engineering report andy newton (in lieu of mark kosters)

19
Engineering Report Andy Newton (in lieu of Mark Kosters)

Upload: nigel-bennett

Post on 26-Dec-2015

218 views

Category:

Documents


0 download

TRANSCRIPT

Engineering Report

Andy Newton(in lieu of Mark Kosters)

2

Staffing• Operations

– 7 operations engineers + 2 managers (AT FULL STRENGTH)

• Development– 7 programmers + manager (ONE OPENING)

• New-hire filled vacancy by our last contractor in May• Recent departure of long-time employee

• Quality Assurance– 4 engineers, 1 contractor + manager (AT FULL

STRENGTH)

• Project Management – 1• CTO - 1

3

YTD Efforts• Improved Backoffice Processes– Better integration of financial services and

registration services workflows, automation of processes and invoicing

• New Fee Schedule• RPKI– Web Delegated– Up/Down Delegated including ERX space

• Migration from Oracle to PostgreSQL• Oracle, EMC, and LB instability challenges

(solved)

4

YTD Efforts Cont…• Extended Statistics• Fault Tolerance Improvements–More efficient system backups–Moving Production Systems to DR site

• Corporate Help Desk and IT Support• ARIN Member Meeting Support• Care and Feeding of Servers & Network– Includes new systems provisioning

with Puppet and Foreman

5

YTD Efforts Cont…

• 3rd Party Vendor Selections–New election system, including

integration with ARIN Online–Meeting Registration System

• User Interface Usability Testing• IETF Participation– SIDR, RPKI GTA, WEIRDS (RDAP)

6

ARIN Online Usage

• 74,172 accounts activated since inception through Q3 of 2013

2008

2009

2010

2011

2012

2013*

Number of Accounts Activated

5000 10000 15000 20000

* Through Q3 of 2013

7

Active Usage of ARIN Online

0 1 2 - 5 6 - 10 11 - 15

>160

5000100001500020000250003000035000

Logins

# o

f U

sers

Times logged in

8

Reg-RWS Transactions

ARIN 29 ARIN 30 ARIN 31 Today

Template 658853 980068 1373933 1730163

REST 28373 319865 835914 3500958

250000

750000

1250000

1750000

2250000

2750000

3250000

3750000

TemplateREST

9

Reports

Via REST Via ARIN Online

Associations 13 6,876

Reassignments

14,098 31,145

WhoWas 30,385 10,831

10

API Keys

API Keys

Users w/ API Keys

API Keys w/ Email

Active 7,590 6,988 3,829

Inactive 684 521 0

Total 8,274 7,127 3,829

11

RPKI Usage

ARIN XXX ARIN XXXI ARIN XXXII

RPAs Signed 27 72 130

Certified Orgs 47 68

ROAs 19 60 106

Covered Resources 30 82 147

Web Delegated 0 0

Up/Down Delegated 0

12

Whois Queries Per Second

2008-10

2009-01

2009-04

2009-07

2009-10

2010-01

2010-04

2010-07

2010-10

2011-01

2011-04

2011-07

2011-10

2012-01

2012-04

2012-07

2012-10

2013-01

2013-04

2013-070

500

1000

1500

2000

2500

3000

3500

4000

Port 43RESTful

13

Whois via IPv6

2009-01

2009-04

2009-07

2009-10

2010-01

2010-04

2010-07

2010-10

2011-01

2011-04

2011-07

2011-10

2012-01

2012-04

2012-07

2012-10

2013-01

2013-04

2013-070.00%

0.50%

1.00%

1.50%

2.00%

2.50%

3.00%

3.50%

% of Traffic

14

IRR Maintainers

2011 2012 2013

Maintainers 1726 1850 1951

1625

1675

1725

1775

1825

1875

1925

1975

15

IRR Route / Route6

2011 2012 2013

Route 18636 19969 21204

Route6 242 527 698

316.227766016838

3162.27766016838

31622.7766016838

RouteRoute6

16

IRR InetNum / Inet6Num

2011 2012 2013

InetNum 419 481 531

Inet6Num 13 25 38

31.6227766016838

316.227766016838

InetNumInet6Num

17

ACSP 2013.8 – Two Factor Authentication

• Looking for best fit solution–Offers security desired– Is not onerous• Only 66 PGP & 18 X.509 Users

• Most common 2nd factor used today is email / mobile phone– SMS codes vulnerable to MiTM–Most secure with mobile app and

complete out of band verification

18

Interops• RPKI

– Internally testing Up/Down with RPKId– Held Up/Down interop with APNIC, LACNIC, RIPE NCC,

and AFRINIC at IETF 87– Up/Down now generally available– Will begin production Up/Down for ERX space with APNIC

soon

• RDAP (IETF WEIRDS)– Participated in public interop with APNIC, RIPE NCC,

LACNIC, Afilias, VeriSign, CNNIC at IETF 87– ARIN has open source software at http://projects.arin.net– Public testbed at http://rdappilot.arin.net/restfulwhois/

rdap– Interop at IETF 88 planned

19

Comments?