Transcript ppt - apnic
NIR Meeting Mar 2002 Introduction of JPNIC’s New Registry System Izumi Okutani IP Address Section Japan Network Information Center Copyright (c) 2002 Japan Network Information Center 2 Contents I.Introduction of JPNIC’s Registry System – Background – Core Functions – Major Features II.Issues for Further Discussion – IPv6 Registry System Issues III.Summary & Conclusion Copyright (c) 2002 Japan Network Information Center Introduction of JPNIC’s Registry System Copyright (c) 2002 Japan Network Information Center 4 Back ground • JPNIC will implement a new registry system from May 2002 • Basic System Concept – – – – High cost performance for both JPNIC and LIRs Supports both IPv6/v4 Registry system User friendly Independent system from domain name • Domain Name Operations will be transferred to JPRS Copyright (c) 2002 Japan Network Information Center 5 Core Functions JPNIC DB billing DB Managemnet APNIC ftp Alloc req Other Applications Request Management Whois User Interface DNS Web transaction OS: FreeBSD auth RDBMS: PostgreSQL Apache + mod_ssl (OpenSSL) Load balancing for all servers Web auth LIR Public Services JPNIC staff Copyright (c) 2002 Japan Network Information Center System Components 6 Registry System auth LIR Web Interface Web Interface apply apply(proxy) application mangement processing discussion panel LIR status check DB(applications) evalutation auth JPNIC discussion panel status check data transfer create account name apply auth other applications DB()regisry info DNS open to publlic zone file puvlic serviices APNIC allocation request data DNS billing whois server whois DB whois *Load balancing for all servers ftp APNIC Copyright (c) 2002 Japan Network Information Center 7 DB Management Relational Data Base Management System 申請ＤＢ IP指定時業者用／ユーザ用 申 処請 理管 理 Web等 による申請 JPNIC 業務担当者用 Webによる 情報管理 レジストリ 管理ＤＢ WEebによる 情報登録 定期反映 ＷｈｏｉｓＤＢ 外部アプリ DNS 課金 Whois APNIC Copyright (c) 2002 Japan Network Information Center 8 Network Components Router Switch(L2) Load balncer Load balancer Switch(L2) Switch(L2) DNS 1 whois 1 Partner 1 JPNIC 1 DNS 2 whois 2 Partner 2 JPNIC 2 Frontend Servers Switch(L2) Backend Servers DialUp Router INS64 Terminal File Server DB Server DAT DB Server 各サーバのコンソールへ接続 Cold Standby Copyright (c) 2002 Japan Network Information Center 9 Major Features • User friendly – “Discussion panel” with communication in notice board style for smooth evaluation – 2 types of interface:web & transaction – Customized information for LIRs • Whois service for both IP address and domain name • Enhanced security Copyright (c) 2002 Japan Network Information Center Discussion Panel • 10 Communication for evaluation through a panel board – Second opinion – Allocation • Accepts file attachments Request form Comment on the request File attachment Copyright (c) 2002 Japan Network Information Center 11 Transaction and Web interfaces Transaction Interface Accepts a large no. of requests at once Web Interface User friendly Accept request Sending information DB LIR’sWeb Status check ・Able to make request status check on web for applications through both interfaces ・Evaluation for allocation and second opinion requests will be done on the web Copyright (c) 2002 Japan Network Information Center 12 Customized Information for each LIRs • Request status check • Allocation – Date of allocation, size – Utilization for each block – Assignments made from that block • Search assignment information by – Net-name, organization, allocation block, etc • Fee status check Copyright (c) 2002 Japan Network Information Center 13 Request Status Search request Account name Ticket no date Type of Hostmaster application applicant status ID Copyright (c) 2002 Japan Network Information Center 14 Allocation to an LIR Total Utilization Rate Assignment size Allocated blocks No. assignments per size Date of allocation Utiliztion rate per block Copyright (c) 2002 Japan Network Information Center 15 Utilization Display Copyright (c) 2002 Japan Network Information Center 16 Whois Service Whois Query Dom & IP Whois Domain Name Queries Domain Name Whois IP Address Queries IP Address Whois Copyright (c) 2002 Japan Network Information Center 17 Security • • • • SSL file transfer Password authentification Able to specify the access person PKI to be implemented in the future Copyright (c) 2002 Japan Network Information Center Issues for Further Discussion IPv6 System Issues Copyright (c) 2002 Japan Network Information Center 19 IPv6 Registry System Issues • Basically the same functions,features and network components as IPv4 system except – Management of address block – Whois DB – Reverse DNS • Need to fix the policy for further development Copyright (c) 2002 Japan Network Information Center Management of Address Block -current schemeAPNIC 20 Allocation block Evaluation & allocation NIRs Allocation Block Allocation Block Allocation Block LIR LIR Evaluation & allocation LIR -A large volume of data must be sent to APNIC for evaluation - Re-evaluation by APNIC for NIR’s allocation Copyright (c) 2002 Japan Network Information Center Management of Address Block -share the common poolAPNIC 21 Allocation block Access to address block Allocation NIR NIR NIR LIR LIR Evaluation LIR - APNIC and NIRs must have a common interface for DB access - Security issue for APNIC Copyright (c) 2002 Japan Network Information Center Whois DB -current schemeAPNIC Whois DB 22 Allocation to NIRs Allocation to LIRs LIR assignments ftp NIRs Whois DB Allocation to LIRs LIR assignments Register assignments LIRs –A large volume of data transfer by ftp –A large volume of data must be registered in upper registry’s DB Copyright (c) 2002 Japan Network Information Center Whois DB -hierarchical structureAPNIC Whois DB 23 Allocation to NIRs synchronize NIRs Each NIRs must have consistent DB structure LIRs Whois DB Allocation to LIRs synchronize Whois DB Not all LIRs are able to implement the consistent system -May not be properly managed if only the interface is consistent LIR assignments Copyright (c) 2002 Japan Network Information Center 24 Reverse DNS • No change in the management structure • What would be an appropriate boundary? – Fixed boundary – LIR allocation base Copyright (c) 2002 Japan Network Information Center Issues with IPv6 system development 25 • No major technical problem in DB – Simply must support IPv6 boundaries – Prototype will be ready for IPv6 boundary supported system • Would like to discuss and fix the following with APNIC & NIRs to move towards further development – Management of address block – Whois DB Copyright (c) 2002 Japan Network Information Center Summary & Conclusion Copyright (c) 2002 Japan Network Information Center 27 Summary & Conclusion • JPNIC will implement a new registry system in May 2002 – Whois service for domain name & IP address, enhanced security and other user friendly features – Prototype will be ready for IPv6 boundary supported system • Future support plan – IPv6 DNS support – IRR • Would like to discuss and fix IPv6 system issues with APNIC and NIRs Copyright (c) 2002 Japan Network Information Center 28 Q&A Copyright (c) 2002 Japan Network Information Center