<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I argue that it is insufficient and that a 6-month moratorium on a second simplified transfer is easier for everyone to understand and implement.<div class=""><br class=""></div><div class="">The reason I feel it is insufficient is that renumbering a DHCP server handing out a /17 (or cobbling up a DHCP server handing out a /17) isn’t a particularly difficult barrier.</div><div class=""><br class=""></div><div class="">Given that the preponderance of addresses handed out by larger service providers these days are dynamic in nature, renumbering large swaths of address space to circumvent the intent of the /16 limit on this policy is relatively trivial.</div><div class=""><br class=""></div><div class="">Any organization that truly needs a larger transfer is free to get the approval through the conventional process and this simplified process is probably not a good fit as a result.</div><div class=""><br class=""></div><div class="">I believe that is congruent with your original intent and that the six-month recycle limit is a quite reasonable safeguard.</div><div class=""><br class=""></div><div class="">Owen</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jan 31, 2017, at 08:04 , Jason Schiller <<a href="mailto:jschiller@google.com" class="">jschiller@google.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">As one of the originators of this policy change I welcome the rewrite, <div class="">with the exception the mechanism to avoid abuse.<div class=""><br class=""></div><div class="">Can someone explain the "abuse" concerns if I have not correctly captured it?</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Abuse concern:</div><div class="">---------------------</div><div class="">As far as I can tell, the combination of 2016-5 and this proposal (2016-3) is where the issue comes from. </div><div class="">One of the goals of 2016-5 was to separate section 4 from transfers.</div><div class=""><br class=""></div><div class="">As a result, NRPM 4.2.4.1 & 4.3.6.1 which specifies that organizations must show efficient utilization of 80% in aggregate, and 50% for each allocation/assignment is no longer a restriction to transfers.</div><div class=""><br class=""></div><div class="">Without applying 4.2.4.1 & 4.3.6.1 an organization that is holding a /8 that is 90% utilized, could then use 8.5.7 to justify a specified transfer of a /16. </div><div class=""><br class=""></div><div class="">Once completed, the total holding of a /16 and a /8 would be 89.65% utilized and could immediately use 8.5.7 to justify another specified transfer of a /16. </div><div class=""><br class=""></div><div class="">This process could be used 33 times and could result in drawing down a /11 and a /16 without putting a single new address into service.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Basic idea of 2016-3 and 2016-4:</div><div class="">---------------------------------------------</div><div class=""><br class=""></div><div class="">1. Make an easy to use process with an easily predictable outcome for </div><div class=""> "simplified" transfers</div><div class="">2. Modify slow start and make it applicable to transfers for end-sites and ISPs</div><div class="">3. Give blanket approval for a "first", "small" starter block</div><div class="">4. Show that you have used what you got and then double what you have</div><div class="">5. Can always get more than double following the non-simplified process</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Intended Cap implementation:</div><div class="">----------------------------------------</div><div class=""><br class=""></div><div class="">Doubling more than a /16 could provide way too much IP space</div><div class="">(consider an efficiently used org than is not growing)</div><div class="">Instead the doubling policy is limited at a /16.</div><div class="">However if an organization is growing and has legitimate need for more </div><div class="">than a /16, then it can get a /16 put it into service and then come back </div><div class="">and get another dip.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Suggested Anti-abuse text:</div><div class="">-------------------------------------</div><div class=""><br class=""></div><div class=""><div class="">To this, 2016-3 now adds a new paragraph:</div><div class=""><br class=""></div><div class="">8.5.7 Alternative Additional IPv4 Address Block Criteria</div><div class="">In lieu of 8.5.5 and 8.5.6, organizations may qualify for additional IPv4 address blocks by demonstrating both </div><div class="">- 80% utilization of their currently allocated space </div><div class="">- at least 50% utilization of each allocation and assignment</div><div class="">If they do so, they qualify to receive one or more transfers up to the total size of their current ARIN IPv4 address holdings, with a maximum size of /16.</div></div><div class=""><br class=""></div><div class="">Taking the abuse example above of an organization with a /8 that is is 90% utilized, </div><div class="">the organization would need to transfer in a /16. </div><div class="">Then the organization would need to put 32,768 of the new IPs into service, </div><div class="">or renumber the use of 32,768 of IPs from the older IP space to the new space.</div><div class=""><br class=""></div><div class="">I argue that need to show growth or the renumbering of usage into the new IP space </div><div class="">is of sufficient pain to avoid abuse by organizations that don't actually need the IP space.</div><div class=""><br class=""></div><div class="">__Jason</div><div class=""><br class=""></div><div class=""> </div><div class=""><br class=""></div></div></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Tue, Jan 31, 2017 at 8:18 AM, David R Huberman <span dir="ltr" class=""><<a href="mailto:daveid@panix.com" target="_blank" class="">daveid@panix.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br class="">
<br class="">
TL;DR: We updated 2016-3 to fit into the upcoming NRPM, and closed an abuse vector. We kept the original text and just incorporated it in the new section 8.5 so it works, and time limited it to once every 6 months.<br class="">
<br class="">
Background:<br class="">
<br class="">
At the ARIN meeting in Dallas, there was a discussion about 2016-3, a policy which seeks to remove Needs Testing for smaller 8.3 and 8.4 transfers (with a cap of /16). Some more work needed to be done on it, and a vote at the Dallas meeting had 27 people ask the AC to continue working on it, with 1 person against.<br class="">
<br class="">
We've done some work, and the new text is ready for your review and comment.<br class="">
<br class="">
<br class="">
New NRPM Coming Out Affects 2016-3:<br class="">
<br class="">
Policy 2016-5 was ratified by the board, and will be entering the NRPM shortly. 2016-5 adds a new section to section 8 -- it adds 8.5, which are the qualifying criteria for transfers. It looks like this:<br class="">
<br class="">
8.5. Specified Transfer Recipient Requirements<br class="">
<br class="">
8.5.1. Registration Services Agreement<br class="">
The receiving entity must sign an RSA covering all resources to be transferred unless that entity has a current (within the last two versions) RSA on file.<br class="">
<br class="">
8.5.2. Operational Use<br class="">
ARIN allocates or assigns number resources to organizations via transfer solely for the purpose of use on an operational network.<br class="">
<br class="">
8.5.3. Minimum transfer size<br class="">
ARINs minimum IPv4 transfer size is a /24.<br class="">
<br class="">
8.5.4. Initial block<br class="">
Organizations without direct assignments or allocations from ARIN qualify for transfer of an initial IPv4 block of ARINs minimum transfer size.<br class="">
<br class="">
8.5.5. Block size<br class="">
Organizations may qualify for the transfer of a larger initial block, or an additional block, by providing documentation to ARIN which details the use of at least 50% of the requested IPv4 block size within 24 months. An officer of the organization shall attest to the documentation provided to ARIN.<br class="">
<br class="">
8.5.6. Efficient utilization of previous blocks<br class="">
Organizations with direct assignments or allocations from ARIN must have efficiently utilized at least 50% of their cumulative IPv4 address blocks in order to receive additional space. This includes all space reassigned to their customers.<br class="">
<br class="">
<br class="">
To this, 2016-3 now adds a new paragraph:<br class="">
<br class="">
8.5.7 Alternative Additional IPv4 Address Block Criteria<br class="">
In lieu of 8.5.5 and 8.5.6, organizations may qualify for additional IPv4 address blocks by demonstrating 80% utilization of their currently allocated space. If they do so, they qualify to receive one or more transfers up to the total size of their current ARIN IPv4 address holdings, with a maximum size of /16.<br class="">
<br class="">
An organization may only qualify under 8.5.7 once every 6 months.<br class="">
<br class="">
<br class="">
Conclusion:<br class="">
<br class="">
This text is pretty much the same text that was originally proposed in 2016-3, simply incorporated into the new NRPM language that's coming out.<br class="">
<br class="">
It also puts in a mechanism to avoid abuse -- people trying to get around the /16 cap -- by limiting it to once every 6 months.<br class="">
<br class="">
The AC welcomes your feedback.<br class="">
<br class="">
Thank you,<br class="">
David<br class="">
______________________________<wbr class="">_________________<br class="">
PPML<br class="">
You are receiving this message because you are subscribed to<br class="">
the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" target="_blank" class="">ARIN-PPML@arin.net</a>).<br class="">
Unsubscribe or manage your mailing list subscription at:<br class="">
<a href="http://lists.arin.net/mailman/listinfo/arin-ppml" rel="noreferrer" target="_blank" class="">http://lists.arin.net/mailman/<wbr class="">listinfo/arin-ppml</a><br class="">
Please contact <a href="mailto:info@arin.net" target="_blank" class="">info@arin.net</a> if you experience any issues.<br class="">
</blockquote></div><br class=""><br clear="all" class=""><div class=""><br class=""></div>-- <br class=""><div class="gmail_signature" data-smartmail="gmail_signature"><font color="#555555" face="'courier new', monospace" class=""><div class=""><span style="font-family: arial;" class=""><font color="#555555" face="'courier new', monospace" class="">_______________________________________________________<br class=""></font><div class=""><font face="'courier new', monospace" class="">Jason Schiller|NetOps|<a href="mailto:jschiller@google.com" target="_blank" class="">jschiller@google.com</a>|571-266-0006</font></div><div class=""><font face="'courier new', monospace" class=""><br class=""></font></div></span></div></font></div>
</div>
_______________________________________________<br class="">PPML<br class="">You are receiving this message because you are subscribed to<br class="">the ARIN Public Policy Mailing List (<a href="mailto:ARIN-PPML@arin.net" class="">ARIN-PPML@arin.net</a>).<br class="">Unsubscribe or manage your mailing list subscription at:<br class=""><a href="http://lists.arin.net/mailman/listinfo/arin-ppml" class="">http://lists.arin.net/mailman/listinfo/arin-ppml</a><br class="">Please contact info@arin.net if you experience any issues.</div></blockquote></div><br class=""></div></body></html>