RIPE NCC Survey 2019 - Key Findings and Proposed Actions

General

Survey Finding

High levels of support and satisfaction were reported in all areas and these standards need to be maintained

Service Delivery

Survey Finding

Service delivery comments often note too much bureaucracy and request improvements relating to ticketing issues and response times

Implemented system to speed up validation of documentation

Improved processes and procedures in Registry Services to ensure consistent and efficient handling of requests

Implemented improved automation for approval of membership applications, for organisation name change, for "2017-02 Abuse-c Validation" and for maintainer password self-service process

With multiple LIRs, changes that affect all LIRs in a group now happen on the member level and do not need to be duplicated for all LIRs in the group.

There was strong support for our due diligence efforts and requests to more actively ensure accurate registry updates

We now require additional verification if the online validation of documents is not possible

Enhanced EU sanctions check to effectively identify potentially-sanctioned members

Improved handling of ID documents, both in terms of validation and GDPR

Established automated registry accuracy report, which measures correctness and comprehensiveness of RIPE registry resources

Automated the investigations for GDPR-related requests for a number of our services.

Support in languages other than English was frequently requested

Assisted Registry Checks and other calls carried out in the preferred language of the member, subject to availability 

Translation of RIPE NCC Russia Internet Country Report

Improved non-Latin-1 character substituton in Whois query and update, with warnings when this happen

Developing coherent language support policy that will provide documentation on the RIPE NCC and all services/activities in several languages

Improvements to documentation and user guides across our services were requested

Updated our website to better explain the requirements and differences between the different changes to the holdership of Internet Number Resources (policy transfers, company mergers, network acquisition)

Simplifying and improving all text in the Manage IPs and ASNs section of our website

Many improvements to the RIPE Database documentation to improve accuracy (to reflect changes in software) and clarity (simplify text to make it more easily understood)

Detailed release notes describing changes in Whois releases

Improved billing processes and consideration of international payment issues was requested

Clearer invoices and billing procedure created for 2020

Worked on AFAS migration to the cloud which means better billing services for our members, utilising more out-of-the-box functions and more automation

Worked on resilience and improved automation when it comes to syncing member information and payments to AFAS

Engagement

Survey Finding

Results showed that awareness of tools and services needs to be improved

Virtual Open House meetings arranged on specific services and topics to increase awareness and improve understanding

Campaigns around RPKI and Certified Professionals programme to increase awareness and uptake

Videos and animations released (IPv6, RPKI, GM voting)

RIPE NCC Educa:: IPv6-only event

80 RIPE Labs articles from staff on all services and activities since survey concluded

Increased local presence is frequently requested  

Open House allows virtual meetings in any location, on any topic

Established RIPE NCC Day events

Country Reports established and promoted in specific countries (three scheduled per year)

Active participation and support for local network operator groups (NOGs) in our service region

Adapted training material for webinars so content can be accessed from anywhere

Investigate communication methods and channels used by the technical community that the RIPE NCC is not active in

Consolidated and improved our social media presence

Placed focus on enabling virtual RIPE Meetings, GM and a range of other events

Expanded the range and type of events and conferences we participate in with focus on technical communities

Simplify web content and make services easier to find

Simplified text in Manage IPs and ASNs section of website

Simplified RIPE Meeting website to improve the user experience and make it easier to find the most relevant information (including for mobiles and tablets)

Currently developing revamped and modernised RIPE Labs website for release in 2020

Corporate Governance

Transparency is a key issue for our members and community

Simplified and improved Activity Plan and Budget document

Greater promotion of General Meeting (GM) and processes involved (especially voting at the GM)

Open discussions on mailing lists relating to our services actively encouraged by staff and Executive Board

Meet the Board events at every RIPE Meeting so they can answer all questions from members/community

The value of our services needs to be made clear to our members and community

Benefits of services clearly outlined in Activity Plan and Budget

Dedicated virtual Open Houses on specific services to explain value

There needs to be clear reasoning for why the RIPE NCC chooses to invest in particular areas

Updated and aligned activity areas in Activity Plan and Budget to make clearer where resources are being invested

Five-year strategy document to be published by end of 2020

Tools and Information Services

Survey Finding

Improved documentation and improved support on how to use services was requested

Many improvements to the RIPE Database documentation to improve accuracy (to reflect changes in software) and clarity (simplify text to make it more easily understood)

Simplification of website text relating to IPs and ASNs

Interface and usability improvements would be appreciated

Launched RIPEstat beta with improved interface and usability

API created for the RIPEStat Database widget to display version history

Currently developing improved RIPE Atlas UI for launch in Q4 2020

Improved website page size and speed

Integrating updated website template, which will also improve mobile support

Made range of additions and improvements to LIR Portal

RIPEstat is heavily used and relied upon by many

Collaboration work with other RIRs to launch other versions powered by RIPEstat

Routing Information Service (RIS) is noted by many as essential for their work

Launched RIS Live

Increased focus on quality of RIS

Community outreach to better understand user requirements for RIS

Security

Network security is the biggest challenge faced by members, who suggest training and cooperation with security organisations as the best way to help

We are a member of CSIRT and are exploring avenues for cooperation with other security groups

Cooperated with LEAs on training courses and certifications

Arranged external security audits for several of our services, and fixed high risk security vulnerabilities in our software

IPv6 Security course adapted for three two-hour webinars

DDoS attacks are the main security concern for operators

Implemented DOS filtering to protect Whois query service

A cloud migration is being evaluated, including improved resiliency and availability

Evaluating inclusion of relevant DDoS material in BGP training content

In terms of IP resources, blacklisting of addresses is noted as a concern for many

Providing useful security-related data or insights is seen as a way the RIPE NCC can help operators

Published many security-related articles on RIPE Labs 

RPKI

Survey Finding

Deployment is increasing but more awareness-raising is needed

Took part in community demo on how to create ROAs

Targeting specific countries where ROA creation is lagging behind

Campaign carried out to improve awareness, including creation of RPKI video

Many respondents plan to do RPKI Origin Validation but it requires more knowledge

RPKI webinar created

Improved RPKI Validator documentation

Many RIPE Labs articles about RPKI / security published in 2019/2020

IPv6 Deployment

Provide more practical information on deployment such as how-to's, use cases, etc.

IPv6-only Educa:: event held

Dedicated IPv6 team in RS evaluates larger IPv6 requests and provides guidance on addressing plans

Deployment is particularly low in the Middle East region

Developing IPv6 material and online courses

Focus on webinars and online training allows us to reach greater audience throughout service region

IPv4 Scarcity

Survey Finding

Many people believe the RIPE NCC should actively try to retrieve unused IPv4 space

Many people expect to use the transfer market in the coming three years

Discussion held with members on brokers list and IPv4 listing service

Transfer History widget added to RIPEstat

RIPE Database

Improvements were requested regarding the interface and general ease of use

Improved RIPE Database Web Application

Added route(6) and domain objects in My Resources

Added Delete button in My Resources

Display abuse-c validation status on the website

Improved automated checks for recovering the maintainer password

The search functionality could be improved

Various suggestions for technical improvements were made that are being investigated by the RIPE Database Team

Cleaned up locked person objects

Implemented 2017-02: Regular abuse-c Validation

Implemented NWI-8 (synchronise LIR Portal users to the default maintainer)

Implemented NWI-9 (opened the NRTM service)

Removed "mnt-lower:" from aut-num

Added index to improve search by "status:" attribute

Use local database for all queries (only use master database for updates)

Fixes and improvements to the RDAP service (particularly cross-RIR compatibility)

Perform character substitutions consistently on Query and Update, and warn when it's done

Filter personal data from historical data (to conform to GDPR)

Added support for elliptic curves in key-cert objects

Implementing support for client certificate authentication

More instructional material such as videos and short how-to's were requested

Developing in-house video production capabilities

Training and Accreditation

Survey Finding

Training is seen as the best way the RIPE NCC can help people respond to various challenges they face

Revamped RIPE NCC Academy

Changed face-to-face courses to remote learning sessions in light of COVID-19

Created a new training environment for the RIPE Database certification course

Developing new courses on Basic IPv6 and IPv6 Security

A majority of respondents said that accreditation would be useful for either their careers or for hiring qualified staff

More eLearning opportunities would be appreciated and help meet demand for training

Launched revamped RIPE Database course

IPv6 Fundamentals and IPv6 Security courses under development

Increased capacity internally for content development

Developing hands-on labs to allow practice to be carried out from any location

Regulatory Affairs

Survey Finding

Increasing awareness about the impact of government regulations would be appreciated

Open House and Labs articles (e.g. on Digital Services Act) to increase awareness

Updates from Executive Board to members explaining sanctions issue

There is support for maintaining or increasing our engagement with governments and regulators

Joined partnership with Council of Europe to develop recommendations for its member states on the development, use and regulation of digital technologies

Memorandum of Understanding signed with CITC Saudi Arabia

Work with governments and regulators on capacity building initiatives

Developed About the RIPE NCC brochure focused on EU engagement

RIPE NCC Government Roundtables for Europe, Middle East and Central Asia regions

Shared the PDP in Arabic with regulators in the Middle East