Minutes

ENOG 7
26-27 May
Moscow

The Eurasia Network Operators’ Group (ENOG)

The Eurasia Network Operators’ Group (ENOG) is the regional forum in which experts concerned with the core operational issues of the Internet can share knowledge and expertise on issues unique to the Russian Federation, the Commonwealth of Independent States (CIS), and Eastern Europe. You can learn more about ENOG here:

http://www.enog.org/

ENOG 7 took place from 26-27 May in Moscow at the Moscow Marriott Grand Hotel. There were 369 people attending, from 18 different countries.

Monday, 26 May

Opening Plenary, 12:00-13:30

Welcome to ENOG 7
Serge Radovcic, RIPE NCC
Alexey Platonov, Technical Center of Internet (TCI)
Andrei Robachevsky, ENOG Programme Committee

25 Years of RIPE (and Introduction of the New RIPE Chair)
Rob Blokzijl, Hans Petter Holen

Rob Blokzijl, RIPE Chair Emeritus, gave an overview of the 25 years of history of RIPE. He explained how some things have changed in that time, such as the size of the community and meetings like ENOG, but that other things have remained just as important as ever, including DNS operations, the RIPE Database, and the exchange of information and experience at meetings. He said it might be possible to summarise things by saying that, “Nothing has changed, or everything has changed.”

Hans Petter Holen, the newly appointed RIPE Chair, introduced himself to the ENOG community and gave a brief overview of his background. He emphasised that, as RIPE Chair, his job is to listen to the community about what’s important to them. He also stated that the founding principles of RIPE, including openness and transparency, will continue to be a focus for him in his new role.

Internet Governance 2014: Issues, Initiatives, Perspectives
Управление Интернетом (2014 г.): проблемы, инициативы, перспективы
Michael Yakushev, ICANN

This presentation is available at:
http://www.enog.org/presentations/enog-7/268-ENOG-2014-05-MY.pdf

Plenary, 15:00-16:30

Analysis of Amplification Attack
Jaap Akkerhuis, NLnet Labs

This presentation is available at:
http://www.enog.org/presentations/enog-7/264-AnalyzeAmplAttack.pdf

There was a question about using RIPE Atlas to measure whether networks are announcing fake traffic. Jaap answered that there may be issues using RIPE Atlas probe hosts to do this. An attendee commented that the RIPE NCC is very trusted and knowledgeable, and the best organisation to do this.

Stop Thinking IPv4; IPv6 Is Here
Jen Linkova, Google

This presentation is available at:
http://www.enog.org/presentations/enog-7/275-ENOG7__Stop_Thinking_IPv4_v2.pdf

Jen gave a detailed overview of why it’s time to make the transition to IPv6, explaining the key technical points and pointing out useful tip and tricks on how to actually deploy IPv6 in your own network.

Attendees shared their own experiences in deploying IPv6 and discussed why certain networks and regions have managed to be so successful.

RIPE NCC Update
Axel Pawlik, RIPE NCC

This presentation is available at:
http://www.enog.org/presentations/enog-7/276-Axel-ENOG7-v1.3.pdf

Axel gave a high-level overview of the RIPE NCC’s recent activity, including its growth in membership, the financial outlook, operational improvements, technical services such as RIPE Atlas and RIPEstat, the IPv6 readiness of its members, and its focus on improved documentation. He also explained that the RIPE NCC has expanded its regional presence, with an office and two new staff members in Dubai, and one new staff member, with a second about to be hired, in Moscow.

There were no questions.

RIPE NCC Regional Presence
Maxim Burtikov, RIPE NCC

This presentation is available at:
http://www.enog.org/presentations/enog-7/277-ER_Update_-_ENOG_7_PDF.pdf

Maxim gave an overview of the RIPE NCC’s expanded regional presence, including the opening of a regional office in Dubai and the addition of two new staff members based in Dubai as well as in Moscow. He included information about the RIPE NCC’s efforts to reach a number of different stakeholders, including governments, LEAs and others, in order to represent the views of the technical community.

Isaev Alexey, Skadi Telecom CJSC, asked Maxim to clarify his point about the RIPE NCC being a centre of expertise and improved communication with the Russian Ministry of Communications and Mass Media. Maxim explained that not all stakeholders in the region understand exactly what the RIPE NCC is and what it does. Regarding the ministry, Maxim explained that they have not always been informed about the RIPE NCC’s activities in the past, which he is now focusing on.

Sergey Myasoedov, NetArt Group (Vice Chair), asked about the RACI (RIPE Academic Cooperation Initiative) program and why there is a focus on economics students and not technical students. Maxim explained that all students need to understand technical issues, even if they work in different sectors.

Plenary, 17:00-18:00

Plenary
RIPE NCC Measurements and Tools: RIPE Atlas and RIPEstat
Victor Naumov, RIPE NCC

This presentation is available at:
http://www.enog.org/presentations/enog-7/279-RIPE_Atlas_and_RIPEstat_ENOG7.pdf

Victor gave an overview of RIPE Atlas, the RIPE NCC’s global Internet measurement network, and RIPEstat, the RIPE NCC’s queryable interface for accessing information about specific IP address space. New features in RIPE Atlas include Status Checks, a way to integrate measurements using the RIPE Atlas network in existing network monitoring tools such as Nagios and Icinga, and the new DNSMON service, which has been integrated into the RIPE Atlas infrastructure. Victor also showed how RIPEstat data could be used to investigate network events, such as the BGP leaks in Indonesia, using the new BGPlay tool.

Jen Linkova, speaking as a RIPE Atlas ambassador, asked whether the team has thought about whether to give ambassadors credits for the probes they’ve handed out. Victor suggested instead that credits should be given to ambassadors who check that the probes they’ve given out have been connected. He added that he’d brought a RIPE Atlas anchor for MSK-IX, who is hosting the anchor on behalf of the RIPE NCC in order to help expand the anchor network.

Project Secure VLAN @NIX.CZ
Martin Semrad, NIX.CZ

This presentation is available at:
http://www.enog.org/presentations/enog-7/272-Secure_VLAN_ENOG7.pdf

Detecting Routing Incidents
Alexander Azimov, Qrator Labs

This presentation is available at:
http://www.enog.org/presentations/enog-7/270-azimov.enog7.pdf

Alexander explained that often routing incidents happen as result of miscommunication, when one provider doesn’t know what another provider is doing. He gave an overview of his studies on the relationship between ASes and understanding business logic behind peering decisions.

There was a question about a possible integration with RIPE Atlas. Alexander responded that he is not conducting active measurements, but it might be possible to integrate their data into RIPEstat. There was another question about making an API available, and Alexander responded that this should be discussed on the mailing list.

What do we know about routing resilience and how to make it better?
Andrei Robachevsky, Internet Society (ISOC)

This presentation is available at:
http://www.enog.org/presentations/enog-7/266-20140526-ENOG-collaborative-efforts.pdf

Andrei explained how ISOC has starting monitoring the global system to look for hijacks with their partner, BGPmon. They are asking operators to tell them the effect of routing events, such as whether they see normal changes in configuration or not, as well as how ISPs learn about these events. He called on the community to help prevent the distribution of false routing information, prevent spoofing and communicate with their adjacent networks.

Tuesday, 27 May

Plenary, 10:00-11:30

New Features of New gTLD. IDN Acceptance and IDN Mail
Moderator: Olga Alexandrova-Myasina, Coordination Center for TLD .RU

Panelists:

  • Irina Danelia, Smart Internet Foundation
  • Tigran Khudaverdyan, Yandex
  • Alexander Sherbakov, International Network Technical Center
  • Vasily Dolmatov, RU-CENTER Group
  • Matvey Alexeev, Rambler & Co
  • Fedor Smirnov, Rusnames

There is a presentation for this panel session available at:
http://www.enog.org/presentations/enog-7/281-ENOG_7_IDN.pdf

The panel discussed the current state of international domain names (IDNs), generic top-level domains (gTLDs) and IDN mail, and the technical issues involved in registering these domain names and integrating them into other applications, from email to social media applications.

Project Turris
Ondrej Filip, CZ.NIC

This presentation is available at:
http://www.enog.org/presentations/enog-7/280-Turris-ENOG-20140527.pdf

Ondrej explained how they have developed a new router, router Turris, from scratch. The main goals of Project Turris, which involves cooperation with Comcast, RIPE Atlas and antivirus companies, include security research, end user security, and improving the situation of SOHO routers. He also discussed problems with current CPE devices.

IPv6 in AMS-IX
Maksym Tulyuk

This presentation is available at:
http://www.enog.org/presentations/enog-7/282-ams-ix_ipv6.pdf

Maksym presented an analysis of recent changes in the amount of IPv6 traffic seen by AMS-IX, the Amsterdam Internet Exchange, explaining how they’ve seen it grow from 0.4% in 2012 to 0.6% in 2014.

Plenary, 12:00-13:30

A Watchful Eye on DNS
Jeroen Massar, Farsight Security

This presentation is available at:

http://www.enog.org/presentations/enog-7/267-Farsight_-_A_watchful_eye_on_DNS.pdf

Jeroen discussed DNS strategies for making networks more secure and protecting against spoofing. He demonstrated a new tool called dnstap, which is a combination of query logging and passive DNS.

Diagnosing Network Performance Degradation with Route Analytics
Cengiz Alaettinoglu, Packet Design

This presentation is available at:
http://www.enog.org/presentations/enog-7/257-ENOG_2014_Moscow_Cengiz_Slides.pdf

Certificate Transparency: New Improvement for PKI
Dmitry Belyavsky, Technical Center of Internet (TCI)

This presentation is available at:
http://www.enog.org/presentations/enog-7/255-ENOG7_may_2014.pdf

Plenary, 15:00-16:30

Transition of NTIA’s Stewardship of the IANA Functions
Maxim Burtikov, RIPE NCC

This presentation is available at:
http://www.enog.org/presentations/enog-7/284-ENOG_-_IANA_presentation_-_PDF.pdf

Maxim gave an overview of the NTIA’s announcement that it was seeking proposals for the transition of its current role with regards to the IANA functions. He explained the RIPE NCC’s relationship with IANA in terms of obtaining Internet number resource allocations. He also explained how the RIPE NCC and the other RIRs interact with each other, ICANN and the IANA in the context of regional and global policy making and implementation. He covered the logistics of the NTIA’s contract with ICANN and the global multi-stakeholder process.

Rob Blokzijl, RIPE Chair Emeritus, said he wanted to make two additions to Maxim’s description of the IANA functions as far as the RIPE NCC is concerned. He said that there are two other points of interaction: reverse DNS, which the RIPE NCC runs for RIPE address space, and running the K-root server. He asked Maxim to please include these in future presentations.

Rob added that the NTIA had another condition for transferring the oversight function, which was that their role shouldn’t be taken over by a government or community of governments (such as the EU), including the ITU. He said they made it clear that if there is any chance of government involvement, they will not relinquish oversight. He added that private opinion is that the NTIA has been managing resources and interacting with IANA for 20+ years, and there have never been any issues with the oversight interaction. He said the community has demonstrated that it’s able to be responsible, as a community, for the work we do. He continued that he sees a great danger in potential involvement with the commercial domain name industry, and worries that we might end up with a complicated commission organisation. He added that RIPE is not interested in DNS operations, and said we’re being put under that umbrella as well, which he does not want and doesn’t think anyone else does, either.

Serge Radovcic, RIPE NCC, told attendees that the RIPE NCC is curious to get opinions. How does this community feel? Do you care? Should it change?

Alexander Isavnin commented that Maxim listed the functions the IANA is in charge of, like a number of protocols, the registry, reverse DNS, but that those are not profitable. However, he said that root zone support and the growing number of domain names is a profitable activity. He added that ICANN gets a lot of money from the registration of domain names, and suggested thinking about what the community can do about this, because there will be someone promoting their interests in this area, and normal operators might be endangered.

Maxim said he agrees, and that the RIPE NCC is trying to keep this from happening.

Alexander responded that those hoping to earn money are silent, and asked Maxim and the RIPE NCC to please point out those people are so the community can be aware of them.

Alex Semenyaka, Yandex, suggested that when we have open questions we can’t find answers to, we need to ponder them. He added that there is a feedback form on the ENOG website, and asked attendees to please add their feedback to such open questions there. He also encouraged anyone who had ideas they may not be ready to voice publicly to please do it later using the online feedback survey.

Serge also suggested channeling feedback via the Cooperation Working Group Mailing List, at cooperation-wg [at] ripe [dot] net.

Maxim ensured everyone that their feedback would be collected and taken to the right channels so everyone will be heard.

Critical Policy Decisions Impacting the Internet in Europe Today
Frédéric Donck, Internet Society (ISOC)

This presentation is available at:
http://www.enog.org/presentations/enog-7/251-SLIDES_ENOG_7_MAY_2014.PDF

Frédéric gave an overview of recent policy decisions regarding critical decisions in the EU and the US, including net neutrality and DNS blocking (“the right to be forgotten”). He explained the consequences of recent votes that took place in the EU Parliament, and outlined the challenges for policy makers and regulators, including effective competition, enabling informed choices among users, reasonable network management, common terminology, and Internet service monitoring.

Novels of the Russian Legislation for the Regulation of the Content in the Internet
Sarkis Darbinyan, Russia Pirate Party / Саркис Дарбинян, Пиратская партия России

This presentation is not available online.

Sarkis discussed copyright and distribution issues, and censorship issues that arise between content publishers and the public and law enforcement agencies. He also gave an overview of the new Russian legislative environment and how those hosting content are trying to cope with it, suggesting that more lawyers will need to get involved in protecting website owners and content publishers.

Segment Routing – Egress Peering Engineering
Daniel Ginsburg, Yandex

This presentation is available at:
http://www.enog.org/presentations/enog-7/263-EPE-ENOG7.pdf

Closing Plenary, 17:30-18:30

Network Neutrality: History and Perspectives
Olga Makarova, Mobile Telesystems OJSC

This presentation is available at:
http://www.enog.org/presentations/enog-7/259-Network_neutrality.pdf

Государство против Интернета: как законотворцы прошлись катком по Рунету
Артем Козлюк, Пиратская партия России

This presentation is not available online.

Farewell and Open Mic

One attendee commented that he would like to hear more about what’s happening in the Russian region from the RIPE NCC’s point of view.

Members of the program committee encouraged everyone to get involved in the community by participating at RIPE Working Group sessions and on the mailing lists.

Another attendee commented that she would like to hear to more from the RIPE NCC about how public control works in Europe, and the relationship between society, the state and the business sector. She asked the RIPE NCC to please share these successful stories in the future. Serge Radovcic, RIPE NCC, commented that the RIPE NCC also engage in LEA meetings, so perhaps they could include those success stories in the future.

Serge also asked everyone to please include their feedback via the online survey, or speak directly to the PC.