June 2023 - MANRS Community - MANRS Mailing Lists

MANRS Readiness Scores to be made public
by Andrei Robachevsky July 3, 2023

July 3, 2023

Dear MANRS participants, While this only concerns the Network Operators program, this is an important milestone for the whole initiative. This change has been requested and discussed with the community with positive feedback. The MANRS Steering Committee has reviewed and approved this plan. Since April 2022, the MANRS team have been providing MANRS participants enrolled in the Network Operator program with an individual, monthly conformance report to update them on any changes to their compliance to MANRS Actions. This July, the scores for Actions 2, 3, and 4 will be made public on the MANRS NetOps participants table (https://www.manrs.org/netops/participants/) replacing the tick marks next to the named Actions. We will be adding the MANRS Readiness Score for Action 1 at a later date. This change aligns with the community’s objectives to: * Raise awareness of routing security problems and encourage the implementation of actions that can address them. * Improve transparency and credibility of the MANRS initiative. * Promote a culture of collective responsibility toward the security and resilience of the Internet’s global routing system. Network Operator participants will continue to receive individual, monthly conformance reports with their scores and any changes to the scores since the previous report at the start of each month. These scores will be updated on the MANRS website on the 8th day of each month. You can read more about how the MANRS Readiness Scores are calculated and their meaning<https://observatory.manrs.org/#/about> in the description of the Measurement Framework. Should you have any questions, please let us know. I also included a short Q&A to address the most common questions. Regards, Andrei Robachevsky MANRS Secretariat Questions & Answers Q: What is the MANRS Readiness Score? A MANRS readiness score indicates the degree of conformance of a MANRS participant to a MANRS Action. For example, to measure what degree Filtering (Action 1) is implemented we count the number of routing incidents where the network was implicated and the duration. Based on these metrics a normalized score is calculated for Action 1 for a specified time. Learn more about how the MANRS Readiness Scores are calculated and their meaning<https://observatory.manrs.org/#/about> in the description of the Measurement Framework. Q: Where will the MANRS Readiness Scores be made publicly available? * On the MANRS website, the scores will replace the tick marks in the participants' table<https://www.manrs.org/netops/participants/> of the Network Operators program. * On the MANRS Observatory, the scores will continue to be available to participants via their account. Q: Whose MANRS Readiness Scores will be made public? MANRS participants who are a part of the Network Operators program will be the first to have their MANRS Readiness Scores made publicly available. These will replace the tick marks for Actions 2, 3, and 4. MANRS Readiness Scores for Action 1 will be shown at a later date. Q: How do these MANRS Readiness Scores differ from the scores I get in my monthly conformance report? These scores are the same. This new initiative is making these scores public to align with the MANRS objectives to promote a culture of collective responsibility toward the security and resilience of the Internet’s global routing system and raise awareness of routing security problems and encourage the implementation of actions that can address them. Q: Why are the scores being made public? Publication of the MANRS Readiness Scores is an important step to improve credibility and transparency of the initiative. This has been requested by community members and the concept of making the MANRS Readiness Scores public was first proposed in 2021. Several steps have been made to improve the value of these scores, including adding these scores to the monthly conformance reports, validating incidents, and improving the quality of the data we use. We feel it’s at a point now that the scores provide an accurate enough analysis of the compliance of a MANRS participant towards MANRS Actions 2, 3, and 4. We will continue to work to refine the accuracy of the score for Action 1 before making this public. Q: How often will the scores be updated? You will continue to receive your most up-to-date MANRS Readiness Scores at the beginning of every month. These scores will then be published on the MANRS website on the 8th day of every month.

3 4

Unanswered MANRS tickets
by Kevin Meynell June 15, 2023

June 15, 2023

Dear MANRS Community, It seems a number of queries or requests to update contacts have been submitted to the MANRS ticketing system (contact(a)manrs.org) over the past weeks, which have gone unanswered. We deeply apologise for this, but we're currently working through the backlog and have also put processes in place to ensure this is not repeated. MANRS applications seem to have been unaffected - with the exception of those received on 26-27 April - although we’re also going back through all outstanding applications to ensure nothing is still awaiting our action. Once again, sorry for any inconvenience and if you’re still awaiting a response or action, it should be dealt with by the end of the week. Regards, Kevin Meynell MANRS Co-Lead

1 0

[SXINFO-204] MANRS Readiness Scores to be made public
by SwissIX June 8, 2023

June 8, 2023

—–––—–—–––—––— Reply above this line. View your request in our Service Desk: https://service.de-cix.net/servicedesk/customer/portal/19/SXINFO-204?sda_so… This is shared with isoc.org, swissix.ch, robachevsky(a)isoc.org, jeanmichel.combes(a)orange.com, manrs-steering-committee(a)elists.manrs.org, and manrs-community(a)elists.manrs.org ------------------------------ meynell(a)isoc.org commented: Hi Jean-Michel, Why only Network Operators program? IMHO, CDN and IXP SHOULD be also considered if such a milestone is decided: these 2 programs have the “same maturity” as the Network Operator program. The Network Operators programme has tangible and regularly updated readiness scores for each of its Actions, and the Observatory (from where this data is generated) is primarily based on this programme. The IXP and Vendors programmes have different Actions and do not currently have readiness scores to determine conformance because they’re largely about implementation of technical and organisational policy. On the CDN/Cloud programme this is a good suggestion and we can look at rolling this out next. When? No log of such a discussion … did I miss something? If this is the MANRS meeting during RIPE meeting, it was not be possible to attend it remotely … and no report of this meeting too. It has been discussed in various community meetings (e.g. at RIPE and APRICOT) and by the Steering Committee over the last year or so. There has been significant support for doing this and really no objections to publishing data that can already be found the public domain. Do you have any specific concerns with publishing this data? Seems there are still issues with MANRS initiative management before publishing data: *A questionnaire regarding one of my company’s subsidiary has been sent a long time ago … but no reply *A ticket has been submitted to get access to a subsidiary’s account … but no reply Okay, apologies for this. We’re looking back at the tickets and will contact you off-list. Regards, Kevin – Manrs-community mailing list Manrs-community(a)elists.manrs.org [1]https://elists.manrs.org/mailman/listinfo/manrs-community [2]signature.asc ---------------------------------------------------------------------------------------- [1] https://elists.manrs.org/mailman/listinfo/manrs-community [2] https://service.de-cix.net/secure/attachment/102179/102179_signature.asc ------------------------------ *Contact and office hours* *Office hours*: Monday - Friday 08:00 - 22:00 CET/CEST *Telephone*: +49 69 1730902 11 *E-Mail*: support(a)swissix.ch If you need assistance *outside of office hours* or in case of emergency, please call our *hotline* +49 69 1730902 11. -- *SwissIX Internet Exchange* Badenerstrasse 569 CH-8048 Zürich / Switzerland Technical Helpdesk contact 24/7: support(a)swissix.ch / +41 (0)44 330 70 90 Commercial Contact: info(a)swissix.ch VAT-ID: CHE-110.460.993 MWST

1 0