November 2024 - MANRS Community - MANRS Mailing Lists

MANRS Election Results
by Pablo Lopez-Aguilar Beltran Nov. 20, 2024

Nov. 20, 2024

Dear MANRS Community Members, The MANRS Steering Committee <https://manrs.org/about/steering-committee> election closed at *23.59 UTC on 13 November 2024*, and the result has now been confirmed by Election Chair Michael Abejuela (ARIN). We were pleased to see a higher than average turnout for this election, so thank you to those of you who voted! Three candidates have been elected to the MANRS Steering Committee: - Douglas Fischer, Peering Latam - Erika Vega, LACNOG - Steven Wallace, Internet2 All three join the Steering Committee for the first time and will serve a three-year term. We’d like to thank Andrew Gallo, Flavio Luciani, and Warrick Mitchell, who have officially ended their time on the Steering Committee but who will undoubtedly still be vital to the MANRS community. Congratulations to those elected, and we’d like to thank the other candidates for running. We are pleased by the interest shown in the MANRS initiative and the extremely high standard of candidates who put themselves forward for the Steering Committee. Learn more about the Steering Committee members *here* <https://manrs.org/about/governance/steering-committee/steering-committee-me…> . We will publish these results on the MANRS blog later today. Best regards, • • • • *Pablo López-Aguilar* *Operations and Business Associate Director, Internet Integrity Program* Global Cyber Alliance plopezaguilar(a)globalcyberalliance.org +34 670527760 [image: GCA Website] <https://www.globalcyberalliance.org/> [image: GCA Twitter] <https://twitter.com/GlobalCyberAlln> [image: GCA Facebook] <https://www.facebook.com/GlobalCyberAlliance/> [image: GCA LinkedIn] <https://www.linkedin.com/company/global-cyber-alliance/> [image: GCA YouTube] <https://www.youtube.com/channel/UCC5x4cUnZqWsV7OqBx1vCOQ> [image: GCA GitHub] <https://github.com/GlobalCyberAlliance/> [image: GCA Email Signup] <https://www.globalcyberalliance.org/#signup> [image: GCA Instagram] <https://www.instagram.com/globalcyberalliance/> [image: GCA Forums] <https://community.globalcyberalliance.org/> GCA takes your privacy seriously. To review our privacy policy, please click here <https://www.globalcyberalliance.org/privacy-policy/>.

1 0

Re: [manrs-community] Implementing Decentralized RPKI with Blockchain Technology
by xiaoyu.net Nov. 14, 2024

Nov. 14, 2024

For example, RIPE has route6 and inet6num. It can be queried and verified at any time.RIPE now has a large number of people who are not LIRs but actually use IP networks. I mean promoting security should be available to everyone. Since you are assigning IP addresses to non-LIRs for use, you should provide security capabilities to anyone who actually manages the use of the IP addresses. From: Arturo Servin <arturolev(a)google.com> To: "xiaoyu.net" <yon(a)xiaoyu.net> Cc: manrs-community(a)elists.manrs.org Date: Wed, 13 Nov 2024 16:19:46 +0100 Subject: Re: [manrs-community] Implementing Decentralized RPKI with Blockchain Technology How do you propose to validate that the IPs that a given holder is claiming as them, really belong to them? Regards as On Wed, Nov 13, 2024 at 4:15 PM xiaoyu.net via Manrs-community <manrs-community(a)elists.manrs.org> wrote: I think at least manrs.org should do something. Set up a certification node. To help those who are not LIRs but have IP addresses to easily deploy and update RPKI. Deploying RPKI should be easier and that is what we need to work towards. In addition, RIRs should be encouraged to open RPKI deployment to all those who own and manage IP for free. From: "Brandon Z." <Brandon(a)huize.asia> To: Brandon Zhi <Brandon(a)huize.asia> Cc: North American Network Operators' Group <nanog(a)nanog.org>, manrs-community(a)elists.manrs.org Date: Wed, 13 Nov 2024 09:39:03 -0500 Subject: [manrs-community] Implementing Decentralized RPKI with Blockchain Technology Hi there, Currently, due to political factors, some countries are not particularly proactive in deploying RPKI. Imagine if the RIR of a region were forced to revoke all IP resources of a particular country from RPKI, effectively isolating that country from the global internet. To address this, one approach is for autonomous networks within a region to establish two trusted RPKI CA servers: one from the major RIRs and another locally managed. The locally managed CA would take precedence, allowing autonomous networks to submit their IP resources to the RPKI server of their peers (and potentially backed by a national mandate to trust this CA). This setup could prevent a scenario where an entire country’s IP resources are revoked, leading to all IPs being marked as invalid. Another concept is to use blockchain technology. While cryptocurrencies use computational power to verify ownership, BGP could use peer count. If an IP resource is marked as valid by a majority of high-influence networks (with many peers), it could be trusted by the entire internet. Could this approach work? Perhaps there’s existing research on similar methods? Brandon Z. HUIZE LTD www.huize.asia | www.ixp.su | Twitter This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. HUIZE LTD can’t take any liability and guarantee of the text of the email message and virus. ************************************ Our Mail Server Support IPv6 & IPv4 ************************************ -- Manrs-community mailing list Manrs-community(a)elists.manrs.org https://elists.manrs.org/mailman/listinfo/manrs-community ************************************ Our Mail Server Support IPv6 & IPv4 ************************************

5 18

Implementing Decentralized RPKI with Blockchain Technology
by Brandon Z. Nov. 14, 2024

Nov. 14, 2024

Hi there, Currently, due to political factors, some countries are not particularly proactive in deploying RPKI. Imagine if the RIR of a region were forced to revoke all IP resources of a particular country from RPKI, effectively isolating that country from the global internet. To address this, one approach is for autonomous networks within a region to establish two trusted RPKI CA servers: one from the major RIRs and another locally managed. The locally managed CA would take precedence, allowing autonomous networks to submit their IP resources to the RPKI server of their peers (and potentially backed by a national mandate to trust this CA). This setup could prevent a scenario where an entire country’s IP resources are revoked, leading to all IPs being marked as invalid. Another concept is to use blockchain technology. While cryptocurrencies use computational power to verify ownership, BGP could use peer count. If an IP resource is marked as valid by a majority of high-influence networks (with many peers), it could be trusted by the entire internet. Could this approach work? Perhaps there’s existing research on similar methods? *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. HUIZE LTD can’t take any liability and guarantee of the text of the email message and virus.

4 7

2024 MANRs voting and bigpulse
by Gert Doering Nov. 14, 2024

Nov. 14, 2024

Hi, I notice that MANRS is still using bigpulse to do the voting, and bigpulse *still* has no IPv6 support. Can this be fixed before the next voting, please? (As in, either urge bigpulse to add modern-day networking to their web- and mail-servers, or use another provider) thanks, Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard, Ingo Lalla, Karin Schuler, Sebastian Cler Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279

1 0

Re: [manrs-community] Implementing Decentralized RPKI with Blockchain Technology
by Arturo Servin Nov. 13, 2024

Nov. 13, 2024

How do you propose to validate that the IPs that a given holder is claiming as them, really belong to them? There are existing repositories of routing information that are not linked to RIRs (e.g. RADB), they could easily create a CA and sign ROAs, some might even trust RADB enough to use it. But the issue with that (as it is with no-RIR IRR) is how to verify the right holders of an IP resource. Regards as On Wed, Nov 13, 2024 at 4:19 PM Arturo Servin <arturolev(a)google.com> wrote: > > How do you propose to validate that the IPs that a given holder is > claiming as them, really belong to them? > > Regards > as > > On Wed, Nov 13, 2024 at 4:15 PM xiaoyu.net via Manrs-community < > manrs-community(a)elists.manrs.org> wrote: > >> >> I think at least manrs.org should do something. Set up a >> certification node. To help those who are not LIRs but have IP addresses to >> easily deploy and update RPKI. Deploying RPKI should be easier and that is >> what we need to work towards. In addition, RIRs should be encouraged to >> open RPKI deployment to all those who own and manage IP for free. >> >> >> >> From: "Brandon Z." <Brandon(a)huize.asia> >> To: Brandon Zhi <Brandon(a)huize.asia> >> Cc: North American Network Operators' Group <nanog(a)nanog.org>, >> manrs-community(a)elists.manrs.org >> Date: Wed, 13 Nov 2024 09:39:03 -0500 >> Subject: [manrs-community] Implementing Decentralized RPKI with >> Blockchain Technology >> >> Hi there, >> >> Currently, due to political factors, some countries are not particularly >> proactive in deploying RPKI. Imagine if the RIR of a region were forced to >> revoke all IP resources of a particular country from RPKI, effectively >> isolating that country from the global internet. >> >> To address this, one approach is for autonomous networks within a region >> to establish two trusted RPKI CA servers: one from the major RIRs and >> another locally managed. The locally managed CA would take precedence, >> allowing autonomous networks to submit their IP resources to the RPKI >> server of their peers (and potentially backed by a national mandate to >> trust this CA). This setup could prevent a scenario where an entire >> country’s IP resources are revoked, leading to all IPs being marked as >> invalid. >> >> Another concept is to use blockchain technology. While cryptocurrencies >> use computational power to verify ownership, BGP could use peer count. If >> an IP resource is marked as valid by a majority of high-influence networks >> (with many peers), it could be trusted by the entire internet. >> >> Could this approach work? Perhaps there’s existing research on similar >> methods? >> *Brandon Z.* >> HUIZE LTD >> www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter >> This e-mail and any attachments or any reproduction of this e-mail in >> whatever manner are confidential and for the use of the addressee(s) only. >> HUIZE LTD can’t take any liability and guarantee of the text of the email >> message and virus. >> >> >> ************************************ >> >> Our Mail Server Support IPv6 & IPv4 >> >> ************************************ >> -- >> Manrs-community mailing list >> Manrs-community(a)elists.manrs.org >> https://elists.manrs.org/mailman/listinfo/manrs-community >> >

1 0

Implementing Decentralized RPKI with Blockchain Technology
by Brandon Z. Nov. 13, 2024

Nov. 13, 2024

Hi there, Currently, due to political factors, some countries are not particularly proactive in deploying RPKI. Imagine if the RIR of a region were forced to revoke all IP resources of a particular country from RPKI, effectively isolating that country from the global internet. To address this, one approach is for autonomous networks within a region to establish two trusted RPKI CA servers: one from the major RIRs and another locally managed. The locally managed CA would take precedence, allowing autonomous networks to submit their IP resources to the RPKI server of their peers (and potentially backed by a national mandate to trust this CA). This setup could prevent a scenario where an entire country’s IP resources are revoked, leading to all IPs being marked as invalid. Another concept is to use blockchain technology. While cryptocurrencies use computational power to verify ownership, BGP could use peer count. If an IP resource is marked as valid by a majority of high-influence networks (with many peers), it could be trusted by the entire internet. Could this approach work? Perhaps there’s existing research on similar methods? *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. HUIZE LTD can’t take any liability and guarantee of the text of the email message and virus.

1 0

Remember to vote: you have 48 hours left!
by Alejandro Fernández-Cernuda Nov. 12, 2024

Nov. 12, 2024

Dear MANRS Participants: We are 24 hours into the election period, which means that you still have 48 hours to cast your vote. Please check your inbox, find the voting invitation (subject: 'Invitation to vote - MANRS Steering Committee'; from: 'noreply-XXXXX(a)bigpulse.com'), and participate! Thanks everyone! • • • • Alejandro Fernández-Cernuda Díaz Director of Engagement, Internet Integrity Program Global Cyber Alliance afcernuda(a)globalcyberalliance.org +32 28823050 GCA Brussels Rond Point Schuman 6 1040 Brussels Belgium [image: GCA Website] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Twitter] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Facebook] <https://www.facebook.com/GlobalCyberAlliance/> [image: GCA LinkedIn] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/Jl22-6qcW7lCdL…> [image: GCA YouTube] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/Jl22-6qcW7lCdL…> [image: GCA GitHub] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Email Signup] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Instagram] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Forums] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> GCA takes your privacy seriously. To review our privacy policy, please click here <https://www.globalcyberalliance.org/privacy-policy/>.

1 0

Meet the 2024 MANRS Steering Committee Candidates!
by Alejandro Fernández-Cernuda Nov. 7, 2024

Nov. 7, 2024

Dear MANRS Participants: Yesterday we closed an important milestone in the *election process <https://manrs.org/about/governance/steering-committee-election-process-2024/>* that will take place *next week (November 11-13)*— the call for MANRS Steering Committee <https://manrs.org/about/governance/steering-committee/?swcfpc=1> nominations. And we have good news! *Eight candidates* have decided to run for office. Remember that, in this particular process, *three seats are open* <https://manrs.org/2024/10/update-manrs-election-2024/>, since three Steering Committee members —namely, *Andrew Gallo*, *Flavio Luciani*, and *Warrick Mitchell*— finished their term last October 31. You will have a chance to thank them for their excellent service to the initiative in the upcoming MANRS Community Meeting, scheduled for November 13. As far as the actual election goes, the voting representative for each MANRS participant organization (listed in your Observatory account) will receive* instructions on how to vote *once the process is open *(November 11, 2024, 00:01 UTC)*: - Those instructions will come via email (do not forget to check your Spam folders!), in a message with the subject* 'Invitation to vote - MANRS Steering Committee'* that will be sent from an individualized* 'noreply-XXXXX(a)bigpulse.com <noreply-XXXXX(a)bigpulse.com>' *email address - The ballot will be generated out of that message For better clarity, we are attaching a *sample of the invitation-to-vote message and the ballot to this message.* In the meantime, *meet our eight candidates* <https://manrs.org/about/governance/2024-steering-committee-candidates/>! - *D'Wayne Saunders*, Telstra Limited - *Dean Pillay*, Agile Solutions Provider - *Douglas Fischer*, Peering Latam - *Erika Vega*, LACNOG - *Geovanny Avendaño Castro*, CEDIA - *Mbong Hudson Ekwoge*, Woolworths Financial Services - *Phil Mawson*, Vocus - *Steven Wallace*, Internet2 We appreciate all the candidates for taking the time to get involved in this process. Also, we would like to thank you all in advance for voting next week. And, as always, please reach out to us with any questions you may have at contact(a)manrs.org or at my direct email address. Best regards, • • • • Alejandro Fernández-Cernuda Díaz Director of Engagement, Internet Integrity Program Global Cyber Alliance afcernuda(a)globalcyberalliance.org +32 28823050 GCA Brussels Rond Point Schuman 6 1040 Brussels Belgium [image: GCA Website] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Twitter] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Facebook] <https://www.facebook.com/GlobalCyberAlliance/> [image: GCA LinkedIn] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/Jl22-6qcW7lCdL…> [image: GCA YouTube] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/Jl22-6qcW7lCdL…> [image: GCA GitHub] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Email Signup] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Instagram] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> [image: GCA Forums] <https://csvv404.na1.hs-sales-engage.com/Ctc/WZ+23284/csVV404/JkM2-6qcW6N1vH…> GCA takes your privacy seriously. To review our privacy policy, please click here <https://www.globalcyberalliance.org/privacy-policy/>.

1 0

Invitation: MANRS Community Meeting 2024 S2, session West @ Wed Nov 13, 2024 21:00 - 23:00 (CET) (manrs-community@elists.manrs.org)
by Alejandro Fernández-Cernuda Nov. 5, 2024

Nov. 5, 2024

MANRS Community Meeting 2024 S2, session West Wednesday Nov 13, 2024 ⋅ 21:00 – 23:00 Central European Time - Brussels Please use the link below to register for this session:https://us06web.zoom.us/meeting/register/tZMtc-Gupz0jHNSj6hqwqRBme1YAYVn2VIM_ Organizer Alejandro Fernández-Cernuda afcernuda(a)globalcyberalliance.org Reply for manrs-community(a)elists.manrs.org and view more details https://calendar.google.com/calendar/event?action=VIEW&eid=NXFtcmQwMDduYXFw… Your attendance is optional. ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0

Invitation: MANRS Community Meeting 2024 S2, session East @ Wed Nov 13, 2024 09:00 - 11:00 (CET) (manrs-community@elists.manrs.org)
by Alejandro Fernández-Cernuda Nov. 5, 2024

Nov. 5, 2024

MANRS Community Meeting 2024 S2, session East Wednesday Nov 13, 2024 ⋅ 09:00 – 11:00 Central European Time - Brussels Please use the link below to register for this session:https://us06web.zoom.us/meeting/register/tZItdu2rpzMiHt3nhBWDdhiLGajuGhQnCGNl Organizer Alejandro Fernández-Cernuda afcernuda(a)globalcyberalliance.org Reply for manrs-community(a)elists.manrs.org and view more details https://calendar.google.com/calendar/event?action=VIEW&eid=Njk0NWw0NGVldml1… Your attendance is optional. ~~//~~ Invitation from Google Calendar: https://calendar.google.com/calendar/ You are receiving this email because you are an attendee on the event. To stop receiving future updates for this event, decline this event. Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more https://support.google.com/calendar/answer/37135#forwarding

1 0