn't be overly worried about 6to4 breakage. > Jack > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org From marka at isc.org Mon Jan 24 20:02:06 2011 From: marka at isc.org (Mark Andrews) Date: Tue, 25 Jan 2011 12:02:06 +1100 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: Your message of "Mon, 24 Jan 2011 21:05:20 -0000." <54E900DC635DAB4DB7A6D799B3C4CD8E0670A7@PLSWM12A.ad.sprint.com> References: <54E900DC635DAB4DB7A6D799B3C4CD8E066C4A@PLSWM12A.ad.sprint.com> <6A4CF203-34B6-43A0-B6F1-B95027B523CF@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E066EBD@PLSWM12A.ad.sprint.com> <20FD1946-3838-4AD8-8D6A-75D46DF7D982@delong.com> <54E900DC635DAB4DB7A6D799B3C4CD8E0670A7@PLSWM12A.ad.sprint.com> Message-ID: <20110125010206.D1DAE9220E6@drugs.dv.isc.org> In message <54E900DC635DAB4DB7A6D799B3C4CD8E0670A7 at PLSWM12A.ad.sprint.com>, "Ge orge, Wes E [NTK]" writes: > > From: Owen DeLong [mailto:owen at delong.com] > > Sent: Monday, January 24, 2011 2:54 PM > > To: George, Wes E [NTK] > > Cc: Joel Jaeggli; arin-ppml at arin.net > > Subject: Re: [arin-ppml] ARIN-prop-127: Shared Transition Space for > > IPv4 Address Extension > > > > That's a pretty good argument for having a defined block that people > > can > > adjust the 6to4 routers to know about. > Arguably, anycast 6to4 is > > moderately > > broken in a wide variety of circumstances anyway. I don't think it's > > quite > > as bad as Lorenzo would have us all believe, but, there are definite > > problems. > > > > [WES] sigh. We've gone round the circle again. If we could update those > boxes to understand that this block isn't a valid external address to use > for 6to4, we could also update them to do real IPv6, or to use class E > space, or 6RD, or DSLite, etc, etc. > The only thing that I can think of that makes this less broken would be if > the CGN box is smart enough to serve as an ALG for 6to4 packets (not just a > 6to4 relay) and locally terminate them so that it can send real IPv6 packets > between itself and the destination, or otherwise rewrite the 6to4 packet > headers and track the state so that 6to4 actually works properly with the > external address. But I haven't heard of any vendors peddling that > particular hack yet, nor are any of the usual suspects generating a draft in > IETF for it (that I know of). And doing so would effectively create a IPv6 NAT. Lets not go there. > The idea here is that regardless of what anyone thinks about it, to quote > Brian Carpenter, "the toothpaste is out of the tube now." That is, we're > stuck with 6to4, and we're better off trying to make it work better for > those who are using it than to continue treating it as a completely > second-class citizen, because ultimately it is still a means to increase > IPv6 deployment in places where it otherwise wouldn't exist. Most of the > brokenness is because there aren't enough properly run 6to4 relays close > enough to the sources and sinks of traffic. Only a small percentage is due > to broken implementations that try to do 6to4 with 1918 addresses or the > like. Last I heard, Brian was working on a draft to make some > recommendations about how to make 6to4 suck less, but if Comcast's > experiences with 6to4 are any indication, simply saying "eh, 6to4 is broken > anyway" is a cop-out. Having a well defined common address range where 6to4 in known to be broken is much better than having to figure out if the address range you happen to be sitting on is shared or not. 6to4 is a legitimate reason to not be put into a shared address range until you have equipment that supports IPv6 natively or via 6rd. Hotels have offered shared by default and global on request for years now. There is no reason ISP's can't do the same thing. Mark > Wes George > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org From alh-ietf at tndh.net Mon Jan 24 20:24:44 2011 From: alh-ietf at tndh.net (Tony Hain) Date: Mon, 24 Jan 2011 17:24:44 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> Message-ID: <039c01cbbc2e$a8d8a940$fa89fbc0$@net> Jimmy Hess wrote: > On Mon, Jan 24, 2011 at 2:15 AM, John Santos wrote: > > On Sun, 23 Jan 2011, William Herrin wrote: > > > > Why should private networks that have to interoperate with other > private > > networks have any less right to unique addresses than any other > networks? > > They don't have less a "right" to unique IPv4 addresses; however no > network operator has a "right" to any IPv4 addresses to begin with, > and due to exhaustion, not everyone who has a use for unique addresses > will get them. > > >From the internet community's perspective.... Why should we reserve > Internet addresses > for nodes that are not going to be reachable to us? > > If not every network can get the addresses they need... what should > ARIN _not_ assign resources to first, even if they do ask first? > > ARIN's mission is really not stewardship of unique private address > spaces; it's stewardship of the internet address space. > > If an applicant has no intention of connecting those addresses to the > internet, _ever_, > then given that there is impending exhaustion, I would say these are > the requests that should be rejected first.... even if they ask > first. even if they ask while there is still one last /8 for > ARIN to allocate from. Clearly your definition of "the Internet" has the incredible restriction of "only the part I care about". "The Internet" is a collection of diverse and independently operated networks, some of which don't care to interact with your network. That does not make either their network or yours any more or less a part of "the Internet". The fact that some networks can operate with moderate success in an alternate universe with only a man-in-the-middle-attack-on-the-header interconnecting their universe to "the Internet" does not mean that all networks can be run that way. Tony > > -- > -JH > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From mysidia at gmail.com Mon Jan 24 21:03:51 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Mon, 24 Jan 2011 20:03:51 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <039c01cbbc2e$a8d8a940$fa89fbc0$@net> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> Message-ID: On Mon, Jan 24, 2011 at 7:24 PM, Tony Hain wrote: > "The Internet" is a collection of diverse and independently operated > networks, some of which don't care to interact with your network. That does > not make either their network or yours any more or less a part of "the > Internet". The fact that some networks can operate with moderate success in [snip] No... the internet is not merely a "collection of diverse and independently operated networks". You missed the most important part. The internet is a collection of networks that interconnect with each other. If your network does not connect any way, then you aren't part of it. If it is the exception to the rule, rather than the rule, that your network interconnects with other networks, then you have excluded your network from the internet. Non-connected networks are by definition not internet connected networks. If IP addresses are for hosts to connect to the internet, then the IP addresses do not fall under the category of "non-connected". -- -JH From owen at delong.com Mon Jan 24 21:40:21 2011 From: owen at delong.com (Owen DeLong) Date: Mon, 24 Jan 2011 18:40:21 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> Message-ID: <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> On Jan 24, 2011, at 6:03 PM, Jimmy Hess wrote: > On Mon, Jan 24, 2011 at 7:24 PM, Tony Hain wrote: >> "The Internet" is a collection of diverse and independently operated >> networks, some of which don't care to interact with your network. That does >> not make either their network or yours any more or less a part of "the >> Internet". The fact that some networks can operate with moderate success in > [snip] > No... the internet is not merely a "collection of diverse and > independently operated networks". > You missed the most important part. > The internet is a collection of networks that interconnect with each > other. If your network does not connect any way, then you aren't > part of it. > If your network connects to the networks of several organizations whose networks connect to the internet, the mere fact that you don't share packets with other organizations on the internet to which you are not directly connected does not mean that you are not connected. It just means that you aren't connected to everyone else. Nobody on the internet is connected to EVERYONE else for varying levels of the definition of EVERYONE. > If it is the exception to the rule, rather than the rule, that your > network interconnects with other networks, then you have excluded > your network from the internet. > Huh? > Non-connected networks are by definition not internet connected networks. > Not exactly, but, this is where the terminology has become unfortunately disconnected from the reality of the activities actually going on. Unfortunately, "non-connected networks" is much easier to write and to say than "networks which do not connect directly to more than a handful of internet-connected networks and which by policy do not use those networks to which they do connect as transit providers to reach other portions of the internet.". > If IP addresses are for hosts to connect to the internet, then the IP > addresses do not fall under the category of "non-connected". IP addresses are for hosts which connect to other hosts using the TCP/IP protocol. You cannot use TCP/IP without IP addresses. Since the "are for hosts to connect to the internet" clause of your IF statement is false, the "then" clause should not be executed. Owen From jbates at brightok.net Tue Jan 25 10:52:57 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 25 Jan 2011 09:52:57 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <278673.91868.qm@web63308.mail.re1.yahoo.com> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> Message-ID: <4D3EF1D9.2020909@brightok.net> On 1/24/2011 5:18 PM, Lee Howard wrote: > > It's ironic that NAT traversal hacks can't handle NAT. > Not really. They originally handled it pretty well, with ALG support making it a lot more friendly. However, CPE's started utilizing uPNP and applications decided that it was saturated enough in the market to use it instead of relying on ALG support. This lead to applications creating non-uPNP unfriendly NAT hacks. Now they will regret it. Jack From jbates at brightok.net Tue Jan 25 10:59:27 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 25 Jan 2011 09:59:27 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> Message-ID: <4D3EF35F.1090809@brightok.net> On 1/24/2011 8:40 PM, Owen DeLong wrote: > IP addresses are for hosts which connect to other hosts using the > TCP/IP protocol. You cannot use TCP/IP without IP addresses. Can't we just say IP = Internet Protocol use of IP = use of Internet. :) Jack From jbates at brightok.net Tue Jan 25 11:00:57 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 25 Jan 2011 10:00:57 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <63C0ED54-C7AA-4DA2-B6E5-A8097A58F37A@network-heretics.com> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> <4D3EF1D9.2020909@brightok.net> <63C0ED54-C7AA-4DA2-B6E5-A8097A58F37A@network-heretics.com> Message-ID: <4D3EF3B9.4080207@brightok.net> On 1/25/2011 9:58 AM, Keith Moore wrote: > heaven forbid that applications actually use a feature designed for them. > Using and relying on are 2 different things. uPNP is more commonly used than STUN for example. Jack From mysidia at gmail.com Tue Jan 25 12:19:41 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Tue, 25 Jan 2011 11:19:41 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <4D3EF35F.1090809@brightok.net> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> Message-ID: On Tue, Jan 25, 2011 at 9:59 AM, Jack Bates wrote: > On 1/24/2011 8:40 PM, Owen DeLong wrote: >> IP addresses are for hosts which connect to other hosts using the >> TCP/IP protocol. You cannot use TCP/IP without IP addresses. > Can't we just say IP = Internet Protocol > use of IP = use of Internet. :) That all-inclusive abstracted/fabricated definition of internet belies the obvious one. IP is the standard protocol of the internet; but if you use IP and do not interconnect to many networks, then your use is not internet. That use is IP, and no more internet than dialing up a BBS over a modem for a one-on-one connection; the RIRs purpose of existence is to provide stewardship of address space for the community, not to ensure resources for everyone who wants to use IP. The policy is about non-connected networks. The networks that want to use IP but have no intention to interconnect. The community behind ARIN is by far one that does interconnect. Interconnection is viewed as a pre-requisite for being part of the community. That is.. until you decide to connect your network, it's just a private castle, you can use IPX for all the world cares. Networks using IP for internal communications with no plan to ever interconnect globally are "secondary users" of IP address space. There are few/no known networks that actually fall under this policy, but the policy is also wide open for various abuses, due to the unverifiable nature of unconnected networks. Non-connected networks can use private RFC1918 addressing while non-connected, and then renumber their networks later into address space assigned by their ISP, if they do decide to redesign and interconnect. Or they could be allowed to apply for and receive needed IP addressing for their non-connected network from a LIR (ISP) in their area. > Jack -- -JH From jbates at brightok.net Tue Jan 25 12:36:45 2011 From: jbates at brightok.net (Jack Bates) Date: Tue, 25 Jan 2011 11:36:45 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> Message-ID: <4D3F0A2D.40600@brightok.net> On 1/25/2011 11:19 AM, Jimmy Hess wrote: > The policy is about non-connected networks. The networks that want to > use IP but have no intention to interconnect. The community behind > ARIN is by far one that does interconnect. Interconnection is > viewed as a pre-requisite for being part of the community. > That is.. until you decide to connect your network, it's just a > private castle, you can use IPX for all the world cares. I think the main argument against is that many do interconnect. They just don't interconnect publicly. This means they require globally unique addressing. ARIN's job is steward of the globally unique addressing for our region. Jack From bicknell at ufp.org Tue Jan 25 12:56:54 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Tue, 25 Jan 2011 09:56:54 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> Message-ID: <20110125175654.GA70669@ussenterprise.ufp.org> In a message written on Tue, Jan 25, 2011 at 11:19:41AM -0600, Jimmy Hess wrote: > The policy is about non-connected networks. The networks that want to > use IP but have no intention to interconnect. The community behind > ARIN is by far one that does interconnect. Interconnection is > viewed as a pre-requisite for being part of the community. > That is.. until you decide to connect your network, it's just a > private castle, you can use IPX for all the world cares. Actually, it's not about non-connected networks, but rather networks that are connected, but perhaps not to the entire world. If the network were truely non-connected, that is not connected to anything that all, ARIN would require them to use 1918 space and would not allocate any global resources. I think there is a lot of misinformation here, because the policy was originally poorly worded, and because folks aren't taking the time to read it. The relevant bit is: 4.3.5. Non-connected Networks End-users not currently connected to an ISP and/or not planning to be connected to the Internet are encouraged to use private IP address numbers reserved for non-connected networks (see RFC 1918). When private, non-connected networks require interconnectivity and the private IP address numbers are ineffective, globally unique addresses may be requested and used to provide this interconnectivity. I emphasize "networks require interconnectivity" and "globally unique addresses may be requested and used to provide this interconnectivity". Dispite its name, this policy only applies to networks that are, in fact, interconnected. The wording here is really funny in a sad way, "When private, non-connected networks require interconnectivity"; wait, what? How can you be non-connected and require interconnectivity? It only makes sense if you tilt your head a particular way. If I may editoralize in a way that I think makes more sense: 4.3.5. Networks without IP Transit End-users not currently connected to an ISP and/or not planning to be connected to the Internet should use private IP address numbers reserved for non-connected networks (see RFC 1918). When private, non-transited networks require interconnectivity and the private IP address numbers are ineffective, globally unique addresses may be requested and used to provide this interconnectivity. And I'll pick on the Internet 2 folks as a prime example. Their backbone IP space does not appear on the commercial Internet, it's not in a transit table you get from your ISP. That said, there are thousands of networks connected to the Internet 2 backbone, and it would be plainly insane to try and run it with RFC 1918 space. This policy allows them to get space to do just that. If anything should be done in this space it's that something like my editorialized version should be put into place so there is no confusion over what the policy is intended to do. The policy as it is implemented now is a very good thing, and enables proper and good use of the address space. It's being tarred and feathered because someone used a poor choice of title. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From matthew at matthew.at Tue Jan 25 13:21:33 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Tue, 25 Jan 2011 10:21:33 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <20110125175654.GA70669@ussenterprise.ufp.org> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> <20110125175654.GA70669@ussenterprise.ufp.org> Message-ID: <4D3F14AD.7070408@matthew.at> On 1/25/2011 9:56 AM, Leo Bicknell wrote: > In a message written on Tue, Jan 25, 2011 at 11:19:41AM -0600, Jimmy Hess wrote: >> The policy is about non-connected networks. The networks that want to >> use IP but have no intention to interconnect. The community behind >> ARIN is by far one that does interconnect. Interconnection is >> viewed as a pre-requisite for being part of the community. >> That is.. until you decide to connect your network, it's just a >> private castle, you can use IPX for all the world cares. > Actually, it's not about non-connected networks, but rather networks > that are connected, but perhaps not to the entire world. Please remember that this is true of all networks. When there's a network, somewhere, that has connectivity to part of the global Internet but for whatever reason (firewall, peering policy, circuit failure) doesn't have connectivity to *you*, that doesn't suddenly mean you don't need globally unique addresses any more. Matthew Kaufman From owen at delong.com Tue Jan 25 13:32:28 2011 From: owen at delong.com (Owen DeLong) Date: Tue, 25 Jan 2011 10:32:28 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <4D3EF35F.1090809@brightok.net> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> Message-ID: <829668DF-0676-462C-AD1A-18C2804A062E@delong.com> On Jan 25, 2011, at 7:59 AM, Jack Bates wrote: > > > On 1/24/2011 8:40 PM, Owen DeLong wrote: >> IP addresses are for hosts which connect to other hosts using the >> TCP/IP protocol. You cannot use TCP/IP without IP addresses. > > Can't we just say IP = Internet Protocol > > use of IP = use of Internet. :) > > > Jack No, we can't. There are many uses of IP in the world which have nothing to do with the internet. There are other uses which are loosely coupled to the internet in ways that do not involve exchanging packets with the larger sense of the internet. Saying use of IP = use of internet would be like saying use of letters which appear in the English alphabet = use of the English language and ignoring the fact that English makes use of a subset of the latin alphabet which is used in a wide variety of languages. Owen From Keith at jcc.com Tue Jan 25 14:59:09 2011 From: Keith at jcc.com (Keith W. Hare) Date: Tue, 25 Jan 2011 14:59:09 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <4D3EF35F.1090809@brightok.net> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> Message-ID: <180bf7f2ecc4e6cfeb335c68c769bb384d3f2b35@jcc.com> In some contexts IP stands for Intellectual Property rather than Internet Protocol. Keith -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Jack Bates Sent: Tuesday, January 25, 2011 10:59 AM To: Owen DeLong Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] End non-public IPv4 assignments? On 1/24/2011 8:40 PM, Owen DeLong wrote: > IP addresses are for hosts which connect to other hosts using the > TCP/IP protocol. You cannot use TCP/IP without IP addresses. Can't we just say IP = Internet Protocol use of IP = use of Internet. :) Jack _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From JOHN at egh.com Tue Jan 25 15:34:14 2011 From: JOHN at egh.com (John Santos) Date: Tue, 25 Jan 2011 15:34:14 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: Message-ID: <1110125151148.13513B-100000@Ives.egh.com> On Tue, 25 Jan 2011, Jimmy Hess wrote: > On Tue, Jan 25, 2011 at 9:59 AM, Jack Bates wrote: > > On 1/24/2011 8:40 PM, Owen DeLong wrote: > >> IP addresses are for hosts which connect to other hosts using the > >> TCP/IP protocol. You cannot use TCP/IP without IP addresses. > > Can't we just say IP = Internet Protocol > > use of IP = use of Internet. :) > > That all-inclusive abstracted/fabricated definition of internet > belies the obvious one. IP is the standard protocol of the internet; > but if you use IP and do not interconnect to many networks, then your > use is not internet. That use is IP, and no more internet than > dialing up a BBS over a modem for a one-on-one connection; the RIRs > purpose of existence is to provide stewardship of address space for > the community, not to ensure resources for everyone who wants to > use IP. > > The policy is about non-connected networks. The networks that want to > use IP but have no intention to interconnect. The community behind > ARIN is by far one that does interconnect. Interconnection is > viewed as a pre-requisite for being part of the community. > That is.. until you decide to connect your network, it's just a > private castle, you can use IPX for all the world cares. > I **AM** interconnected. I'm just not interconnected to YOU. My network is a legacy Class C, it's all the IPv4 I need now and for the foreeable future. So I don't care personally. But there are other companies in similar situations. Some may need more IPv4, some may be startups who need an initial allocation. If my use of IPv4 to interconnect with my customers is not legitimate as any other use of unique global addresses, then neither is my customers usage. They are much bigger than I am, would have thousands of times as many hosts to renumber, and have large legal staffs. Don't go there! > > Networks using IP for internal communications with no plan to ever > interconnect globally are "secondary users" of IP address space. > There are few/no known networks that actually fall under this policy, > but the policy is also wide open for various abuses, due to the > unverifiable nature of unconnected networks. > > Non-connected networks can use private RFC1918 addressing while > non-connected, and then renumber their networks later into address > space assigned by their ISP, if they do decide to redesign and > interconnect. If I and my customers were to do this, it would almost certainly violate antitrust laws, and the defense would be ARIN isn't doing its job. You don't have a clue what kind of can of worms you are opening here. > > Or they could be allowed to apply for and receive needed IP addressing > for their non-connected network from a LIR (ISP) in their area. If we can't justify need, how could an LIR justify need based on serving our need? And how would doing this in anyway reduce the demand on the IPv4 free pool? > > > > Jack > -- > -JH > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > > -- John Santos Evans Griffiths & Hart, Inc. 781-861-0670 ext 539 From hannigan at gmail.com Tue Jan 25 22:45:06 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Tue, 25 Jan 2011 22:45:06 -0500 Subject: [arin-ppml] Fwd: FW: [sig-policy] prop-097: Global Policy for post exhaustion IPv4 allocation mechanisms by the IANA In-Reply-To: References: <002501cbbc8c$63e3ade0$266df1da@Laptop> Message-ID: FYI -- another global proposal in the struggle for the control of legacy addresses post exhaustion. Best, -M< ------ Forwarded Message From: Terence Zhang YH Date: Tue, 25 Jan 2011 07:35:46 -0500 To: Policy SIG Subject: [sig-policy] prop-097: Global Policy for post exhaustion IPv4 allocation mechanisms by the IANA Dear SIG members, The proposal, 'Global Policy for post exhaustion IPv4 allocation mechanisms by the IANA', has been sent to the Policy SIG for review. It will be presented at the Policy SIG at APNIC 31 in Hong Kong SAR, China, 21-25 February 2011. We invite you to review and comment on the proposal on the mailing list before the meeting. The comment period on the mailing list before an APNIC meeting is an important part of the policy development process. We encourage you to express your views on the proposal: ? ? ? ?- Do you support or oppose this proposal? ? ? ? ?- Do you see any disadvantages in this proposal? ? ? ? ?- Is there anything in the proposal that is not clear? ? ? ? ?- What changes could be made to this proposal to make it more ? ? ? ? ?effective? Information about this and other policy proposals is available from: ? ? ? ? ?http://www.apnic.net/policy/proposals Gaurab, Ching-Heng, and Terence _______________________________________________________________________ prop-097-v001: Global Policy for post exhaustion IPv4 allocation ? ? ? ? ? ? ? ?mechanisms by the IANA _______________________________________________________________________ Authors: ? ? ? Alejandro Acosta ? ? ? ? ? ? ? ?Nicolas Antoniello ? ? ? ? ? ? ? ?S. Moonesamy ? ? ? ? ? ? ? ?Douglas Onyango ? ? ? ? ? ? ? ?Medel Ramirez ? ? ? ? ? ? ? ?Masato Yamanishi ? ? ? ? ? ? ? ?Note: The co-authors are actively seeking authors from ? ? ? ? ? ? ? ? ? ? ?all regions to ensure all RIR community's needs ? ? ? ? ? ? ? ? ? ? ?are met. We encourage interested community members ? ? ? ? ? ? ? ? ? ? ?to become co-authors of this proposal. Version: ? ? ? 1 Date: ? ? ? ? ?25 January 2011 1. ?Introduction ---------------- This proposal describes the process that IANA will follow to allocate IPv4 resources to Regional Internet Registries (RIRs) after the central pool of addresses is exhausted. The processes for how IPv4 space may be placed in the IANA Recovered IPv4 Pool is out of the scope of this proposal. 2. Definitions -------------- 2.1 IPv4 address holdings ? ? IPv4 address holdings are all unallocated IPv4 address space held ? ? by an RIR. 2.2 Aggregated address blocks ? ? Aggregated address blocks are contiguous prefixes that can be ? ? aggregated on natural bit boundaries. 3. ?Summary of the current problem ---------------------------------- An earlier global policy proposal authored by a team consisting of people from each of the five RIRs reached consensus at four RIRs, and was subsequently endorsed by these RIRs' Boards. In the APNIC region, this was prop-069, "Global policy proposal for the allocation of IPv4 blocks to Regional Internet Registries". To see the proposal reference number for this proposal in all five RIRs, see Appendix A. The version approved in the fifth region was substantially rewritten by that community to meet some of their concerns. However, given the nature of the rewrites, it would have been difficult to reconcile that version with the version that reached concensus in the other four RIRs. Therefore, some members of the ARIN community wrote a new global proposal, "Global Policy for IPv4 Allocations by the IANA Post Exhaustion", which has been adopted in the ARIN region. It is under discussion in the AfriNIC, APNIC and RIPE regions. In the APNIC region, it is prop-086. To see the proposal reference number for this proposal in all five RIRs, see Appendix A. However, there are significant issues with prop-086. These are: ? ? - The reclamation pool could be exhausted by RIR(s) with high ? ? ? allocation rates after the first (or first few) allocation ? ? ? period(s). ? ? ? There are two main reasons RIRs will have differing allocation ? ? ? rates after the IANA pool is exhausted: ? ? ? 1. Rate of Internet growth in the region ? ? ? 2. Policies developed by different regions governing ? ? ? ? ?how the last part of their IPv4 addresses are to be ? ? ? ? ?managed. ? ? ? In response to IPv4 exhaustion, some RIR communities have chosen ? ? ? to apply policies to a part of their last IPv4 addresses that aim ? ? ? to assist with a smooth transition to IPv6. An effect of such ? ? ? policies is that it can slow down the consumption of IPv4 ? ? ? addresses allocated under these policies. This side effect would ? ? ? put RIRs that have chosen to adopt such policies at a ? ? ? disadvantage, as they will take far longer to qualify for space ? ? ? under prop-086 compared to RIRs that have chosen not to adopt ? ? ? such policies. Therefore, to ensure that regional variation in ? ? ? runout policy amongst RIRs is accounted for, it is important to ? ? ? have an IANA redistribution method that can continue to provide ? ? ? resources to RIRs over more than one (or only a few) allocation ? ? ? periods. - The definitions of when an RIR is considered to be "exhausted", ?and therefore eligible for space from IANA, should be more ?flexible given the very different RIR policy environments and the ?number of addresses available at any given time. - Under the redistribution formula proposed in prop-086, it is ?possible for one RIR to be the single eligible RIR in the first ?IANA allocation period and for that RIR to claim the entire ?reclamation pool. It is also possible that only one RIR could ?be eligible during subsequent allocation periods, and take the ?total IANA pool available at that time. ?To prevent this from happening, it is better to have a formula ?that would allow eligible RIRs to take only a certain fraction ?of the IANA pool at each allocation period. A problem with both prop-069 and prop-086 is related to the policy for the return of addresses by the RIRs to IANA: - In prop-069, the return of addresses to the reclamation pool was ?mandatory. This restriction was of significant concern to the ?ARIN community. - In prop-086, return of addresses by RIRs is optional, but there ?is nothing to prevent an RIR which has contributed nothing ?towards IANA's return pool from claiming part, or indeed all, of ?the return pool. ? ? - Because of the two above issues, this new proposal separates the ? ? ? return of address space to the IANA from the redistribution of ? ? ? that space by the IANA. Instead, the authors of this new proposal ? ? ? treat the return and redistribution as two separate issues that ? ? ? should be treated as separate policies. 4. ?Situation in other RIRs --------------------------- This proposal will be submitted to all RIRs with a view to becoming global policy. 5. ?Details ----------- Upon adoption of this IPv4 address policy by the ICANN Board of Directors, the IANA shall establish a Recovered IPv4 Pool to be utilized post RIR IPv4 exhaustion as defined in Section 1. The Recovered IPv4 Pool will initially contain any fragments that may be left over in the IANA. It will also hold any space returned to the IANA by any other means. 5.1 Recovered IPv4 Pool ? ? The Recovered IPv4 Pool will be administered by the IANA. It will ? ? contain: ? ? a. Any fragments left over in the IANA inventory after the last /8s ? ? ? ?of IPv4 space are delegated to the RIRs ? ? ? ?- The IANA inventory excludes "Special use IPv4 addresses" as ? ? ? ? ?defined in BCP 153 and any addresses allocated by the IANA ? ? ? ? ?for experimental use. ? ? b. Any IPv4 space returned to the IANA by any means. ? ? The Recovered IPv4 Pool will stay inactive until the first RIR ? ? exhausts its inventory of IPv4 address space as defined in ? ? Sections 5.3b below. ? ? Once active, IP addresses from the Recovered IPv4 Pool will be ? ? allocated as stated in Section 5.2 below. 5.2 Allocation of returned IPv4 address space by the IANA ? ? a. Allocations from the IANA may begin once the pool is declared ? ? ? ?active. ? ? b. For the purposes of this policy, an "IPv4 allocation period" is ? ? ? ?defined as a 6-month period following 1 March or 1 September in ? ? ? ?each year. ? ? c. The IANA will calculate the size of the "IPv4 allocation unit" ? ? ? ?at the following times: ? ? ? ?- When the Recovered IPv4 Pool is first activated ? ? ? ?- At the beginning of each IPv4 allocation period ? ? ? ?To calculate the "IPv4 allocation unit" at these times, the IANA ? ? ? ?will use the following formula: ? ? ? ? ? ?IPv4 allocation unit = ?1/10 of Recovered IPv4 pool, ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?rounded down to the next CIDR ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?(power-of-2) boundary. ? ? ? ?No RIR may get more than this calculation used to determine the ? ? ? ?IPv4 allocation unit even when they can justify a need for it. ? ? ? ?The minimum "IPv4 allocation unit" size will be a /24. If the ? ? ? ?calculation used to determine the IPv4 allocation unit results ? ? ? ?in a block smaller than a /24, the IANA will not distribute any ? ? ? ?addresses in that IPv4 allocation period. ? ? d. In each allocation period, each eligible RIR may issue one IPv4 ? ? ? ?request to the IANA. ? ? ? ?Providing that the RIR satisfies the allocation criteria ? ? ? ?described in section 5.3, the IANA will allocate a single ? ? ? ?allocation unit, composed of the smallest possible number of ? ? ? ?blocks available in its IPv4 address pool. 5.3 Allocation criteria ? ? a. To be eligible for an allocation from the Recovered IPv4 Pool, ? ? ? ?an RIR must: ? ? ? ?- Have returned addresses to the Recovered IPv4 Pool. ? ? ? ?- Report on the status of its IPv4 address pool as described in ? ? ? ? ?Section 5.4d below. ? ? ? ?- Have not already received an IPv4 allocation unit from the ? ? ? ? ?IANA during the current IPv4 allocation period. ? ? b. In addition, if the RIR is requesting its first allocation from ? ? ? ?the Recovered IPv4 Pool, it must: ? ? ? ?- Have less than a total of /9 in its unallocated IPv4 address ? ? ? ? ?pool ? ? c. If the RIR is requesting a subsequent allocation from the ? ? ? ?Recovered IPv4 Pool, it must: ? ? ? ?- Have less than 50% of the size of the current IANA IPv4 ? ? ? ? ?allocation unit remaining in its unallocated IPv4 address ? ? ? ? ?pool. ? ? d. RIRs are permitted to reserve up to one /10 of their ? ? ? ?unallocated IPv4 addresses for special purposes (such as ? ? ? ?policies tying IPv4 allocations to IPv6 deployment, or future ? ? ? ?use). Any reservations larger than a /10 will be considered to ? ? ? ?be "unallocated" and part of the RIR's total unallocated IPv4 ? ? ? ?address pool. 5.4 Reporting ? ? a. All allocated space is to be recorded in a publicly available ? ? ? ?IANA-published log of IPv4 address space transactions, with each ? ? ? ?log entry detailing the address blocks, the date of the ? ? ? ?allocation, and the recipient RIR. ? ? b. The IANA will maintain a public registry of the current ? ? ? ?disposition of all IPv4 address space, detailing all ? ? ? ?reservations and current allocations and current IANA-held ? ? ? ?address space that is unallocated. ? ? c. The IANA may make public announcements of IPv4 address block ? ? ? ?transactions that occur under this policy. The IANA will make ? ? ? ?appropriate modifications to the "Internet Protocol V4 Address ? ? ? ?Space" page of the IANA website [2] and may make announcements ? ? ? ?to its own appropriate announcement lists. The IANA ? ? ? ?announcements will be limited to which address ranges, the time ? ? ? ?of allocation, and to which Registry they have been allocated. ? ? d. To be eligible for address allocations, RIRs must report ? ? ? ?monthly, and at least for 3 months prior to any request, all ? ? ? ?address allocations made and the total of its IPv4 address ? ? ? ?holdings and reservations. 6. ?Pros/Cons ------------- Advantages: ? ? - The policy provides a mechanism for the ongoing distribution of ? ? ? IPv4 address space, while removing the areas of prop-069 that ? ? ? were problematic for the ARIN community, and removing the ? ? ? problematic areas of prop-086. That is, the proposal: ? ? ? ?- Permits regional variation in runout policy amongst RIRs to be ? ? ? ? ?accounted for in the distribution of the Recovered IPv4 Pool ? ? ? ?- Prevents the possibility of a single RIR being eligible to ? ? ? ? ?be allocated the entire Recovered IPv4 Pool in the first ? ? ? ? ?(and perhaps only) allocation period ? ? ? ?- Removes two areas of policy that have failed to reach ? ? ? ? ?agreement in previous attempts at this proposal: ? ? ? ? ? - How addresses should be placed in the Recovered IPv4 Pool ? ? ? ? ? - References to how transfers should or should not take place Disadvantages: ? ? - This proposal is unlikely to finish the global policy development ? ? ? process before the IANA pool exhausts. However, the exhaustion of ? ? ? the IANA pool is an independent event that will not affect this ? ? ? proposal's eventual implementation. ? ? - This proposal does not provide details of how address space may ? ? ? be returned to the IANA IPv4 Recovered Pool. However, since it ? ? ? limits the eligibility for addresses from the IPv4 Recovered Pool ? ? ? to those who have contributed to it, it will encourage RIRs to ? ? ? actively return addresses to IANA. 7. ?Effect on APNIC ------------------- This policy governs the allocation relationship between the IANA and the RIRs. It does not imply any change to allocation relationships between APNIC and its Members. 8. ?Effect on NIRs ------------------ This policy governs the allocation relationship between the IANA and the RIRs. It does not imply any change to allocation relationships between APNIC and the NIRs. 9. ?References -------------- [1] "Global Policy for the Allocation of the Remaining IPv4 Address ? ? Space" ? ? http://www.icann.org/en/general/allocation-remaining-ipv4-space.htm [2] "IANA IPv4 Address Space Registry", January 2011. http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml Appendix A ---------- Proposal number given to "Global policy proposal for the allocation of IPv4 blocks to Regional Internet Registries" in each of the five regions: AfriNIC: ? ? AFPUB-2009-v4-002 APNIC: ? ? ? prop-069 ARIN: ? ? ? ?ARIN-2009-3 LACNIC: ? ? ?LAC-2009-01 RIPE: ? ? ? ?RIPE 2009-01 Proposal number given to "Global Policy for IPv4 Allocations by the IANA Post Exhaustion" in each of the five regions: AfriNIC: ? ? AFPUB-2010-v4-006 APNIC: ? ? ? prop-086 ARIN: ? ? ? ?ARIN-2010-10 LACNIC: ? ? ?LAC-2010-04 RIPE: ? ? ? ?RIPE 2010-05 * ? ? ? ? ? ? ?sig-policy: ?APNIC SIG on resource management policy * _______________________________________________ sig-policy mailing list sig-policy at lists.apnic.net http://mailman.apnic.net/mailman/listinfo/sig-policy ------ End of Forwarded Message From mysidia at gmail.com Tue Jan 25 23:56:14 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Tue, 25 Jan 2011 22:56:14 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <4D3F0A2D.40600@brightok.net> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> <4D3F0A2D.40600@brightok.net> Message-ID: On Tue, Jan 25, 2011 at 11:36 AM, Jack Bates wrote: [snip] > I think the main argument against is that many do interconnect. They just > don't interconnect publicly. This means they require globally unique > addressing. ARIN's job is steward of the globally unique addressing for our > region. Actually.. if they do not connect publicly; all they need is addressing that is unique among the networks that they do include connectivity with. It does not need to be globally unique, due to the globally unreachable nature of privately interconnected networks; since every host they can transmit a packet to is part of their private interconnection. PP127 seems to obsolete this by providing shared space that any network could use for such purposes; in addition to RFC1918 space available already available for shared use. All the networks that do not connect publicly must do is negotiate between themselves in regards to which addressing will be used by which network. -- -JH From owen at delong.com Wed Jan 26 00:20:39 2011 From: owen at delong.com (Owen DeLong) Date: Tue, 25 Jan 2011 21:20:39 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> <4D3F0A2D.40600@brightok.net> Message-ID: <036FE2A2-53B8-4739-BB12-283715764798@delong.com> On Jan 25, 2011, at 8:56 PM, Jimmy Hess wrote: > On Tue, Jan 25, 2011 at 11:36 AM, Jack Bates wrote: > [snip] >> I think the main argument against is that many do interconnect. They just >> don't interconnect publicly. This means they require globally unique >> addressing. ARIN's job is steward of the globally unique addressing for our >> region. > > Actually.. if they do not connect publicly; all they need is > addressing that is unique among the networks that they do include > connectivity with. It does not need to be globally unique, due to > the globally unreachable nature of privately interconnected networks; > since every host they can transmit a packet to is part of their > private interconnection. > BZZT... Thanks for playing. It needs to be unique among the networks they interconnect with and the networks those networks interconnect with. Now, when you consider that many of the networks they interconnect with may well interconnect with the internet... Guess what. > PP127 seems to obsolete this by providing shared space that any > network could use for such purposes; in addition to RFC1918 space > available already available for shared use. > Not exactly, no. > All the networks that do not connect publicly must do is negotiate > between themselves in regards to which addressing will be used by > which network. > This includes the following (incorrect) assertions: 1. These networks know about each other's existence. 2. These networks have a viable means by which to carry out said coordination. 3. These networks are sufficiently limited in scope as to make such an activity feasible. Owen From jbates at brightok.net Wed Jan 26 01:07:57 2011 From: jbates at brightok.net (Jack Bates) Date: Wed, 26 Jan 2011 00:07:57 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <036FE2A2-53B8-4739-BB12-283715764798@delong.com> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> <4D3F0A2D.40600@brightok.net> <036FE2A2-53B8-4739-BB12-283715764798@delong.com> Message-ID: <4D3FBA3D.3000308@brightok.net> On 1/25/2011 11:20 PM, Owen DeLong wrote: > On Jan 25, 2011, at 8:56 PM, Jimmy Hess wrote: > >> All the networks that do not connect publicly must do is negotiate >> between themselves in regards to which addressing will be used by >> which network. >> > This includes the following (incorrect) assertions: > > 1. These networks know about each other's existence. > 2. These networks have a viable means by which to carry out said > coordination. > 3. These networks are sufficiently limited in scope as to make such > an activity feasible. > To expand upon Owen's explanation, these networks aren't built automatically connected. They form and drop connections with multiple entities over time. They cannot use NAT translation between the networks due to the nature of the communications they do allow across the peerings (there are always firewalls between the interconnecting networks). To make matters worse, these private networks will most likely be the slowest to be able to adapt to IPv6. Just imagine how many networks might privately peer with walmart, shipping/trucking networks, networks that handle tracking of trucks on the road, credit card processing networks, etc. How they peer is irrelevant. Some may peer via slow T1 circuits while others my peer with VPN. There is a huge complex set of dynamic internetworks which require unique addressing. IANA via the RIR's is the only mechanism for insuring these unique addresses to allow the dynamic nature of such an internetwork. Let's talk SIP. A lot of telephony has moved into SIP, from ONTs and DLCs talking SIP to local exchanges to international voice traffic. How the traffic gets from point A to B is irrelevant. What is important is that the communication requires unique addressing even when it is vpn or private peering. Jack From JOHN at egh.com Wed Jan 26 02:40:44 2011 From: JOHN at egh.com (John Santos) Date: Wed, 26 Jan 2011 02:40:44 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <036FE2A2-53B8-4739-BB12-283715764798@delong.com> Message-ID: <1110126023435.13513B-100000@Ives.egh.com> On Tue, 25 Jan 2011, Owen DeLong wrote: > > On Jan 25, 2011, at 8:56 PM, Jimmy Hess wrote: > > > On Tue, Jan 25, 2011 at 11:36 AM, Jack Bates wrote: > > [snip] > >> I think the main argument against is that many do interconnect. They just > >> don't interconnect publicly. This means they require globally unique > >> addressing. ARIN's job is steward of the globally unique addressing for our > >> region. > > > > Actually.. if they do not connect publicly; all they need is > > addressing that is unique among the networks that they do include > > connectivity with. It does not need to be globally unique, due to > > the globally unreachable nature of privately interconnected networks; > > since every host they can transmit a packet to is part of their > > private interconnection. > > > BZZT... Thanks for playing. > > It needs to be unique among the networks they interconnect with and > the networks those networks interconnect with. > > Now, when you consider that many of the networks they interconnect > with may well interconnect with the internet... Guess what. > > > PP127 seems to obsolete this by providing shared space that any > > network could use for such purposes; in addition to RFC1918 space > > available already available for shared use. > > > Not exactly, no. > > > All the networks that do not connect publicly must do is negotiate > > between themselves in regards to which addressing will be used by > > which network. > > > This includes the following (incorrect) assertions: > > 1. These networks know about each other's existence. > 2. These networks have a viable means by which to carry out said > coordination. > 3. These networks are sufficiently limited in scope as to make such > an activity feasible. > > Owen Thank you, Owen. I was about to make a really snarky and ill-advised reply, but you covered all my points much more succinctly and rationally than I would have. One thing I should point out is that in my industry alone, there are hundreds if not thousands of networks which would have to coordinate. Also, using PP127 space for this would probably step on ISPs using it for its intended purpose, since some of the businesses involved are in fact ISPs. -- John Santos Evans Griffiths & Hart, Inc. 781-861-0670 ext 539 From farmer at umn.edu Wed Jan 26 13:35:39 2011 From: farmer at umn.edu (David Farmer) Date: Wed, 26 Jan 2011 12:35:39 -0600 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <4D39EB44.10702@arin.net> References: <4D39EB44.10702@arin.net> Message-ID: <4D40697B.3000109@umn.edu> I do not support this proposal. If there were strong data showing a high certainty that ARIN would have significantly more than a years supply of resources after IANA run-out, I might be convinced to change the trigger point from IANA run-out. But that is not the argument provided in the rationale of this proposal. Section 4.2.4.4 cannot be looked by itself, it is paired with section 4.2.4.3. "Subscriber Members Less Than One Year", these subscribers are limited to a three month supply and have been for a long time. I find it difficult to justify a continued disparity between these two classes of subscribers as we are on the verge of run-out of IPv4 resources. If ARIN has less than a year of resources available, it will be impossible for subscribers currently covered by the first policy to ever receive resources from the ARIN free pool via the subsequent policy. Proper stewardship of resources does not allow for a change in section 4.2.4.3, but that 4.2.4.4 should be changed to rectify the above disparity in the face of IPv4 run-out. In the discussion of Draft Policy 2009-8, it became clear that any trigger point before IANA run-out was unacceptable and there was a great deal of uncertainty about how long the ARIN free pool would last after IANA run-out. This is why IANA run-out was selected as the trigger point for 2009-8. ARIN has been consuming about three /8s for the last few years, so if the proposal's analysis is correct on that amount of resources ARIN will have after IANA run-out, one might be lead to believe ARIN could have as much as two years of resources available. However, that does not account for any increased demand within the ARIN region as a reaction to run-out or any shift in demand that can reasonably be expected as other regions run-out, specifically APNIC and RIPE, which most projections show running out before ARIN. Most projections I have seen do not show ARIN's post IANA run-out resources lasting significantly more than a year. Therefore, I do not believe there is sufficient evidence that the basic facts of the situation have changed significantly enough to warrant changing the trigger point. On 1/21/11 14:23 CST, ARIN wrote: ... > ARIN-prop-128: Replacement of Section 4.2.4.4 > > Proposal Originator: Martin Hannigan, Chris Grundemann > > Proposal Version: 1.0 > > Date: 21 January 2011 > > Proposal type: Modify, complete replacement of 4.2.4.4 > > Policy term: Permanent > > Policy statement: > > 4.2.4.4. Subscriber Members After One Year > > After an organization has been a subscriber member of ARIN for one > year,that organization may choose to request up to a 12 month supply of > IP addresses. > > On the date that ARIN's IPv4 aggregate inventory of IPv4 address > space drops below the equivalent of 2/8's and after ARIN receives its > last /8 as a result of the IANA executing section 10.4.2.2 of the NRPM > and in accordance with the Global Policy for the Allocation of the > Remaining IPv4 Address Space, the length of supply that any organization > may request from ARIN from that moment forward will be reduced to three > months. > > Inventory is defined as all unused IPv4 addresses held by ARIN. This > includes legacy address space which will be added to the available > inventory and used after no longer than a one month hold period. Any > addresses that the organization declares unavailable will be detailed > publicly on a monthly basis that includes a detailed justification. > Unavailable IPv4 addresses shall be considered to be an exception, not > a rule. > > This reduction does not apply to resources received through the > utilization of NRPM Section 8.3 of the NRPM. An organization receiving a > transfer under NRPM Section 8.3 may continue to request up to a 12-month > supply of IP addresses. > > Rationale: > > ARIN's pending operational practice is that if an organization has a > request in the ARIN hostmaster queue for IPv4 resources when the IANA > declares the exhaustion phase (10.4.2.2), their request will be > automatically truncated from a twelve month supply to a three month > supply since policy in effect at the time of exhaustion will apply. 8.3 > and 4.2.4.4 are currently "in effect". > > Example: If an entity is asking for 4 x /24 for a 12 month period and > IANA exhaustion occurs, a requester will receive, if justified, 1 x /24. > If an entity is asking for 120 x /24 at the time that exhaustion occurs, > they would only receive 30 x /24 if justified. If ARIN determines that > this same entity would only qualify for 90 of the 120 x /24 requested, > then that entity would only receive 22 x /24. > > ARIN has the equivalent of approximately 7 /8's in their current > inventory of address space equaling roughly 117M addresses. This > includes addresses churning (revocations, returned), legacy addresses > returned and the final /8 ARIN has received as a result of the execution > of policy directing the IANA to exhaust inventory when it reaches 5 /8s. > > The intention of this proposal is simple. To define how as a community > we will wind-down IPv4 inventory in an fair, orderly and predictable > manner and to prevent the organization from being in a state of > unreasonably stockpiling IPv4 addresses. It is also intends to insure > that any confusion around legacy address utilization is clear; in the > absence of a global policy dealing with this issue and need exists in > the ARIN region any unused address in ARIN's inventory must be used. > > The ARIN AC should review and determine what action if any should be > taken at their next available opportunity, or sooner if they deem > warranted. -- =============================================== David Farmer Email:farmer at umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== From mysidia at gmail.com Wed Jan 26 20:41:14 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Wed, 26 Jan 2011 19:41:14 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <036FE2A2-53B8-4739-BB12-283715764798@delong.com> References: <1110124031108.13513A-100000@Ives.egh.com> <039c01cbbc2e$a8d8a940$fa89fbc0$@net> <091BF3F0-C316-4CA5-8690-F00578FC3587@delong.com> <4D3EF35F.1090809@brightok.net> <4D3F0A2D.40600@brightok.net> <036FE2A2-53B8-4739-BB12-283715764798@delong.com> Message-ID: On Tue, Jan 25, 2011 at 11:20 PM, Owen DeLong wrote: The NRPM 4.3.5 is already a policy whose effect is to restrict assignments to non-connected networks. They are currently allowed when they decide "private IP numbers are ineffective". So a modified 4.3.5 could merely state "4.3.5. Non-connected Networks End-users not currently connected to an ISP and/or not planning to be connected to the Internet are encouraged to use private IP address numbers reserved for non-connected networks (see RFC 1918). When private, non-connected networks require interconnectivity and global IP address numbers are necessary, globally unique addresses may be requested or received by application to ARIN or specified transfer and used to provide this interconnectivity; new allocations for non-connected networks will be allocated from a block reserved for that purpose. No block or portion of ARIN's final /8 allocation will be used to satisfy a request for non-connected networks; If address space is unavailable for this purpose, ARIN will treat it as an unmet request under the provisions of 4.1.8." [snip] > It needs to be unique among the networks they interconnect with and > the networks those networks interconnect with. > Now, when you consider that many of the networks they interconnect > with may well interconnect with the internet... Guess what. Networks that are non-connected are ones that by design do not have any host on that network allowed to send or receive a packet with a source or destination address of another organization's network. The networks you are describing that interconnect with multiple other entities' networks are not non-connected networks. If an org declares a network non-connected by design, in an IP address application, then they are stating that no transitive relationship they have between their network and other networks will be allowed to connect their network to further networks over IP. If they have a plan to interconnect with multiple other networks, then the current restrictions under NRPM 4.3.5 don't apply to them in the first place, because they are making a connected network. The networks that actually do interconnect may also be separate from the network(s) used to perform the interconnection. It's possible for networks to connect together by transitive connections _through_ a non-connected network; in this case, the interconnecting networks are not restricted by 4.3.5, and should have global IP address space, but the non-connecting network that attaches connected networks together does not require global IP address space. They should be restricted to managed/shared private IP space by 4.3.5, they do not need global IP address space, unless the networks performing the interconnection are themselves interconnected, by design. -- -JH From bill at herrin.us Thu Jan 27 01:19:22 2011 From: bill at herrin.us (William Herrin) Date: Thu, 27 Jan 2011 01:19:22 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> Message-ID: On Mon, Jan 24, 2011 at 7:23 PM, Jimmy Hess wrote: > If not every network can get the addresses they need... ?what should > ARIN ?_not_ ?assign resources to first, even if they do ask first? Hi Folks, I appreciate all the feedback on ARIN addresses for non-public networks. I've heard a lot of sound reasoning. Expect to hear some of it echoed back at you the next time we talk about an IPv6 ULA registry. ;-) There's one further thought I'd inject into the conversation: We're approaching a period of time between v4 free pool depletion and v6 ubiquity during which IPv4 addressing will become a zero-sum game. The nature of a zero-sum game is that there is *always* someone left holding the short stick. Without exception. The sooner the unlucky ones know who they're going to be, the sooner they can begin mitigating the damage. Maybe even get ahead of the curve. I may not have the answer, but it seems to me that as a community we ought to get serious about the question. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From bicknell at ufp.org Thu Jan 27 08:49:38 2011 From: bicknell at ufp.org (Leo Bicknell) Date: Thu, 27 Jan 2011 05:49:38 -0800 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> Message-ID: <20110127134938.GA49758@ussenterprise.ufp.org> In a message written on Thu, Jan 27, 2011 at 01:19:22AM -0500, William Herrin wrote: > We're approaching a period of time between v4 free pool depletion and > v6 ubiquity during which IPv4 addressing will become a zero-sum game. > The nature of a zero-sum game is that there is *always* someone left > holding the short stick. Without exception. The sooner the unlucky > ones know who they're going to be, the sooner they can begin > mitigating the damage. Maybe even get ahead of the curve. > > I may not have the answer, but it seems to me that as a community we > ought to get serious about the question. Reading what you wrote I get the impression you think that 90% of the folks will have IPv4 addresses, and some poor 10% will be left with the short stick and we need to get to telling those folks "we're sorry, but you still get the short stick". The reality is that maybe on the high side 25% will have the IPv4 space they need 12 months from now, and 75% will have the "short stick". Go out to 36 months from now and 1% will have the IPv4 they need, and 99% will be left with the proverbal "short stick". Because it's a fixed size pool there is almost nothing that can be done to change the percentages, all of the proposals are a rearranging of the ordering which move the time lines forward for some, and backwards for others. We still end up at the same point. In short, I can tell you who the unlucky ones are going to be right now. You. As in anyone reading this e-mail. Please go get to mitigating, by which I mean deploying IPv6. -- Leo Bicknell - bicknell at ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 826 bytes Desc: not available URL: From bill at herrin.us Thu Jan 27 09:33:32 2011 From: bill at herrin.us (William Herrin) Date: Thu, 27 Jan 2011 09:33:32 -0500 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: <20110127134938.GA49758@ussenterprise.ufp.org> References: <1110124031108.13513A-100000@Ives.egh.com> <20110127134938.GA49758@ussenterprise.ufp.org> Message-ID: On Thu, Jan 27, 2011 at 8:49 AM, Leo Bicknell wrote: > Reading what you wrote I get the impression you think that 90% of > the folks will have IPv4 addresses, and some poor 10% will be left > with the short stick and we need to get to telling those folks > "we're sorry, but you still get the short stick". > > The reality is that maybe on the high side 25% will have the IPv4 > space they need 12 months from now, and 75% will have the "short > stick". ?Go out to 36 months from now and 1% will have the IPv4 > they need, and 99% will be left with the proverbal "short stick". Leo, My crystal ball is no clearer than yours, but if you want my prediction it's this: either there will be an IP address market or we'll decide to reclaim addresses which we determine aren't being put to "good enough use." There's too much money in play; the notion that the folks with uses that justify spending money won't be able to get addresses from somewhere is untenable, and if we're fool enough to attempt it we'll be promptly smacked down. This suggests the process will look something like "musical chairs," only with each cycle another use case for IPv4 addresses will drop out. The thing is, musical chairs is a very destructive game. The losers are sidelined very suddenly and everybody is a potential loser in every round of the game. On the other hand, if you know in advance that you're out in round 6 then you don't have to panic and spend effort staying in rounds 1 through 5 and you have all five rounds to prepare your plan B for when you're out in round 6. The process becomes orderly, predictable. Less expensive. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From spiffnolee at yahoo.com Thu Jan 27 09:46:42 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Thu, 27 Jan 2011 06:46:42 -0800 (PST) Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D3EF1D9.2020909@brightok.net> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> <4D3EF1D9.2020909@brightok.net> Message-ID: <783822.58732.qm@web63304.mail.re1.yahoo.com> > > It's ironic that NAT traversal hacks can't handle NAT. > Not really. They originally handled it pretty well, with ALG support > making it a lot more friendly. ALG isn't NAT. And without defining a layer-violating protocol, (an application-agnostic application-layer gateway) it isn't realistic for every NAT implementer to build an ALG for every application that needs one. > However, CPE's started utilizing uPNP > and applications decided that it was saturated enough in the market > to use it instead of relying on ALG support. This lead to applications > creating non-uPNP unfriendly NAT hacks. Now they will regret it. Even if every NAT vendor built an ALG for every new app, new apps couldn't be deployed because of the installed base of NATs which didn't have the ALG for the new app. So here we are: uPNP doesn't work for large-scale NAT, because it can't traverse the NAT layers ALGs aren't a solution, because there are too many applications needing gateways PCP is too late for implementation in applications and appliances Seriously, for things that don't work beautifully through multi-layer NAT, IPv6 is the only way to go. And if you think NAT444 is your solution for exhaustion, you really need to do IPv6, too. Lee From jbates at brightok.net Thu Jan 27 09:53:35 2011 From: jbates at brightok.net (Jack Bates) Date: Thu, 27 Jan 2011 08:53:35 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <783822.58732.qm@web63304.mail.re1.yahoo.com> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> <4D3EF1D9.2020909@brightok.net> <783822.58732.qm@web63304.mail.re1.yahoo.com> Message-ID: <4D4186EF.1030808@brightok.net> On 1/27/2011 8:46 AM, Lee Howard wrote: > Seriously, for things that don't work beautifully through multi-layer > NAT, IPv6 is the only way to go. And if you think NAT444 is > your solution for exhaustion, you really need to do IPv6, too. > At no point have I said "don't deploy IPv6". I could care less about that part. The problem is, v4 will still be needed. NAT64 has it's own issues. NAT444 is probably the best we have for handling the v4 side of things. If applications utilize a mixture of STUN, ICE, and TURN, NAT444 might just happen to work. With NAT64, hopefully everyone will use the well known prefix, so they can address v4 hosts properly within the v6 addressing. There will still be breakage, though. Jack From bret at getjive.com Thu Jan 27 09:56:28 2011 From: bret at getjive.com (Bret Palsson) Date: Thu, 27 Jan 2011 07:56:28 -0700 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <783822.58732.qm@web63304.mail.re1.yahoo.com> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> <4D3EF1D9.2020909@brightok.net> <783822.58732.qm@web63304.mail.re1.yahoo.com> Message-ID: Add to the fact that there is no standard for ALG. All equipment manufactures have different implementations, thus some routers work with VoIP and some don't. If there were a standard it _might_ make sense. On Jan 27, 2011, at 7:46 AM, Lee Howard wrote: > > >>> It's ironic that NAT traversal hacks can't handle NAT. >> Not really. They originally handled it pretty well, with ALG support >> making it a lot more friendly. > > ALG isn't NAT. And without defining a layer-violating protocol, > (an application-agnostic application-layer gateway) > it isn't realistic for every NAT implementer to build an ALG for > every application that needs one. > >> However, CPE's started utilizing uPNP >> and applications decided that it was saturated enough in the market >> to use it instead of relying on ALG support. This lead to applications >> creating non-uPNP unfriendly NAT hacks. Now they will regret it. > > Even if every NAT vendor built an ALG for every new app, new > apps couldn't be deployed because of the installed base of NATs > which didn't have the ALG for the new app. > > So here we are: > uPNP doesn't work for large-scale NAT, because it can't traverse > the NAT layers > ALGs aren't a solution, because there are too many applications > needing gateways > PCP is too late for implementation in applications and appliances > > Seriously, for things that don't work beautifully through multi-layer > NAT, IPv6 is the only way to go. And if you think NAT444 is > your solution for exhaustion, you really need to do IPv6, too. > > Lee > > > > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From owen at delong.com Thu Jan 27 10:06:45 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 27 Jan 2011 07:06:45 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <783822.58732.qm@web63304.mail.re1.yahoo.com> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> <4D3EF1D9.2020909@brightok.net> <783822.58732.qm@web63304.mail.re1.yahoo.com> Message-ID: <6157D5D7-2782-4C04-AB1F-44E9DE28B388@delong.com> On Jan 27, 2011, at 6:46 AM, Lee Howard wrote: > > >>> It's ironic that NAT traversal hacks can't handle NAT. >> Not really. They originally handled it pretty well, with ALG support >> making it a lot more friendly. > > ALG isn't NAT. And without defining a layer-violating protocol, > (an application-agnostic application-layer gateway) > it isn't realistic for every NAT implementer to build an ALG for > every application that needs one. > Agreed. >> However, CPE's started utilizing uPNP >> and applications decided that it was saturated enough in the market >> to use it instead of relying on ALG support. This lead to applications >> creating non-uPNP unfriendly NAT hacks. Now they will regret it. > > Even if every NAT vendor built an ALG for every new app, new > apps couldn't be deployed because of the installed base of NATs > which didn't have the ALG for the new app. > New apps shouldn't be deployed on IPv4 at this point, arguably, so that's not really an argument I'm going to buy into. > So here we are: > uPNP doesn't work for large-scale NAT, because it can't traverse > the NAT layers > ALGs aren't a solution, because there are too many applications > needing gateways > PCP is too late for implementation in applications and appliances > > Seriously, for things that don't work beautifully through multi-layer > NAT, IPv6 is the only way to go. And if you think NAT444 is > your solution for exhaustion, you really need to do IPv6, too. > Yep... IPv6 is the only way to go anyway. even for things that do work through NAT444. I don't think you can defend a claim that anything works "beautifully" through NAT444. Less ugliness for some simpler things than others, but, less ugliness is very different from beauty. Owen From spiffnolee at yahoo.com Thu Jan 27 10:11:09 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Thu, 27 Jan 2011 07:11:09 -0800 (PST) Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: References: Message-ID: <795992.27760.qm@web63307.mail.re1.yahoo.com> ----- Original Message ---- > From: "Hannigan, Martin" > There are many reasons why an application may be in suspense at the time of > the reduction, including ARIN dawdling on responding, a surprise audit that > would complete successfully if the application were in an accepted stage, > etc. ARIN dawdling? If this proposal passes, it will slow processing of applications by encouraging a flood of them. Makes the problem worse, not better. By "surprise audit" do you mean a resource review under NRPM section 12? The reasons for those audits are in paragraph 2. a. ARIN always reviews prior allocations before making new allocations; if you change that, that's even stronger encouragement to submit an application before previous assignments have been utilized. You've been working with ARIN long enough to know that a well-maintained address management system makes these reviews quick and painless. b. Surely ARIN should not stop fraud investigations because runout is imminent? c. If you want ARIN not to start any resource reviews "at any other time" between now and IANA runout, I would understand. Reviews already under way should be completed, though. If they are not, then we could very well allocate addresses to satisfy a 12-month request, which would have to be returned following the resource review. I don't understand how an audit would "complete successfully if the application were in an accepted stage," if it would not complete successfully otherwise. > Do you have any suggestions for some criteria that we might be able to > insert into the text to make this more palatable? No. If this proposal were "Do not start any new resource reviews, except for fraud research or new allocation requests," then I would reconsider it. Lee From matthew at matthew.at Thu Jan 27 10:13:05 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 27 Jan 2011 07:13:05 -0800 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <795992.27760.qm@web63307.mail.re1.yahoo.com> References: <795992.27760.qm@web63307.mail.re1.yahoo.com> Message-ID: <4D418B81.6060504@matthew.at> On 1/27/2011 7:11 AM, Lee Howard wrote: > > ARIN dawdling? If this proposal passes, it will slow processing of applications > by encouraging a flood of them. Makes the problem worse, not better. The day the press announces that IANA is out there will be a "flood" of applications anyway. We'll know for sure in just days. Matthew Kaufman From spiffnolee at yahoo.com Thu Jan 27 10:37:15 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Thu, 27 Jan 2011 07:37:15 -0800 (PST) Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D4186EF.1030808@brightok.net> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> <4D3EF1D9.2020909@brightok.net> <783822.58732.qm@web63304.mail.re1.yahoo.com> <4D4186EF.1030808@brightok.net> Message-ID: <721156.97494.qm@web63301.mail.re1.yahoo.com> TL;DR Prioritize IPv6 over NAT444 workarounds. ----- Original Message ---- > From: Jack Bates > > If applications utilize a mixture of STUN, ICE, and TURN, > NAT444 might just happen to work. With NAT64, hopefully > everyone will use the well known prefix, so they can address v4 > hosts properly within the v6 addressing. What well-known prefix? Do you mean 6to4? It has huge problems: * Versions of Mac OS X before 10.6.5 prefer 6to4 over rfc1918, so it actually breaks NAT444. * 6to4 is unpredictable, since it uses anycast. Your nearest 6to4 relay might be 1000ms away, and the nearest relay to the other end might be another 1000ms away. I think 6to4 should be considered harmful, or at least deprecated. But I'm not going to spend time writing that internet-draft, because I'm busy deploying IPv6. Maybe you meant 6in4 or 6over4. Essentially, there is no way to get IPv4-only hosts to IPv6, and the ones that need it most require an ALG which does not exist. NAT64 generally refers to the collection of work in the BEHAVE working group: http://datatracker.ietf.org/wg/behave/ Consumer electronics are the devices most likely to be IPv4 only; computers can generally be upgraded to support IPv6. If consumer electronics vendors have to choose or even prioritize between ICE and IPv6 support, IPv6 support is much more important. The place where NAT444 is needed, and why I support this proposal, is in traditional client-server communication, as in web client/web server, or mail client/mail server. These applications generally work fine through NAT444, though with performance problems, legal and security issues, which have all been documented. IPv6 is still much better. Lee From matthew at matthew.at Thu Jan 27 11:15:31 2011 From: matthew at matthew.at (Matthew Kaufman) Date: Thu, 27 Jan 2011 08:15:31 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D39D592.904@matthew.at> References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> <4D39D592.904@matthew.at> Message-ID: <4D419A23.9050906@matthew.at> On 1/21/2011 10:50 AM, Matthew Kaufman wrote: > > I still object to the proposal on the basis that it is not needed. > I still believe that proposal 127 is not needed, however in order to accelerate IPv4 runout I am changing to "tentatively support" proposal 127 as-is, and would "fully support" proposal 127 if it were increased to an entire /8. Matthew Kaufman From spiffnolee at yahoo.com Thu Jan 27 11:24:09 2011 From: spiffnolee at yahoo.com (Lee Howard) Date: Thu, 27 Jan 2011 08:24:09 -0800 (PST) Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <4D418B81.6060504@matthew.at> References: <795992.27760.qm@web63307.mail.re1.yahoo.com> <4D418B81.6060504@matthew.at> Message-ID: <129442.57553.qm@web63301.mail.re1.yahoo.com> ----- Original Message ---- > From: Matthew Kaufman > > ARIN dawdling? If this proposal passes, it will slow processing of >applications > > by encouraging a flood of them. Makes the problem worse, not better. > The day the press announces that IANA is out there will be a "flood" of > applications anyway. We'll know for sure in just days. If the proposal passes, a flood of requests before IANA runout results in faster IPv4 depletion, since everyone in the flood gets 12 months' need. After IANA runout, the flood will be handled as normal, but with 3 months' need satisfied. For those whose goal is providing connectivity, accelerating runout is bad. For those whose goal is deploying IPv6, regardless of connectivity, runout is good. Since I support a more stable Internet, I oppose accelerating depletion. Lee From jbates at brightok.net Thu Jan 27 11:25:41 2011 From: jbates at brightok.net (Jack Bates) Date: Thu, 27 Jan 2011 10:25:41 -0600 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <721156.97494.qm@web63301.mail.re1.yahoo.com> References: <278673.91868.qm@web63308.mail.re1.yahoo.com> <4D3EF1D9.2020909@brightok.net> <783822.58732.qm@web63304.mail.re1.yahoo.com> <4D4186EF.1030808@brightok.net> <721156.97494.qm@web63301.mail.re1.yahoo.com> Message-ID: <4D419C85.5030409@brightok.net> On 1/27/2011 9:37 AM, Lee Howard wrote: > TL;DR Prioritize IPv6 over NAT444 workarounds. > > As a service provider, I have no choices. I support IPv6, but I don't decide what applications my customers use or who they will talk to. > What well-known prefix? Do you mean 6to4? It has huge > problems: http://tools.ietf.org/html/rfc6052 Useful for NAT64 and using the well known prefix allows for literal IPv4 addressing within an IPv6 only network where DNS is not used by the application. > > The place where NAT444 is needed, and why I support > this proposal, is in traditional client-server communication, > as in web client/web server, or mail client/mail server. > These applications generally work fine through NAT444, > though with performance problems, legal and security > issues, which have all been documented. IPv6 is still much > better. I don't disagree, yet there are many applications that still are not supporting IPv6. I'd presume they will have no choice to stay in business, but that isn't my concern. My concern as a provider is to give access to other networks via IPv6 protocol and give access to other networks via IPv4 protocol. Jack From alh-ietf at tndh.net Thu Jan 27 11:41:29 2011 From: alh-ietf at tndh.net (Tony Hain) Date: Thu, 27 Jan 2011 08:41:29 -0800 Subject: [arin-ppml] ARIN-prop-127: Shared Transition Space for IPv4 Address Extension In-Reply-To: <4D419A23.9050906@matthew.at> References: <4D386249.5000801@arin.net> <20110121183748.GA17880@ussenterprise.ufp.org> <4D39D592.904@matthew.at> <4D419A23.9050906@matthew.at> Message-ID: <0b1301cbbe41$0fa69c40$2ef3d4c0$@net> Matthew Kaufman wrote: > On 1/21/2011 10:50 AM, Matthew Kaufman wrote: > > > > I still object to the proposal on the basis that it is not needed. > > > > I still believe that proposal 127 is not needed, however in order to > accelerate IPv4 runout I am changing to "tentatively support" proposal > 127 as-is, and would "fully support" proposal 127 if it were increased > to an entire /8. So you accelerated the runout by ?? ~ 3 minutes... is it really worth the effort? Seriously, APnic alone is burning 5% of a /8 per day, and collectively all the RIRs have burned through 7.7% per day for this calendar year. In any case, it has been argued both ways that a larger pool will accelerate &/or slow the eventual ARIN exhaust date. There are simply too many unknowns to call that right. The only way to avoid this mess is to rewind the clock 5 years and start IPv6 deployments in time to make this step unnecessary. Since we don't seem to have anyone stepping forward with an operating time machine, that doesn't appear to be a viable option... Tony From hannigan at gmail.com Thu Jan 27 11:42:34 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Thu, 27 Jan 2011 11:42:34 -0500 Subject: [arin-ppml] ARIN-prop-128: Replacement of Section 4.2.4.4 In-Reply-To: <795992.27760.qm@web63307.mail.re1.yahoo.com> References: <795992.27760.qm@web63307.mail.re1.yahoo.com> Message-ID: On Thu, Jan 27, 2011 at 10:11 AM, Lee Howard wrote: > > > > > ----- Original Message ---- >> From: "Hannigan, Martin" > >> There are many reasons why an ?application may be in suspense at the time of >> the reduction, including ARIN ?dawdling on responding, a surprise audit that >> would complete successfully if ?the application were in an accepted stage, >> etc. > > ARIN dawdling? ?If this proposal passes, it will slow processing of applications > by encouraging a flood of them. ?Makes the problem worse, not better. Hard to measure without some performance statistics to be honest. [ clip ] > b. ?Surely ARIN should not stop fraud investigations because runout is > imminent? Definitely not. > c. ?If you want ARIN not to start any resource reviews "at any other time" > between now and IANA runout, I would understand. No, but I want an applicant to not be truncated if they are in the middle of a resource review and at the end of it they are validated to be in compliance with policy. They should receive their request in full based on policy in effect at the time that they made their request. [ clip ] Best, -M< From mysidia at gmail.com Thu Jan 27 13:58:05 2011 From: mysidia at gmail.com (Jimmy Hess) Date: Thu, 27 Jan 2011 12:58:05 -0600 Subject: [arin-ppml] End non-public IPv4 assignments? In-Reply-To: References: <1110124031108.13513A-100000@Ives.egh.com> <20110127134938.GA49758@ussenterprise.ufp.org> Message-ID: On Thu, Jan 27, 2011 at 8:33 AM, William Herrin wrote: hm.. When we are discussing non-public / non-connected network assignments, do we have information about numbers / amount of addresses that were allowed and allocated under this policy? If an allocation under the policy has never been made, there would be no point in keeping it. If small numbers of small allocations have been made, then the impact on legitimate use of IP space of restricting the amount and size of non-connected allocations would be minimal or non-existent. At the very least an org applying for IP space for use with non-connected networks should be required to state that is what they are doing, and indicate via WHOIS which IP space is declared to be non-connected, so they can be added to bogon lists, in order to curtail opportunistic abuse/hijacking that will otherwise occur > On Thu, Jan 27, 2011 at 8:49 AM, Leo Bicknell wrote: [snip] > My crystal ball is no clearer than yours, but if you want my > prediction it's this: either there will be an IP address market or > we'll decide to reclaim addresses which we determine aren't being put > to "good enough use." There's too much money in play; the notion that I would not support ARIN ever entertaining the idea of reclaiming any addresses properly issued by ARIN under ARIN policies in effect at the time of allocation, or a legacy RSA; unless there was fraud involved, non-payment of required fees, breach of the RSA, willful refusal to provide accurate RWHOIS/or follow reassignment policies, in regards to justified need, and maintenance of valid POCs, OR changes to the network after the receipt of addresses cause justified need to no longer exist for that much IP space. In most of those cases, the assignments would be subject to being revoked under current policy. -- -JH From info at arin.net Thu Jan 27 14:11:33 2011 From: info at arin.net (ARIN) Date: Thu, 27 Jan 2011 14:11:33 -0500 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses Message-ID: <4D41C365.6050204@arin.net> ARIN received the following policy proposal and is posting it to the Public Policy Mailing List (PPML) in accordance with the Policy Development Process. The ARIN Advisory Council (AC) will review the proposal at their next regularly scheduled meeting (if the period before the next regularly scheduled meeting is less than 10 days, then the period may be extended to the subsequent regularly scheduled meeting). The AC will decide how to utilize the proposal and announce the decision to the PPML. The AC invites everyone to comment on the proposal on the PPML, particularly their support or non-support and the reasoning behind their opinion. Such participation contributes to a thorough vetting and provides important guidance to the AC in their deliberations. Draft Policies and Proposals under discussion can be found at: https://www.arin.net/policy/proposals/index.html The ARIN Policy Development Process can be found at: https://www.arin.net/policy/pdp.html Mailing list subscription information can be found at: https://www.arin.net/mailing_lists/ Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) ## * ## ARIN-prop-131: Section 5.0 Legacy Addresses Proposal Originator: Martin Hannigan Proposal Version: 1.0 Date: 27 Jan 2011 Proposal type: New Policy term: Permanent Policy statement: Section 5.0 Legacy Addresses 5.1 Returned Legacy Addresses Legacy addresses returned to ARIN will be placed in a hold period not to exceed thirty days. Upon expiration of the hold period and in the absence of a Global Policy or Globally Coordinated Policy directing otherwise, legacy resources returned to ARIN will be made available for allocation to ARIN members. Rationale: Adopting this proposal will result in the clarification of the status of returned legacy addresses. There either is a global policy, a globally coordinated policy, or there isn't. If there isn't, the addresses will not sit idle if there is need. The ARIN AC should review and determine what action if any should be taken at their next available opportunity, or sooner if they deem warranted. Timetable for implementation: Immediately From bill at herrin.us Thu Jan 27 15:06:14 2011 From: bill at herrin.us (William Herrin) Date: Thu, 27 Jan 2011 15:06:14 -0500 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: <4D41C365.6050204@arin.net> References: <4D41C365.6050204@arin.net> Message-ID: On Thu, Jan 27, 2011 at 2:11 PM, ARIN wrote: > ARIN-prop-131: Section 5.0 Legacy Addresses > Section 5.0 Legacy Addresses > > 5.1 Returned Legacy Addresses > > Legacy addresses returned to ARIN will be placed in a hold period not > to exceed thirty days. > > Upon expiration of the hold period and in the absence of a Global > Policy or Globally Coordinated Policy directing otherwise, legacy > resources returned to ARIN will be made available for allocation to > ARIN members. Two obvious problems: 1. ARIN members aren't the only registrants. 2. This probably conflicts with ARIN's existing process for hold times before reuse. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From hannigan at gmail.com Thu Jan 27 16:59:03 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Thu, 27 Jan 2011 16:59:03 -0500 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <4D41C365.6050204@arin.net> Message-ID: On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: > On Thu, Jan 27, 2011 at 2:11 PM, ARIN wrote: >> ARIN-prop-131: Section 5.0 Legacy Addresses > >> Section 5.0 Legacy Addresses >> >> 5.1 Returned Legacy Addresses >> >> Legacy addresses returned to ARIN will be placed in a hold period not >> to exceed thirty days. >> >> Upon expiration of the hold period and in the absence of a Global >> Policy or Globally Coordinated Policy directing otherwise, legacy >> resources returned to ARIN will be made available for allocation to >> ARIN members. > > Two obvious problems: > > 1. ARIN members aren't the only registrants. Explain? > 2. This probably conflicts with ARIN's existing process for hold times > before reuse. Probably. We'll see what they say during the staff review. Thirty days at the point that we're down to utilizing legacy returns for applicants I expect hold periods (like bogons, etc.) for v4 will likely be of little use. The hold period is not for an operational purpose, it's for administration i.e. checking it in, documenting it, whois updates, other administrative requirements, etc. I'm not sure that it's clear and I'll wait for feedback, but the intent here is that if a global policy (coordinated or otherwise) is ratified _after_ legacy addresses are returned to ARIN _and_ after the hold period expires, those addresses are not eligible to be returned to the IANA even if one did get ratified a week later. Best, -M< From bill at herrin.us Thu Jan 27 17:36:30 2011 From: bill at herrin.us (William Herrin) Date: Thu, 27 Jan 2011 17:36:30 -0500 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <4D41C365.6050204@arin.net> Message-ID: On Thu, Jan 27, 2011 at 4:59 PM, Martin Hannigan wrote: > On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: >> Two obvious problems: >> >> 1. ARIN members aren't the only registrants. > > Explain? Hi Marty, Although end-user registrants, legacy-only registrants and registrants holding only non-IP resources may become ARIN members by paying an additional $500/year, they rarely do. With a few exceptions, only ISPs are ARIN members. The basic difference between a member and a non-member is that members can vote in the elections while everybody else merely receives resources. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From kevinb at thewire.ca Thu Jan 27 18:19:04 2011 From: kevinb at thewire.ca (Kevin Blumberg) Date: Thu, 27 Jan 2011 18:19:04 -0500 (EST) Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses Message-ID: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> Marty, I support the proposal. I understand William's concern. Would a change to the text to read ?will be made available for allocation and assignment within the ARIN Region.? work? Kevin Blumberg The Wire Inc. 416.214.9473 www.thewire.ca ----- Original Message ----- From: arin-ppml-bounces at arin.net To: Martin Hannigan Cc: arin-ppml at arin.net Sent: Thu Jan 27 17:36:30 2011 Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses On Thu, Jan 27, 2011 at 4:59 PM, Martin Hannigan wrote: > On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: >> Two obvious problems: >> >> 1. ARIN members aren't the only registrants. > > Explain? Hi Marty, Although end-user registrants, legacy-only registrants and registrants holding only non-IP resources may become ARIN members by paying an additional $500/year, they rarely do. With a few exceptions, only ISPs are ARIN members. The basic difference between a member and a non-member is that members can vote in the elections while everybody else merely receives resources. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From owen at delong.com Fri Jan 28 01:05:48 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 27 Jan 2011 22:05:48 -0800 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <4D41C365.6050204@arin.net> Message-ID: <7C16869E-E903-40F0-AC9B-6C9841024B8E@delong.com> On Jan 27, 2011, at 12:06 PM, William Herrin wrote: > On Thu, Jan 27, 2011 at 2:11 PM, ARIN wrote: >> ARIN-prop-131: Section 5.0 Legacy Addresses > >> Section 5.0 Legacy Addresses >> >> 5.1 Returned Legacy Addresses >> >> Legacy addresses returned to ARIN will be placed in a hold period not >> to exceed thirty days. >> >> Upon expiration of the hold period and in the absence of a Global >> Policy or Globally Coordinated Policy directing otherwise, legacy >> resources returned to ARIN will be made available for allocation to >> ARIN members. > First, I don't support the proposal. However... > Two obvious problems: > > 1. ARIN members aren't the only registrants. That will likely get addressed by the AC cleaning up the language before the proposal goes to the next stage. > 2. This probably conflicts with ARIN's existing process for hold times > before reuse. > I believe the intent is to modify ARIN's practices in this regard. That's a perfectly valid thing for a policy proposal to do. I do question the reasoning behind modifying it only for legacy addresses rather than all reclaimed addresses. Owen From owen at delong.com Fri Jan 28 01:08:38 2011 From: owen at delong.com (Owen DeLong) Date: Thu, 27 Jan 2011 22:08:38 -0800 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <4D41C365.6050204@arin.net> Message-ID: <6EF4B43E-3724-4E36-A6D3-CC7EE91C4939@delong.com> On Jan 27, 2011, at 1:59 PM, Martin Hannigan wrote: > On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: >> On Thu, Jan 27, 2011 at 2:11 PM, ARIN wrote: >>> ARIN-prop-131: Section 5.0 Legacy Addresses >> >>> Section 5.0 Legacy Addresses >>> >>> 5.1 Returned Legacy Addresses >>> >>> Legacy addresses returned to ARIN will be placed in a hold period not >>> to exceed thirty days. >>> >>> Upon expiration of the hold period and in the absence of a Global >>> Policy or Globally Coordinated Policy directing otherwise, legacy >>> resources returned to ARIN will be made available for allocation to >>> ARIN members. >> >> Two obvious problems: >> >> 1. ARIN members aren't the only registrants. > > Explain? > Lots of people apply to and receive resources from ARIN that are not members. The proposal in question makes a statement that these resources should be made available for allocation only to members. I suspect this is a linguistic error and not the author's intent, but, perhaps the author will clarify. >> 2. This probably conflicts with ARIN's existing process for hold times >> before reuse. > Owen From hannigan at gmail.com Fri Jan 28 09:33:50 2011 From: hannigan at gmail.com (Martin Hannigan) Date: Fri, 28 Jan 2011 09:33:50 -0500 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> Message-ID: Thanks, Kevin. And thanks to both of you for the feedback. I was looking at ARIN by-laws with respect to members and all of the comments don't clearly match up. I think generalizing to ARIN region is probably better. Best, -M< On Thu, Jan 27, 2011 at 6:19 PM, Kevin Blumberg wrote: > Marty, > > I support the proposal. I understand William's concern. Would a change to > the text to read ?will be made available for allocation and assignment > within the ARIN > Region.? work? > > > Kevin Blumberg > The Wire Inc. > 416.214.9473 > www.thewire.ca > > > ----- Original Message ----- > From: arin-ppml-bounces at arin.net > To: Martin Hannigan > Cc: arin-ppml at arin.net > Sent: Thu Jan 27 17:36:30 2011 > Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses > > On Thu, Jan 27, 2011 at 4:59 PM, Martin Hannigan wrote: >> On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: >>> Two obvious problems: >>> >>> 1. ARIN members aren't the only registrants. >> >> Explain? > > Hi Marty, > > Although end-user registrants, legacy-only registrants and registrants > holding only non-IP resources may become ARIN members by paying an > additional $500/year, they rarely do. With a few exceptions, only ISPs > are ARIN members. > > The basic difference between a member and a non-member is that members > can vote in the elections while everybody else merely receives > resources. > > Regards, > Bill Herrin > > > > -- > William D. Herrin ................ herrin at dirtside.com ?bill at herrin.us > 3005 Crane Dr. ...................... Web: > Falls Church, VA 22042-3004 > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > From Curtis.Starnes at granburyisd.org Fri Jan 28 11:12:01 2011 From: Curtis.Starnes at granburyisd.org (STARNES, CURTIS) Date: Fri, 28 Jan 2011 10:12:01 -0600 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> Message-ID: Ok, now I have a question about your response regarding ARIN membership. We are an end-user with a /42 IPv6 address block and an ASN assigned to us, which we pay end-user fees for. According to the membership defined page (https://www.arin.net/participate/membership/member.html ) this qualifies my organization to be a General Member of ARIN. According to your statement below, my organization is not a member of ARIN? We have received and paid for direct allocation of IP address space. So, am I missing something here? Curtis Starnes Senior Network Administrator Granbury ISD -----Original Message----- From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Kevin Blumberg Sent: Thursday, January 27, 2011 5:19 PM To: bill at herrin.us; hannigan at gmail.com Cc: arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses Marty, I support the proposal. I understand William's concern. Would a change to the text to read ?will be made available for allocation and assignment within the ARIN Region.? work? Kevin Blumberg The Wire Inc. 416.214.9473 www.thewire.ca ----- Original Message ----- From: arin-ppml-bounces at arin.net To: Martin Hannigan Cc: arin-ppml at arin.net Sent: Thu Jan 27 17:36:30 2011 Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses On Thu, Jan 27, 2011 at 4:59 PM, Martin Hannigan wrote: > On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: >> Two obvious problems: >> >> 1. ARIN members aren't the only registrants. > > Explain? Hi Marty, Although end-user registrants, legacy-only registrants and registrants holding only non-IP resources may become ARIN members by paying an additional $500/year, they rarely do. With a few exceptions, only ISPs are ARIN members. The basic difference between a member and a non-member is that members can vote in the elections while everybody else merely receives resources. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info at arin.net if you experience any issues. From bill at herrin.us Fri Jan 28 11:35:37 2011 From: bill at herrin.us (William Herrin) Date: Fri, 28 Jan 2011 11:35:37 -0500 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> Message-ID: On Fri, Jan 28, 2011 at 11:12 AM, STARNES, CURTIS wrote: > Ok, now I have a question about your response regarding ARIN membership. > > We are an end-user with a /42 IPv6 address block and an ASN assigned to > us, which we pay end-user fees for.According to the membership defined > page (https://www.arin.net/participate/membership/member.html ) this > qualifies my organization to be a General Member of ARIN. > > According to your statement below, my organization is not a member of ARIN? > We have received and paid for direct allocation of IP address space. > So, am I missing something here? Maybe. Quoting: An entity becomes a General Member of ARIN in one of two ways. * Membership is accorded automatically when you receive and pay the associated fees for a direct ALLOCATION of IP address space. * Any entity that has a signed RSA or Legacy RSA and has received a direct ASSIGNMENT of address space, an AS number, an experimental allocation, or any combination of resources and is currently paying an annual maintenance fee to ARIN may choose to become a member by completing the membership application form. There is an ANNUAL FEE of $500.00 for membership. Allocation = ISP/LIR. Pays the $1250+ every year. Assignment = end user. Pays the $1250+ once and then pays $100/year. So, as an end-user resource holder you're qualified to become a member with a $500/yr annual fee. But you are not automatically a member like an ISP is. Regards, Bill Herrin -- William D. Herrin ................ herrin at dirtside.com? bill at herrin.us 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 From owen at delong.com Fri Jan 28 12:14:37 2011 From: owen at delong.com (Owen DeLong) Date: Fri, 28 Jan 2011 09:14:37 -0800 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> Message-ID: If you are paying end-user fees, then you received a direct assignment, not an allocation. An allocation is to an ISP for them to subdivide to their subscribers through the reallocation and reassignment processes. Owen On Jan 28, 2011, at 8:12 AM, STARNES, CURTIS wrote: > Ok, now I have a question about your response regarding ARIN membership. > > We are an end-user with a /42 IPv6 address block and an ASN assigned to us, which we pay end-user fees for. > According to the membership defined page (https://www.arin.net/participate/membership/member.html ) this qualifies my organization to be a General Member of ARIN. > > According to your statement below, my organization is not a member of ARIN? > We have received and paid for direct allocation of IP address space. > So, am I missing something here? > > Curtis Starnes > Senior Network Administrator > Granbury ISD > > > > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On Behalf Of Kevin Blumberg > Sent: Thursday, January 27, 2011 5:19 PM > To: bill at herrin.us; hannigan at gmail.com > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses > > Marty, > > I support the proposal. I understand William's concern. Would a change to the text to read ?will be made available for allocation and assignment within the ARIN Region.? work? > > > Kevin Blumberg > The Wire Inc. > 416.214.9473 > www.thewire.ca > > > ----- Original Message ----- > From: arin-ppml-bounces at arin.net > To: Martin Hannigan > Cc: arin-ppml at arin.net > Sent: Thu Jan 27 17:36:30 2011 > Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses > > On Thu, Jan 27, 2011 at 4:59 PM, Martin Hannigan wrote: >> On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: >>> Two obvious problems: >>> >>> 1. ARIN members aren't the only registrants. >> >> Explain? > > Hi Marty, > > Although end-user registrants, legacy-only registrants and registrants holding only non-IP resources may become ARIN members by paying an additional $500/year, they rarely do. With a few exceptions, only ISPs are ARIN members. > > The basic difference between a member and a non-member is that members can vote in the elections while everybody else merely receives resources. > > Regards, > Bill Herrin > > > > -- > William D. Herrin ................ herrin at dirtside.com bill at herrin.us > 3005 Crane Dr. ...................... Web: Falls Church, VA 22042-3004 _______________________________________________ > PPML > You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From Curtis.Starnes at granburyisd.org Fri Jan 28 14:52:08 2011 From: Curtis.Starnes at granburyisd.org (STARNES, CURTIS) Date: Fri, 28 Jan 2011 13:52:08 -0600 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> Message-ID: Ok, thanks Owen -----Original Message----- From: Owen DeLong [mailto:owen at delong.com] Sent: Friday, January 28, 2011 11:15 AM To: STARNES, CURTIS Cc: Kevin Blumberg; bill at herrin.us; hannigan at gmail.com; arin-ppml at arin.net Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses If you are paying end-user fees, then you received a direct assignment, not an allocation. An allocation is to an ISP for them to subdivide to their subscribers through the reallocation and reassignment processes. Owen On Jan 28, 2011, at 8:12 AM, STARNES, CURTIS wrote: > Ok, now I have a question about your response regarding ARIN membership. > > We are an end-user with a /42 IPv6 address block and an ASN assigned to us, which we pay end-user fees for. > According to the membership defined page (https://www.arin.net/participate/membership/member.html ) this qualifies my organization to be a General Member of ARIN. > > According to your statement below, my organization is not a member of ARIN? > We have received and paid for direct allocation of IP address space. > So, am I missing something here? > > Curtis Starnes > Senior Network Administrator > Granbury ISD > > > > -----Original Message----- > From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] > On Behalf Of Kevin Blumberg > Sent: Thursday, January 27, 2011 5:19 PM > To: bill at herrin.us; hannigan at gmail.com > Cc: arin-ppml at arin.net > Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses > > Marty, > > I support the proposal. I understand William's concern. Would a change to the text to read "will be made available for allocation and assignment within the ARIN Region." work? > > > Kevin Blumberg > The Wire Inc. > 416.214.9473 > www.thewire.ca > > > ----- Original Message ----- > From: arin-ppml-bounces at arin.net > To: Martin Hannigan > Cc: arin-ppml at arin.net > Sent: Thu Jan 27 17:36:30 2011 > Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses > > On Thu, Jan 27, 2011 at 4:59 PM, Martin Hannigan wrote: >> On Thu, Jan 27, 2011 at 3:06 PM, William Herrin wrote: >>> Two obvious problems: >>> >>> 1. ARIN members aren't the only registrants. >> >> Explain? > > Hi Marty, > > Although end-user registrants, legacy-only registrants and registrants holding only non-IP resources may become ARIN members by paying an additional $500/year, they rarely do. With a few exceptions, only ISPs are ARIN members. > > The basic difference between a member and a non-member is that members can vote in the elections while everybody else merely receives resources. > > Regards, > Bill Herrin > > > > -- > William D. Herrin ................ herrin at dirtside.com bill at herrin.us > 3005 Crane Dr. ...................... Web: > Falls Church, VA 22042-3004 > _______________________________________________ > PPML > You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. > _______________________________________________ > PPML > You are receiving this message because you are subscribed to the ARIN > Public Policy Mailing List (ARIN-PPML at arin.net). > Unsubscribe or manage your mailing list subscription at: > http://lists.arin.net/mailman/listinfo/arin-ppml > Please contact info at arin.net if you experience any issues. From packetgrrl at gmail.com Sat Jan 29 18:59:25 2011 From: packetgrrl at gmail.com (cja@daydream.com) Date: Sat, 29 Jan 2011 16:59:25 -0700 Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses In-Reply-To: References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca> Message-ID: Marty I have a question and a clarification. Do you think this should apply if someone returns non-legacy addresses? Further I would think we should mention here that right now if a block longer than a /8 is given back to any RIR, and that RIR returns it to the iANA there is no policy in place that allows the IANA to distribute any prefix longer than a /8. The global policy for the IANA to give addresses to the RIRs specifies only /8s. So if an RIR returns a block to the IANA that is longer than a /8 it will sit there unused because of the absence of policy. I just figured that folks on this list might want to clearly understand the specific lack of policy here. Thanks! ----Cathy -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Sun Jan 30 18:09:26 2011 From: owen at delong.com (Owen DeLong) Date: Sun, 30 Jan 2011 15:09:26 -0800 Subject: [arin-ppml] Updated 121 to address staff comments Message-ID: Modified sections 2.12, 2.13, and 2.14 to clarify that these definitions apply only to IPv6 policies. (The term -> When applied to IPv6 policies, the term) Added some line spacing for better readability in several areas. Modified Section 6.5.2.2(b) to clarify the logic. It now reads: (b) Are currently multihomed or will immediately become multihomed for IPv6 using a valid assigned global AS number. In either case, they will be making reassignments from allcation(s) under this policy to other organizations. Staff had commented about the section mixing tenses. I believe that is intentional in the first sentence and that the future tense remaining in the second sentence is necessary. I suspect that this comment may have been a result of misinterpretation of the relationship between the and and or clauses in the prior version. Modified Section 6.5.2.2(c) for grammar and punctuation. It now reads: (c) Provide ARIN a reasonable technical justification indicating why an allocation is necessary. Justification must include the intended purposes for the allocation and describe the network infrastructure the allocation will be used to support. Justification must also include a plan detailing anticipated assignments to other organizations or customers for one two and five year periods, with a minimum of 50 assignments within 5 years. Added the following clarification at the bottom of the rationale section (above the sizing table): Clarifications in response to Staff and Legal Assessment In the Proposal Summary (Staff Understanding) staff states "This policy will lower the current minimum allocation size from a /32 to a /36 as it allows ISPs to request a /36". It should be noted that this policy still allows any ISP to receive at least a /32. However, the /36 is provided as an option specifically to allow very small ISPs currently in the x-small IPv4 fee category a reduced option. It is the intent that by allowing this, the board may reconsider the IPv6 ISP fee table and allow these particularly small organizations to obtain IPv6 without increasing their annual subscription fees from ARIN. Since fees are not a policy matter, the fee request must be considered elsewhere, but, the enabling policy language contained in this policy is a precursor to that discussion. The author has submitted a request that the board make the fee change to the IPv6 fee table through the ACSP. Here is the revised policy in its entirety: Policy Proposal: Better IPv6 Allocations for ISPs Version/Date: 30 January, 2011 Policy Statement: Amend section 2 as follows: Delete section 2.9 (Obsolete) Replace section 2.10 with the following: 2.10 The term End Site shall mean a single structure or service delivery address, or, in the case of a multi-tenant structure, a single tenant within said structure (a single customer location). Add the following: 2.12 When applied to IPv6 policies, the term serving site shall mean a location where an ISP terminates or aggregates customer connections, including, but, not limited to Points of Presence (POPs), Datacenters, Central or Local switching office or regional or local combinations thereof. 2.13 When applied to IPv6 policies, the term "provider assignment unit" shall mean the prefix of the smallest block a given ISP assigns to end sites (recommended /48). 2.14 The term utilized shall have the following definitions when applied to IPv6 policies: (i) A provider assignment unit shall be considered fully utilized when it is assigned to an end-site. (ii) Larger blocks shall have their utilization defined by dividing the number of provider assignment units assigned from the containing block by the total number of provider assignment units. This ratio will often be expressed as a percentage (e.g. a/t*100, for a /36 3072/4096 * 100 = 75% utilization) Replace sections 6.5.1 through 6.5.3 with the following: 6.5.1 Terminology (a) The terms ISP and LIR are used interchangeably in this document and any use of either term shall be construed to include both meanings. (b) The term nibble boundary shall mean a network mask which aligns on a 4-bit boundary (in slash notation, /n, where n is evenly divisible by 4, allowing unit quantities of X such that 2^n=X where n is evenly divisible by 4, such as 16, 256, 4096, etc.) 6.5.2 Initial Allocations to LIRs 6.5.2.1 Size (a) All allocations shall be made on nibble boundaries. (b) In no case shall an LIR receive smaller than a /32 unless they specifically request a /36. (c) The maximum allowable allocation shall be the smallest nibble-boundary aligned block that can provide an equally sized nibble-boundary aligned block to each of the requesters serving sites large enough to satisfy the needs of the requesters largest single serving site using no more than 75% of the available addresses. This calculation can be summarized as /N where N = 48-(X+Y) and X is a multiple of 4 greater than 4/3*serving sites and Y is a multiple of 4 greater than 4/3*end sites served by largest serving site. (d) For purposes of the calculation in (c), an end site which can justify more than a /48 under the end-user assignment criteria in 6.5.8 shall count as the appropriate number of /48s that would be assigned under that policy. (e) For purposes of the calculation in (c), an LIR which has subordinate LIRs shall make such allocations according to the same policies and criteria as ARIN. In such a case, the prefixes necessary for such an allocation should be treated as fully utilized in determining the block sizing for the parent LIR. (f) An LIR is not required to design or deploy their network according to this structure. It is strictly a mechanism to determine the largest IP address block to which the LIR is entitled. 6.5.2.2 Qualifications An organization qualifies for an allocation under this policy if they meet any of the following criteria: (a) Have a previously justified IPv4 ISP allocation from ARIN or one of its predecessor registries or can qualify for an IPv4 ISP allocation under current criteria. (b) Are currently multihomed for IPv6 or will immediately become multihomed for IPv6 using a valid assigned global AS number. In either case, they will be making reassignments from allocation(s) under this policy to other organizations. (c) Provide ARIN a reasonable technical justification indicating why an allocation is necessary. Justification must include the intended purposes for the allocation and describe the network infrastructure the allocation will be used to support. Justification must also include a plan detailing anticipated assignments to other organizations or customers for one, two and five year periods, with a minimum of 50 assignments within 5 years. 6.5.3 Subsequent Allocations to LIRs (a) Where possible ARIN will make subsequent allocations by expanding the existing allocation. (b) An LIR which can show utilization of 75% or more of their total address space, or more than 90% of any serving site shall be entitled to a subsequent allocation. (c) If ARIN can not expand one or more existing allocations, ARIN shall make a new allocation based on the initial allocation criteria above. The LIR is encouraged, but not required to renumber into the new allocation over time and return any allocations no longer in use. Replace section 6.5.4 with the following 6.5.4 Assignments to end users shall be governed by the same practices adopted by the community in section 6.5.8 except that the requirements in 6.5.8.1 do not apply. Add the following to 6.5.7 LIRs which received an allocation under previous policies which is smaller than what they are entitled to under this policy may receive a new initial allocation under this policy provided that they agree to renumber into that new allocation and return their prior allocation(s) within 5 years. If possible, ARIN will simply expand their existing allocation rather than requiring renumber and return. == Rationale: ==
The current ISP policy for IPv6 allocations is both short-sighted and
insufficient for rational deployments by most ISPs. We have gained
significant operational experience with IPv6 in the time since it was
written and it is clear that current policy is driving many ISPs to choices
of excess conservatism that will eventually harm innovation in the
consumer space.

Under the proposed policy, the entirety of the ARIN region can still
be numbered in no more than 2 /12s (quite probably 1). There are
still 506 /12s free within the current /3. It is unreasonable to shoot
ourselves in the foot with address scarcity thinking so early into the
IPv6 deployment. This policy seeks to strike a more reasonable and
harmonious balance of the goals stated in NRPM 6.3.

The lower bound of /36 is intended to facilitate extremely small
ISPs getting a smaller block if they do not need to support more
than ~4000 customers. It is hoped that the board will take
subsequent action to adjust the fee structure to eliminate
the $1,000/year price hike for those extremely small ISPs. These
ISPs can, of course, get a /32 if they wish.

The intent of section 6.5.4 is to create and preserve parity between
the requirements for LIR->End User and ARIN->End User policies.
This section presumes that 6.5.8 has already been modified as
described in draft policy 2010-8.

Some examples of determining the size of block for which an
organization is eligible:

Bill's Bait, Sushi, and IP Transit:
	Largest serving site:		200 end sites
	Number of serving sites:	5
	200 rounds up to 256 (nibble boundary, 8 bits). 200 > 192 (256 * 0.75), so, round up to 4096 (12 bits)
	5 rounds up to 16 (nibble boundary, 4 bits). 5 < 12 (16 * 0.75), so, no further round up. 16 (4 bits)
	48 - (12+4) = 32 -- This organization could receive up to a /32.
Lee's Rural Internet, Inc.
	Largest serving site:		1024 end sites
	Number of serving sites:	30
	1024 rounds up to 4096 (nibble boundary, 12 bits) 1024 < 3072 (4096 * 0.75), so 4096 (12 bits)
	30 rounds up to 256 (nibble boundary, 8 bits). 30 < 192 (256 * 0.75), so, 256 (8 bits)
	48 - (12+8) = 28 -- This organization could receive up to a /28.
Paul's Mega Metro ISP, LLC
	Largest serving site:		3,500 end sites
	Number of serving sites:	140
	3,500 rounds up to 4096 (nibble boundary, 12 bits). 3500 > 3072 (4096 * 0.75), so, round up to 65,536 (16 bits)
	140 rounds up to 256 (nibble boundary, 8 bits) 140 < 192 (256 * 0.75), so, 256 (8 bits)
	48 - (16+8) = 24 -- This organization could receive up to a /24
PON's CMTS mega DSL Corp.
	Largest serving site:		30,000 end sites
	Number of serving sites:	700
	30,000 rounds up to 65,536 (nibble boundary, 16 bits). 30,000 < 49,152 (65536 * 0.75), so, 65,536 (16 bits)
	700 rounds up to 4,096 (nibble boundary, 12 bits). 700 < 3072 (4096 * 0.75), so, 4,096 (12 bits)
	48 - (16+12) = 20 -- This organization could receive up to a /20.

Clarifications in response to Staff and Legal Assessment

In the Proposal Summary (Staff understanding) staff states "This policy will lower the current minimum allocation
size from a /32 to a /36 as it allows ISPs to request a /36". It should be noted that this policy still allows any ISP
to receive at least a /32. However, the /36 is provided as an option specifically to allow very small ISPs currently
in the x-small IPv4 category a reduced option. It is the intent that by allowing this, the board may reconsider the
minimum IPv6 ISP fee table and allow these particularly small organizations to obtain IPv6 without increasing their
annual subscription fees from ARIN. Since Fees are not a policy matter, the fee request must be considered
elsewhere, but, the enabling policy language contained in this policy is a precursor to that discussion. The author
has submitted a request that the board consider this fee structure through the ACSP.

Owen



From Curtis.Starnes at granburyisd.org  Mon Jan 31 08:05:55 2011
From: Curtis.Starnes at granburyisd.org (STARNES, CURTIS)
Date: Mon, 31 Jan 2011 07:05:55 -0600
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 1296478245wherrin@gmail.com
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	1296478245wherrin@gmail.com
Message-ID: 

Thanks Bill,
I went back and re-read this section before I received your email and picked your explanation up on the second reading.
It makes sense, from an ISP's stand point, allocating resources rather than my just consuming resources from an end-users perspective and the differences in the yearly fees; $500.00 is not much compared to what ISP's have to pay in yearly recurring costs in ARIN fees.

Thanks for the explanation.  As an end-user, the verbage that makes the resources available to members, I would be opposed to.

As a normal end-user of IP address space, the wording of the prop 131 would exclude organizations like ours from being able to apply for any of the returned IPv4 resources.

Curtis Starnes
Granbury Independent School District
817-408-4104

-----Original Message-----
From: wherrin at gmail.com [mailto:wherrin at gmail.com] 
Sent: Friday, January 28, 2011 10:36 AM
To: STARNES, CURTIS
Cc: arin-ppml at arin.net
Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses

On Fri, Jan 28, 2011 at 11:12 AM, STARNES, CURTIS  wrote:
> Ok, now I have a question about your response regarding ARIN membership.
>
> We are an end-user with a /42 IPv6 address block and an ASN assigned 
> to us, which we pay end-user fees for.According to the membership 
> defined page (https://www.arin.net/participate/membership/member.html 
> ) this qualifies my organization to be a General Member of ARIN.
>
> According to your statement below, my organization is not a member of ARIN?
> We have received and paid for direct allocation of IP address space.
> So, am I missing something here?

Maybe. Quoting:

An entity becomes a General Member of ARIN in one of two ways.

    * Membership is accorded automatically when you receive and pay the associated fees for a direct ALLOCATION of IP address space.
    * Any entity that has a signed RSA or Legacy RSA and has received a direct ASSIGNMENT of address space, an AS number, an experimental allocation, or any combination of resources and is currently paying an annual maintenance fee to ARIN may choose to become a member by completing the membership application form. There is an ANNUAL FEE of
$500.00 for membership.

Allocation = ISP/LIR. Pays the $1250+ every year.
Assignment = end user. Pays the $1250+ once and then pays $100/year.

So, as an end-user resource holder you're qualified to become a member with a $500/yr annual fee. But you are not automatically a member like an ISP is.

Regards,
Bill Herrin




--
William D. Herrin ................ herrin at dirtside.com? bill at herrin.us
3005 Crane Dr. ...................... Web:  Falls Church, VA 22042-3004 .


From hannigan at gmail.com  Mon Jan 31 09:05:55 2011
From: hannigan at gmail.com (Martin Hannigan)
Date: Mon, 31 Jan 2011 09:05:55 -0500
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
Message-ID: 

On Mon, Jan 31, 2011 at 8:05 AM, STARNES, CURTIS
 wrote:
> Thanks Bill,
> I went back and re-read this section before I received your email and picked your explanation up on the second reading.
> It makes sense, from an ISP's stand point, allocating resources rather than my just consuming resources from an end-users perspective and the differences in the yearly fees; $500.00 is not much compared to what ISP's have to pay in yearly recurring costs in ARIN fees.
>
> Thanks for the explanation. ?As an end-user, the verbage that makes the resources available to members, I would be opposed to.
>
> As a normal end-user of IP address space, the wording of the prop 131 would exclude organizations like ours from being able to apply for any of the returned IPv4 resources.
>


I'm not positive that this is actually the problem that is being
discussed, but I'll fully explore the question and come up with
something to clarify it in version 2. The intent is that of providing
addresses to legitimate users of ARIN resources. I wouldn't get too
hung up on the language. At least not yet. Thanks for the feedback.

Best,

-M<


From hannigan at gmail.com  Mon Jan 31 11:58:53 2011
From: hannigan at gmail.com (Martin Hannigan)
Date: Mon, 31 Jan 2011 11:58:53 -0500
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
Message-ID: 

On Fri, Jan 28, 2011 at 11:35 AM, William Herrin  wrote:
> On Fri, Jan 28, 2011 at 11:12 AM, STARNES, CURTIS
>  wrote:
>> Ok, now I have a question about your response regarding ARIN membership.
>>
>> We are an end-user with a /42 IPv6 address block and an ASN assigned to
>> us, which we pay end-user fees for.According to the membership defined
>> page (https://www.arin.net/participate/membership/member.html ) this
>> qualifies my organization to be a General Member of ARIN.
>>
>> According to your statement below, my organization is not a member of ARIN?
>> We have received and paid for direct allocation of IP address space.
>> So, am I missing something here?
>
> Maybe. Quoting:
>
> An entity becomes a General Member of ARIN in one of two ways.
>
> ? ?* Membership is accorded automatically when you receive and pay
> the associated fees for a direct ALLOCATION of IP address space.
> ? ?* Any entity that has a signed RSA or Legacy RSA and has received
> a direct ASSIGNMENT of address space, an AS number, an experimental
> allocation, or any combination of resources and is currently paying an
> annual maintenance fee to ARIN may choose to become a member by
> completing the membership application form. There is an ANNUAL FEE of
> $500.00 for membership.
>
> Allocation = ISP/LIR. Pays the $1250+ every year.
> Assignment = end user. Pays the $1250+ once and then pays $100/year.
>
> So, as an end-user resource holder you're qualified to become a member
> with a $500/yr annual fee. But you are not automatically a member like
> an ISP is.
>


William,

Do you think that this will suffice?

"Upon expiration of the hold period and in the absence of a Global
Policy or Globally Coordinated Policy directing otherwise, legacy
resources returned to ARIN will be made available for allocation."

Best,

-M<


From packetgrrl at gmail.com  Mon Jan 31 12:02:42 2011
From: packetgrrl at gmail.com (cja@daydream.com)
Date: Mon, 31 Jan 2011 10:02:42 -0700
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
Message-ID: 

I think it should say "made available for allocation or assignment"

----CJ

On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan  wrote:

> On Fri, Jan 28, 2011 at 11:35 AM, William Herrin  wrote:
> > On Fri, Jan 28, 2011 at 11:12 AM, STARNES, CURTIS
> >  wrote:
> >> Ok, now I have a question about your response regarding ARIN membership.
> >>
> >> We are an end-user with a /42 IPv6 address block and an ASN assigned to
> >> us, which we pay end-user fees for.According to the membership defined
> >> page (https://www.arin.net/participate/membership/member.html ) this
> >> qualifies my organization to be a General Member of ARIN.
> >>
> >> According to your statement below, my organization is not a member of
> ARIN?
> >> We have received and paid for direct allocation of IP address space.
> >> So, am I missing something here?
> >
> > Maybe. Quoting:
> >
> > An entity becomes a General Member of ARIN in one of two ways.
> >
> >    * Membership is accorded automatically when you receive and pay
> > the associated fees for a direct ALLOCATION of IP address space.
> >    * Any entity that has a signed RSA or Legacy RSA and has received
> > a direct ASSIGNMENT of address space, an AS number, an experimental
> > allocation, or any combination of resources and is currently paying an
> > annual maintenance fee to ARIN may choose to become a member by
> > completing the membership application form. There is an ANNUAL FEE of
> > $500.00 for membership.
> >
> > Allocation = ISP/LIR. Pays the $1250+ every year.
> > Assignment = end user. Pays the $1250+ once and then pays $100/year.
> >
> > So, as an end-user resource holder you're qualified to become a member
> > with a $500/yr annual fee. But you are not automatically a member like
> > an ISP is.
> >
>
>
> William,
>
> Do you think that this will suffice?
>
> "Upon expiration of the hold period and in the absence of a Global
> Policy or Globally Coordinated Policy directing otherwise, legacy
> resources returned to ARIN will be made available for allocation."
>
> Best,
>
> -M<
> _______________________________________________
> PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> http://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From cgrundemann at gmail.com  Mon Jan 31 14:06:13 2011
From: cgrundemann at gmail.com (Chris Grundemann)
Date: Mon, 31 Jan 2011 12:06:13 -0700
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
Message-ID: 

On Mon, Jan 31, 2011 at 10:02, cja at daydream.com  wrote:
> I think it should say "made available for allocation or assignment"

Agreed.

Also, I am still confused as to why this policy is limited to legacy
resources specifically?
~Chris

> ----CJ
>
> On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan  wrote:
>> William,
>>
>> Do you think that this will suffice?
>>
>> "Upon expiration of the hold period and in the absence of a Global
>> Policy or Globally Coordinated Policy directing otherwise, legacy
>> resources returned to ARIN will be made available for allocation."
>>
>> Best,
>>
>> -M<
>
>
> _______________________________________________
> PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> http://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.
>


-- 
@ChrisGrundemann
weblog.chrisgrundemann.com
www.burningwiththebush.com
www.theIPv6experts.net
www.coisoc.org


From bill at herrin.us  Mon Jan 31 14:54:05 2011
From: bill at herrin.us (William Herrin)
Date: Mon, 31 Jan 2011 14:54:05 -0500
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
Message-ID: 

On Mon, Jan 31, 2011 at 12:02 PM, cja at daydream.com  wrote:
> On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan  wrote:
>> Do you think that this will suffice?
>>
>> "Upon expiration of the hold period and in the absence of a Global
>> Policy or Globally Coordinated Policy directing otherwise, legacy
>> resources returned to ARIN will be made available for allocation."
>
> I think it should say "made available for allocation or assignment"

Right. Allocation and assignment are loaded words in ARIN-speak. If
you specify the one but not the other in policy, you restrict the
usage of those addresses. You could also say something like "made
available for registration," without using either of the two loaded
words.

Regards,
Bill Herrin

p.s. Yes, I'm sad to report there is in fact an ARIN-speak -- words
and phrases with special meanings overloaded on the plain English,
meanings that tend to obstruct outsiders' understanding both in the
debate and the policy documents. This is unfortunate since it harms
ARIN's accessibility to the public, but that's a crusade for another
day.

-- 
William D. Herrin ................ herrin at dirtside.com? bill at herrin.us
3005 Crane Dr. ...................... Web: 
Falls Church, VA 22042-3004


From packetgrrl at gmail.com  Mon Jan 31 15:10:01 2011
From: packetgrrl at gmail.com (cja@daydream.com)
Date: Mon, 31 Jan 2011 13:10:01 -0700
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
Message-ID: 

Let's be clear this is not "ARIN speak".  This is RIR speak.    If you have
a better alternative to distinguish between addresses that are given out to
be further assigned to customers as opposed to blocks given that are
intended not to be further delegated then feel free to make a suggestion.
Most of us would love a workable alternative.

Thanks!

----Cathy

On Mon, Jan 31, 2011 at 12:54 PM, William Herrin  wrote:

> On Mon, Jan 31, 2011 at 12:02 PM, cja at daydream.com 
> wrote:
> > On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan 
> wrote:
> >> Do you think that this will suffice?
> >>
> >> "Upon expiration of the hold period and in the absence of a Global
> >> Policy or Globally Coordinated Policy directing otherwise, legacy
> >> resources returned to ARIN will be made available for allocation."
> >
> > I think it should say "made available for allocation or assignment"
>
> Right. Allocation and assignment are loaded words in ARIN-speak. If
> you specify the one but not the other in policy, you restrict the
> usage of those addresses. You could also say something like "made
> available for registration," without using either of the two loaded
> words.
>
> Regards,
> Bill Herrin
>
> p.s. Yes, I'm sad to report there is in fact an ARIN-speak -- words
> and phrases with special meanings overloaded on the plain English,
> meanings that tend to obstruct outsiders' understanding both in the
> debate and the policy documents. This is unfortunate since it harms
> ARIN's accessibility to the public, but that's a crusade for another
> day.
>
> --
> William D. Herrin ................ herrin at dirtside.com  bill at herrin.us
> 3005 Crane Dr. ...................... Web: 
> Falls Church, VA 22042-3004
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 

From hannigan at gmail.com  Mon Jan 31 17:31:26 2011
From: hannigan at gmail.com (Martin Hannigan)
Date: Mon, 31 Jan 2011 17:31:26 -0500
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
Message-ID: 

On Mon, Jan 31, 2011 at 2:06 PM, Chris Grundemann  wrote:
> On Mon, Jan 31, 2011 at 10:02, cja at daydream.com  wrote:
>> I think it should say "made available for allocation or assignment"

[ clip ]

>
> Also, I am still confused as to why this policy is limited to legacy
> resources specifically?


If someone wants to articulate the problem with this proposal the way
it is, (aside from the language that Bill and Chris commented on, I'd
be happy to consider it.


Best,

-M<


From bill at herrin.us  Mon Jan 31 17:49:43 2011
From: bill at herrin.us (William Herrin)
Date: Mon, 31 Jan 2011 17:49:43 -0500
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
	
Message-ID: 

On Mon, Jan 31, 2011 at 3:10 PM, cja at daydream.com  wrote:
> Let's be clear this is not "ARIN speak". ?This is RIR speak.

Hi Cathy,

Fair enough; it's RIR-speak.


> ?If you have
> a better alternative to distinguish between addresses that are given out to
> be further assigned to customers as opposed to blocks given that are
> intended not to be further delegated then feel free to make a suggestion.
> Most of us would love a workable alternative.

Okay, I deserved that. The only thing I have is: use more words. One
word whose plain English meaning implies receiving the
allocation/assignment/delegation/registration and a second word or
words whose plain English meaning sets out the difference between
delegable/ISP/LIR registrations and those which are indivisible.

Regards,
Bill



-- 
William D. Herrin ................ herrin at dirtside.com? bill at herrin.us
3005 Crane Dr. ...................... Web: 
Falls Church, VA 22042-3004


From owen at delong.com  Mon Jan 31 18:11:49 2011
From: owen at delong.com (Owen DeLong)
Date: Mon, 31 Jan 2011 15:11:49 -0800
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
	
Message-ID: <1526F6C3-B331-46AF-AEDB-04FC8F1193B9@delong.com>


On Jan 31, 2011, at 2:31 PM, Martin Hannigan wrote:

> On Mon, Jan 31, 2011 at 2:06 PM, Chris Grundemann  wrote:
>> On Mon, Jan 31, 2011 at 10:02, cja at daydream.com  wrote:
>>> I think it should say "made available for allocation or assignment"
> 
> [ clip ]
> 
>> 
>> Also, I am still confused as to why this policy is limited to legacy
>> resources specifically?
> 
> 
> If someone wants to articulate the problem with this proposal the way
> it is, (aside from the language that Bill and Chris commented on, I'd
> be happy to consider it.
> 
Is it intentional to apply the policy to all returned resources or only
to resources that were not originally issued by ARIN?

If the former, then, the current language does not accomplish your
intent.

Owen



From hannigan at gmail.com  Mon Jan 31 18:23:17 2011
From: hannigan at gmail.com (Martin Hannigan)
Date: Mon, 31 Jan 2011 18:23:17 -0500
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
Message-ID: 

On Mon, Jan 31, 2011 at 2:54 PM, William Herrin  wrote:
> On Mon, Jan 31, 2011 at 12:02 PM, cja at daydream.com  wrote:
>> On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan  wrote:
>>> Do you think that this will suffice?
>>>
>>> "Upon expiration of the hold period and in the absence of a Global
>>> Policy or Globally Coordinated Policy directing otherwise, legacy
>>> resources returned to ARIN will be made available for allocation."
>>
>> I think it should say "made available for allocation or assignment"
>
> Right. Allocation and assignment are loaded words in ARIN-speak. If
> you specify the one but not the other in policy, you restrict the
> usage of those addresses. You could also say something like "made
> available for registration," without using either of the two loaded
> words.


In the interest of over simplicity, I think that version 2.0 might be
more clear stating:

"Legacy IPv4 addresses returned to or recovered by ARIN will be made
available for registration within thirty days of their receipt."

I agree with you with respect to more words, but in this case, I think
that less is more.


Best,

-M<


From owen at delong.com  Mon Jan 31 18:30:40 2011
From: owen at delong.com (Owen DeLong)
Date: Mon, 31 Jan 2011 15:30:40 -0800
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
	
Message-ID: <54562B8B-FF6F-45EE-A2F3-E9E469EF56C3@delong.com>

In the spirit of less is more, may I suggest that you remove the word Legacy
from both the title and the sentence.

Owen

On Jan 31, 2011, at 3:23 PM, Martin Hannigan wrote:

> On Mon, Jan 31, 2011 at 2:54 PM, William Herrin  wrote:
>> On Mon, Jan 31, 2011 at 12:02 PM, cja at daydream.com  wrote:
>>> On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan  wrote:
>>>> Do you think that this will suffice?
>>>> 
>>>> "Upon expiration of the hold period and in the absence of a Global
>>>> Policy or Globally Coordinated Policy directing otherwise, legacy
>>>> resources returned to ARIN will be made available for allocation."
>>> 
>>> I think it should say "made available for allocation or assignment"
>> 
>> Right. Allocation and assignment are loaded words in ARIN-speak. If
>> you specify the one but not the other in policy, you restrict the
>> usage of those addresses. You could also say something like "made
>> available for registration," without using either of the two loaded
>> words.
> 
> 
> In the interest of over simplicity, I think that version 2.0 might be
> more clear stating:
> 
> "Legacy IPv4 addresses returned to or recovered by ARIN will be made
> available for registration within thirty days of their receipt."
> 
> I agree with you with respect to more words, but in this case, I think
> that less is more.
> 
> 
> Best,
> 
> -M<
> _______________________________________________
> PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> http://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.



From alh-ietf at tndh.net  Mon Jan 31 19:17:40 2011
From: alh-ietf at tndh.net (Tony Hain)
Date: Mon, 31 Jan 2011 16:17:40 -0800
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: <54562B8B-FF6F-45EE-A2F3-E9E469EF56C3@delong.com>
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>						
	<54562B8B-FF6F-45EE-A2F3-E9E469EF56C3@delong.com>
Message-ID: <123a01cbc1a5$7c98bba0$75ca32e0$@net>

Taking Owen's point a little further; IPv4 is 'legacy', so it is
redundant...

Tony


> -----Original Message-----
> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On
> Behalf Of Owen DeLong
> Sent: Monday, January 31, 2011 3:31 PM
> To: Martin Hannigan
> Cc: arin-ppml at arin.net
> Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
> 
> In the spirit of less is more, may I suggest that you remove the word
> Legacy
> from both the title and the sentence.
> 
> Owen
> 
> On Jan 31, 2011, at 3:23 PM, Martin Hannigan wrote:
> 
> > On Mon, Jan 31, 2011 at 2:54 PM, William Herrin 
> wrote:
> >> On Mon, Jan 31, 2011 at 12:02 PM, cja at daydream.com
>  wrote:
> >>> On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan
>  wrote:
> >>>> Do you think that this will suffice?
> >>>>
> >>>> "Upon expiration of the hold period and in the absence of a Global
> >>>> Policy or Globally Coordinated Policy directing otherwise, legacy
> >>>> resources returned to ARIN will be made available for allocation."
> >>>
> >>> I think it should say "made available for allocation or assignment"
> >>
> >> Right. Allocation and assignment are loaded words in ARIN-speak. If
> >> you specify the one but not the other in policy, you restrict the
> >> usage of those addresses. You could also say something like "made
> >> available for registration," without using either of the two loaded
> >> words.
> >
> >
> > In the interest of over simplicity, I think that version 2.0 might be
> > more clear stating:
> >
> > "Legacy IPv4 addresses returned to or recovered by ARIN will be made
> > available for registration within thirty days of their receipt."
> >
> > I agree with you with respect to more words, but in this case, I
> think
> > that less is more.
> >
> >
> > Best,
> >
> > -M<
> > _______________________________________________
> > PPML
> > You are receiving this message because you are subscribed to
> > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> > Unsubscribe or manage your mailing list subscription at:
> > http://lists.arin.net/mailman/listinfo/arin-ppml
> > Please contact info at arin.net if you experience any issues.
> 
> _______________________________________________
> PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> http://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.



From hannigan at gmail.com  Mon Jan 31 21:09:06 2011
From: hannigan at gmail.com (Martin Hannigan)
Date: Mon, 31 Jan 2011 21:09:06 -0500
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: <123a01cbc1a5$7c98bba0$75ca32e0$@net>
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
	
	<54562B8B-FF6F-45EE-A2F3-E9E469EF56C3@delong.com>
	<123a01cbc1a5$7c98bba0$75ca32e0$@net>
Message-ID: 

It's consistent with terms in the NRPM and with respect to the "L"RSA.
 It's not the regular v4 pool and at least in the interim I think it's
unwise to mix policy across the spectrum with arin or rir-speak.
"Sanctioned" v4 addresses are not going to be part of the fluid v4
economy, but former IANA addresses will be. There is going to be a
level of distinction required hence "section 5.0". Continued policy
writing with respect to, for lack of a better term -- normalized
addresses,  should become sparse as time wears on. At least one would
hope.

Ideas welcomed.

Best.

-M<



On Mon, Jan 31, 2011 at 7:17 PM, Tony Hain  wrote:
> Taking Owen's point a little further; IPv4 is 'legacy', so it is
> redundant...
>
> Tony
>
>
>> -----Original Message-----
>> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On
>> Behalf Of Owen DeLong
>> Sent: Monday, January 31, 2011 3:31 PM
>> To: Martin Hannigan
>> Cc: arin-ppml at arin.net
>> Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
>>
>> In the spirit of less is more, may I suggest that you remove the word
>> Legacy
>> from both the title and the sentence.
>>
>> Owen
>>
>> On Jan 31, 2011, at 3:23 PM, Martin Hannigan wrote:
>>
>> > On Mon, Jan 31, 2011 at 2:54 PM, William Herrin 
>> wrote:
>> >> On Mon, Jan 31, 2011 at 12:02 PM, cja at daydream.com
>>  wrote:
>> >>> On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan
>>  wrote:
>> >>>> Do you think that this will suffice?
>> >>>>
>> >>>> "Upon expiration of the hold period and in the absence of a Global
>> >>>> Policy or Globally Coordinated Policy directing otherwise, legacy
>> >>>> resources returned to ARIN will be made available for allocation."
>> >>>
>> >>> I think it should say "made available for allocation or assignment"
>> >>
>> >> Right. Allocation and assignment are loaded words in ARIN-speak. If
>> >> you specify the one but not the other in policy, you restrict the
>> >> usage of those addresses. You could also say something like "made
>> >> available for registration," without using either of the two loaded
>> >> words.
>> >
>> >
>> > In the interest of over simplicity, I think that version 2.0 might be
>> > more clear stating:
>> >
>> > "Legacy IPv4 addresses returned to or recovered by ARIN will be made
>> > available for registration within thirty days of their receipt."
>> >
>> > I agree with you with respect to more words, but in this case, I
>> think
>> > that less is more.
>> >
>> >
>> > Best,
>> >
>> > -M<
>> > _______________________________________________
>> > PPML
>> > You are receiving this message because you are subscribed to
>> > the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
>> > Unsubscribe or manage your mailing list subscription at:
>> > http://lists.arin.net/mailman/listinfo/arin-ppml
>> > Please contact info at arin.net if you experience any issues.
>>
>> _______________________________________________
>> PPML
>> You are receiving this message because you are subscribed to
>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
>> Unsubscribe or manage your mailing list subscription at:
>> http://lists.arin.net/mailman/listinfo/arin-ppml
>> Please contact info at arin.net if you experience any issues.
>
>


From owen at delong.com  Mon Jan 31 21:17:50 2011
From: owen at delong.com (Owen DeLong)
Date: Mon, 31 Jan 2011 18:17:50 -0800
Subject: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
In-Reply-To: 
References: <0d3d01cbbe4e$a21c95e0$e655c1a0$@ca>
	
	
	
	
	
	
	<54562B8B-FF6F-45EE-A2F3-E9E469EF56C3@delong.com>
	<123a01cbc1a5$7c98bba0$75ca32e0$@net>
	
Message-ID: <5D0AEBA8-68E2-486E-81F6-701A15313704@delong.com>

NRPM 8 does not make a distinction about legacy vs. non-legacy
addresses, so, I'm not sure why you think that RIR-issued v4
addresses (sanctioned is a very poor choice of terminology
for them) will not be part of the fluid v4 economy.

I see no reason to maintain any distinction, especially since
once they go through one round of this policy or one round
under section 8, they become non-legacy addresses.

Owen

On Jan 31, 2011, at 6:09 PM, Martin Hannigan wrote:

> It's consistent with terms in the NRPM and with respect to the "L"RSA.
> It's not the regular v4 pool and at least in the interim I think it's
> unwise to mix policy across the spectrum with arin or rir-speak.
> "Sanctioned" v4 addresses are not going to be part of the fluid v4
> economy, but former IANA addresses will be. There is going to be a
> level of distinction required hence "section 5.0". Continued policy
> writing with respect to, for lack of a better term -- normalized
> addresses,  should become sparse as time wears on. At least one would
> hope.
> 
> Ideas welcomed.
> 
> Best.
> 
> -M<
> 
> 
> 
> On Mon, Jan 31, 2011 at 7:17 PM, Tony Hain  wrote:
>> Taking Owen's point a little further; IPv4 is 'legacy', so it is
>> redundant...
>> 
>> Tony
>> 
>> 
>>> -----Original Message-----
>>> From: arin-ppml-bounces at arin.net [mailto:arin-ppml-bounces at arin.net] On
>>> Behalf Of Owen DeLong
>>> Sent: Monday, January 31, 2011 3:31 PM
>>> To: Martin Hannigan
>>> Cc: arin-ppml at arin.net
>>> Subject: Re: [arin-ppml] ARIN-prop-131: Section 5.0 Legacy Addresses
>>> 
>>> In the spirit of less is more, may I suggest that you remove the word
>>> Legacy
>>> from both the title and the sentence.
>>> 
>>> Owen
>>> 
>>> On Jan 31, 2011, at 3:23 PM, Martin Hannigan wrote:
>>> 
>>>> On Mon, Jan 31, 2011 at 2:54 PM, William Herrin 
>>> wrote:
>>>>> On Mon, Jan 31, 2011 at 12:02 PM, cja at daydream.com
>>>  wrote:
>>>>>> On Mon, Jan 31, 2011 at 9:58 AM, Martin Hannigan
>>>  wrote:
>>>>>>> Do you think that this will suffice?
>>>>>>> 
>>>>>>> "Upon expiration of the hold period and in the absence of a Global
>>>>>>> Policy or Globally Coordinated Policy directing otherwise, legacy
>>>>>>> resources returned to ARIN will be made available for allocation."
>>>>>> 
>>>>>> I think it should say "made available for allocation or assignment"
>>>>> 
>>>>> Right. Allocation and assignment are loaded words in ARIN-speak. If
>>>>> you specify the one but not the other in policy, you restrict the
>>>>> usage of those addresses. You could also say something like "made
>>>>> available for registration," without using either of the two loaded
>>>>> words.
>>>> 
>>>> 
>>>> In the interest of over simplicity, I think that version 2.0 might be
>>>> more clear stating:
>>>> 
>>>> "Legacy IPv4 addresses returned to or recovered by ARIN will be made
>>>> available for registration within thirty days of their receipt."
>>>> 
>>>> I agree with you with respect to more words, but in this case, I
>>> think
>>>> that less is more.
>>>> 
>>>> 
>>>> Best,
>>>> 
>>>> -M<
>>>> _______________________________________________
>>>> PPML
>>>> You are receiving this message because you are subscribed to
>>>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
>>>> Unsubscribe or manage your mailing list subscription at:
>>>> http://lists.arin.net/mailman/listinfo/arin-ppml
>>>> Please contact info at arin.net if you experience any issues.
>>> 
>>> _______________________________________________
>>> PPML
>>> You are receiving this message because you are subscribed to
>>> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
>>> Unsubscribe or manage your mailing list subscription at:
>>> http://lists.arin.net/mailman/listinfo/arin-ppml
>>> Please contact info at arin.net if you experience any issues.
>> 
>> 
> _______________________________________________
> PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> http://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.