olaf kolkman. apnic 15, february 2003, taipei. 1 ripe database operations update olaf kolkman ripe...
TRANSCRIPT
1Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net
RIPE Database Operations Update
Olaf KolkmanRIPE NCC
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 2
Outline
• Database statistics• Database development• Development plans
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 3
Facts and Figures
• 1.8 M objects, 41% inetnum, 47% person• 25 q/s on average, spikes of 100 q/s• 4 updates/min, 18% inetnum, 75% person
Object counts, query loads, etc. available on-line:
http://www.ripe.net/db/dbconstat
http://www.ripe.net/db/mrtg/whois.html
• 110,000 query users on average
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 4
0
200000
400000
600000
800000
1000000
1200000
1400000
1600000
1800000
2000000
2001-10-12 2002-01-04 2002-04-22 2002-09-02 2003-01-29
mntner
aut_num
route
person/role
inetnum
domain
Database Contents
inetnum +84,668 (13%)person +70,105 (9%)inet6num +460 (70%)
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 5
0
5
10
15
20
25
30
35
40
day 22-jun-01 21-aug-01 21-okt-01 20-dec-01 18-feb-02 19-apr-02 19-jun-02 18-aug-02 19-okt-02 19-dec-02
0
1.000.000
2.000.000
3.000.000
4.000.000
5.000.000
6.000.000
7.000.000
Query rate and objects returned
Queryrate,
weekly av 25 q/s
Number ofobjects/day5,700,000
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 6
Query by Type
71%
3%
8%
8%
10%
IP
Domain
Domain Referral
Other
Denied
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 7
Update by object type
0
2
4
6
8
10
12
14
16
route
person
mntner
inetnum
domain
aut-num
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 8
Database developments: Whois server
• Improved query processing
– More helpful, consistent results
– Additional server information available, -q types
• Limit number of concurrent connections from IP– Some protection from DoS (less against DDoS)
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 9
Database developments:Webupdates
• Web updates in production
– Allows addition, modification, deletion through WWW
• Built on sync-updates back-end
• No PGP support
– Does not bypass security restrictions
– Secure updates possible in PKI framework…
http://www.ripe.net/webupdates
https://www.ripe.net/webupdates
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 10
Database developments:IPv6 query proxy
• IPv6 queries supported– Proxy server– Supports queries externally now, while IPv6 monitored
• Client source available• Full presentation in IPv6 Working Group
– Slides soon to be available from the meeting page
Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net 11
Future Plans
• New update processing– Improved reporting (fuller, clearer reports & error information)– Input processing revisited
• RPSLng– Server support for IPv6 and multicast RPSL objects & attributes
– IRRToolSet support
• Unreferenced person/role cleanup process
• Update processing semantic changes– Mostly for consistency and protection, will go to list soon!
12Olaf Kolkman . APNIC 15, February 2003, Taipei . http://www.ripe.net