Shane Kerr. RIPE 45, May 2003, Barcelona. 3 Facts and Figures 1.9 M objects, 42% inetnum, 47% person 28 q/s on average, spikes of 200 q/s 2.3 updates/min, 61% inetnum, 28% person Object counts, query loads, etc. available on-line:
Shane Kerr. RIPE 45, May 2003, Barcelona. 13 Database Operations Smooth sailing –average response time is well below 1 second –load approximately 70% higher than last year New ARIN mirroring scheme next week –Use difference to generate NRTM, rather than full load –No down-time, includes allocations and assignments Tertiary (i.e. off-site) server in planning phases –Withstand catastrophic, city-wide failures –Manual failover by updating DNS for whois.ripe.net –Part of larger project to increase critical service reliability
Shane Kerr. RIPE 45, May 2003, Barcelona. 14 How Responsive is the Server? Query time in seconds (logarithmic) InnoDB table type goes on-line Desktop Upgrade Unoptimised MySQL RIPE NCC DDoS Domain mining (heavy referrals)
Shane Kerr. RIPE 45, May 2003, Barcelona. 15 Unreferenced Person Cleanup Protect privacy of users –Person objects remain undeleted when contacts change Person objects unreferenced for 90 will be deleted –A modify of the object “resets” the counter sent after 60 days –Limit to 2000/day to avoid overwhelming users & server Deletions begin 29 May 2003
Shane Kerr. RIPE 45, May 2003, Barcelona. 16 IPv6 query proxy status Operational issues resolved –Solaris patches and move to Sun box –DNS update hid AAAA record for 10 days –Moving to standard monitoring and failover Source code public release made 90% of queries come from only 7 IP addresses Still see more 6bone than RIR addresses
Shane Kerr. RIPE 45, May 2003, Barcelona. 17 RIPE Database Administration Can Bican Engin Gündüz Tiago Antao Katie Petrusha Denis Walker
Shane Kerr. RIPE 45, May 2003, Barcelona. 18 Recent RIPE DBM Activity Tickets, tickets, tickets –About 90/day Spam becoming a larger problem –Planning move to SpamAssassin –Will reply if filtered – no s dropped! Hostmaster taking over 20% of RIPE DBM –Closer co-ordination between groups is an open, general help mailbox Please Questions or Problems!
Shane Kerr. RIPE 45, May 2003, Barcelona. 19 ERX Update 4 /8’s transferred – /8 and /8, RIPE NCC-majority – /8 and /8, APNIC-majority –Multiple transfers, with overlapping start/end dates One more trial to finalise processing “Long burn” scheduled to start afterwards –No large issues –Complete ordering, tentative scheduling TBD Moving to regular RIPE DBM and HM activity
Shane Kerr. RIPE 45, May 2003, Barcelona. 21 New Update Processing Improved acknowledgement messages Software maintenance eased Presentations at RIPE 45: –Developer POV at Tools Working Group –User POV at Database Working Group
Shane Kerr. RIPE 45, May 2003, Barcelona. 22 RPSLng IPv6 and multicast RPSL objects Prototype server on-line –Based on last RPSLng draft –Throw-away copy of RIPE Database –Latest draft to be integrated Real Soon Now IRRToolSet changes –More complicated than server changes –Coming soon!
Shane Kerr. RIPE 45, May 2003, Barcelona. 23 Semantic Changes Lots of mostly minor changes proposed: –default to protected inetnum/inet6num/domaindefault to protected inetnum/inet6num/domain –notification for more-specificnotification for more-specific –removal of cross notificationsremoval of cross notifications –"reclaim:"-like functionality"reclaim:"-like functionality –"mnt-lower:" on set objects"mnt-lower:" on set objects Little discussion Will be on-line soon
Shane Kerr. RIPE 45, May 2003, Barcelona. 26 PKI Draft RIPE document, Improved Secure Communication System for RIPE NCC MembersImproved Secure Communication System for RIPE NCC Members LIR-Portal ready, time for Database integration New features needed: –X.509 authentication –Proxy authentication Proposals coming to mailing list