[ARIN-consult] Community Consultation on IRR Route Validation. attorney client communication.

[Ryan, Stephen]

Counsel's Note:

Participants in this discussion are respectfully requested and  directed to confine the discussion to 'policy' issues. The reference to individual plans of a company, i.e. MS here,  are unwelcome unless absolutely necessary, something I cannot yet  judge. Please exercise caution and refrain from references to the business plans of individual companies.

Steve Ryan

Stephen M. Ryan
Partner
McDermott Will & Emery LLP
The McDermott Building | 500 North Capitol Street, N.W. | Washington, DC 20001
Tel +1 202 756 8333
Mobile +1 202 251 5343
Fax +1 202 756 8087
http://www.mwe.com



-----Original Message-----
From: arin-consult-bounces at arin.net [mailto:arin-consult-bounces at arin.net] On Behalf Of Job Snijders
Sent: Wednesday, March 18, 2015 11:36 AM
To: David Huberman
Cc: arin-consult at arin.net
Subject: Re: [ARIN-consult] Community Consultation on IRR Route Validation

Hi David,

On Wed, Mar 18, 2015 at 01:15:37PM +0000, David Huberman wrote:
> My viewpoint is AS8075 will not use it.  Like hundreds|thousands of
> others operators, we use RADB (a paid service with an SLA that works)
> for our IRR entries.

Which part works? You realise that anybody can register anything for any prefix in RADB right? ARIN now has a chance to step their game up and make it possible to offer better quality data.

Why should anybody else then Microsoft, be allowed to create route-objects that cover Microsoft space?

> My viewpoint is ARIN should not offer an IRR anymore, as there is too
> much garbage data in it, and the cost of re-development efforts
> strongly outweighs the benefits to the operational community.

This is one example how RADB can be abused:
http://www.bgpmon.net/using-bgp-data-to-find-spammers/

Tying together RIR & IRR data allows operators to programmatically assess which parts of IRR we subsume into route-filters, and which parts we ignore because there is zero guarantee that the information is authorised.

Third party IRRs like RADB (or NTTCOM) cannot verify who is authorised to create route-objects or not.

Regarding cost: ARIN could be the fourth RIR to do RIR<>IRR coupling, after, other RIRs who offer this today: Afrinic, APNIC & RIPE. This is not a new concept and code already exists. An undertaking like this of course has a pricetag, however I'd be hesitant to claim that the cost will outweight the benefits.

Kind regards,

Job
_______________________________________________
ARIN-Consult
You are receiving this message because you are subscribed to the ARIN Consult Mailing List (ARIN-consult at arin.net).
Unsubscribe or manage your mailing list subscription at:
http://lists.arin.net/mailman/listinfo/arin-consult Please contact the ARIN Member Services Help Desk at info at arin.net if you experience any issues.


*******************************************************************************************************************
This message is a PRIVILEGED AND CONFIDENTIAL communication. This message and all attachments are a private communication sent by a law firm and may be confidential or protected by privilege. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the information contained in or attached to this message is strictly prohibited. Please notify the sender of the delivery error by replying to this message, and then delete it from your system. Thank you.
*******************************************************************************************************************

Please visit http://www.mwe.com/ for more information about our Firm.