ripe 57 database update jos i. boumans ripe ncc · jos boumans ripe ncc ripe 57 database update...

48
Jos Boumans RIPE NCC http://www.ripe.net RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Upload: others

Post on 18-Oct-2019

28 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

RIPE 57 Database UpdateJos I. Boumans

RIPE NCC

1

Page 2: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Outline

• Introduction of the DB Group• Projects & external commitments•Operational update & RIPE-DBM•Questions

2

Page 3: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

The DB Group

3

Page 4: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

The Database Group

4

Jos Agoston

Erik Denis

Luis Menno

Page 5: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Stakeholders: Internal & External

5

Page 6: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

Projects

6

Page 7: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

•On all forward & reverse domains-Maintainer of Tld/Inetnum object added-49.400 objects modified this way

•Coordinated with the DNS WG•Done silently on 10th of October to avoid hi-jacking • Public announcement here

7

AP54.3: MNT-BY on Domains

Page 8: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

AP54.3: MNT-BY on Person/Role

• All objects will have mandatory maintainers•Will be deployed in December 2008• Introduces a Catch-22•Webform available to bootstrap new users

8

person: Jack Sparrow

mnt-by: SPARROW-MNT

nic-hdl: JS-RIPE

...

mntner: SPARROW-MNT

admin-c: JS-RIPE

...

Page 9: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

AP54.3: MNT-BY on Person/Role

9

Page 10: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

AP54.7: rev-srv: deprecation• Clean up inet[6]num objects using rev-srv:•DB Schema change needed•Updates will be unavailable during change• Release at the same time as

AP54.3: MNT-BY on Person/ Role

10

Without rev-srv:96%

With rev-srv:4%

Inet[6]num

Page 11: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

AP54.6: Clean up unref'd objects

•Currently running in monitoring mode-Checks all person objects daily-Flagged after 3 weeks

• Deletes to start late November-Start with 100 deletes/day-Enroll in Whitepages to remain!-See www.ripe.net/projects/dbconstat

11

Referenced75%

Unreferenced25%

Page 12: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

RIPE CommunityOrg-type: WHITE PAGES

MNT-BY

WG Chair1

MNT-BY

WG Chair2

MNT-BY

WG Chair3

MNT-BY

...

I.M. Portant

S. Pecial

A. Mazing

D. Ifferent

Reminder: White Pages

•Deployed shortly after RIPE 56•New org-type:•Maintained by WG-Chairs• Linked users exempt from cleanup

12

Page 13: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

AS.Dot vs AS Plain

13

Page 14: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

• AS 3.1415 vs AS 123456• IESG has approved "AS Plain" as a Proposed Standard• This means AS.Dot may have to be transformed to AS Plain globally-Final decision expected late November-RIPE NCC will follow the standard

•We will keep you informed14

AS.Dot vs AS Plain

Page 15: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

SQL Cluster

15

Page 16: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

•RIPE DB resides on a single server

• Server is redundant in many ways:-Raid 5, Dual PSU / CPU / Nic, etc

• But if this server fails/loses network we:• can not rebuild the server quickly

• will have a service outage for updates

• may loose all data after the last backup

16

Problem Statement

Page 17: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Objectives

• Primary: Zero data loss in case of hardware failures or disasters.

• Secondary: Improve resilience to ensure maximum availability

17

Page 18: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Constraints: Database growth

18

Page 19: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans 19

SQL Cluster Layout

Page 20: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Deployment

20

• Scheduled for deployment towards the end of this year

Page 21: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

Whois Cluster

21

Page 22: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

•Current hardware is end of life

•Whois load is growing rapidly

•New setup required -Loadbalanced & Redundant

•Running in test phase now-try it out at: new-whois.ripe.net

•Deployed late November

• Sets us up for Whois v422

Whois Cluster

Page 23: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans 23

Whois Cluster Layout

Page 24: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

Whois v4

24

Page 25: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

v4: Information over Data

25

• Use cases over elementary queries-"Abuse contact for resource"-"Geo locate this IP"-"Validate the integrity of this object"

•Multiple Views-Output data in machine readable form, like XMLRPC or JSON

-If RPSL is needed, it will be provided• Emphasis on data quality

Page 26: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

v4: Fundamental Concepts

26

• Levels of access control-No anonymous access to personal data-Access matrix for different user types

•Migrate away from Email updates-Spam & Virus processing overhead-MIME processing is error prone-Asynchronous updates will be provided

• Full Unicode compliance

Page 27: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

•Dealing with Infrastructure before Implementation• Iterative development rather than Big Design Up Front (BDUF)• Slow migration away from v3, not Big Bang deployment of v4

27

Project Approach

Page 28: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Infrastructure Layout

28

Page 29: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

v4: Further steps

• Approach does not require 'Big Bang'-Interactive discussions on features-Live prototypes-Roll forward & backward as needed

• Business As Usual (tm)

29

Page 30: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

Operational Update

30

Page 31: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

RIPE-DBM

31

Page 32: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans 32

RIPE-DBM

• First line support by Customer Services-Second line still done by DB group

Andrea (manager)

Milena David

Page 33: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans 33

Average tickets per month0 25 50 75 100 125 150 175 200 225 250

186

181

140

51

30

17

22

136

229

156

82

62

9

9

99

106

106

33

45

5

6

Update Issues

Notification Issues

Password/Auth Issues

Miscellaneous

Abuse Reports

Usage Questions

DB Access Issues

October 2007 April 2008 September 2008

Page 34: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE NCC http://www.ripe.net

RIPE DB

34

Page 35: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

IRT Objects - The numbers

35

0 25 50 75 100 125

111

38

116

41

125

46

IRT Objects

With abuse-mailbox:

0% 1%2%

1,7%

1,6%

1,6%

IP Coverage

October 2007 April 2008 October 2008

Page 36: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Peak: 166/s

Stats: Whois Queries

36

IPv4 Average Jan 2007: 33/s

www.ripe.net/projects/dbconstat for more

IPv6 Average: 0.3/s

IPv4 Average: 106/s

Page 37: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Stats: Whois Queries

37

www.ripe.net/projects/dbconstat for more

106/s94/s

50/s

2008 ->2007 ->

Page 38: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Whois Queries - Access Method

38

Proxy7%

Whois.cgi2%

/bin/whois91%

September 2008

statistics on query distribution: number of queries vs unique IPs

Proxy18%

Whois.cgi2%

/bin/whois80%

May 2008

Page 39: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Whois Queries - Usage by Country

39

.de25%

.ru14%

.us10%

.nl6%

.fr.cz

.pl.dk.gb.ro.se.it.tr

Other17%

September 2008

statistics on query distribution: number of queries vs unique IPs.us

16%

.de16%

.ru15%

.fr7%

.pl.dk

.gb.nl

.se.it.tr.ro.cz

Other18%

May 2008

Page 40: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Query distribution per month

40

88%

10%

2%

1-1011-100101-10001001-1000010001-10000100000+

Amount of queries per unique IP

Page 41: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Jan 2007 Peak: 20/min

Peak: 60/min

Stats: Successful Whois Updates

41

Average: 2/min

www.ripe.net/projects/dbconstat for more

Page 42: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

Whois Updates - Distribution

42

mail-updates23%

web-updates2%

sync-updates75%

Update Method

Failed Updates17%

Help0%

Spam13%

Succesful Updates70%

Update Types

Page 43: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

RIPE DB: Query & Update Uptime

43

99.900%

99.925%

99.950%

99.975%

100.000%100.000% 100.000%99.994%

99.999%

99.931%

99.999%

May May

May

Oct Oct Oct

QueriesMail Updates

Sync Updates

Page 44: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE 54 http://www.ripe.net 44

Myth of the Five Nines

Page 45: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE 55 http://www.ripe.net

Questions?

45

Page 46: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

Jos Boumans RIPE 54 http://www.ripe.net 46

Thank You

Page 47: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

v3 -> v4 Transition

47

Access over multiple protocols

Queries in multiple formats

Page 48: RIPE 57 Database Update Jos I. Boumans RIPE NCC · Jos Boumans RIPE NCC  RIPE 57 Database Update Jos I. Boumans RIPE NCC 1

RIPE 54 http://www.ripe.netJos Boumans

v3 -> v4 Internals

48

Pure v4

Plain v3

Pre-/Post-Process Supporting DBSingle Backend