home tags events about login
one honk maybe more

benjojo posted 12 Apr 2023 15:48 +0000

The upcoming changes that RIPE is planning to do in order to start charging for ASNs is going to be really interesting because there are a lot of accounts that have a huge number of ASNs that are going to get severely charged.

I did a quick lookup to see who were the largest ASN account holders in the RIPE region, and while the data source for this has some known flaws (for example the account owner is set to the original register of the ASN, ignoring the possibility of a transferred) It's clear that some of the large providers of “hobby nets” (ch.securebit, us.zappie, ch.openfactory, uk.august, ch.ifog) are going to get severely impacted!

I think there is a huge risk of regressing the progress being made on bringing on new networking engineers to an industry that has been continuously aging to its way to mass retirement.

I genuinely believe that the RIPE NCC's free ASN “policy”(?) that existed all the way up until now has done more to bring in new network engineers than any other effort in the industry.

A listing of top N RIPE accounts based on number of ASNs assigned, with an estimated cost impact

benjojo replied 12 Apr 2023 15:51 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/7Vt72t2jh48Djh7nSw

This is of course also not to mention the potential chaos that could be triggered by the fact that a lot of these providers are not actively charging their customers a yearly fee so far and have only been charging a setup fee to create a new ASN.

I suspect the chaos of setting up yearly billing after the fact is going to be pretty hardcore on some of these “hobby net” providers. I suspect a lot of ASNs are going to disappear because people cannot be bothered to continue paying, or cannot be easily contacted.

benjojo replied 12 Apr 2023 15:56 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/tly6XTC3W95hwc43Fl

I think one of the only reasons I really got into the BGP networking industry was because of my free ASN (ignoring a cheap one off setup cost). It's a real shame to see that go away as an easy route (pun intended) to for people to get into the internet routing world.

ASNs are a finite resource, and I do believe that there is probably precedent for RIPE to charge to set up an asn (As there is a non-trivial amount of KYC required to do this) and potentially having a yearly charge for a 16-bit asns (as those are far more scarce and questionably are not required anymore)

But in my opinion, a yearly fee for a 32-bit asn is not justifiable to the harm that it will do to the future of the networking industry.

benjojo replied 12 Apr 2023 16:05 +0000
in reply to: https://queer.af/users/erincandescent/statuses/110186673625757289

@erincandescent 32bit ASNs are only really practically finite if we begin mass allocating them to things that do not need ASNs.

For example if we started allocating a ASN to every house then we may have a problem, but we can revisit yearly fee's for 32bit ASNs if that somehow becomes becomes a reality. A few hobby nets are not gonna cause this much of a problem

benjojo replied 12 Apr 2023 16:50 +0000
in reply to: https://mastodon.online/users/neirbowj/statuses/110186835022690296

@neirbowj I don't genuinely believe that there is any serious wasteful consumption right now on asns with the exception of potentially 16-bit asns (but I covered that in the upper parts of this thread).

One of the things is is that RIPE only has around 38,000 ASNs to actually charge for so they only really stand to gain around 2 million euros a year from this change, and that is assuming that a large percentage of these ASNs are not immediately dropped due to the extra cost of keeping them around (or issues as mentioned above).

32 bits is a lot of space! Already RIPE contacts account owners who have not used their ASN in the public internet for a sufficient amount of time. So things are already "cleaned up" to some degree.

benjojo replied 12 Apr 2023 18:38 +0000
in reply to: https://techfieldday.net/users/jimthewhyguy/statuses/110187245212112790

@jimthewhyguy Yeah the networking world is extremely acronym dense.

You know, the IP packet gets a FIB lookup (that was likely programmed by OSPF, IS-IS or BGP, or god forbid RIP), and then gets a MPLS header shoved onto it, then MACSEC'd and then goes out of the SERDES to a SFP/QSFP, then that laser light hits some kind of ROADM and transmitted some distance to the next router. And that is of course assuming that the original IP was the original one, it's common these days to have VXLAN on top of these things, not only because it helps build VLAN-like infrastructure for hosting providers, but also because it sometimes helps the ECMP efficacy, but you know, the older setups are often using LAGs rather than ECMP!

benjojo replied 13 Apr 2023 10:56 +0000
in reply to: https://social.secret-wg.org/users/stucchimax/statuses/110190732691140131

@stucchimax @Oskar456 Right, but a lot of the providers that will issue you a ASN for cheap/free will also help you out by assigning you a /44 or something to get started with.

bgp.tools keeps track of these kinds of networks on https://bgp.tools/tags/perso (though this does not cover all of them, since a recent trend has been to start a LTD/LLC and issue the ASN in the company name, meaning that bgp.tools often does not consider that a hobby net)

benjojo replied 13 Apr 2023 13:04 +0000
in reply to: https://infosec.exchange/users/jtk/statuses/110191392998462021

@jtk I mean, sure. There will always be some people who get stuff they don't understand. I know contract clients I've worked for obtain resources and not really have a reason on why... they just did?

I'm not sure LowEndTalk is true reflection on most of the people trying to get started, and sure, some will drop off, but a decent amount of the professional peers my age (not routing ones to be clear) got started with these cheap/free sponsored ASNs.

As previously said, I don't buy the wastage argument (apart from 16bit ASNs), and simply adding cost to it will cause a extra hurdle that will be counter productive to have a new generation of network engineers that are interested in the BGP/Internet ecosystem.

benjojo replied 12 Apr 2023 16:24 +0000
in reply to: https://mstdn.social/users/HopelessDemigod/statuses/110186735553536643

@HopelessDemigod Running a regional internet registry is definitely not cheap and RIPEs KYC costs and general administration staff costs should be considered, but I do agree that regional internet registries should not be run as a "for maximum profit" purpose.

The thing that RIPE is trying to solve here is that there is going to be a large amount of LIR accounts that will be merged and closed into other accounts now that there are no more reasons to start new LIR accounts (no more IPv4 space).

Until now they have been benefiting from these extra membership fees... that they will no longer have. That combined with a rapidly inflating currency means that something has to be increased.

I don't think I would like to go and see RIPE running austerity mode in the same way that a government running in austerity mode is not particularly great to see.