engineering report andy newton (in lieu of mark kosters)
TRANSCRIPT
2
Staffing• Operations
– 7 operations engineers + 2 managers (AT FULL STRENGTH)
• Development– 7 programmers + manager (ONE OPENING)
• New-hire filled vacancy by our last contractor in May• Recent departure of long-time employee
• Quality Assurance– 4 engineers, 1 contractor + manager (AT FULL
STRENGTH)
• Project Management – 1• CTO - 1
3
YTD Efforts• Improved Backoffice Processes– Better integration of financial services and
registration services workflows, automation of processes and invoicing
• New Fee Schedule• RPKI– Web Delegated– Up/Down Delegated including ERX space
• Migration from Oracle to PostgreSQL• Oracle, EMC, and LB instability challenges
(solved)
4
YTD Efforts Cont…• Extended Statistics• Fault Tolerance Improvements–More efficient system backups–Moving Production Systems to DR site
• Corporate Help Desk and IT Support• ARIN Member Meeting Support• Care and Feeding of Servers & Network– Includes new systems provisioning
with Puppet and Foreman
5
YTD Efforts Cont…
• 3rd Party Vendor Selections–New election system, including
integration with ARIN Online–Meeting Registration System
• User Interface Usability Testing• IETF Participation– SIDR, RPKI GTA, WEIRDS (RDAP)
6
ARIN Online Usage
• 74,172 accounts activated since inception through Q3 of 2013
2008
2009
2010
2011
2012
2013*
Number of Accounts Activated
5000 10000 15000 20000
* Through Q3 of 2013
7
Active Usage of ARIN Online
0 1 2 - 5 6 - 10 11 - 15
>160
5000100001500020000250003000035000
Logins
# o
f U
sers
Times logged in
8
Reg-RWS Transactions
ARIN 29 ARIN 30 ARIN 31 Today
Template 658853 980068 1373933 1730163
REST 28373 319865 835914 3500958
250000
750000
1250000
1750000
2250000
2750000
3250000
3750000
TemplateREST
9
Reports
Via REST Via ARIN Online
Associations 13 6,876
Reassignments
14,098 31,145
WhoWas 30,385 10,831
10
API Keys
API Keys
Users w/ API Keys
API Keys w/ Email
Active 7,590 6,988 3,829
Inactive 684 521 0
Total 8,274 7,127 3,829
11
RPKI Usage
ARIN XXX ARIN XXXI ARIN XXXII
RPAs Signed 27 72 130
Certified Orgs 47 68
ROAs 19 60 106
Covered Resources 30 82 147
Web Delegated 0 0
Up/Down Delegated 0
12
Whois Queries Per Second
2008-10
2009-01
2009-04
2009-07
2009-10
2010-01
2010-04
2010-07
2010-10
2011-01
2011-04
2011-07
2011-10
2012-01
2012-04
2012-07
2012-10
2013-01
2013-04
2013-070
500
1000
1500
2000
2500
3000
3500
4000
Port 43RESTful
13
Whois via IPv6
2009-01
2009-04
2009-07
2009-10
2010-01
2010-04
2010-07
2010-10
2011-01
2011-04
2011-07
2011-10
2012-01
2012-04
2012-07
2012-10
2013-01
2013-04
2013-070.00%
0.50%
1.00%
1.50%
2.00%
2.50%
3.00%
3.50%
% of Traffic
14
IRR Maintainers
2011 2012 2013
Maintainers 1726 1850 1951
1625
1675
1725
1775
1825
1875
1925
1975
15
IRR Route / Route6
2011 2012 2013
Route 18636 19969 21204
Route6 242 527 698
316.227766016838
3162.27766016838
31622.7766016838
RouteRoute6
16
IRR InetNum / Inet6Num
2011 2012 2013
InetNum 419 481 531
Inet6Num 13 25 38
31.6227766016838
316.227766016838
InetNumInet6Num
17
ACSP 2013.8 – Two Factor Authentication
• Looking for best fit solution–Offers security desired– Is not onerous• Only 66 PGP & 18 X.509 Users
• Most common 2nd factor used today is email / mobile phone– SMS codes vulnerable to MiTM–Most secure with mobile app and
complete out of band verification
18
Interops• RPKI
– Internally testing Up/Down with RPKId– Held Up/Down interop with APNIC, LACNIC, RIPE NCC,
and AFRINIC at IETF 87– Up/Down now generally available– Will begin production Up/Down for ERX space with APNIC
soon
• RDAP (IETF WEIRDS)– Participated in public interop with APNIC, RIPE NCC,
LACNIC, Afilias, VeriSign, CNNIC at IETF 87– ARIN has open source software at http://projects.arin.net– Public testbed at http://rdappilot.arin.net/restfulwhois/
rdap– Interop at IETF 88 planned