- NANOG - lists.nanog.org

I-D ACTION:draft-degroot-classless-inaddr-00.txt
by Internet-Drafts＠CNRI.Reston.VA.US 22 May '95

22 May '95

A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Classless in-addr.arpa delegation Author(s) : H. Eidnes, G. de Groot Filename : draft-degroot-classless-inaddr-00.txt Pages : 6 Date : 05/19/1995 This document describes a way to do in-addr.arpa delegation on non-octet boundaries. The proposed method should thus remove one of the objections to do subnetting on non-octet boundaries but perhaps more significantly, make it possible to assign IP address space in smaller chunks than 24-bit prefixes without losing the ability to delegate authority for the corresponding in-addr.arpa mappings. The proposed method is fully compatible with the original DNS lookup mechanisms specified in [1], i.e. there is no need to modify the lookup algorithm used, and there should be no need to modify any software which does DNS lookups either. Internet-Drafts are available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-degroot-classless-inaddr-00.txt". A URL for the Internet-Draft is: ftp://ds.internic.net/internet-drafts/draft-degroot-classless-inaddr-00.txt Internet-Drafts directories are located at: o Africa Address: ftp.is.co.za (196.4.160.2) o Europe Address: nic.nordu.net (192.36.148.17) Address: ftp.nis.garr.it (192.12.192.10) o Pacific Rim Address: munnari.oz.au (128.250.1.21) o US East Coast Address: ds.internic.net (198.49.45.10) o US West Coast Address: ftp.isi.edu (128.9.0.32) Internet-Drafts are also available by mail. Send a message to: mailserv(a)ds.internic.net. In the body type: "FILE /internet-drafts/draft-degroot-classless-inaddr-00.txt". NOTE: The mail server at ds.internic.net can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e., documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. For questions, please mail to Internet-Drafts(a)cnri.reston.va.us. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. ENCODING mime FILE /internet-drafts/draft-degroot-classless-inaddr-00.txt

1 0

Re: PI vs PA Address Space
by Hank Nussbacher 22 May '95

22 May '95

On Wed, 17 May 1995 13:00:00 +0200 you said: Doc 1: > > Provider Independent > > vs > > Provider Aggregatable > > Address Space > > > > Daniel Karrenberg > RIPE NCC Doc 2: > On the Implications of Address Ownership for Internet Routing > <draft-ietf-cidrd-ownership-00.txt> Doc 3 (from Internic): > INTERNIC IP ALLOCATION GUIDELINES > > FOR INTERNET SERVICE PROVIDERS (ISP) Can I make a suggestion? Can Yakov, Daniel and the people from Internic (Mark and Kim), get together and merge these 3 papers into one draft RFC and put on the fast track so that everyone not following these internal discussions will know what to do come the end of the summer? Hank Nussbacher Israel

1 0

Updated NANOG traceroute available (AS#, DNS cidr, VMS)
by Ehud Gavron 22 May '95

22 May '95

Date Sent: 21-MAY-1995 20:56:20 A while back someone here posted a ``NANOG traceroute'' that did some pretty cool things, namely shows delay statistics, microtimers, etc. I've updated it and made it available for anonymous ftp at ftp.aces.com in the [.software.traceroute] directory. This version also works on VMS. Details below. [I hope to see this message come back at me only once...] Ehud -- Ehud Gavron (EG76) gavron(a)Hearts.ACES.COM 1. Original version didn't support AS # lookups The new version checks the AS # for which each hop's network is registered and displays it. sl-ana-2-F0/0.sprintlink.net (144.228.70.2) AS1239 30 ms 30 ms 2. Original version didn't do proper checking for nixed DNS replies. If a network had no SOA record (like where MCI has one SOA record for a chunk of 256 class-C style networks and not 256 separate SOAs) it would display garbage. The new version checks /24 networks, and /16 networks, and even /8 networks in-addr for a valid SOA before displaying a useful string like "[no SOA record]". border3-hssi2-0.SanFrancisco.mci.net (204.70.34.9) [hostmaster(a)mci.net] 3. Original version had incorrect behavior for when the number of probes were set to 1. If a reply ever came back (like from ttl=1) the loop would terminate. The new version behaves correctly for nprobes=1. 4. Original version had no support for VMS. The new version compiles, links, and runs fine under VMS. 5. Original version had various implicit casts that make some compilers (some ANSI compliant ones) complain. The new version fixes these. For some reason, the only way I could get BSDI to compile it (and find _sqrt) is to add -lm to the cc line. cc -O traceroute.c -lm. Ehud -- Ehud Gavron (EG76) gavron(a)Hearts.ACES.COM

1 0

Re: Draft internic ip allocation doc
by Sean Doran 20 May '95

20 May '95

>... must start filtering something to protect [the Internet] ... Such filters exist and are in place in at least three sizable ISPs' edge routers. The routability of anything longer than /24 is no longer an issue -- it won't happen with anything even remotely approaching global scope. The line in the sand for the various /8s that haven't yet started being delegated by registries is there, and has been announced and discussed ad nauseam. Sean. (waiting for the obligatory, "you're only doing this to keep your customers locked in place because you're an evil greedy bastard!", and wondering if it's going to be an IAB member _again_.) - -- Sean Doran <smd(a)clock.org>

2 1

ARGH! Duplicates are from MERIT machines. MERIT - fix!
by Sean Doran 20 May '95

20 May '95

Oh, MERIT.... please to fix your broken mailer that keeps sending LOTS duplicates of the same message.... Sean. Received: from merit.edu (merit.edu [35.1.1.42]) by icm1.icp.net (8.6.10/8.6.9) with ESMTP id DAA28959; Sat, 20 May 1995 03:36:45 -0400 Received: from cesium.clock.org ([17.255.4.43]) by merit.edu (8.6.10/merit-2.0) with SMTP id PAA05689 for <nanog(a)merit.edu>; Wed, 17 May 1995 15:17:25 -0400 Received: from merit.edu (merit.edu [35.1.1.42]) by tiny.sprintlink.net (8.6.9/8 .6.9) with ESMTP id DAA13483; Sat, 20 May 1995 03:25:36 -0400 Received: from cesium.clock.org ([17.255.4.43]) by merit.edu (8.6.10/merit-2.0) with SMTP id PAA05689 for <nanog(a)merit.edu>; Wed, 17 May 1995 15:17:25 -0400 Received: from merit.edu (merit.edu [35.1.1.42]) by icm1.icp.net (8.6.10/8.6.9) with ESMTP id BAA26145; Sat, 20 May 1995 01:31:17 -0400 Received: from cesium.clock.org ([17.255.4.43]) by merit.edu (8.6.10/merit-2.0) with SMTP id PAA05689 for <nanog(a)merit.edu>; Wed, 17 May 1995 15:17:25 -0400 sendfail(8) considered harmful!

1 0

Re: PI vs PA Address Space
by Sean Doran 20 May '95

20 May '95

| Stronger hierarchy leads to: | - strong regulation of ISPs | - hinders competition | - no incentive to solve difficult routing problems | - leads to governmental regulation and control Let's revisit the economics of the global Internet. You pay for three things, two of which are real products and one of which is an elasticity factor: 1/ delivery of packets into the global Internet 2/ receipt of packets from the global Internet (reachability) 3/ warm fuzzies ("they know what they're doing; they are responsive to my needs") Item (1) is what you get when your immediate service provider turns up your circuit and you say ip route 0.0.0.0 0.0.0.0 Serial0 on your router. The rate at which you can deliver packets into the Internet is the minimum of the sum of egress bandwidths from your local small-i internet, any choke points in the path to egress points, or the width of your circuit. For example, in the simple case, if you have an E1 and your service provider has a 512kbps circuit to AlterNet, your maximum delivery rate of traffic into the global Internet is 512kbps plus any local connectivity. The pricing for item (1) is typically the cost of the physical connection to you plus some value which reflects the effect your bandwidth utilization is likely to have on choke points plus a percentage. Item (2) is what you get when your immediate service provider has arrangements in place to have their customers' prefixes carried and made reachable nearly ubiquitously. ("Nearly" covers firewalls and networks with policy constraints which are enforced via routing mechanisms). Until fairly recently, the guarantee of even nearly ubiquitous reachability was impossible to make thanks to the way the AUP was enforced. However, once you had the NSFNET backbone service carrying your routing information, you generally nearly ubiquitous routing, thanks to the fact that practically everyone defaulted to AS 690. Then along comes Change. The first two huge changes were the CIX and MAE-EAST, two enormous steps away from the model of AS 690 as the network to which you simply defaulted. Suddenly rather than having PSI aggregated behind AS 690, AlterNet started hearing all their routes directly, and preferring those. Generally speaking, the MAE-EAST participants started on a path wherein they preferred any announcement over anything heard from AS 690, which often enough was left as a default. Over time, some of the MAE-EAST participants stopped defaulting to ANS, partly because the amount of routing information reachable only from ANS grew smaller, and partly because in several ways it's easier to manage full routing for recovery and optimization than it is to manage partial routing plus a default. Eventually routers stopped being able to handle full routing in 16Mb of memory, and suddenly the very real cost of carrying routing information around became clear to a number of providers: how much did replacing a bunch of mostly-AGS+ routers with 64Mb Cisco 7000-series routers cost? This was one of the big pushes behind serious deployment of CIDR. CIDR's principal goal was to keep routing tables small by hiding detail, that is, by aggregating into bigger blocks. (Its secondary goal, full classlessness, is being played with as folks start experimenting with interdomain routing of subnets of classful networks). Originally the need to keep routing tables small was to prevent routers which had not been converted to 64Mb boxes, and which could not get by without knowing large amounts of routing information, from running out of memory and crashing. Recently we have started noticing that, while memory consumption is still a real issue for a number of people in the world, those people with 64Mb boxes are starting to notice that the amount of CPU used by carrying full routing is increasing, especialy as interdomain convergence time is decreasing to the point where an update is seen by most Ciscos in the U.S. in a matter of a few seconds. In normal operation, with the normal background noise of a few flaps per second (largely attributable to flakey network connections and people doing dynamic routing updates for dialup users, and some level of longer-term transitions), most routers talking BGP hardly notice any CPU hit at all. Even those routers doing siginificant amounts of as-path and prefix-based filtering for various reasons (mostly involving backup arrangements and making sure bad things don't happen (giving or receiving accidental transit, not accepting or propagating certain bad prefixes (like not accepting an announcement for one's own backbone network from external peers), and so forth)) are borderline. A couple such boxes spend a constant 30-45% of their CPU handling BGP, others run at a constant 20% handling BGP. When a big transition happens, such as when someone at MCI or Sprint types clear ip bgp * at MAE-EAST+, several routers all over the world jump from less than 10% to 100% CPU utilization for on the order of ten minutes. As the number of prefixes increases -- and routing flap -- both the amount of CPU spent on normal everyday processing and the amount of real time necessary to handle a major transition increases. One observation that has been made is that smaller prefixes are liklier to flap than larger prefixes. An analysis of what prefixes were flapping that I did for the last NANOG seemed to indicate (after much discussion with the folks originating the prefixes) that the majority of flaps were caused by /24s used by dialup customers that got introduced into the global routing system upon connection, and removed when the dialup customer hung up. Multiply this by lots of simultaneous dialup customers and you have a problem. The problem is fixable by aggregation. If you aggregate all these /24s (or /28s or whatever) into something bigger, that something bigger is much less likely to flap, and moreover can easily be set up so that it never flaps at all. Nailing down these problems helps considerably, but the amount of CPU used by BGP in increasing numbers of routers is getting scary. Following the line of reasoning -- which seems to hold up in practice -- that on average, smaller prefixes are likelier to flap over time than larger prefixes, one really wants to see a large reduction in the number of smaller prefixes carried globally. That's not to say that local delegations should be big; a dialup user should get as small a chunk of address space as necessary, a dedicated line customer likewise, in an effort to avoid wasting address space, and also in an effort to assist in aggregating lots of individual connections behind a largeish (/18 or shorter) prefix. So, on the theory that pretty much every prefix that's /18 or shorter aggregates enough links and flap-prone things within it, and with the observation that very few prefixes shorter than 18 bits flap in normal circumstances (pace one international connection that was so completely saturated that BGP kept falling over due to keepalive timeouts, which caused traffic to fall off, which allowed BGP to re-establish itself, causing the cycle to repeat -- this got fixed), several NSPs started talking about how to go about reducing the number of prefixes longer than /24 with global scope to essentially zero. That is, while you can have a /24, /28 or /32 now or in the future, and while it can have local scope within a small-i internet (even one that's a big chunk of the big-I global Internet), right now nothing longer than /24 will have global scope at all, and ***in future blocks***, by default, nothing longer than /18 or /19 (it's /18 now, but it's not entirely inflexible, and dialogues continue) will have global scope. (I note *** in future blocks *** because people get really terrified that their current /24 will become useless Real Soon Now. That is not the plan, and likely won't be necessary any time soon, _especially_ if future allocations can be done right. Things are trending in the right direction.) "Local scope" could be as small as your immediate provider, or that provider's provider, or even a largeish NSP. However, if it's not aggregatable into a larger block, it won't work for interdomain routing among several size-large NSPs. Again, the general idea is to keep interdomain routing working in such a way that it doesn't make moving packets impossible. Which returns us to point #2. Arranging global reachability for a prefix is nontrivial; lots of things happen in the background at all levels in order to make global routing work. You pay your provider to pay their provider to pay their provider etc. to work out the hard problems so that a single piece of email, or an RADB object update or an addition to a configuration in a router or a phone call is all that's necessary for you to announce a new network out to the world. There's a problem though, and that is the cost of making some prefixes reachable is much greater than others. In fact, the cost of making everyone's nonaggregatable /28, /29, ... /32 reachable globally is so great that it is easier to say it simply cannot happen, in large part because the cost includes designing, building and deploying new router technology in several NSPs and ISPs, so that the routers of the world can actually handle enormous numbers of prefixes, especially when someone types clear ip bgp * at a large exchange point. Finally, (3). It's clear that people have different needs and wants and requirements from their service providers. Generally speaking, the bulk of Sprint's customers want the global Internet to work, because their users want sex-on-demand with people in Finland and to go poking around Brandy's Babes' home pages or www.plaything.com, or whatever it is that users do. The bulk of Sprint's customers are pretty clever and realize that while there are alot of things that look really really ugly, even or especially from their perspective, they really are necessary in order to keep the global Internet working. Among the things we do realize is that yes, there are side effects to proxy aggregating a size-large service-provider's non-aggregated CIDR blocks, and yes there are side-effects involved in pushing for renumbering into large aggregatable blocks, and yes there are side-effects to putting up filters that block prefixes longer than 24 bits, and yes there are side effects to rewriting our old policy of, "we talk BGP with you if you're a reseller period" to "we prefer not to talk BGP at all, unless there is a strong technical reason to do so". However, in all these cases the position we take is these ugly things (and yes, a whole bunch of much less ugly things) are necessary in order for the global Internet to work, and in order for us to offer you a level of service such that your customers or corporation or whatever doesn't scream bloody murder at you because things Just Don't Work because some router somewhere just keeled over because it was asked to do too much. Moreover, it's not just Sprint taking this line with their customers -- others do too, and give their customers the warm fuzziness that their customers are willing to pay for. So, in the final analysis, what we're pushing for does not reduce competition in an economic sense, although it does have side-effects. There is plenty of room in the current marketplace for all sorts of competition, and even more room for specializaton and cooperative deals, which is normal for a growth market of this magnitude. Lastly, the people most affected by the side-effects of keeping Sprint's part of the Internet up and running and connecting more than sixty countries and four hundred IP resellers are Sprint's customers and their customers. Given how little we directly compete with our customers anyway, while they are right to wish there were some other way (so does Sprint!), I think they also realize that the last thing we are trying to do is put them out of business or make it difficult for them to compete. Healthy customers makes for healthy revenues. And a healthy Internet makes for healthy customers. That's all. Sean.

11 12

Re: Draft internic ip allocation doc
by peter＠swan.lanl.gov 19 May '95

19 May '95

> What's being asked for here is what a lot of businesses might consider > proprietary or trade secret type information. There are few secrets on the > Internet, we all know, once the network is in place, but plans for expansion > and new business ought to be confidential until the day the circuit is > turned on. It is the case that several regulatory agencies ask for similar information when an organization requests allocation of spectrum. For example, in the US the FCC asks for an "independent" engineering review for several classes of spectrum allocation. peter

2 1

Re: Draft internic ip allocation doc
by peter＠agis.net 19 May '95

19 May '95

At 11:10 AM 5/19/95 MST, peter(a)swan.lanl.gov wrote: > >> What's being asked for here is what a lot of businesses might consider >> proprietary or trade secret type information. There are few secrets on the >> Internet, we all know, once the network is in place, but plans for expansion >> and new business ought to be confidential until the day the circuit is >> turned on. > >It is the case that several regulatory agencies ask for similar information >when an organization requests allocation of spectrum. For example, >in the US the FCC asks for an "independent" engineering review for several >classes of spectrum allocation. > >peter Hate to argue with someone named after the Saint :). One of the things I've learned over the years is that just because someone else does something doesn't make it right. So far, we're not a regulated industry, and I think most of us wish to keep it that way. So comparisons to regulated industries aren't, IMHO, a great thing because someone might get the idea that we want to be regulated. One of our recent US Presidents said something like this: "If you want more of something, subsidize it; if you want less of something, tax it; and if you want to kill it, regulate it." Let us not ask, or suggest that we're asking, for something we don't want. The internet community is a vital, vibrant collection of some of the brightest, most thoughtful people in the world. Sure we have disagreements and problems, and sure there are some who don't follow the rules that we've agreed to live by. Peer pressure is clearly the way to deal with those problem folks. One of the beauties of the way that we do things now is that we try something for a while, and if it doesn't work, we change it. That's a luxury we could well lose if IP addr's, etc., are dealt out by government bureaucrats who might also be dealing out license plates at the same time (seems like you get everything else at the Secretary of State office here in Michigan :) ). I much prefer to deal with members of the internet community. That said, when you're dealing with a limited resource, sale of that resource is clearly the best way to see it allocated correctly because most people won't buy more than they need. And I suggest that CIDR blocks might actually be more valuable than the component addresses they contain, because of the benefits a CIDR block gives its owner (one might actually make a living from assembling and brokering CIDR blocks, I suppose). So when someone switched providers, it might well be in the provider's best interest to buy back the addresses to preserve the value of the block. That repurchase could in part compensate the moving party for the expense of renumbering. I'm kind of thinking out loud here. I'd enjoy any constructive criticism offered. Peter _____________________________________________________________________ Peter Kline | pots 313-730-1130 AGIS - Internet Backbone Services | fax 313-563-6119 22015 West Outer Drive | national pager 800-790-1216 Dearborn, MI 48124 | peter(a)agis.net | "Adapt, Innovate, Overcome!"

1 0

Re: Will there be mbone ?
by Sean Doran 19 May '95

19 May '95

>When can we start having virtual meetings *just* like that? >And avoid travel. I think you want mbone(a)isi.edu and the remconf list. :-) Besides, some of us happen to *like* travelling and meeting face-to-face. Sean.

1 0

Re: Draft internic ip allocation doc
by Geoff Huston 19 May '95

19 May '95

Sean, lets see now ... cut.. paste.. you're only doing this to keep your customers locked in place because you're an evil greedy bastard! ok its out of the way - now can we progress onto what this implies in terms of inter-ISP routing alignments? geoff

1 0