From nick at netability.ie Sat Mar 9 01:02:37 2013 From: nick at netability.ie (Nick Hilliard) Date: Sat, 09 Mar 2013 00:02:37 +0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <5135C6F8.9060701@ripe.net> References: <5135C6F8.9060701@ripe.net> Message-ID: <513A7C1D.1090504@netability.ie> I can't see a compelling reason to make it into a member-only service, and the existing organisations who use the service seem to gain some value from it, so discontinuing it probably isn't in the best interest of the RIPE NCC's core purpose of being a RIR. As there are only 4 users of the service, there seems little point in charging. I'd be happy to see this turned into a free but contract-based service. Nick On 05/03/2013 10:20, Axel Pawlik wrote: > Dear colleagues, > > Following the discussion about the RIPE Database Proxy Service, we have > investigated several options for the future of the service. I'd like to > first give you an overview of the issue at hand. A detailed analysis is > provided below that for those of you who would like to see the finer details. > > We are now asking for feedback on this issue from the membership. No > actions will be taken regarding the service until an appropriate way > forward has been indicated by the membership. > > The aim of the RIPE NCC is to keep the registry open and accessible to > everyone at all times, just as it always has been. The options are intended > to deal with the potential for republishing and possible abuse arising out > of that republishing, which the RIPE NCC believes is the core issue at hand. > > None of the options we investigated would result in any reduced access to > RIPE Database data. > > Although they can be carried out in a number of ways, there are three basic > options as we see it: > - Make it a members-only service > - A contractual service (free or paid) > - Discontinue the service > > Over the next six-week period, ending 15 April 2013, we would like to > invite the membership to discuss and provide input on their preferred way > forward. The RIPE NCC Executive Board will summarise the discussion and > propose a way forward at the RIPE NCC Services Working Group. If a > resolution from members is required, it will take place at the General > Meeting. In the meantime, the RIPE NCC will continue to offer the RIPE > Database Proxy Service free of charge. However, no new contracts for this > service will be issued until its status has been resolved. > > We therefore urge you to put forward your opinions and preference on how we > can best move forward with the RIPE Database Proxy Service by emailing > . > > Best regards, > > Axel Pawlik > Managing Director > RIPE NCC > > > ============================ > DETAILED ANALYSIS > ============================ > > The Options > ----------- > Option 1 - The RIPE Database Proxy Service becomes a member-only service > > Option 2a - The RIPE Database Proxy Service remains a free contractual > service (this is the current situation) > Option 2b - The RIPE Database Proxy Service becomes a paid contractual service > > Option 3a - Discontinue the RIPE Database Proxy Service (the RIPE NCC is > the sole official provider of the RIPE Database web-interface) and retain > the query limits > Option 3b - Discontinue the RIPE Database Proxy Service and remove the > query limits > Option 3c - Discontinue the RIPE Database Proxy Service and change the > default RIPE Database query not to show any personal data, and allow > personal data to be returned only when a special query flag with limits is > used. > > The RIPE NCC is able to facilitate any of the options presented here. > However, the RIPE NCC Executive Board believes that transitioning the RIPE > Database Proxy Service to a member service is most closely in line with the > way other contractual services have been handled. In addition, > incorporating the service into the membership would minimise costs while > continuing the service. > > General Legal Analysis > ---------------------- > As noted in the RIPE NCC Data Protection Report, the provision of unlimited > access to the RIPE Database could lead to abuse of the personal data in the > RIPE Database. In the Acceptable Use Policy, the RIPE NCC clearly defines > access limits to the personal data in the RIPE Database. Users exceeding > these limits have their access to further personal data blocked for a > period of time. > > The AUP also takes into account queries made to the RIPE Database through > web interfaces hosted by third parties (proxies). The RIPE NCC, through the > proxy service, gives the authority to third parties to provide access to > the RIPE Database through a web interface they operate. Currently, queries > through the proxy service are subject to higher query limits because such > interfaces are intended to be used by more than one user. Queries from a > proxy will be seen as queries from individual IP addresses and individual > query limits for personal data apply. > > The RIPE Data Protection Report: > http://www.ripe.net/lir-services/ncc/legal/ripe-ncc-data-protection-report > > Acceptable Use Policy: > http://www.ripe.net/data-tools/support/documentation/aup > > Options 1 and 2 - Legal Analysis > -------------------------------- > There is little difference from a legal point of view whether the proxy > service is made available only to members or is a contractual service > available to anyone. > > A membership agreement has different rights and obligations and strengthens > the legal relationship between the RIPE NCC and the other party. > > The RIPE Database Terms and Conditions would also need to be updated to > include obligations for RIPE Database Proxy service contract holders. > > Option 3 - Legal Analysis > ------------------------- > There are no legal implications for option 3a. > > For option 3b, the query limits were put in place to prevent/impede the > harvesting and abuse of personal information in the RIPE Database. The Data > Protection Task Force (DPTF) considered this an effective and appropriate > part of the RIPE NCC's due diligence. Almost five years after the > implementation of this measure, the RIPE community could reassess the > effectiveness and proportionality of having query limits. If the measure is > deemed to be ineffective and disproportionate, the RIPE NCC could remove > query limits. > > Option 3c offers the best data protection from a legal perspective. This > option would limit direct personal data exposure while retaining the query > limit. However, from a functionality perspective, this might not be wanted. > > Option 1 - Administrative and Technical Analysis > ------------------------------------------------ > This option would have little administrative impact. Administrative > processes are already in place, including a proxy agreement for members. > Signing up for the service could in the future be integrated in the LIR > Portal, removing any need for manual processing of requests. The RIPE NCC > website and publications would need to be updated. All customers would need > to be informed. > > Option 2 - Administrative and Technical Analysis > ------------------------------------------------ > This option would involve more administrative overhead for the RIPE NCC. > The proxy service contract holder list would need to be managed manually, > or software would need to be developed for this purpose. All contract > holders would need to be informed and new agreements would need to be drawn > up and sent to the users. The RIPE NCC website and publications would need > to be updated. If the service remains free, no further administrative work > would be needed. > > Option 3 - Administrative and Technical Analysis > ------------------------------------------------ > This option would involve the least amount of work for the RIPE NCC. There > would be a small amount of temporary administrative work, including > contacting customers to inform them of the action and removing references > to the service from the website and publications. > > General Financial Analysis > -------------------------- > Generally speaking, the financial impact is minimal. The total costs and > the additional revenue is low in all scenarios. The cost to maintain the > service from a technical perspective are low, although it adds complexity > to the overall RIPE Database software and requires some level of additional > maintenance. It is difficult to quantify this indirect cost, but it is > contrary to RIPE NCC efforts to clean up legacy software and complexity. > > The additional revenue resulting from option 1 would, given the current > number of active users of the service, be in the range of 5-10 kEUR per > annum (there are currently four users). > > For option 2b, if the fee was to cover the costs of the service including > administration and other related overheads, with there being so few users > the fee would probably be higher than the current membership fee. > > In the other scenarios, the additional revenue is irrelevant. > > Your Feedback > ------------- > Again, we need your input and ask that you discuss this service and make > your opinion known. You can give your feedback by mailing > . > From fg at numlog.fr Sat Mar 9 12:31:46 2013 From: fg at numlog.fr (fg at numlog.fr) Date: Sat, 09 Mar 2013 12:31:46 +0100 Subject: [members-discuss] RIPE Database Proxy Service Message-ID: <513B1DA2.1080601@numlog.fr> Hello, As the proxy service benefits of higher query limits, restricting the use of this service to members only, looks the minimum limitation in order to fight against personal data mining. But my preference goes to option 3c : > Option 3c - Discontinue the RIPE Database Proxy Service and change the > default RIPE Database query not to show any personal data, and allow > personal data to be returned only when a special query flag with > limits is used. IMHO, it's not that frequent to need to access to personal data, except for spammers, so this solution is the better. Best regards, Francis From sander at steffann.nl Sat Mar 9 12:12:15 2013 From: sander at steffann.nl (Sander Steffann) Date: Sat, 9 Mar 2013 12:12:15 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <513A7C1D.1090504@netability.ie> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> Message-ID: <7084078B-FC52-4EB3-9000-53AC481F7367@steffann.nl> Hi Nick, > I can't see a compelling reason to make it into a member-only service, and > the existing organisations who use the service seem to gain some value from > it, so discontinuing it probably isn't in the best interest of the RIPE > NCC's core purpose of being a RIR. As there are only 4 users of the > service, there seems little point in charging. I'd be happy to see this > turned into a free but contract-based service. I fully agree. Sander From gert at space.net Sat Mar 9 21:26:07 2013 From: gert at space.net (Gert Doering) Date: Sat, 9 Mar 2013 21:26:07 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <513A7C1D.1090504@netability.ie> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> Message-ID: <20130309202607.GP51699@Space.Net> Hi, On Sat, Mar 09, 2013 at 12:02:37AM +0000, Nick Hilliard wrote: > I can't see a compelling reason to make it into a member-only service, and > the existing organisations who use the service seem to gain some value from > it, so discontinuing it probably isn't in the best interest of the RIPE > NCC's core purpose of being a RIR. As there are only 4 users of the > service, there seems little point in charging. I'd be happy to see this > turned into a free but contract-based service. Seconded: free but contract-based. (I said so already when the sh*t hit the fan, but for the sake of the archives...) Gert Doering -- RIPE member, happy to subsidize this for 4 users of the service -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279 From slz at baycix.de Sun Mar 10 09:41:58 2013 From: slz at baycix.de (Sascha Lenz) Date: Sun, 10 Mar 2013 09:41:58 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <5135C6F8.9060701@ripe.net> References: <5135C6F8.9060701@ripe.net> Message-ID: <8C716804-E89D-4BCC-9A9B-F381C582C766@baycix.de> Hi all, > Dear colleagues, > > Following the discussion about the RIPE Database Proxy Service, we have investigated several options for the future of the service. I'd like to first give you an overview of the issue at hand. A detailed analysis is provided below that for those of you who would like to see the finer details. [...] well i still don't see much need for the service i must admit, but if some people want to use it... I actually would prefer making this a member-only or paid-service, but after re-reading some parts of the discussion about the issue before, i guess the free-but-contract-based approach might be the most intelligent choice without upsetting those who use it and it seems to be without negative impact for the rest of the members. ==> Option 2a -- Mit freundlichen Gr??en / Kind Regards Sascha Lenz [SLZ-RIPE] Senior System- & Network Architect From kurtis at netnod.se Sun Mar 10 15:28:55 2013 From: kurtis at netnod.se (Kurt Erik Lindqvist) Date: Sun, 10 Mar 2013 15:28:55 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <7084078B-FC52-4EB3-9000-53AC481F7367@steffann.nl> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <7084078B-FC52-4EB3-9000-53AC481F7367@steffann.nl> Message-ID: <37677509-D9A4-4F34-A53F-A61F48E67E42@netnod.se> On 9 mar 2013, at 12:12, Sander Steffann wrote: > Hi Nick, > >> I can't see a compelling reason to make it into a member-only service, and >> the existing organisations who use the service seem to gain some value from >> it, so discontinuing it probably isn't in the best interest of the RIPE >> NCC's core purpose of being a RIR. As there are only 4 users of the >> service, there seems little point in charging. I'd be happy to see this >> turned into a free but contract-based service. > > I fully agree. I fully agree with this as well! Best regards, - kurtis - --- Kurt Erik Lindqvist, CEO kurtis at netnod.se, Direct: +46-8-562 860 11, Switch: +46-8-562 860 00 Franz?ngatan 5 | SE-112 51 Stockholm | Sweden From nick at netability.ie Mon Mar 11 17:23:41 2013 From: nick at netability.ie (Nick Hilliard) Date: Mon, 11 Mar 2013 16:23:41 +0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> Message-ID: <513E050D.4010309@netability.ie> On 11/03/2013 14:27, Alex Le Heux wrote: > Are we seriously having a multi-month discussion involving numerous > emails from the CEO of the RIPE NCC about a service that has *four* > active users? If this were a commercial organisation and if it were my choice, I would pull the plug tomorrow. Actually, I would have pulled it years ago because I have a strong dislike for underused fossils, particularly those which actively cost time and resources to maintain. But it's not a commercial organisation - it's a monopoly whose purpose is to serve a bunch of people what they want to be served on the basis of general bottom-up consensus, and the rules are different. Unfortunately, it seems there was a top-down cockup which spilled into nanog-l and caused a small amount of froth to fly. When this happens, it's sensible to put your hand up and confess that yes, there was a cockup and there were no bad intentions and that as a matter of good will to the community, whatever was done would be undone. Otherwise, it will be remembered years later that the RIPE NCC did all of this mean, bad and horrible stuff to the community once upon a time and they're a monopolistic power hungry bunch, not answerable to the community and yadda-yadda-yadda. Fortunately, this reaction is as avoidable as it is predictable. The RIPE NCC have done the right thing by going back to their membership and asking them for consensus on a policy. I put forward a particular opinion on the basis that it's probably best right now to go back to the original configuration (i.e. contract/free in this case) and leave things settle down for a while so that people realise that the RIPE NCC is not the enemy. Some time down the road, I'd probably be quite supportive of the idea of asking the RIPE NCC to approach the 4 existing users of the service and ask them if there was any other way that their requirements could be facilitated which involved lower overhead/cost. I.e. engagement with user community, followed by general consensus, followed by action which has broad support from constituency. Otherwise I agree that this is a storm in a teacup which merits only a tiny fraction of the amount of attention it's getting. How are you enjoying consensus from the other side, then? :-D Nick From sven at cb3rob.net Mon Mar 11 17:46:53 2013 From: sven at cb3rob.net (Sven Olaf Kamphuis) Date: Mon, 11 Mar 2013 16:46:53 +0000 (UTC) Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <513E050D.4010309@netability.ie> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> Message-ID: not entirely sure what a 'ripe database proxy service' would be... but it sounds like one of those 'too much fucking info' things that once were in fashion when the internet was a bunch of dusty nerds... and the only threat was a bunch of scriptkiddies in poland. and now, its a hostile environment and any 'database' should be closed access only. as seriously, if people wanna harras your clients, or even worse (and wrongly: you) at least they should take the time and effort to get proper court orders... not just do a 'whois' on some database which should not even exist anymore due to the fact that its not compliant with ANY applicable privacy laws. -- MINISTRY OF TELECOMMUNICATIONS AND FOREIGN AFFAIRS ================================================== Government House, One CyberBunker Avenue, RCB-31337, Republic CyberBunker. On Mon, 11 Mar 2013, Nick Hilliard wrote: > On 11/03/2013 14:27, Alex Le Heux wrote: >> Are we seriously having a multi-month discussion involving numerous >> emails from the CEO of the RIPE NCC about a service that has *four* >> active users? > > If this were a commercial organisation and if it were my choice, I would > pull the plug tomorrow. Actually, I would have pulled it years ago because > I have a strong dislike for underused fossils, particularly those which > actively cost time and resources to maintain. But it's not a commercial > organisation - it's a monopoly whose purpose is to serve a bunch of people > what they want to be served on the basis of general bottom-up consensus, > and the rules are different. > > Unfortunately, it seems there was a top-down cockup which spilled into > nanog-l and caused a small amount of froth to fly. When this happens, it's > sensible to put your hand up and confess that yes, there was a cockup and > there were no bad intentions and that as a matter of good will to the > community, whatever was done would be undone. Otherwise, it will be > remembered years later that the RIPE NCC did all of this mean, bad and > horrible stuff to the community once upon a time and they're a monopolistic > power hungry bunch, not answerable to the community and yadda-yadda-yadda. > Fortunately, this reaction is as avoidable as it is predictable. > > The RIPE NCC have done the right thing by going back to their membership > and asking them for consensus on a policy. I put forward a particular > opinion on the basis that it's probably best right now to go back to the > original configuration (i.e. contract/free in this case) and leave things > settle down for a while so that people realise that the RIPE NCC is not the > enemy. > > Some time down the road, I'd probably be quite supportive of the idea of > asking the RIPE NCC to approach the 4 existing users of the service and ask > them if there was any other way that their requirements could be > facilitated which involved lower overhead/cost. I.e. engagement with user > community, followed by general consensus, followed by action which has > broad support from constituency. > > Otherwise I agree that this is a storm in a teacup which merits only a tiny > fraction of the amount of attention it's getting. > > How are you enjoying consensus from the other side, then? :-D > > Nick > > > ---- > If you don't want to receive emails from the RIPE NCC members-discuss > mailing list, please log in to your LIR Portal account and go to the general page: > https://lirportal.ripe.net/general/view > > Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. > From nick at netability.ie Mon Mar 11 18:11:15 2013 From: nick at netability.ie (Nick Hilliard) Date: Mon, 11 Mar 2013 17:11:15 +0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <513E050D.4010309@netability.ie> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> Message-ID: <513E1033.7040008@netability.ie> > On 11/03/2013 14:27, Alex Le Heux wrote: >> Are we seriously having a multi-month discussion involving numerous >> emails from the CEO of the RIPE NCC about a service that has *four* >> active users? mmm, looks like your original email never arrived on the members-discuss mailing list, even though it was cc:'d there. Nick From rob.golding at astutium.com Mon Mar 11 21:57:10 2013 From: rob.golding at astutium.com (Rob Golding) Date: Mon, 11 Mar 2013 20:57:10 -0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> Message-ID: <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> > not entirely sure what a 'ripe database proxy service' would be... but > it > sounds like one of those 'too much fucking info' things that once were > in fashion when the internet was a bunch of dusty nerds... and the only > threat was a bunch of scriptkiddies in poland. and now, its a > hostile environment and any 'database' should be closed access only. > > as seriously, if people wanna harras your clients, or even worse (and > wrongly: you) at least they should take the time and effort to get > proper > court orders... not just do a 'whois' on some database which should not > even exist anymore due to the fact that its not compliant with ANY > applicable privacy laws. I might have phrased it a little less politely, but wholeheartedly agree with the sentiment. It's already bad enough with a-n-other-supplier going down your ripe AS membership list trying to flog cr at p to your clients, when said supplier is an LIR, having every nut on the planet doing so is going to get very very very tiresome and simply lead to people not putting anything in the RIPE-DB in the first place (as most have already decided) Time to drop something which is only used by 4 people - some of whom aren't even members Rob From nick at netability.ie Mon Mar 11 22:20:34 2013 From: nick at netability.ie (Nick Hilliard) Date: Mon, 11 Mar 2013 21:20:34 +0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> Message-ID: <513E4AA2.60200@netability.ie> On 11/03/2013 20:57, Rob Golding wrote: > Time to drop something which is only used by 4 people - some of whom aren't > even members I'm not clear how dropping the ripe proxy service would stop the sales trawling you described. Nick From sander at steffann.nl Mon Mar 11 22:33:51 2013 From: sander at steffann.nl (Sander Steffann) Date: Mon, 11 Mar 2013 22:33:51 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> Message-ID: Hi, > Time to drop something which is only used by 4 people It is not only used by 4 people, it's used by 4 *services*. Basically the proxy service is the feature that a few services (those 4) can add a field to the request that specifies that they query the database on behalf of an end-user and they provide that end-user's IP address in the request so that the RIPE Whois server can apply rate limits to that end-user. To give an example: one of them is at http://www.geektools.com/whois.php. > some of whom aren't even members The RIPE NCC has a responsibility for all internet users, not only its own members... > It's already bad enough with a-n-other-supplier going down your ripe AS > membership list trying to flog cr at p to your clients, when said supplier is > an LIR, having every nut on the planet doing so is going to get very very > very tiresome and simply lead to people not putting anything in the RIPE-DB > in the first place (as most have already decided) The whole point of providing the on-behalf-of parameter in the query is to be able to avoid people harvesting the RIPE DB by applying rate limits... The only 'risk' is that the service providers would send in queries with fake client addresses to bypass the rate limits. That is the reason why people suggest letting them sign a contract. And since there are only a few users it's easy to kick them off when they would abuse the proxy feature. So removing the proxy feature (remember: just one query option to facilitate rate limiting) doesn't make any difference for what you describe... Cheers, Sander From rob.golding at astutium.com Mon Mar 11 23:00:57 2013 From: rob.golding at astutium.com (Rob Golding) Date: Mon, 11 Mar 2013 22:00:57 -0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <513E4AA2.60200@netability.ie> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> <513E4AA2.60200@netability.ie> Message-ID: <023f01ce1ea3$e8e8da80$baba8f80$@golding@astutium.com> > I'm not clear how dropping the ripe proxy service would stop the sales > trawling you described. Just wishful thinking :) My _opinion_ remains the same, maintaining something for 4 (let call them) subscribers, to allow them to get around otherwise sensible limitations on DB access seems a pointless maintenance expense - even making it free+contract imposes a "cost" to the membership, which, clearly from the number of members using it (about 0%) isn't warranted. Rob From rob.golding at astutium.com Mon Mar 11 23:17:40 2013 From: rob.golding at astutium.com (Rob Golding) Date: Mon, 11 Mar 2013 22:17:40 -0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> Message-ID: <025101ce1ea6$3efee660$bcfcb320$@golding@astutium.com> > > Time to drop something which is only used by 4 people > It is not only used by 4 people, it's used by 4 *services*. Perhaps wrong choice of terminology and should have been services | subscribers, but you knew what I meant ;) > Basically the proxy service is the feature that a few services (those 4) > can add a field to the request that specifies that they query the > database on behalf of an end-user and they provide that end-user's IP > address in the request so that the RIPE Whois server can apply rate > limits to that end-user. Yes, I'm (after the start of the discussion) aware of what it is and how it works ... > To give an example: one of them is at > http://www.geektools.com/whois.php. And I'm so glad to be (as a paying RIPE member, and as an ICANN accredited domain registrar running whois servers) funding their business model of providing a "service" with adsense plastered all over the page(s) querying "my" databases ... > The RIPE NCC has a responsibility for all internet users, not only its > own members... That's a whole separate discussion ... Rob From sander at steffann.nl Mon Mar 11 23:40:24 2013 From: sander at steffann.nl (Sander Steffann) Date: Mon, 11 Mar 2013 23:40:24 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <025101ce1ea6$3efee660$bcfcb320$@golding@astutium.com> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> <025101ce1ea6$3efee660$bcfcb320$@golding@astutium.com> Message-ID: <3C4D249D-7562-49B0-8885-B7F7E6C345BB@steffann.nl> Hi, >> To give an example: one of them is at >> http://www.geektools.com/whois.php. > > And I'm so glad to be (as a paying RIPE member, and as an ICANN accredited > domain registrar running whois servers) funding their business model of > providing a "service" with adsense plastered all over the page(s) querying > "my" databases ... I am sorry, it seems you have looked at a different site. Unless you count one ad at the bottom of the page as 'adsense plastered all over the page(s)'. Let's keep the FUD out of this discussion, shall we? Sander From mike at theinternet.org.uk Tue Mar 12 01:47:14 2013 From: mike at theinternet.org.uk (Mike Hollowell) Date: Tue, 12 Mar 2013 00:47:14 +0000 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <3C4D249D-7562-49B0-8885-B7F7E6C345BB@steffann.nl> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> <025101ce1ea6$3efee660$bcfcb320$@golding@astutium.com> <3C4D249D-7562-49B0-8885-B7F7E6C345BB@steffann.nl> Message-ID: <1363049234.10399.222.camel@wsk1-lm> I agree, we should keep FUD out of the discussion. Geektools whois provides no benefit over a whois query to RIPE. They admit to it being used to scrape information from the database and counter this with a nice high contrast 4 letter upper case only "security" measure to "prevent" abuse. Their standard whois server doesn't even require this minimal level of FUD, sorry security. If they want services from RIPE, they need to become a member, pay the appropriate services fee and work within the parameters set by members. The membership at large gain no benefit from a proxy service. Mike On Mon, 2013-03-11 at 23:40 +0100, Sander Steffann wrote: > Hi, > > >> To give an example: one of them is at > >> http://www.geektools.com/whois.php. > > > > And I'm so glad to be (as a paying RIPE member, and as an ICANN accredited > > domain registrar running whois servers) funding their business model of > > providing a "service" with adsense plastered all over the page(s) querying > > "my" databases ... > > I am sorry, it seems you have looked at a different site. Unless you count one ad at the bottom of the page as 'adsense plastered all over the page(s)'. > > Let's keep the FUD out of this discussion, shall we? > Sander > > > ---- > If you don't want to receive emails from the RIPE NCC members-discuss > mailing list, please log in to your LIR Portal account and go to the general page: > https://lirportal.ripe.net/general/view > > Click on "Edit my LIR details", under "Subscribed Mailing Lists". From here, you can add or remove addresses. From aleheux at kobo.com Mon Mar 11 15:27:44 2013 From: aleheux at kobo.com (Alex Le Heux) Date: Mon, 11 Mar 2013 15:27:44 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <513A7C1D.1090504@netability.ie> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> Message-ID: On Mar 9, 2013, at 01:02, Nick Hilliard wrote: > I can't see a compelling reason to make it into a member-only service, and > the existing organisations who use the service seem to gain some value from > it, so discontinuing it probably isn't in the best interest of the RIPE > NCC's core purpose of being a RIR. As there are only 4 users of the > service, there seems little point in charging. I'd be happy to see this > turned into a free but contract-based service. A reality check? Are we seriously having a multi-month discussion involving numerous emails from the CEO of the RIPE NCC about a service that has *four* active users? This while services that have untold millions of users still have outages because of silly things like partial zone files being deployed? Is there some compelling advantage to the RIPE NCC membership or greater internet community in keeping the Proxy Service alive? If not, shall we just pull the plug on it? Alex Le Heux Kobo Inc. -- Alex Le Heux | aleheux at kobo.com | Kobo Inc From rhe at nosc.ja.net Thu Mar 14 03:01:03 2013 From: rhe at nosc.ja.net (Rob Evans) Date: Wed, 13 Mar 2013 22:01:03 -0400 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <1363049234.10399.222.camel@wsk1-lm> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> <025101ce1ea6$3efee660$bcfcb320$@golding@astutium.com> <3C4D249D-7562-49B0-8885-B7F7E6C345BB@steffann.nl> <1363049234.10399.222.camel@wsk1-lm> Message-ID: <1E44A93A-C496-49E2-A300-DE61C4541902@nosc.ja.net> > Geektools whois provides no benefit over a whois query to RIPE. If you're querying a RIPE IP address, that's true. It does, however, also query the other RIR databases to provide a single front-end that people might find useful. An interesting statistic may be less the four services using the DB proxy service, but the number of (not list of) client IP addresses using the service, or the rate of queries received over it. Nick has summarised this well, and I fall into the free-but-contract camp. All the best, Rob From richih.mailinglist at gmail.com Thu Mar 14 07:26:53 2013 From: richih.mailinglist at gmail.com (Richard Hartmann) Date: Thu, 14 Mar 2013 07:26:53 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> Message-ID: On Mar 13, 2013 10:44 PM, "Alex Le Heux" wrote: > This while services that have untold millions of users still have outages because of silly things like partial zone files being deployed? > > Is there some compelling advantage to the RIPE NCC membership or greater internet community in keeping the Proxy Service alive? If not, shall we just pull the plug on it? With your RIPE hat on, do you think there would be an operational advantage in getting rid of this service? This would be an extremely important data point (which I would have missed) and would switch my vote to switching it off immediately. I suspect that's the case for most people. Let the bikeshedding continue, Richard Sent by mobile; excuse my brevity. -------------- next part -------------- An HTML attachment was scrubbed... URL: From brandon at rd.bbc.co.uk Thu Mar 14 10:28:09 2013 From: brandon at rd.bbc.co.uk (Brandon Butterworth) Date: Thu, 14 Mar 2013 09:28:09 GMT Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service Message-ID: <201303140928.JAA17308@sunf10.rd.bbc.co.uk> > Nick has summarised this well, and I fall into the free-but-contract camp. Likewise, I did reply when he posted but the moderator chose to reject it brandon From pgubernat at tvk.pl Thu Mar 14 11:12:34 2013 From: pgubernat at tvk.pl (=?UTF-8?B?UHJ6ZW15c8WCYXcgR3ViZXJuYXQ=?=) Date: Thu, 14 Mar 2013 11:12:34 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: <1E44A93A-C496-49E2-A300-DE61C4541902@nosc.ja.net> References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> <513E050D.4010309@netability.ie> <021d01ce1e9a$ffb0d960$ff128c20$@golding@astutium.com> <025101ce1ea6$3efee660$bcfcb320$@golding@astutium.com> <3C4D249D-7562-49B0-8885-B7F7E6C345BB@steffann.nl> <1363049234.10399.222.camel@wsk1-lm> <1E44A93A-C496-49E2-A300-DE61C4541902@nosc.ja.net> Message-ID: <5141A292.8080701@tvk.pl> W dniu 2013-03-14 03:01, Rob Evans pisze: >> Geektools whois provides no benefit over a whois query to RIPE. > If you're querying a RIPE IP address, that's true. It does, however, also query the other RIR databases to provide a single front-end that people might find useful. An interesting statistic may be less the four services using the DB proxy service, but the number of (not list of) client IP addresses using the service, or the rate of queries received over it. > > Nick has summarised this well, and I fall into the free-but-contract camp. I think that free but with contrack is the best option. -- +-=-=-=-=-=-=-=- Przemys?aw Gubernat -=-=-=-=-=-=-=-=-=-=-=-+ | System Administrator @ TVK.PL | +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ -------------- next part -------------- A non-text attachment was scrubbed... Name: pgubernat.vcf Type: text/x-vcard Size: 426 bytes Desc: not available URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 553 bytes Desc: OpenPGP digital signature URL: From aleheux at kobo.com Thu Mar 14 12:38:27 2013 From: aleheux at kobo.com (Alex Le Heux) Date: Thu, 14 Mar 2013 12:38:27 +0100 Subject: [members-discuss] [ncc-announce] [news] The Future of the RIPE Database Proxy Service In-Reply-To: References: <5135C6F8.9060701@ripe.net> <513A7C1D.1090504@netability.ie> Message-ID: <196BF45B-0561-4A8C-9CA0-CE71CB26FF81@kobo.com> On Mar 14, 2013, at 07:26, Richard Hartmann wrote: > > On Mar 13, 2013 10:44 PM, "Alex Le Heux" wrote: > > > This while services that have untold millions of users still have outages because of silly things like partial zone files being deployed? > > > > Is there some compelling advantage to the RIPE NCC membership or greater internet community in keeping the Proxy Service alive? If not, shall we just pull the plug on it? > > With your RIPE hat on, do you think there would be an operational advantage in getting rid of this service? I don't have a RIPE NCC hat anymore, so I can't help you there :) The way I see it is this: - This service has four active users, as near to zero as makes no odds. - The benefit to the RIPE NCC membership, who pay for this, is unclear. - The benefit to the greater internet community, the other big reason for the RIPE NCC to do things, is also unclear. - At least some of the uses for the Proxy Service look like they can be done with the REST API and some fancy javascript. What I don't know is: - How much work is it for the RIPE NCC to keep the Proxy Service running and maintain it and what this costs - What the cost is of dealing with all the legal and contract issues that surround it - What the cost is of this discussion Unless the sum of these is very close to zero, as a member of both the RIPE NCC and the internet community, I would like to see the Proxy Service discontinued. Perhaps I'm wrong though, perhaps there is some Great Need out there that is being fulfilled by this. If there is, please point it out to me and I'll crawl back under my rock. Alex