<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Not really. The only traffic that would have gone to them would have been traffic not covered by a more specific route.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> arin-ppml-bounces@arin.net [mailto:arin-ppml-bounces@arin.net]
<b>On Behalf Of </b>Bill Buhler<br>
<b>Sent:</b> Friday, March 28, 2014 11:58 AM<br>
<b>To:</b> CJ Aronson; David Huberman<br>
<b>Cc:</b> arin-ppml@arin.net<br>
<b>Subject:</b> Re: [arin-ppml] Draft Policy ARIN-2014-12: Anti-hijack Policy<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">So if my understanding is correct, they basically performed a routing man in the middle attack on live IPv6 prefixes. Pardon my understanding level, but how
did they keep from creating routing loops and service interruptions. I’m also a little concerned about performance and link loads. Are my concerns legitimate and inline?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">--Bill<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:arin-ppml-bounces@arin.net">arin-ppml-bounces@arin.net</a> [<a href="mailto:arin-ppml-bounces@arin.net">mailto:arin-ppml-bounces@arin.net</a>]
<b>On Behalf Of </b>CJ Aronson<br>
<b>Sent:</b> Friday, March 28, 2014 10:54 AM<br>
<b>To:</b> David Huberman<br>
<b>Cc:</b> <a href="mailto:arin-ppml@arin.net">arin-ppml@arin.net</a><br>
<b>Subject:</b> Re: [arin-ppml] Draft Policy ARIN-2014-12: Anti-hijack Policy<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">I read some more of that article I sent. They specifically state that they had LOAs from the RIRs to do these /12 advertisements. <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks!<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">-----Cathy<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Fri, Mar 28, 2014 at 4:49 PM, CJ Aronson <<a href="mailto:cja@daydream.com" target="_blank">cja@daydream.com</a>> wrote:<o:p></o:p></p>
<div>
<p class="MsoNormal">There is a paper here<o:p></o:p></p>
<div>
<p class="MsoNormal"><a href="http://www.merit.edu/research/pdf/2013/ipv6_darknet_paper_r6098.pdf" target="_blank">http://www.merit.edu/research/pdf/2013/ipv6_darknet_paper_r6098.pdf</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">that says<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">"We announced the prefixes: 2400::/12, 2600::/12, 2800::/12, 2c00::/12, 2a08::/13, and 2a04::/14 for over a three-month period. For a few days, we also announced RIPE’s 2a00::/12"<o:p></o:p></p>
</div>
<p>So I believe that the answer to your question is yes.<o:p></o:p></p>
<p>-----Cathy<o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Fri, Mar 28, 2014 at 4:32 PM, David Huberman <<a href="mailto:David.Huberman@microsoft.com" target="_blank">David.Huberman@microsoft.com</a>> wrote:<o:p></o:p></p>
<p class="MsoNormal">David:<br>
<br>
That summary of the issue helps a lot, thank you!<br>
<br>
The question on my mind is:<br>
Did ARIN provide a written LOA to Merit to announce 2600::/12 ?<o:p></o:p></p>
<div>
<p class="MsoNormal"><br>
David R Huberman<br>
Microsoft Corporation<br>
Senior IT/OPS Program Manager (GFS)<br>
<br>
-----Original Message-----<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">From: David Farmer [mailto:<a href="mailto:farmer@umn.edu" target="_blank">farmer@umn.edu</a>]<br>
Sent: Thursday, March 27, 2014 11:43 AM<br>
To: David Huberman; <a href="mailto:arin-ppml@arin.net" target="_blank">arin-ppml@arin.net</a><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Cc: David Farmer<br>
Subject: Re: [arin-ppml] Draft Policy ARIN-2014-12: Anti-hijack Policy<br>
<br>
I'm the primary shepherd for this Draft;<br>
<br>
The author is Heather Schiller, and I'm only saying that because I'm going to reference you to her comments at the mic at the last NANOG.<br>
<br>
The research that prompted the proposal was presented at the last NANOG in Atlanta and is at the following link;<br>
<br>
<a href="https://www.nanog.org/meetings/abstract?id=2289" target="_blank">https://www.nanog.org/meetings/abstract?id=2289</a><br>
<br>
Heather's comments begins at about time stamp 17:10 or so on the video of the NANOG presentation, and there are a couple other comments as well.<br>
<br>
Additionally, the reference for the published paper for the research in question is;<br>
<br>
<a href="http://www.merit.edu/research/pdf/2013/ipv6_darknet_paper_r6098.pdf" target="_blank">http://www.merit.edu/research/pdf/2013/ipv6_darknet_paper_r6098.pdf</a><br>
<br>
Also related is; ACSP SUGGESTION 2014.3: PUBLISH INFORMATION AND SUPPORTING DOCUMENTS FOR EXPERIMENTAL ALLOCATIONS<br>
<br>
<a href="https://www.arin.net/participate/acsp/suggestions/2014-3.html" target="_blank">https://www.arin.net/participate/acsp/suggestions/2014-3.html</a><br>
<br>
[Shepherd hat - OFF]<br>
<br>
While I do not have a problem with this research and I don't think we should restrict future such activities, I believe this is something the community should discuss in detail and try to come to consensus on, one way or the other.<br>
<br>
Also, while I disagree with the proposed policy text, what is proposed is not without precedent. As discussed in the NANOG presentation, RIPE initially gave permission for a covering prefix for its whole /12 and then it was modified to a covering prefixes
of a /14 plus a /13, excluding the space where most allocations were. This significantly reduced the amount of traffic for RIPE region and they were excluded from the analysis.<br>
<br>
Hope that helps.<br>
<br>
On 3/26/14, 21:55 , David Huberman wrote:<br>
> Hi PPML,<br>
><br>
> Can someone show me where in the mailing list archives this policy was actively discussed on PPML? I can't find it.<br>
><br>
> Alternatively, can the policy author or someone who strongly supports this policy please either post to the list or email me privately and clue me in? I issued and managed almost every experimental assignment for almost 10 years from 2003 to 2013, and I
am lost as to what this policy is saying. I would like to be educated so I can support, or not support, the efforts that have been made here.<br>
><br>
> Thank you!<br>
> /david<br>
><br>
> David R Huberman<br>
> Microsoft Corporation<br>
> Senior IT/OPS Program Manager (GFS)<br>
><br>
> -----Original Message-----<br>
> From: <a href="mailto:arin-ppml-bounces@arin.net" target="_blank">arin-ppml-bounces@arin.net</a> [mailto:<a href="mailto:arin-ppml-bounces@arin.net" target="_blank">arin-ppml-bounces@arin.net</a>]<br>
> On Behalf Of ARIN<br>
> Sent: Tuesday, March 25, 2014 11:28 AM<br>
> To: <a href="mailto:arin-ppml@arin.net" target="_blank">arin-ppml@arin.net</a><br>
> Subject: [arin-ppml] Draft Policy ARIN-2014-12: Anti-hijack Policy<br>
><br>
> On 20 March 2014 the ARIN Advisory Council (AC) accepted<br>
> "ARIN-prop-202 Anti-hijack Policy" as a Draft Policy.<br>
><br>
> Draft Policy ARIN-2014-12 is below and can be found at:<br>
> <a href="https://www.arin.net/policy/proposals/2014_12.html" target="_blank">https://www.arin.net/policy/proposals/2014_12.html</a><br>
><br>
> You are encouraged to discuss the merits and your concerns of Draft Policy 2014-12 on the Public Policy Mailing List.<br>
><br>
> The AC will evaluate the discussion in order to assess the conformance of this draft policy with ARIN's Principles of Internet Number Resource Policy as stated in the PDP. Specifically, these principles are:<br>
><br>
> * Enabling Fair and Impartial Number Resource Administration<br>
> * Technically Sound<br>
> * Supported by the Community<br>
><br>
> The ARIN Policy Development Process (PDP) can be found at:<br>
> <a href="https://www.arin.net/policy/pdp.html" target="_blank">https://www.arin.net/policy/pdp.html</a><br>
><br>
> Draft Policies and Proposals under discussion can be found at:<br>
> <a href="https://www.arin.net/policy/proposals/index.html" target="_blank">https://www.arin.net/policy/proposals/index.html</a><br>
><br>
> Regards,<br>
><br>
> Communications and Member Services<br>
> American Registry for Internet Numbers (ARIN)<br>
><br>
><br>
> ## * ##<br>
><br>
><br>
> Draft Policy ARIN-2014-12<br>
> Anti-hijack Policy<br>
><br>
> Date: 25 March 2014<br>
><br>
> Problem Statement:<br>
><br>
> ARIN should not give research organizations permission to hijack prefixes that have already been allocated. Research organizations announcing lit aggregates may receive sensitive production traffic belonging to live networks during periods of instability.<br>
><br>
> Section 11.7 describes more than allocation size therefore updating the section heading to something more accurate is appropriate.<br>
><br>
> Policy statement:<br>
><br>
> Modify the section 11.7 heading to be more accurate. Modify the first sentence to prohibit overlapping assignments. Add text at the end to define how research allocations should be designated and prohibit LOA's without allocations.<br>
><br>
> 11.7 Resource Allocation Guidelines<br>
><br>
> The Numbering Resources requested come from the global Internet Resource space, do not overlap previously assigned space, and are not from private or other non-routable Internet Resource space. The allocation size should be consistent with the existing ARIN
minimum allocation sizes, unless small allocations are intended to be explicitly part of the experiment. If an organization requires more resource than stipulated by the minimum allocation sizes in force at the time of their request, their experimental documentation
should have clearly described and justified why this is required.<br>
><br>
> All research allocations must be registered publicly in whois. Each research allocation will be designated as a research allocation with a comment indicating when the allocation will end. ARIN will not issue a Letter of Authority (LOA) to route a research
prefix unless the allocation is properly registered in whois.<br>
><br>
> Comments:<br>
> a. Timetable for implementation: Immediate b. Anything else:<br>
<br>
--<br>
================================================<br>
David Farmer Email: <a href="mailto:farmer@umn.edu" target="_blank">
farmer@umn.edu</a><br>
Office of Information Technology<br>
University of Minnesota<br>
2218 University Ave SE Phone: <a href="tel:1-612-626-0815" target="_blank">1-612-626-0815</a><br>
Minneapolis, MN 55414-3029 Cell: <a href="tel:1-612-812-9952" target="_blank">1-612-812-9952</a> ================================================<br>
_______________________________________________<br>
PPML<br>
You are receiving this message because you are subscribed to<br>
the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" target="_blank">ARIN-PPML@arin.net</a>).<br>
Unsubscribe or manage your mailing list subscription at:<br>
<a href="http://lists.arin.net/mailman/listinfo/arin-ppml" target="_blank">http://lists.arin.net/mailman/listinfo/arin-ppml</a><br>
Please contact <a href="mailto:info@arin.net" target="_blank">info@arin.net</a> if you experience any issues.<o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>