Shane Kerr. RIPE 45, May 2003, Barcelona. 1 RIPE Database Operations Update Shane Kerr RIPE NCC
Shane Kerr. RIPE 45, May 2003, Barcelona. 2 Outline Statistics Operations Developments Plans
Shane Kerr. RIPE 45, May 2003, Barcelona. 3 Facts and Figures 1.9 M objects, 42% inetnum, 47% person 28 q/s on average, spikes of 200 q/s 2.3 updates/min, 61% inetnum, 28% person Object counts, query loads, etc. available on-line:
Shane Kerr. RIPE 45, May 2003, Barcelona. 4 Database Contents Historical
Shane Kerr. RIPE 45, May 2003, Barcelona. 5 Database Contents Recent “Big Movers”
Shane Kerr. RIPE 45, May 2003, Barcelona. 6 Updates by Method
Shane Kerr. RIPE 45, May 2003, Barcelona. 7 Synchronous Update Usage
Shane Kerr. RIPE 45, May 2003, Barcelona. 8 How Many Queries are There? Number of Queries Queries/Second
Shane Kerr. RIPE 45, May 2003, Barcelona. 9 What are the Queries For?
Shane Kerr. RIPE 45, May 2003, Barcelona What are Queries Returning?
Shane Kerr. RIPE 45, May 2003, Barcelona Where are the Queries From?
Shane Kerr. RIPE 45, May 2003, Barcelona Outline Statistics ✓ Operations Developments Plans
Shane Kerr. RIPE 45, May 2003, Barcelona Database Operations Smooth sailing –average response time is well below 1 second –load approximately 70% higher than last year New ARIN mirroring scheme next week –Use difference to generate NRTM, rather than full load –No down-time, includes allocations and assignments Tertiary (i.e. off-site) server in planning phases –Withstand catastrophic, city-wide failures –Manual failover by updating DNS for whois.ripe.net –Part of larger project to increase critical service reliability
Shane Kerr. RIPE 45, May 2003, Barcelona How Responsive is the Server? Query time in seconds (logarithmic) InnoDB table type goes on-line Desktop Upgrade Unoptimised MySQL RIPE NCC DDoS Domain mining (heavy referrals)
Shane Kerr. RIPE 45, May 2003, Barcelona Unreferenced Person Cleanup Protect privacy of users –Person objects remain undeleted when contacts change Person objects unreferenced for 90 will be deleted –A modify of the object “resets” the counter sent after 60 days –Limit to 2000/day to avoid overwhelming users & server Deletions begin 29 May
Shane Kerr. RIPE 45, May 2003, Barcelona IPv6 query proxy status Operational issues resolved –Solaris patches and move to Sun box –DNS update hid AAAA record for 10 days –Moving to standard monitoring and failover Source code public release made 90% of queries come from only 7 IP addresses Still see more 6bone than RIR addresses
Shane Kerr. RIPE 45, May 2003, Barcelona RIPE Database Administration Can Bican Engin Gündüz Tiago Antao Katie Petrusha Denis Walker
Shane Kerr. RIPE 45, May 2003, Barcelona Recent RIPE DBM Activity Tickets, tickets, tickets –About 90/day Spam becoming a larger problem –Planning move to SpamAssassin –Will reply if filtered – no s dropped! Hostmaster taking over 20% of RIPE DBM –Closer co-ordination between groups is an open, general help mailbox Please Questions or Problems!
Shane Kerr. RIPE 45, May 2003, Barcelona ERX Update 4 /8’s transferred – /8 and /8, RIPE NCC-majority – /8 and /8, APNIC-majority –Multiple transfers, with overlapping start/end dates One more trial to finalise processing “Long burn” scheduled to start afterwards –No large issues –Complete ordering, tentative scheduling TBD Moving to regular RIPE DBM and HM activity
Shane Kerr. RIPE 45, May 2003, Barcelona Outline Statistics ✓ Operations ✓ Developments Plans
Shane Kerr. RIPE 45, May 2003, Barcelona New Update Processing Improved acknowledgement messages Software maintenance eased Presentations at RIPE 45: –Developer POV at Tools Working Group –User POV at Database Working Group
Shane Kerr. RIPE 45, May 2003, Barcelona RPSLng IPv6 and multicast RPSL objects Prototype server on-line –Based on last RPSLng draft –Throw-away copy of RIPE Database –Latest draft to be integrated Real Soon Now IRRToolSet changes –More complicated than server changes –Coming soon!
Shane Kerr. RIPE 45, May 2003, Barcelona Semantic Changes Lots of mostly minor changes proposed: –default to protected inetnum/inet6num/domaindefault to protected inetnum/inet6num/domain –notification for more-specificnotification for more-specific –removal of cross notificationsremoval of cross notifications –"reclaim:"-like functionality"reclaim:"-like functionality –"mnt-lower:" on set objects"mnt-lower:" on set objects Little discussion Will be on-line soon
Shane Kerr. RIPE 45, May 2003, Barcelona Outline Statistics ✓ Operations ✓ Developments ✓ Plans
Shane Kerr. RIPE 45, May 2003, Barcelona Future Plans RPSLng IRRToolSet support Update processing semantic changes “status:” attribute changes? Deprecating NONE?
Shane Kerr. RIPE 45, May 2003, Barcelona PKI Draft RIPE document, Improved Secure Communication System for RIPE NCC MembersImproved Secure Communication System for RIPE NCC Members LIR-Portal ready, time for Database integration New features needed: –X.509 authentication –Proxy authentication Proposals coming to mailing list
Shane Kerr. RIPE 45, May 2003, Barcelona Outline Statistics ✓ Operations ✓ Developments ✓ Plans ✓
Shane Kerr. RIPE 45, May 2003, Barcelona. 28