This document discusses RIPE Atlas, a global Internet measurement network. It summarizes the key features of RIPE Atlas including the six types of measurements it can perform. It also discusses how measurements are started through the GUI, APIs, and CLI tools. Visualizations of results are shown including maps, lists, and LatencyMON. Examples are given of research done using RIPE Atlas data, including measuring internet exchange points and identifying internet disruptions. Ways to participate in RIPE Atlas through hosting probes or attending events are also mentioned.
The RIPE Community and Ethical ConsiderationsRIPE NCC
The document discusses the RIPE community and RIPE NCC, including their roles in coordinating IP networks and distributing IP addresses in Europe. It describes some of the RIPE NCC's services like RIPE Atlas, which is an open measurement platform consisting of probes that measure Internet connectivity in real time. It also discusses ethical considerations around RIPE Atlas measurements and how the community is involved in discussions around balancing open data with potential privacy/security risks.
RIPE Atlas, Global Internet Measurement NetworkRIPE NCC
This document summarizes RIPE Atlas, a global Internet measurement network. It discusses the network's coverage in July 2016, with over 14,000 probes distributed across 206 active anchors. New features are highlighted, including increased measurement limits and improved documentation. Plans for future development include rewarding more user contributions. The status of the single RIPE Atlas anchor in Indonesia is examined, and potential measurements using the IXP-Jedi tool to analyze paths within Indonesia are proposed. The document encourages community involvement through using, researching, sponsoring, or contributing code to RIPE Atlas.
Arne Kiessling gave a presentation on registry data quality and protecting internet resources. He discussed the importance of registering IP address assignments in the RIPE Database to declare their use and provide contact information. This helps maintain accurate registry data and protects resources. Kiessling also covered issues that can arise if contact details are outdated, such as unauthorized resource transfers. The RIPE NCC performs regular Assisted Registry Checks to keep registry data clean and support members.
The document discusses the Routing Information Service (RIS) maintained by RIPE NCC, which collects and stores BGP routing data from routers located at Internet exchange points worldwide. It has evolved over 15+ years from a single server to a large distributed system using Apache Hadoop to store and process exabytes of routing data. The RIS data is freely available to network operators and researchers through raw data downloads, APIs, and web interfaces like RIPEstat to enable analysis of routing behavior, anomalies, and internet infrastructure trends over time.
This document summarizes Paul Rendek's presentation at the NIX.CZ meeting on November 24, 2016. The presentation discussed the history of internet development in the Czech Republic, the changing makeup of RIPE NCC members, key moments for internet governance following the IANA transition, and challenges around securing an open internet framework with the rise of IoT technologies. Rendek emphasized the importance of building strong local technical communities to own debates on issues central to their work and influence in policy discussions.
This document discusses measurement data and tools provided by RIPE NCC. It describes registry data from the regional internet registries and internet routing registry. It also describes routing data collected from RIPE NCC's Routing Information Service with over 18 collectors. Further, it discusses RIPE Atlas, a global network for internet measurements with over 10,000 probes. Tools like RIPEstat and visualizations are described that provide access and visualization of this measurement data.
This document discusses RIPE Atlas, a global Internet measurement network. It summarizes the key features of RIPE Atlas including the six types of measurements it can perform. It also discusses how measurements are started through the GUI, APIs, and CLI tools. Visualizations of results are shown including maps, lists, and LatencyMON. Examples are given of research done using RIPE Atlas data, including measuring internet exchange points and identifying internet disruptions. Ways to participate in RIPE Atlas through hosting probes or attending events are also mentioned.
The RIPE Community and Ethical ConsiderationsRIPE NCC
The document discusses the RIPE community and RIPE NCC, including their roles in coordinating IP networks and distributing IP addresses in Europe. It describes some of the RIPE NCC's services like RIPE Atlas, which is an open measurement platform consisting of probes that measure Internet connectivity in real time. It also discusses ethical considerations around RIPE Atlas measurements and how the community is involved in discussions around balancing open data with potential privacy/security risks.
RIPE Atlas, Global Internet Measurement NetworkRIPE NCC
This document summarizes RIPE Atlas, a global Internet measurement network. It discusses the network's coverage in July 2016, with over 14,000 probes distributed across 206 active anchors. New features are highlighted, including increased measurement limits and improved documentation. Plans for future development include rewarding more user contributions. The status of the single RIPE Atlas anchor in Indonesia is examined, and potential measurements using the IXP-Jedi tool to analyze paths within Indonesia are proposed. The document encourages community involvement through using, researching, sponsoring, or contributing code to RIPE Atlas.
Arne Kiessling gave a presentation on registry data quality and protecting internet resources. He discussed the importance of registering IP address assignments in the RIPE Database to declare their use and provide contact information. This helps maintain accurate registry data and protects resources. Kiessling also covered issues that can arise if contact details are outdated, such as unauthorized resource transfers. The RIPE NCC performs regular Assisted Registry Checks to keep registry data clean and support members.
The document discusses the Routing Information Service (RIS) maintained by RIPE NCC, which collects and stores BGP routing data from routers located at Internet exchange points worldwide. It has evolved over 15+ years from a single server to a large distributed system using Apache Hadoop to store and process exabytes of routing data. The RIS data is freely available to network operators and researchers through raw data downloads, APIs, and web interfaces like RIPEstat to enable analysis of routing behavior, anomalies, and internet infrastructure trends over time.
This document summarizes Paul Rendek's presentation at the NIX.CZ meeting on November 24, 2016. The presentation discussed the history of internet development in the Czech Republic, the changing makeup of RIPE NCC members, key moments for internet governance following the IANA transition, and challenges around securing an open internet framework with the rise of IoT technologies. Rendek emphasized the importance of building strong local technical communities to own debates on issues central to their work and influence in policy discussions.
This document discusses measurement data and tools provided by RIPE NCC. It describes registry data from the regional internet registries and internet routing registry. It also describes routing data collected from RIPE NCC's Routing Information Service with over 18 collectors. Further, it discusses RIPE Atlas, a global network for internet measurements with over 10,000 probes. Tools like RIPEstat and visualizations are described that provide access and visualization of this measurement data.
The document discusses denial of service (DoS) and distributed denial of service (DDoS) attacks. It defines DoS attacks as attempts to make a machine or network resource unavailable to legitimate users. DDoS attacks specifically involve multiple devices in the attack. The document outlines different types of DDoS attacks and provides statistics on DDoS attacks from sources like Akamai. It then discusses best practices for preventing DDoS attacks, such as keeping software updated and monitoring networks, as well as methods for mitigating DDoS attacks, like traffic scrubbing services.
Network Visualisation: Focus on RIPE AtlasRIPE NCC
This document provides an overview of the RIPE Atlas network measurement platform and tools for visualizing network data. It describes the RIPE Atlas probe network and available measurements, including built-in and custom measurements. Tools are presented for visualizing latency data from ping measurements (LatencyMON), DNS performance (DNSMON), and domain name server data (DomainMON). The document also discusses using the RIPE Atlas command line interface and APIs to interact with the platform and build custom visualizations. An invitation is extended to experiment with these tools.
This document discusses various methods of measuring IPv6 adoption, including registry data from RIPE and APNIC, routing information from RIS, and active measurements from tools like RIPE Atlas, APNIC, Google, Cisco, Maxmind, and Alexa. Registry data shows that while Israel has 550% more registered IPv6 space than IPv4 space, IPv6 usage according to various measurement sources is only around 0.8-17.24%. The document cautions that IPv6 measurement data can vary in quality and interpretation.
This document discusses RIPEstat, a one-stop-shop for Internet data and statistics. It provides access to registry data from the regional internet registries, routing data from the Routing Information Service, and measurement data from RIPE Atlas. Developers can access this data through RIPEstat's APIs to build applications and visualizations. RIPEstat sees over 30 million requests daily and covers use cases like analyzing routing, handling network abuse, and producing aggregated statistics. The presenter encourages using RIPEstat's extensive resources and provides contact information for additional questions.
The document discusses IPv6 adoption in Slovenia based on measurements from RIPE NCC. It finds that 95% of Slovenian members have IPv6 allocations, with 33% having full ("4 star") deployment. Most local IPv6 traffic stays within Slovenia, though a few paths traverse international exchanges. While IPv6 adoption progress is being made, full deployment and use by end users is still needed to earn the "5th star".
The (IPv6) Internet in Romania - RIPE NCC Data and ToolsRIPE NCC
The document discusses IPv6 deployment and statistics for Romania based on data from the RIPE NCC. It provides an overview of IPv6 readiness scores for networks in Romania and Europe, noting that only 11% of autonomous systems (ASes) in Romania currently announce IPv6 prefixes. Various RIPE NCC services and tools are also summarized, including RIPEstat for accessing registry and routing data, and RIPE Atlas for network measurements.
This document discusses RIPEstat and RIPE Atlas, which are open data and measurement platforms operated by RIPE NCC. It provides an overview of the data sources and APIs available on RIPEstat, as well as the global network of probes and types of measurements that can be performed using RIPE Atlas. Examples of how RIPEstat and RIPE Atlas are used are also presented.
This document discusses the role and importance of National Network Operator Groups (NOGs) in supporting local internet communities. It notes that many early European Internet Exchange Points (IXPs) grew out of small operator communities. While IXP meetings were useful, they became too IXP-centric and did not allow discussion of other technical topics. NOGs emerged as a way to allow local operators to discuss regulations, technical limitations, and do business with one another. The RIPE NCC supports NOGs by providing annual funding and advice. While NOGs work well in many regions, cultural and geographic factors can limit their effectiveness in some areas like the Middle East. The document focuses on the growth and success of the Greek NOG community.
The document provides an overview of data sources available from RIPE NCC for researchers, including RIPE Atlas, Routing Information Service (RIS), RIPE IPmap, and RIPEstat. RIPE Atlas is an active measurements network consisting of over 10,000 probes in 180 countries. RIS collects raw BGP data from routers at Internet exchange points worldwide. RIPE IPmap uses crowdsourcing and data from RIPE Atlas to provide geolocation of Internet infrastructure. RIPEstat provides a single interface to access data from RIPE Atlas, RIS, IP registries, and other external sources through widgets and APIs.
ION Bucharest, 12 October 2016 - Today, we can say that IPv6 is already happening all around the world. It’s interesting to see the main reasons that made it happen, how it’s happening, and to make the audience think about their deployment status and strategy. Statistics from different sources are showed, including data from RIPE NCC measurements.
The RIPE NCC develops internal and external tools to analyze and visualize Internet connectivity and performance data. Internally, tools combine membership and routing data to provide different views of networks and membership trends. Externally, tools like DNSMON, DomainMON, LatencyMON and TraceMON leverage RIPE Atlas data to visualize domain name performance, latency trends between probes, and network topologies derived from traceroutes. These tools are still in development and feedback is welcomed to improve features and datasets.
IANA Transition: What does it all mean? @ SAMNOG 27APNIC
The document discusses the IANA transition process, which aims to complete the US government's stewardship role over the Internet Assigned Numbers Authority (IANA) functions and transition them to multistakeholder community control. It provides background on IANA and its role in managing DNS root zones, protocol parameters, and internet number registries. The transition plan involves separate community processes to develop proposals for the names, numbers, and protocols operations. The numbers community developed the CRISP proposal for RIR oversight of IANA numbers functions. Additional work focused on improving ICANN accountability. The transition faces a tight timeline to meet US government requirements for submission and approval.
Open-IX: Improving interconnection through industry standardsInternet Society
The Open-IX Association (OIX) develops common standards for internet exchanges (IXPs) and data centers to improve global interconnection. It establishes committees to develop standards for technical requirements, operations, and certification. The OIX-1 and OIX-2 standards cover infrastructure, operations, and transparency requirements. Companies can apply for certification by implementing the standards, which helps network operators identify compliant organizations. Several international IXPs and data centers have already achieved OIX certification.
LACNIC report as presented by Sergio Rojas at ARIN's Public Policy and Members Meeting in April 2014. All ARIN 33 presentations are posted online at: https://www.arin.net/ARIN33_materials
Mapping New Zealand's Broadband InfrastructureAPNIC
Mapping New Zealand's Broadband Infrastructure, by Sebastián Castro.
A presentation given at APRICOT 2016’s Network Measurements session on 24 February 2016.
The document discusses denial of service (DoS) and distributed denial of service (DDoS) attacks. It defines DoS attacks as attempts to make a machine or network resource unavailable to legitimate users. DDoS attacks specifically involve multiple devices in the attack. The document outlines different types of DDoS attacks and provides statistics on DDoS attacks from sources like Akamai. It then discusses best practices for preventing DDoS attacks, such as keeping software updated and monitoring networks, as well as methods for mitigating DDoS attacks, like traffic scrubbing services.
Network Visualisation: Focus on RIPE AtlasRIPE NCC
This document provides an overview of the RIPE Atlas network measurement platform and tools for visualizing network data. It describes the RIPE Atlas probe network and available measurements, including built-in and custom measurements. Tools are presented for visualizing latency data from ping measurements (LatencyMON), DNS performance (DNSMON), and domain name server data (DomainMON). The document also discusses using the RIPE Atlas command line interface and APIs to interact with the platform and build custom visualizations. An invitation is extended to experiment with these tools.
This document discusses various methods of measuring IPv6 adoption, including registry data from RIPE and APNIC, routing information from RIS, and active measurements from tools like RIPE Atlas, APNIC, Google, Cisco, Maxmind, and Alexa. Registry data shows that while Israel has 550% more registered IPv6 space than IPv4 space, IPv6 usage according to various measurement sources is only around 0.8-17.24%. The document cautions that IPv6 measurement data can vary in quality and interpretation.
This document discusses RIPEstat, a one-stop-shop for Internet data and statistics. It provides access to registry data from the regional internet registries, routing data from the Routing Information Service, and measurement data from RIPE Atlas. Developers can access this data through RIPEstat's APIs to build applications and visualizations. RIPEstat sees over 30 million requests daily and covers use cases like analyzing routing, handling network abuse, and producing aggregated statistics. The presenter encourages using RIPEstat's extensive resources and provides contact information for additional questions.
The document discusses IPv6 adoption in Slovenia based on measurements from RIPE NCC. It finds that 95% of Slovenian members have IPv6 allocations, with 33% having full ("4 star") deployment. Most local IPv6 traffic stays within Slovenia, though a few paths traverse international exchanges. While IPv6 adoption progress is being made, full deployment and use by end users is still needed to earn the "5th star".
The (IPv6) Internet in Romania - RIPE NCC Data and ToolsRIPE NCC
The document discusses IPv6 deployment and statistics for Romania based on data from the RIPE NCC. It provides an overview of IPv6 readiness scores for networks in Romania and Europe, noting that only 11% of autonomous systems (ASes) in Romania currently announce IPv6 prefixes. Various RIPE NCC services and tools are also summarized, including RIPEstat for accessing registry and routing data, and RIPE Atlas for network measurements.
This document discusses RIPEstat and RIPE Atlas, which are open data and measurement platforms operated by RIPE NCC. It provides an overview of the data sources and APIs available on RIPEstat, as well as the global network of probes and types of measurements that can be performed using RIPE Atlas. Examples of how RIPEstat and RIPE Atlas are used are also presented.
This document discusses the role and importance of National Network Operator Groups (NOGs) in supporting local internet communities. It notes that many early European Internet Exchange Points (IXPs) grew out of small operator communities. While IXP meetings were useful, they became too IXP-centric and did not allow discussion of other technical topics. NOGs emerged as a way to allow local operators to discuss regulations, technical limitations, and do business with one another. The RIPE NCC supports NOGs by providing annual funding and advice. While NOGs work well in many regions, cultural and geographic factors can limit their effectiveness in some areas like the Middle East. The document focuses on the growth and success of the Greek NOG community.
The document provides an overview of data sources available from RIPE NCC for researchers, including RIPE Atlas, Routing Information Service (RIS), RIPE IPmap, and RIPEstat. RIPE Atlas is an active measurements network consisting of over 10,000 probes in 180 countries. RIS collects raw BGP data from routers at Internet exchange points worldwide. RIPE IPmap uses crowdsourcing and data from RIPE Atlas to provide geolocation of Internet infrastructure. RIPEstat provides a single interface to access data from RIPE Atlas, RIS, IP registries, and other external sources through widgets and APIs.
ION Bucharest, 12 October 2016 - Today, we can say that IPv6 is already happening all around the world. It’s interesting to see the main reasons that made it happen, how it’s happening, and to make the audience think about their deployment status and strategy. Statistics from different sources are showed, including data from RIPE NCC measurements.
The RIPE NCC develops internal and external tools to analyze and visualize Internet connectivity and performance data. Internally, tools combine membership and routing data to provide different views of networks and membership trends. Externally, tools like DNSMON, DomainMON, LatencyMON and TraceMON leverage RIPE Atlas data to visualize domain name performance, latency trends between probes, and network topologies derived from traceroutes. These tools are still in development and feedback is welcomed to improve features and datasets.
IANA Transition: What does it all mean? @ SAMNOG 27APNIC
The document discusses the IANA transition process, which aims to complete the US government's stewardship role over the Internet Assigned Numbers Authority (IANA) functions and transition them to multistakeholder community control. It provides background on IANA and its role in managing DNS root zones, protocol parameters, and internet number registries. The transition plan involves separate community processes to develop proposals for the names, numbers, and protocols operations. The numbers community developed the CRISP proposal for RIR oversight of IANA numbers functions. Additional work focused on improving ICANN accountability. The transition faces a tight timeline to meet US government requirements for submission and approval.
Open-IX: Improving interconnection through industry standardsInternet Society
The Open-IX Association (OIX) develops common standards for internet exchanges (IXPs) and data centers to improve global interconnection. It establishes committees to develop standards for technical requirements, operations, and certification. The OIX-1 and OIX-2 standards cover infrastructure, operations, and transparency requirements. Companies can apply for certification by implementing the standards, which helps network operators identify compliant organizations. Several international IXPs and data centers have already achieved OIX certification.
LACNIC report as presented by Sergio Rojas at ARIN's Public Policy and Members Meeting in April 2014. All ARIN 33 presentations are posted online at: https://www.arin.net/ARIN33_materials
Mapping New Zealand's Broadband InfrastructureAPNIC
Mapping New Zealand's Broadband Infrastructure, by Sebastián Castro.
A presentation given at APRICOT 2016’s Network Measurements session on 24 February 2016.
This document discusses using RIPE Atlas measurements to analyze how "local" internet traffic stays within countries. The presenter describes running traceroutes between RIPE Atlas probes within countries to identify the presence of internet exchange points (IXPs) and out-of-country paths. Case studies on Sweden, France, and Argentina/Chile show results. Code for processing RIPE Atlas data and running monthly measurements for many countries is provided, with the goal of identifying opportunities for networks to improve local peering and routing.
The document discusses data and measurements from RIPE NCC about the Romanian internet infrastructure. It provides statistics on the number of local internet registries (LIRs) in Romania and other countries in the region. It also shows data on the age of LIRs, growth of IPv6 adoption, and vote registrations for RIPE meetings. The rest of the document demonstrates the RIPE Atlas measurement platform and how its probes can be used to analyze internet paths within Romania to identify opportunities for routing optimization and IPv6 deployment. It encourages network operators to participate in routing measurements and policy discussions.
Are Dutch Internet Paths Local - A Measurement Study Using RIPE AtlasRIPE NCC
This document describes a study that used RIPE Atlas to analyze Dutch internet paths. RIPE Atlas is a measurement platform with thousands of probes around the world. The study specifically looked at paths between probes located in the Netherlands. It found that about 60% of paths went through the Amsterdam Internet Exchange (AMS-IX), while 20% went through other Dutch internet exchanges. The study also compared IPv4 and IPv6 paths and identified some paths that did not stay within the Netherlands. The results help identify opportunities to optimize routing and encourage contributions to RIPE Atlas and geolocation databases.
Christian Teuschel gave a presentation on RIPE Atlas, a global measurement network consisting of small probing devices that take network measurements. RIPE Atlas allows individuals and the Internet community to benchmark and monitor networks through ping and other measurements from different locations around the world. The data is securely collected and vetted to ensure quality. Teuschel also discussed upcoming workshops to help people learn how to use RIPE Atlas and access its measurement data.
Update on the Why and How of IPv6 DeploymentRIPE NCC
The document discusses IPv6 deployment globally and in Europe. It finds that while overall IPv6 growth is high, there are significant differences between regions and countries. In Europe, IPv6 adoption is growing linearly but unevenly between nations. Metrics on IPv6 resource allocation and routing by LIRs in the RIPE NCC service region show varying levels of IPv6 deployment over time, with some LIRs in Romania lagging behind. The presentation encourages network operators to evaluate their own IPv6 status and decide how urgently to adopt IPv6.
The document discusses IPv6 and its benefits over IPv4. It notes that IPv4 address space is nearly depleted, while IPv6 uses a much larger 128-bit address space. IPv6 has been standardized since 1998 and allows dual stacking with IPv4 for a gradual transition. Benefits of IPv6 include no need to share addresses, reducing blacklisting risks, and lower costs compared to acquiring additional IPv4 addresses. The document encourages organizations to begin deploying IPv6.
IPv6 and Internet of Things: A Nice CoupleRIPE NCC
The document discusses the growth of the Internet of Things (IoT) and its relationship with IPv6. It provides forecasts from Cisco, Morgan Stanley, and Huawei predicting massive growth in the number of internet-connected devices between now and 2025. This growth will require an abundant IP address space like that provided by IPv6, as IoT devices rely on end-to-end internet connectivity. Examples are given of smart city and industrial applications of IoT that improve services for citizens and businesses. While IoT presents opportunities, challenges around privacy, security, regulation, and interoperability still need solutions to fully realize its potential.
"Lost Stars" - Why Operators Switch Off IPv6RIPE NCC
This document summarizes a presentation given by Emile Aben at NANOG 66 in February 2016 about an analysis of internet service providers that had previously announced IPv6 address space but had since stopped routing it. The analysis found 462 providers had done this. Surveys of 69 respondents found that many had only been testing IPv6 and stopped when testing was complete or faced hardware, software, or routing issues. Others cited lack of customer demand or network changes as reasons for no longer routing their IPv6 space. The presentation examined the experiences of these providers and discussed challenges around IPv6 deployment and obtaining greater usage.
IP addressing policies, What does this mean? - APT Policy and Regulation ForumAPNIC
The document discusses IP addressing policies and IPv4 and IPv6 management by APNIC. It provides an overview of APNIC's role and policy development process. As IPv4 addresses neared exhaustion, APNIC implemented measures like address transfers and restrictions to soften the landing. Policies encouraged IPv6 adoption through allocations and outreach. While barriers remain, continued training and deployment by all stakeholders is needed to fully transition to IPv6.
This document provides an overview of IPv6 deployment and discusses reasons for and against adopting IPv6. It summarizes the status of IPv4 address exhaustion and reviews IPv6 readiness statistics globally and for various networks. The document outlines choices for network operators regarding IPv6 adoption, including doing nothing, prolonging IPv4 through NAT or address trading, or deploying IPv6. It also discusses IPv6 security considerations and issues specific to IPv6.
PLNOG 7: Ferenc Csorba - What’s new at the RIPE NCC?PROIDEA
This document provides an overview and update on various initiatives at the RIPE NCC, including: the depletion of IPv4 addresses, which is nearing exhaustion; updates to IPv6 policies and statistics showing growing IPv6 adoption; new tools like RIPEstat for analyzing registry data and RIPE Atlas for internet measurements; and changes to IPv4 and IPv6 allocation policies as resources dwindle. Key points include the RIPE NCC transitioning to allocating the final remaining /8 of IPv4 addresses and emphasizing IPv6 adoption and assignments.
IPv6 Deployment: Why and Why not? - HostingCon 2013APNIC
This document summarizes a presentation on IPv6 deployment. It discusses the status of IPv4 address exhaustion, statistics on IPv6 adoption by transit providers, content providers, and end users worldwide. It also examines considerations around IPv6 security. Network operators are presented with three choices: do nothing and rely solely on IPv4, prolong IPv4 usage through NAT and address transfers, or deploy IPv6 through dual-stack or transition technologies. Each option has advantages and disadvantages relating to costs, network impacts, and addressing future needs.
RPKI is a public key infrastructure that allows for route origin validation to prevent route hijacking. Recent developments show that RPKI coverage has increased to around 37% for IPv4 and 32% for IPv6. There are now over 2800 RPKI validators installed worldwide. RPKI validators have also matured and improved in security and functionality. A growing trend is the use of "publication as a service" where network operators can have their RPKI objects published by Regional Internet Registries (RIRs) for improved availability. Upcoming developments include full support for Autonomous System Provider Authorization (ASPA) to validate AS paths and moving to a model of one ROA object per IP prefix.
APNIC is the Regional Internet Registry serving the Asia Pacific region. It aims to function as the RIR for the region, provide high quality Internet registry services, support community development of the Internet through training and services, and facilitate regional development. The presentation discussed APNIC's role in managing the distribution of IPv4 and IPv6 addresses and ASNs according to community policies. It also reviewed APNIC's efforts to support IPv6 deployment, DNS infrastructure, and Internet governance through initiatives like APNIC Labs and collaboration with other organizations.
This document discusses RIPE Atlas, a global network measurement platform. It notes that RIPE Atlas has over 9,300 probes connected across over 200 anchors that collect over 35,000 user-defined measurements per week. The presentation describes how RIPE Atlas can be used by ISPs to monitor network performance from multiple vantage points, troubleshoot problems, and validate peering strategies. It also provides examples of how RIPE Atlas has been used to monitor game services, measure cloud connectivity, and debug network issues.
This document discusses RIPE Atlas, a global Internet measurement network. It provides an overview of RIPE Atlas, including its coverage of over 14,000 probes in July 2016. New features are discussed, such as increased measurement limits and improved security. Plans for the future include giving contributors more credits based on their probe's popularity. The document also examines RIPE Atlas' view of Indonesia, showing its single anchor and potential for using the IXP-Jedi tool to analyze paths within the country. The RIPE Atlas community is encouraged to get involved by using, contributing to, or sponsoring the network.
Internet Measurement Tools & Their Usefulness by Gaurab Raj UpadhayaMyNOG
This document discusses various internet measurement tools and their usefulness for network engineers. It describes tools run by academic groups like CAIDA and RIPE, as well as community/industry tools like Routeviews, CIDR Report, and looking glasses. These tools provide continuous measurements of reachability, routing tables, latency, and BGP updates to help monitor and understand internet performance and stability.
Africa Route Collectors Data Analyzer: A compass to support peering growth in...Internet Society
This document describes a tool called the African Route Collectors Data Analyzer (ARDA) which aims to support the growth of peering and internet exchange points (IXPs) in Africa. The tool collects data from existing route collectors at African IXPs, analyzes the growth of the IXPs using predefined metrics, and provides visualizations to support researchers, network operators, and decision makers. The tool is open source and automatically detects new route collectors, geolocates them, and generates statistics that are displayed in three views: IXP view, national view, and regional view. The goal is to track the evolution of interconnection and intra-African internet traffic using real data from route collectors.
RIPE NCC RIS (Routing Information Service)RIPE NCC
The document discusses the Routing Information Service (RIS) provided by RIPE NCC, which collects Border Gateway Protocol (BGP) data from 23 global collectors to provide up-to-date Internet routing information. RIS data helps network operators, researchers, and policymakers monitor routing trends, troubleshoot incidents, and investigate notable events. The RIS network is looking to expand peering with representative networks in Latin America and the Caribbean to improve routing visibility and security in the region.
- In 2017, AFRINIC allocated 7.5 million IPv4 addresses (down 36% from 2016) and 113 /32 blocks of IPv6 space. Membership grew by 144 to 1554 total members.
- AFRINIC is updating several policies around resource management, aggregation, and transfers to better manage the exhaustion of IPv4 space and promote IPv6 adoption. These updates are in various draft and discussion stages.
- AFRINIC is also conducting capacity building through training, funding, and fellowships to support members and Internet development in Africa. All were invited to join AFRINIC at the upcoming AIS'18 conference.
The document summarizes updates from APNIC regarding IPv4 and IPv6 resources. It notes that APNIC's final IPv4 /8 block is 59% used and the recovered pool is only 4% remaining. IPv6 adoption is growing globally but still low in some Asian countries. MyAPNIC improvements include a new reverse DNS page, contact update features, and upcoming route/ROA management. The document encourages using remaining IPv4 transfer options and transitioning to IPv6 given global IPv4 exhaustion.
Internet Resource Management Tutorial at SANOG 24APNIC
The document provides information about a presentation on APNIC IRM Tutorial given by Tuan Nguyen. It discusses Tuan's role at APNIC and his background. The agenda includes an introduction to APNIC, internet registry policies, requesting IP addresses, the Whois database and MyAPNIC, autonomous system numbers, and reverse DNS. It provides details on what APNIC is and its role, the global internet registry structure and policy coordination, and how IP addresses are allocated from RIRs to members and end users.
The document discusses RIPE Atlas, a global Internet measurement network. It provides an overview of RIPE Atlas and its tools and use cases. Specific topics covered include IXP Country Jedi, which uses RIPE Atlas data to analyze how traffic is routed via internet exchange points; TraceMON, a new tool for visualizing traceroute data; and how network operators and others can get involved with and contribute to RIPE Atlas.
IDNIC OPM 2023 - Internet Number Registry SystemAPNIC
APNIC Director of Information Management Sanjaya gives the keynote presentation on the Internet Number Registry System at the IDNIC OPM 2023, held in Bandung, Indonesia from 5 to 7 December 2023.
Similar to New Developments in Address Policy and Community Tools (20)
Navigating IP Addresses: Insights from your Regional Internet RegistryRIPE NCC
The document summarizes insights from Alena Muravska of the RIPE NCC about navigating IP addresses. It provides statistics on Internet number resources allocated to Poland by the RIPE NCC, including that Poland has 687 members and 737 LIRs. It discusses the depletion of IPv4 addresses and the new IPv4 allocation policy, noting that 32 Polish LIRs are currently waiting in the IPv4 waiting list. It also covers IPv6 allocations and assignments for members and non-members, and provides graphs on IPv4 holdings and IPv6 capability in Poland.
The presentation discusses the RPKI system and a recent incident where a threat actor gained access to an organization's RPKI dashboard using a leaked password. This led to unexpected changes being made to the organization's RPKI ROAs, causing a routing outage that disrupted internet connectivity. The presentation emphasizes the importance of strong passwords, multi-factor authentication, network security monitoring, and having an incident response plan to prevent similar incidents and increase routing resilience.
LIA HESTINA - Minimising impact before incidents occur with RIPE Atlas and RISRIPE NCC
This document discusses how network operators can minimize the impact of incidents on their networks using RIPE Atlas and Routing Information Services (RIS). It recommends strategically deploying RIPE Atlas probes and peering with RIS to continuously monitor the network. It also suggests setting up alerts to detect abnormalities and anomalies swiftly. Additional recommendations include maintaining low latency through debugging, and impressing customers by showcasing network performance.
IGF UA - Dialog with I_ organisations - Alena Muavska RIPE NCC.pdfRIPE NCC
This document summarizes Alena Muravska's presentation on engaging the Ukrainian community during times of war. It discusses how the Ukrainian community can participate in the RIPE community through various working groups and meetings. It also outlines how the RIPE NCC has supported Ukraine, including dedicating sessions to discuss the internet in Ukraine and forming a task force on best practices to survive disasters or war. Finally, it discusses efforts taken to protect Ukrainian resource holders, such as preventing unauthorized transfers of internet resources and examining changes made to country codes during the invasion.
Opportunities for Youth in IG - Alena Muravska RIPE NCC.pdfRIPE NCC
The document discusses opportunities for youth involvement in internet governance through the RIPE NCC. It describes the RIPE NCC as the regional internet registry for Europe, the Middle East, and Central Asia that allocates IP addresses and supports the open internet community. It outlines how individuals can participate in RIPE community working groups, meetings, policy development processes, and more. It specifically highlights the RIPE Fellowships and RIPE Academic Cooperation Initiative programs that fund youth attendance at RIPE meetings and encourage engagement between academia and the RIPE community.
The document discusses the RIPE NCC's Internet measurement tools - RIPE Routing Information Service (RIPE RIS), RIPEstat, and RIPE Atlas. It provides details on each tool, including how they collect and analyze routing data, Internet traffic maps, and performance measurements from over 12,000 probes worldwide. The tools are used by network operators, researchers, and policymakers to monitor routing, identify incidents, and inform future plans. Future plans include improving data collection and analysis, open sourcing components, and renewing back-end systems.
This document discusses RPKI (Resource Public Key Infrastructure) for securing Internet routing. It provides statistics on RPKI adoption in Luxembourg and neighboring countries, showing that while Luxembourg has over 65% of its address space covered by ROAs, not all networks have fully implemented RPKI. The goal is 100% RPKI implementation to validate all routes and prevent route hijacking, but obstacles still exist to full deployment. The presenter's contact information is provided for any questions.
The document discusses RIPE NCC's engagement in Southeast Europe, including organizing meetings, supporting network operator groups, developing internet exchange points, and funding opportunities. It then covers the topics of internet resiliency, analyzing networks in Belarus, Ukraine, Turkey and Poland using routing data. Next, it provides an analysis of internet landscapes in specific Southeast European countries. Key findings include the role of incumbent telecom operators, efficiency of regional routing but some anomalies, and modest diversity in routes into the region. Data sources used are also listed.
Know Your Network: Why Every Network Operator Should Host RIPE AtlasRIPE NCC
The document discusses the benefits of network operators hosting RIPE Atlas probes. It describes RIPE Atlas as an active measurements platform that monitors internet reachability through probes hosted by volunteers around the world. It highlights that RIPE Atlas data is publicly available and can be used by network operators to monitor performance, identify issues, validate findings, and plan improvements. The document encourages network operators in Africa to install RIPE Atlas probes to better monitor their networks and neighborhoods.
Minimising Impact When Incidents Occur With RIPE AtlasRIPE NCC
The document discusses how the online gaming company Mbappe uses RIPE Atlas to monitor network performance and minimize latency issues for their global users. It recommends strategically deploying RIPE Atlas probes, continuously monitoring measurements, and setting up alerts to quickly detect anomalies. When issues are found, the recommended actions are to identify network problems swiftly, debug issues to maintain low latency, and showcase network performance to impress customers. Installing probes in specific autonomous systems and networks could help identify parts of the network with high latency that are important to address.
- RIPE NCC provides internet measurement services including the Routing Information Service (RIS), RIPEstat, and RIPE Atlas to collect and provide data on internet routing and performance.
- RIS collects raw BGP data from remote route collectors at internet exchange points to observe real internet routing. RIPEstat and RIPE Atlas provide tools to analyze and visualize this data.
- RIPE Atlas specifically operates a global network of internet measurement devices that actively monitor connectivity, reachability, and performance. Its data and custom measurement tools are available to both network operators and researchers.
RIPE Atlas is a global measurement platform that uses probes hosted by volunteers to monitor internet connectivity and latency. It provides latency maps showing routes between networks and allows custom measurements. The presentation highlighted how RIPE Atlas can be used to identify networks with high latency, view routes and locations of probes, and conduct DNS and traceroute tests while remaining secure and low cost. Hosting a RIPE Atlas probe or improving coverage in certain regions would further benefit internet monitoring.
Presentasi menjelaskan tentang penggunaan RIPE Atlas untuk mendeteksi masalah latensi di internet. RIPE Atlas adalah platform pengukuran internet global yang menggunakan probe di seluruh dunia untuk melakukan pengukuran kinerja jaringan seperti ping dan traceroute. Presentasi mendemonstrasikan bagaimana RIPE Atlas dapat digunakan untuk mengidentifikasi anomali latensi dan membantu perusahaan game online menyelesaikan masalah kinerja mereka.
RIPE Atlas is a global network measurement platform that uses volunteer-hosted probes to monitor Internet performance and availability. It runs tests including ping, traceroute, and DNS to identify issues like high latency. The presentation discusses using RIPE Atlas to help an online gaming company identify and address latency problems impacting users in different regions. It also provides examples of the probes and measurements available in Southeast Asian countries like the Philippines.
Main news related to the CCS TSI 2023 (2023/1695)Jakub Marek
An English 🇬🇧 translation of a presentation to the speech I gave about the main changes brought by CCS TSI 2023 at the biggest Czech conference on Communications and signalling systems on Railways, which was held in Clarion Hotel Olomouc from 7th to 9th November 2023 (konferenceszt.cz). Attended by around 500 participants and 200 on-line followers.
The original Czech 🇨🇿 version of the presentation can be found here: https://www.slideshare.net/slideshow/hlavni-novinky-souvisejici-s-ccs-tsi-2023-2023-1695/269688092 .
The videorecording (in Czech) from the presentation is available here: https://youtu.be/WzjJWm4IyPk?si=SImb06tuXGb30BEH .
AppSec PNW: Android and iOS Application Security with MobSFAjin Abraham
Mobile Security Framework - MobSF is a free and open source automated mobile application security testing environment designed to help security engineers, researchers, developers, and penetration testers to identify security vulnerabilities, malicious behaviours and privacy concerns in mobile applications using static and dynamic analysis. It supports all the popular mobile application binaries and source code formats built for Android and iOS devices. In addition to automated security assessment, it also offers an interactive testing environment to build and execute scenario based test/fuzz cases against the application.
This talk covers:
Using MobSF for static analysis of mobile applications.
Interactive dynamic security assessment of Android and iOS applications.
Solving Mobile app CTF challenges.
Reverse engineering and runtime analysis of Mobile malware.
How to shift left and integrate MobSF/mobsfscan SAST and DAST in your build pipeline.
Fueling AI with Great Data with Airbyte WebinarZilliz
This talk will focus on how to collect data from a variety of sources, leveraging this data for RAG and other GenAI use cases, and finally charting your course to productionalization.
Ivanti’s Patch Tuesday breakdown goes beyond patching your applications and brings you the intelligence and guidance needed to prioritize where to focus your attention first. Catch early analysis on our Ivanti blog, then join industry expert Chris Goettl for the Patch Tuesday Webinar Event. There we’ll do a deep dive into each of the bulletins and give guidance on the risks associated with the newly-identified vulnerabilities.
Programming Foundation Models with DSPy - Meetup SlidesZilliz
Prompting language models is hard, while programming language models is easy. In this talk, I will discuss the state-of-the-art framework DSPy for programming foundation models with its powerful optimizers and runtime constraint system.
HCL Notes and Domino License Cost Reduction in the World of DLAUpanagenda
Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-and-domino-license-cost-reduction-in-the-world-of-dlau/
The introduction of DLAU and the CCB & CCX licensing model caused quite a stir in the HCL community. As a Notes and Domino customer, you may have faced challenges with unexpected user counts and license costs. You probably have questions on how this new licensing approach works and how to benefit from it. Most importantly, you likely have budget constraints and want to save money where possible. Don’t worry, we can help with all of this!
We’ll show you how to fix common misconfigurations that cause higher-than-expected user counts, and how to identify accounts which you can deactivate to save money. There are also frequent patterns that can cause unnecessary cost, like using a person document instead of a mail-in for shared mailboxes. We’ll provide examples and solutions for those as well. And naturally we’ll explain the new licensing model.
Join HCL Ambassador Marc Thomas in this webinar with a special guest appearance from Franz Walder. It will give you the tools and know-how to stay on top of what is going on with Domino licensing. You will be able lower your cost through an optimized configuration and keep it low going forward.
These topics will be covered
- Reducing license cost by finding and fixing misconfigurations and superfluous accounts
- How do CCB and CCX licenses really work?
- Understanding the DLAU tool and how to best utilize it
- Tips for common problem areas, like team mailboxes, functional/test users, etc
- Practical examples and best practices to implement right away
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor IvaniukFwdays
At this talk we will discuss DDoS protection tools and best practices, discuss network architectures and what AWS has to offer. Also, we will look into one of the largest DDoS attacks on Ukrainian infrastructure that happened in February 2022. We'll see, what techniques helped to keep the web resources available for Ukrainians and how AWS improved DDoS protection for all customers based on Ukraine experience
Your One-Stop Shop for Python Success: Top 10 US Python Development Providersakankshawande
Simplify your search for a reliable Python development partner! This list presents the top 10 trusted US providers offering comprehensive Python development services, ensuring your project's success from conception to completion.
Essentials of Automations: Exploring Attributes & Automation ParametersSafe Software
Building automations in FME Flow can save time, money, and help businesses scale by eliminating data silos and providing data to stakeholders in real-time. One essential component to orchestrating complex automations is the use of attributes & automation parameters (both formerly known as “keys”). In fact, it’s unlikely you’ll ever build an Automation without using these components, but what exactly are they?
Attributes & automation parameters enable the automation author to pass data values from one automation component to the next. During this webinar, our FME Flow Specialists will cover leveraging the three types of these output attributes & parameters in FME Flow: Event, Custom, and Automation. As a bonus, they’ll also be making use of the Split-Merge Block functionality.
You’ll leave this webinar with a better understanding of how to maximize the potential of automations by making use of attributes & automation parameters, with the ultimate goal of setting your enterprise integration workflows up on autopilot.
Discover top-tier mobile app development services, offering innovative solutions for iOS and Android. Enhance your business with custom, user-friendly mobile applications.
Digital Banking in the Cloud: How Citizens Bank Unlocked Their MainframePrecisely
Inconsistent user experience and siloed data, high costs, and changing customer expectations – Citizens Bank was experiencing these challenges while it was attempting to deliver a superior digital banking experience for its clients. Its core banking applications run on the mainframe and Citizens was using legacy utilities to get the critical mainframe data to feed customer-facing channels, like call centers, web, and mobile. Ultimately, this led to higher operating costs (MIPS), delayed response times, and longer time to market.
Ever-changing customer expectations demand more modern digital experiences, and the bank needed to find a solution that could provide real-time data to its customer channels with low latency and operating costs. Join this session to learn how Citizens is leveraging Precisely to replicate mainframe data to its customer channels and deliver on their “modern digital bank” experiences.
zkStudyClub - LatticeFold: A Lattice-based Folding Scheme and its Application...Alex Pruden
Folding is a recent technique for building efficient recursive SNARKs. Several elegant folding protocols have been proposed, such as Nova, Supernova, Hypernova, Protostar, and others. However, all of them rely on an additively homomorphic commitment scheme based on discrete log, and are therefore not post-quantum secure. In this work we present LatticeFold, the first lattice-based folding protocol based on the Module SIS problem. This folding protocol naturally leads to an efficient recursive lattice-based SNARK and an efficient PCD scheme. LatticeFold supports folding low-degree relations, such as R1CS, as well as high-degree relations, such as CCS. The key challenge is to construct a secure folding protocol that works with the Ajtai commitment scheme. The difficulty, is ensuring that extracted witnesses are low norm through many rounds of folding. We present a novel technique using the sumcheck protocol to ensure that extracted witnesses are always low norm no matter how many rounds of folding are used. Our evaluation of the final proof system suggests that it is as performant as Hypernova, while providing post-quantum security.
Paper Link: https://eprint.iacr.org/2024/257
How information systems are built or acquired puts information, which is what they should be about, in a secondary place. Our language adapted accordingly, and we no longer talk about information systems but applications. Applications evolved in a way to break data into diverse fragments, tightly coupled with applications and expensive to integrate. The result is technical debt, which is re-paid by taking even bigger "loans", resulting in an ever-increasing technical debt. Software engineering and procurement practices work in sync with market forces to maintain this trend. This talk demonstrates how natural this situation is. The question is: can something be done to reverse the trend?
Skybuffer SAM4U tool for SAP license adoptionTatiana Kojar
Manage and optimize your license adoption and consumption with SAM4U, an SAP free customer software asset management tool.
SAM4U, an SAP complimentary software asset management tool for customers, delivers a detailed and well-structured overview of license inventory and usage with a user-friendly interface. We offer a hosted, cost-effective, and performance-optimized SAM4U setup in the Skybuffer Cloud environment. You retain ownership of the system and data, while we manage the ABAP 7.58 infrastructure, ensuring fixed Total Cost of Ownership (TCO) and exceptional services through the SAP Fiori interface.
3. Vesna Manojlovic | DENOG8 | November 2016 3
… actually
• Help community to shape RIPE policies
• Use RIS for your BGP monitoring
• Measure your reachability with RIPE Atlas
8. Vesna Manojlovic | DENOG8 | November 2016 X
Who Does What ?
• The RIPE community
- Creates & discusses policy proposals
- Seeks consensus and decides on policies
- Has two RIPE meetings per year
• The RIPE NCC
- Acts as the secretariat to support the policy process
- Implements the policies & distributes resources
- Helps organise RIPE meetings
- … and many other activities: training, measurements,
gathers statistics, takes part in Internet Governance…
9. Vesna Manojlovic | DENOG8 | November 2016 7
RIPE Consists of Working Groups
e.g. https://www.secret-wg.org
10. Vesna Manojlovic | DENOG8 | November 2016 X
RIPE Working Groups
• Address Policy
• Routing
• Database
• Anti-abuse
• Cooperation
• IPv6
• RIPE NCC Services
• Connect
• Open Source
• Measurement,
Analysis and Tools
11. Vesna Manojlovic | DENOG8 | November 2016 8
RIPE Forum
https://www.ripe.net/participate/mail/forum/
12. Vesna Manojlovic | DENOG8 | November 2016 X
RIPE Forum
• Alternative way to participate in discussions
• One place to access all RIPE mailing lists
• Completely web-based; no emails in inbox
• Interacts with existing mailing lists
• Contains threaded view, search function and
options to share
https://www.ripe.net/participate/mail/forum/
13. Vesna Manojlovic | DENOG8 | November 2016 9
IPv6 Addresses Distribution
Allocation PA Assignment
/3
/32
/12
/48/56 /48 End User
LIR
RIR
IANA
PI Assignment
15. Vesna Manojlovic | DENOG8 | November 2016 11
Types of Transfers
PA allocations
between RIPE NCC members
PI assignments
between End Users
AS numbers
between End Users
Merger or Acquisition
From Legacy Space
Inter-RIR
16. Vesna Manojlovic | DENOG8 | November 2016 X
Inter-RIR Transfers
• Between RIRs with compatible policies
• ARIN: IPv4 addresses (including legacy space)
• APNIC: IPv4 addresses and AS Numbers
(including legacy)
• Send your request to inter-rir@ripe.net
17. Vesna Manojlovic | DENOG8 | November 2016 X
Transfers: How to Request
• IPv4 Listing Service, in LIR Portal account
• Use the “Request Transfer” wizard
• Include the following information & documents:
- IPv4 / IPv6 / ASN being transferred
- company names and contact details
- company registration papers
- Transfer Agreement
• For PI transfers, sponsoring LIR agreement is
needed too
18. Vesna Manojlovic | DENOG8 | November 2016 X
Protect Your Resources
• Maintain your contact info in the RIPE
database
• Keep your LIR contacts in the LIR Portal up to
date
• Know the policies and procedures
• In case of questions, contact
Registration Services
lir-help@ripe.net
20. Vesna Manojlovic | DENOG8 | November 2016 X
Current Policy Discussions
• 2015-04, “RIPE Resource Transfer Policies”
- Aims to create a single transfer policy with all relevant information
on the transfer of Internet number resources, replacing text in
several RIPE Policies.
• 2016-04, “IPv6 PI Sub-assignment Clarification”
- Aims to define sub-assignments in IPv6 PI assignments as subnets
of /64 and shorter.
• Upcoming: Assessment criteria for IPv6
additional allocations
- Aims to align allocation criteria for IPv6 additional allocations to
initial allocation (segmentation, security, longevity)
https://www.ripe.net/participate/policies/current-proposals/current-policy-proposals
23. Florian Obser | DENOG 8 | 24 November 2016
Routing Information Service (RIS)
• Worldwide network of BGP collectors
• Deployed at Internet Exchange Points
• Collects raw BGP data from peers
- 669 peers at 18 locations
- 157 IPv4 full tables
- 147 IPv6 full tables
• 15+ years of history
15
25. Florian Obser | DENOG 8 | 24 November 2016 17
Collector History
Collector Location IXP Deployed Removed
RRC00 Amsterdam Multi-hop 1999 -
RRC01 London LINX 2000 -
RRC02 Paris SFINX 2001 2008
RRC03 Amsterdam AMS-IX 2001 -
RRC04 Geneva CIXP 2001 -
RRC05 Vienna VIX 2001 -
RRC06 Tokyo DIX-IE 2001 -
RRC07 Stockholm Netnod 2002 -
RRC08 San Jose MAE-West 2002 2004
RRC09 Zurich TIX 2003 2004
RRC10 Milan MIX 2003 -
RRC11 New York NYIIX 2004 -
RRC12 Frankfurt DE-CIX 2004 -
RRC13 Moscow MSK-IX 2005 -
RRC14 Palo Alto PAIX 2005 -
RRC15 Sao Paulo PTT-Metro SP 2006 -
RRC16 Miami NOTA 2008 -
RRC18 Barcelona CATNIX 2015 -
RRC19 Johannesburg NAPAfrica JB 2016 -
RRC20 Zurich SwissIX 2015 -
RRC21 Paris FranceIX 2015 -
26. Florian Obser | DENOG 8 | 24 November 2016 18
RIS Data
• RAW data
- http://data.ris.ripe.net/
• Shiny web interface: RIPEstat
- https://stat.ripe.net/
• We provide APIs to query all the data
- https://stat.ripe.net/docs/data_api
27. Florian Obser | DENOG 8 | 24 November 2016 19
RIPE Stat - Routing Overview
28. Florian Obser | DENOG 8 | 24 November 2016 20
RIPE Stat - AS Path Length
29. Florian Obser | DENOG 8 | 24 November 2016 21
RIPE Stat - Visibility
30. Florian Obser | DENOG 8 | 24 November 2016 22
RIPE Stat - Monitor Updates
31. Florian Obser | DENOG 8 | 24 November 2016 23
Real-time Streaming of BGP data
• Public beta available
• Data from newest 4 RRCs only (RRC18-21)
• Client specifies filtering options, streaming
service sends BGP
• Messages as they become available
• http://stream-dev.ris.ripe.net/demo
35. Florian Obser | DENOG 8 | 24 November 2016 27
Current Design - Data Collection
36. Florian Obser | DENOG 8 | 24 November 2016 28
Current Design - Back-end
37. Florian Obser | DENOG 8 | 24 November 2016 29
Scaling the Collectors
• Quagga used as BGP collector
• Single-threaded
- Not as scalable on modern multi-core CPUs
• Locks updates during table-dump process
- Requires that dump completes before the hold timer
expires, or BGP session will drop
• Some data consistency issues
- Sometimes updates are missing from the update dumps at
the time of a table dump
- This makes it difficult to accurately rebuild BGP state at a
intermediate time, if updates are not reliable in-between
38. Florian Obser | DENOG 8 | 24 November 2016 30
Scaling the Collectors Cont’d
• New RRCs use ExaBGP
• Still single threaded
• But doesn’t block & 1 (or n) instances per CPU
• Much simpler job
- keep BGP session alive
- write one line of JSON to STDOUT per BGP message
• Python 4 liner stores it in DirQ
- if process dies takes ExaBGP instance with it
39. Florian Obser | DENOG 8 | 24 November 2016 31
Scaling the Collectors Cont’d
• BGP message is safely stored on disk
• Or we tore session down
• → BGP state is consistent
• 2nd process drains DirQ
• Stores messages in Message Queue Cluster
in Amsterdam (RabbitMQ / Kafka)
40. Florian Obser | DENOG 8 | 24 November 2016 32
Data Processing
• Apache Hadoop
- An open-source software framework for distributed storage
and distributed processing of very large data sets on
computer clusters built from commodity hardware.
• “Big Data” storage and analytics
• Allows us to build a scalable storage and
processing cluster
• Currently over 150 servers in the cluster!
- Although the cluster is not only used for RIS!
- Also used by RIPE Atlas and other projects
41. Florian Obser | DENOG 8 | 24 November 2016 33
Data Processing - Components
• HDFS
- distributed, replicated, cluster filesystem
• YARN
- compute resource manager and application scheduler
• Map/Reduce
- massive batch job processing
• HBase
- non-relational distributed database
- large tables - billions of rows X millions of columns
42. Florian Obser | DENOG 8 | 24 November 2016 34
Data Processing - Components
• Spark
- Cluster computing used for data stream processing
- i.e. non-batch computing
• Azkaban
- Batch workflow job scheduler, dependency tracking, etc.
• Kafka
- BGP event messaging bus
43. Florian Obser | DENOG 8 | 24 November 2016 35
Data Processing
• Raw data inputs:
- BGP updates events - everything must start from a BGP
message!
- BGP table dumps (which can also be derived from updates)
• Derived datasets
- update-counts, first-last-seen, prefixes-transited-by-asn,
peers-list, asn-stats, asn-adjacencies
- country-code mapping
- aggregated counts for historical overviews
- distributed looking-glass processing
46. Vesna Manojlovic | DENOG8 | November 2016 38
RIPE Atlas Coverage in Germany
47. Vesna Manojlovic | DENOG8 | November 2016 X
Most Popular Features
• Six types of measurements: ping, traceroute,
DNS, SSL/TLS, NTP and HTTP (to anchors)
• APIs to start measurements and get results
• Powerful and informative visualisations
• CLI tools
• Streaming data for real-time results
• New: “Time Travel”, LatencyMON, DomainMON
• Roadmap shows what’s completed and coming
48. Vesna Manojlovic | DENOG8 | November 2016 39
Global Reachability Check: Traceroute
51. Vesna Manojlovic | DENOG8 | November 2016 X
Traceroute for Checking Reachability
• To start traceroute: GUI, API & CLI
• Results available as
• visualised on the map, as a list of details, LatencyMon
• download via API
• Real-time data streaming
• Many visualisations available
• List of probes: sortable by RTT
• Map: colour-coded by RTT
• LatencyMON: compare multiple latency trends
53. Vesna Manojlovic | DENOG8 | November 2016 X
RIPE Atlas CLI ToolSet
• Network troubleshooting from command line
• Familiar output (ping, dig, traceroute)
• Installation for Linux/OSX & Windows
[experimental]
• Included in OpenBSD, FreeBSD, Gentoo,
Arch, Debian, Ubuntu, Fedora
• Documentation
• Source code available, contributions welcome!
54. Vesna Manojlovic | DENOG8 | November 2016 43
Who Wants to be a Millionaire?
55. Vesna Manojlovic | DENOG8 | November 2016 X
“Paying” for your measurements
• Running your own measurements cost credits
- Ping = 10 credits, traceroute = 20, etc.
• Why? Fairness and to avoid overload
• Limited by daily spending limit and
measurement results limits
• Hosting a RIPE Atlas probe earns credits
• Earn extra credits by being RIPE NCC
members, hosting an anchor or sponsoring
• Or: don’t spend credits - use existing data!
57. Vesna Manojlovic | DENOG8 | November 2016 45
Any Questions on How to… ?
• Help community to shape RIPE policies
• Use RIS for your BGP monitoring
• Measure your reachability with RIPE Atlas
59. Vesna Manojlovic | DENOG8 | November 2016 47
Monitoring Using RIPE Atlas
• Integrate “status checks” with existing
monitoring tools (such as Icinga)
• Using real-time data streaming
- Server monitoring
- Detecting and visualising outages
• Developed by community: “RIPE Atlas
Monitor”
60. Vesna Manojlovic | DENOG8 | November 2016 48
• Students and researchers:
- Present your Internet-related research at RIPE Meetings
- Complimentary tickets, travel and accommodation
- Topics: network measurement and analysis, security,
IPv6 deployment, BGP routing, Internet governance,
peering and interconnectivity
• ripe.net/raci
61. Vesna Manojlovic | DENOG8 | November 2016 49
• Publish your research or use case
• Reach out to RIPE Community
• Read about latest analysis or conferences
• labs.ripe.net