Global Update [applause] 0:00:00 Vymala Thuron: Any questions? 0:00:03 Vymala Thuron: I'll propose if you have questions to ask them to Andrew directly and coffee's on me. Thank you. So, we'll continue with the agenda which was supposed to be in the morning. So I'll call our colleagues from RIR's, Pablo from APNIC to give the update, Owen DeLong from ARIN to give the update, Diego Mena from LACNIC, Axel from RIPE NCC, Axel to do the NRO update. The ASO update Mark Elkins, and the IANA update Pierre Dandjinou. So they will be doing the updates and maybe we can take questions after. So gentlemen, I think there are only gentlemen here, can I invite you on stage? Thank you. [background noise] 0:01:33 George Michaelson: Hi, everyone. Pablo had to leave to catch a plane. I'm George Michaelson from the research section in APNIC so I'll give the APNIC report. [background conversation] 0:02:09 George Michaelson: So, this is our mission statement, our vision statement. I think we're all after the same thing here. We've split our reporting into three broad areas so I'm going to give you a report on the service focus, the support focus, and the collaborate focus. Starting with the service, we've got quite a few charts here. We've had fairly consistent and steady growth in IPv6. If you're interested in the details, all of this information's available online in different ways. We recently actually did some work to improve the uptake of v6 by running what we call a "one-click" service, so if you're entitled to a v6 allocation, the application process has been massively simplified and we think there's some indication in our allocation numbers that this has increased relative uptake. It's quite interesting to think about the process costs of getting something you're automatically entitled to; reducing them definitely does have an impact. 0:03:18 George Michaelson: In v4, the transaction rates are obviously fairly different because we've been in run out for quite some time now. We talk about Final /8 Policy in terms of you're only allowed to get one, but there is actually this subsequent operation where the IANA has been releasing small amounts of resource that have come back into the central core. And in the APNIC region, we made a policy decision that everyone who had taken one of our Final /8 allocations which is variable mapped up to /22, I believe, of space. Forgive me, I'm vague because I don't do a lot of the policy work, but we allowed all of these people to come in for a second bite of the cherry, which is really quite nice because it sort of brings out that question of, "Well do you have use for real address that Andrew was talking about?" And the answer is people do. They have been coming back quite consistently taking up their second allocation from this round of release from IANA. So we're basically doing somewhere around 100 allocations a month. There's quite a lot of breakdown available. 0:04:24 George Michaelson: In the transfer space, APNIC is actually nothing like as active as the RIPE NCC are. I think they might be doing something around 100 a month. That's the number I've got here, but we're really down in the weeds. We're more like a dozen a month. I don't think I've actually got a sense of why there would be that volume difference 'cause in population terms and in the density of deployment terms, I think there is as much interest in access to resources in Asia as there is in Europe, but for whatever reason the dynamic is just quite different. We have a lot of data coming in from the ARIN region of course. We have a pre-approval process. If you want to engage in transfer activities in the APNIC region, you can go into process to get pre-approved based on justified need processes. Most of our transfers are taking place in that mechanism. 0:05:16 George Michaelson: We've got a public listing service and once you're pre-approved, you can actually see who's interested in acquiring and also who has access to resources they can release. And we have a quite open market process where traders and people who want to help liberalize access to resources can come into process and register and then help provide, I suppose, fundamental liquidity in the processes of getting access to resources. 0:05:40 George Michaelson: So with ASN assignments, they're fairly steady, but again our numbers of ASN is really quite low by comparison with both the US and with Europe. There's really quite a different routing practice in our area. We do really maybe 50 a month. Most of these are now 4-byte ASN. We have a very small reserve of 2-byte ASN left. For those of you of a technical mind, there is really substantively no major difference between, 4 and 2-byte ASN, with one very important distinction. You can't do some community string activity with 4-byte ASN, because it's bigger than the field in the BGP protocol. And there's really no way out of this other than going back into design, and making BGP able to take bigger numbers, 'cause you can't chop them in half and fit them in the space. 0:06:31 George Michaelson: So, if you use community string mechanisms, it's very hard to do that in the world of 4-byte ASN. But, having noted that, we don't actually get many people in our region coming back. By and large, they're quite content with 4-byte AS routing mechanisms. The interesting thing here is that we also see a very high rate of actual use. It's with AS numbers... Some work that we did earlier in research showed that older AS's kind of age-out, they don't get used. So, there is question mark are AS's actually being used, or are they just a must have item? The evidence with the 4-byte is, once we give someone 4-byte AS, it appears in BGP fairly promptly. 0:07:12 George Michaelson: So, on membership. We've had an acceleration in the last number of years, essentially because downstream enterprises couldn't get addressing indirectly through an agency. I mean, the classic problem with a customer fronting is you say, "You can't have any more." But if they front as a member on us directly, they can get their Final /8 allocation. So, there's a fairly clear dynamic as a result of hitting this policy process, we're going to see a rise in membership. So, we also have the NIRs, and they are really quite different structure that you guys aren't exposed to so much in this region. They have also had huge acceleration. I'd like to stress there's an absolute consistency of policy application here. It's not as is if there's any radical difference in being an NIR member, or an APNIC member directly. It's the same policy that applies in our region. So, the total number of members in our region is actually up around 8,000 these days, which is quite large. It is a bit of a competition with the other regions. I think the NCC is still winning. So we all have to work harder to get bigger. 0:08:19 George Michaelson: We've been working a bit on our portal. We had a very early design exercise, that was actually lead by Sanjaya who's now our 2IC, when he was working in the technical field. And we've been trying to see if we can actually make this a better user experience. We've been looking at quality of service, we've been looking at how people contact the executive council, we've been tracking correspondence. So we've been doing a number of things to try and improve engagement with membership. Whois: We've finally realized that a significant amount of our WHOIS load is out of region, and we've gone with an initially quite simple distribution in four locations worldwide. We've gone into a relationship with a CDN partner, who's able to do efficient address location based on client-side. It's a nice model for getting service reliability as well, but is also primarily about reducing RTT. Because we had a huge amount of queries around address use in Asia, and who were inevitably having to do probably one Trans-Pacific link, and quite often two, because we sometimes see packet flows from Japan to America to Australia, or we're seeing Trans-Atlantic-Trans-Pacific. So, we're getting quite large cumulative delays in that service. So distribution, it's had two benefits. 0:09:45 George Michaelson: The other thing that's nice about this, is it's enabled us to cope slightly better with some of the attack problems. There are times when, WHOIS is is just absolutely swamped with load, and centralizing that... Well, we had no problem with the CPU component, but we were reaching network bottlenecks in the single point of presence. So, we've now got the classic defense posture, that we distrusted, and we distribute the DDoS load that we're seeing when people come into WHOIS. Some of this, I think, actually is people having a go to see if they can knock us over, I mean that happens right? If you're a significant name in the community, people like to have a go. But some of it, it's not. It's because people are attacking somewhere else, and their firewalls have been written crudely to use WHOIS to find out what's going on. And if the attack profile's coming from Asian footprint addresses, they're gonna come knocking on our door. "What are you doing?" 0:10:35 George Michaelson: Well, unfortunately it's not us, but nonetheless we have to sync the traffic. So, here's some signs of how that works. It's been really very, very nice. We can actually get up to about 6,000 queries a second in this, and sync them in the US rather than having to deal with them in the master service in APNIC. We're also working on a quite radical shift in our systems architecture. ARIN and RIPE NCC both led the way in a really big reconsideration of internal architecture work. ARIN had a complete rewrite of all of their services in Java, and then picked up on the REST model of service delivery, and they've done an amazing job of converting to a consistent access method. That's actually really good for members, because it means that in your NMS, your operational systems, you can now write systems against a really consistent interface to do transactions with the registry. The NCC are doing a similar thing. I don't know if Axel's going to talk about it, but we picked up on that, and we thought we have to look at this. 0:11:35 George Michaelson: So we've been re-architecting our design, to try to work out how to do a better job of handling the information. Message buses, message passing, eventual consistency. They're quite fundamental concepts in computer science that are very applicable to running distributed, highly reliable services. I'd invite any of you who have problems in data management in a large software system, to think about architectural consideration. It's kind of a pain to have to do this. You have a working system, re-writing it, what's wrong with FORTRAN? Why can't we stick with FORTRAN and COBOL solutions? But every now and then, you need to think about coming from the 1960s into the 1980s and that's pretty much what we've been doing. We've also been looking at our infrastructure and made the virtual platform a bit easier to run with. 0:12:23 George Michaelson: We've done quite a lot of work in disaster recovery and auditing, that was a collaboration with the NCC a number of years back. We shared efforts in designing a DRP analysis, thinking about business continuity, and we've been applying that into our deployment. So, in accountancy and transparency, we've had quite a lot of focus on this, and it's partly because things like ICANN and the other RIRs being asked to demonstrate the accountability measures, and it's also about the IANA Stewardship, which put questions on the table. So, we've done a lot of work to try and document what we think state of play is and work with the other RIRs. And the NRO website actually has quite a lot of information about this. At APNIC, we did ISO 9001 compliance and we've been getting regular audits against that. It's quite nice. It's a legitimating process around what you actually do. 0:13:21 George Michaelson: Quite a lot of the compliance tests, they put barriers in place that you have to try and reach goals, but ISO 9000 has a quality that says, "Look, let's just be honest about what you actually do." If you make a declaration about that, we can then say, "Are you doing it or not?" And that's gotta a really nice concrete quality, you don't have to aim for future outcomes. You just are honest about what you do and do the best you can. So, that's worked quite well for us. So, we also had quite a lot of work on our fee schedule and activities. I can't speak in any great detail to the breakdowns here, because I'm just not even briefed to talk to this, but we've been working a little on, improving transparency in our intentions around the way we use the funds, and it's worked quite well. It's encouraged a better dialogue about the correct way to use the finances. 0:14:17 George Michaelson: So, if I move on, the training activities been quite high, we've held 76 courses in 29 locations and about 2,300 people have been trained in the year. We mainly do face-to-face, but we also have a large video archive, so people can do self-based work offline, which is really quite popular. Travel in the Asian footprint is very, very difficult. I imagine it's a similar issue here, so this has worked quite well for us. Network Operation Group support in the region has been good. We've actually upped activity quite a lot. There's been quite a few new NOGs established in the region. We attend, we do support, we do training and outreach and we provide the host master and face-to-face services there. Some of the things that you don't think about at the time that crop out here are quite interesting. We have to have a sense of high trust membership. 0:15:12 George Michaelson: So, we actually need to do sort of like two factor proof of who you are, to give you permission to do things like electronic voting, and if you don't come into process with this often, we don't see you. But if you go to a training event that we're holding in your economy, maybe in Dhaka or somewhere in Malaysia, that's an opportunity for us to do 100 points tests against your business papers and passports, which means we can bring you into process more fully, which means you can vote online. So, there's a whole range of things we get from actually improving the interaction with the membership at these meetings. Here's just a breakdown of some of the NOG events that we've been doing, I think. We also have a community development activity that's been going on. We got into an MOU with ICANN, to improve deployment of the outreach service in the Asia Pacific. 0:16:00 George Michaelson: We already had a lot of work with the NCC, with K, ISC with I-root, NANOG with... ISC with... NANOG with I, ISC with F, and the NCC with K, but L, the ICANN root is a lovely, lovely design solution. It's very small, very, very easy to deploy in distant locations, so we did a bit of work on that, had a fellowships program, and we also picked up on the problem of succession planning. There's an awful lot of old people in the business and we need young fresh minds. I say to people, "We're zombies and we need fresh brains." So, we've been trying to encourage young people to get involved in our process, with a view to training them up to participate in policy development in future years. So, the policy development, well, it's a wheel of life, you go through a consensus process, you go through a development process, and it's really quite central to what we do. We've tried to get some sense of purpose and process together and we got this diagram to encapsulate information flow. There's been quite a few improvements, actually. We did our number transfer proposal. We've got Prop 109 looking at the re-allocation of Net 1. We've got distribution of returned addresses that's had the consequence of people being entitled to come back for more addresses. 0:17:22 George Michaelson: We also worked on a way to try and judge consensus different. The hum mechanism, the voice mechanism, it can be quite confronting, and we have a problem in our community, the younger participants are not always very confident, it can be hard to speak and participate. It kind of goes against their cultural norms, so we thought about tools that might encourage people to register their view against emerging consensus. And we've got quite nice system now that gives a graphical representation of the change in the consensus as the conversation goes on. And the person on the podium, who's maybe calling a consensus can tune the question and invite the floor to participate, it's quite dynamic, it's interesting, it's changed the way people engage, our thinking about using it for SIGs in future. 0:18:12 George Michaelson: You have to be a little cautious of taking a tool and turning it into something bigger than it is. I think real consensus has to be established in process and on lists as usual, but this is a nice way of exposing how people feel about meeting. And in particular, it empowers remote participants. We've had a huge time delay with our video outreach meetings, often 15, 20 seconds, which means it's very hard for them to meaningfully engage in a vote or an acclamation. Sorry, not a vote, we don't vote. And the process is a consensus measurement. Online, I can get a very quick signal, "It's time to participate," and we can get a sense of convergence from remote participation much more smoothly. 0:18:53 George Michaelson: On events where we've been doing our usual regional meetings, we've got two conferences a year. So, SIGs in the region, we've had quite a few different activities focusing on that, we've been doing a lot of training, 16 economies in the region, 24 presentations, media coverage, did workshop with the ITU, and we're in quite active engagement with our regional task force providing secretarial support and also engagement to try and improve SIGs uptake in the region. We've been recently picked up on the security issue, we've hired a specialist, Adli Wahid, who used to work in the Malaysian CERT. So it's possible some of you from the ... LEA and CERT context would know him. And he's been doing a lot of outreach, he is also on the Board of FIRST. And I think our engagement there, has actually improved markedly. I don't know about the other regions, but the primary consumer of WHOIS in our region is now law enforcement agencies, they are essentially our lead customer. And so, we have think really strongly about how we train these people to understand addresses, understand to address management and understand the tools. And I think a direct engagement is going to work very well for us. 0:20:10 George Michaelson: So, another thing on Adli's plate, is trying to improve uptake in RPKI. You know how I said it's competition about membership, well it's a competition about RPKI as well. My colleague, Axel, is in the lead because he's got Alex Band who's been working on promotion very, very, very hard. He's done an amazing job of engaging with the community in the RIPE region. It's reached a point that he doesn't have to do any more pushing, the sustained rate of uptake, I think is one or two a day. I don't think they'll stop engaging with people, but they've really achieved critical mass. We realized we've done next to no promotion. I should add, by the way, that LACNIC also have done an amazing job here. I think in Ecuador, in particular, you did the whole of the economy, RPKI outcome. Fantastic. So, Adli has been engaging, we now have this Ready to ROA! Campaign. ROA! To try and get out there and get some minds into this, and it's started to work, we've had an increase in uptake. Giving away a T-shirt is an amazing motivation in our industry. It must be the cost of doing washing that makes everyone want to get free T-shirts. 0:21:16 George Michaelson: Labs: Well, this is dear to my heart. I could have got rid of all the rest of the slides and just talked about this one, but that wouldn't have been very fair. But we're doing a lot of measurements and I'm actually going to talk about that in the other room very soon actually. So, I won't go on about them now. There's another initiative, which is really worth flagging and that's, it's very similar to the FIRE initiative, which runs in your region, and it's about technical innovation and support in the Asia Pacific footprint in emerging internet economies. I'm very, very proud of being on one of the committees that helps approve applications for this. And I think it's just stunning to get people saying, "Look, I could do this amazing thing with ICT if I just had a little bit of help." We get to help them and then they come back next year and they say, "I can do a lot more if you give me a little more." We had a repeat application from an organization in [0:22:12] ____ R2 did an amazing job of Wi-fi, low-power network distribution in their community. Really great stuff, lots of education, lots of work on women and children's health initiatives, which I think are very, very important. I think FIRE is doing very much the same thing. Great program. 0:22:28 George Michaelson: So, finally, in the collaboration space, the global cooperation is really very solid. There's a lot of converged behavior, and we understand how to talk to each other, we understand how to talk into intergovernmental contexts, how global outreach works. I think it's going okay. 0:22:48 George Michaelson: The IANA's stewardship transition process has been very committed and we've participants in CRISP. These are the CRISP people who're working from our region along with the other participants. I'm sure some of them will be familiar names. I could see one name from your own region. I recognize two, three. So, it's working well. And for community engagement, we kind of really upped our activity and worked out how we have to get out and talk to people and spread the word in a number of different ways. So, one of them is the blog, and my social media contact would be very cross with me if I didn't invite you to think about guest blogging. We welcome input from all the regions if you've got anything you'd like to tell the community, please get in touch with us and we'd be happy to put it on our service. 0:23:40 George Michaelson: As well as improving communication, we've gone into social media in a big way doing a lot of Twitter and Facebook. We've got a video library that's growing quite large. And you're all invited to our next meeting in Jakarta. So, that's it from me. Thank you. [applause] [background noise] 0:24:21 Owen DeLong: Good afternoon, I'm Owen DeLong from ARIN, I'm on the ARIN Advisory Counsel actually, I'm not RIR staff so it's a little unusual for me to be giving this presentation, but bear with me. In 2015 we've increased our focus on customer service, we've continued working on IPv4 to IPv6 transition awareness, and I personally hate that word 'transition'. I think we need to talk about IPv6 in terms of deployment and recognize that v4 is pretty much staying where it is for awhile. Continued participation in internet governance forums, yeah da, yeah da, all the usual. 0:25:04 Owen DeLong: Trends, we've got a lot of new customers making use of our /24 minimum policy. Earlier in the year, or actually late last year, we actually took out all of the large aggregate requirements in IPv4 policy, and put the minimum allocation unit for all policies down to /24. That's been working out very well for us. Many first time requests new to the registry system, and a lot of them are up-streams that are saying "Hey, we don't have any space anymore, go get your space directly from the RIR", and we're seeing more and more transfers, of course. 0:25:43 Owen DeLong: In terms of operational improvements, we did another round of customer satisfaction surveys, and we're working on integrating transfers better into our ARIN online website. The current IPv4 inventory is dwindling; 0.15 /8 equivalents at the time the slides were written, having that stand around 0.12 now last I looked. In reserve inventory we've got approximately 22 /16 equivalents; in quarantine a /10 set aside for a specific policy-related to v6 transition, and 218 /24's set aside for micro-allocations to critical infrastructure. ISP members with v4 and v6, you'll notice that the number of dual-stacked members is increasing, the number of the v4 only members is decreasing, and we're getting very, very close to the point where those two numbers are gonna cross and more people will be dual-stacked than v4 only. 0:26:51 Owen DeLong: RPKI usage, you can read the numbers for yourself, the slides I think are gonna be on the website if they aren't already. Transfers to specified recipients, 232 prefixes ranging from /24 to /12, 19 autonomous system numbers and the transactions are often arranged through IPv4 brokers. In terms of in Inter-RIR transfers, 157 prefixes ranging from /24 to 13, and all of those have been between ARIN and APNICs thus far. 0:27:29 Owen DeLong: We've got some policy proposals in the works, most of them are pretty routine. Change utilization requirements, we've already discussed earlier in the RDP meeting. Remove operational DNS text, that's mainly cleaning up non-functional language that doesn't really do anything out of the NRPM. Modification to the CI Pool Size is awaiting Board ratification, but it was adopted by the community; that's the one we talked about in the RDP working group where we're moving that from being a 16 reserve for critical infrastructure to a 50. The others are newer and they're just getting started and under discussion. We've had a couple of policy meetings, our next one is in Montreal, Quebec, you're of course all invited to come join us in Montreal. And with that I'll turn the mic over, and the next presenter can... [applause] [pause] [background noise] 0:28:55 Diego Mena: Good afternoon, everybody, and my name is Diego Mena. I am the CFO of LACNIC. This is my first time in Tunis, and in an AfriNIC meeting, I'd be very happy to be here, and I congratulate AfriNIC for its tenure... Well, let's go to see some background information about LACNIC. We are one of the world's five RIR, coverage area 33 territories. There are two NIRs in our region, one in Mexico and the other in Brazil, and NIR's members are LACNIC members. We have over 4,500 members, 41 full staff from different kind of countries, nine countries and we have a new CEO since last February. Just to see membership growth, the above graph shows membership that is growing with a high rate for the last years. 0:30:21 Diego Mena: Last year in particular, the increase was about 1,000 members and reaching 4,500 members at the end of May. The graph below shows the breakdown by category, and the blue line shows the micronismal ISPs category. Resource update, we have a policy in force about related with IPv4 depletion, we have just finished and activated the phase two last June, one year ago, and we are currently in the phase two. The phase two we have two /11 blocks, reserved one for self landing, and the other for new members only. For both blocks, there is a maximum allocation of /22 and minimum of /24. Organizations may request additional resource every six months until the /11 block is exhausted, and resource allocated by the IANA to LACNIC will only be allocated as set for as in phase three for new members only. 0:31:51 Diego Mena: Some graphs about IPv4 assignments, the left shows IPv4 /8 per year, and one is cumulative figures. Our current inventory, IPv4 inventory, is 0.17 /8. This graph is linear regression model for phase two, as you can see in the pie chart, we have just assigned 59% of the /11 block, basically to ISPs, and we have still available 41% today of the phase. According to this graph, we estimate that the phase three will read trigerred by the end of February or March. Some policy update summary, after the last AfriNIC meeting, we have implemented a policy, and there were upon the table three policy proposals in LACNIC23 in Peru two weeks ago. One of them reached consensus and it is in the last call for comments, and the other two return to the policy mailing list to further discussions. IPv6 on security where we have carried out some workshops IPv6 on security workshops in, Trinidad and Tobago, and Costa Rica, and also some training courses. 0:34:03 Diego Mena: Last year we launched a new online training platform, called LACNIC Campus, and this year we have just launched an IPv6 online course and a Testing v6 Tutorial in LACNIC that is going to be available online in less than two months. Other initiatives, the first one is LACNIC work, that is a Computer Security Incident Response Center for LACNIC members, and the other ones are related with IPv6, Certiv6 and Testing v6. The first one, Certiv6 is a generic methodology, designed by us and Uruguayan Software Testing Center to ensure compatibility, for equipment and application software, in the new protocol. And Testing v6, this is the name of several courses that are available on how to implement this methodology and test equipment and application in IPv4, IPv6, and dual stacked environments. Some graph from the NRO webpage of IPv6 deployment, the percentage of members with both IPv4 and IPv6 in each RIR. More graphs, evolution of in-use assignments, the blue one is allocation, the red is announcements. 0:35:57 Diego Mena: Some regional success stories. Peru, Brazil, Bolivia, RPKI adoption rate break down by RIR and in this topic, LACNIC is leading by 24%, considering IPv6 route-certified. Internet Governance and Development and Community building, we have an active role as RIR in the IANA function stewardship transition process. We will have in August in Mexico, the LACIGF8 that is a preparatory meeting for the IGF in Brazil. We continue with AYITIC project that is an initiative aimed at expanding Haiti's digital capabilities and we also continue with the FRIDA project that is the Regional Fund for Digital Innovation in Latin America and the Caribbean. I would like to highlight contribution of [0:37:23] ____ SIG Alliance, ISOC, IDRC and also the other RIRs like APNIC and AfriNIC. 0:37:36 Diego Mena: Finally, our meetings two weeks ago, we had finished LACNIC23 with almost 500 attendees. It was an excellent meeting. Upcoming meeting is LACNIC24/LACNOG 2015 in Bogota next September and next year, our annual meeting in Cuba. So, you are invited to Bogota and La Habana, Cuba. So it is finished. Thank you very much. [pause] 0:38:38 Axel Pawlik: I can do it. Good afternoon, Axel Pawlik from RIPE NCC. Quick update from our side of the world. Well, lots of things are going on, I will keep it relatively short. The slides are online so you can have a detailed look there. Of course we have a nice new website to look at. Membership is growing like crazy over the last couple of, many months by now. Yeah, it's IPv4 run out, I think you've heard it before what's happening here. George mentioned that. Same effect with us as well which is great. More members, more or less same budget so everybody pays a little bit less. 0:39:17 Axel Pawlik: We have over the last five, six years started to expand a little bit into presence in the Middle East and in the Russian area roughly. We have then added some staff there as well. We have an office in Dubai, small office with two Arab-speaking people and a couple of others there. We have two Russian-speaking folks based in Moscow. Basically, the idea is to engage with all members within the region a little bit more and more consistently, talk about contact engagement members but also of course what is important is to talk to regulators in governments in those regions as well and the wider communities just beyond just our members. 0:40:03 Axel Pawlik: We have been starting and contributing to larger regional meetings like the Eastern European network operating group ENOG, in Middle East as well. What we have started now since last year is doing even smaller meetings, just trying to galvanize the local, national communities in a couple of countries where we would not usually go with the RIPE meeting or haven't gone in a long time. So, 2014 I've seen Bulgaria, Kazakhstan, Azerbaijan and Iran having visits from us. This year we've already done Serbia, Georgia, we are looking forward to Armenia and there are some other things planned as well. We also do even smaller things like member lunches when we go over the training course. We bring a couple of people more and invite people in for lunch that are not attending the training course. Otherwise, I think what George said there is very important to us as well. We want to meet with people face to face and those training courses are just brilliant for that. 0:41:09 Axel Pawlik: Hey. And yes, we have still some IPv4 addresses left, that is probably why we're seeing the increase in membership, people come directly to us when they can't go through the ISPs. Of course some just set up a couple of companies and give the last /22, so each of those companies and then merge afterwards. That is sort of acceptable by policy, it's not the intention and we are looking at ways to avoid that, discourage that. Transfers are increasing, 919 in 2014 and so far in this year, already more than 1100 so it is what we expected more or less. We thought we wouldn't need much policy development process after we run out of IPv4 but couldn't be further from the truth, there's lots of things going on. Many things are focusing on IPv6, of course, but also so cleaning up our act bureaucratically or slightening, getting rid of bureaucracy there in the IPv4 field. IPv6 status, you've seen a couple of slides already. It's looking quite good, lots of members have IPv6 address space, not all of them are using it of course, so we're trying to push that a little bit as well. We have now, in house, a focal point. Natalie is looking at all our IPv6 efforts in house and trying to coordinate it as well, in parallel to the trainings that she does. Also IPv6 world shows we've been doing traditionally in the Middle Eastern region, quite a lot of them and we've planned another 10 for this year. 0:42:57 Axel Pawlik: Now, as IPv4 addresses become more valuable, we see more attempts to hijack them and to sort of creep your way into hoarding them. We see rather sophisticated methods and rather blunt methods as well. So what we need to do is to keep on our toes and follow up with those things and try to prevent that and occasionally refer cases up to police forces as well. But it's a lot of work, but it's a lot of good work as the correctness of our registry is very high, it's the highest point of our priority list actually. So what we have started last year very carefully is to do assisted registry checks. Basically it's some sort of lightweight audit prepared by us, and then we contact our members and say, "This is what we have on your data. Is this correct? Would you care to adjust some of that?" And amazingly, those activities are extremely popular. And we didn't quite expect that in the beginning. We thought it would be more seen as a bit of a nuisance, but not really like it. The last RIPE meeting we had a couple of weeks ago, we had more than 40 done on site actually. People were queuing for them. 0:44:07 Axel Pawlik: RPKI certification, you heard it already, it's going rather well thanks to the efforts that we are doing in terms of explaining what it is and why, what you might want to need it and how to do it and also have a nice interface using it. The RIPE NCC Academy, yes our trainings are extremely popular and people want more and more and more, but we can't do more and more and more. We only have that many people. So what we have started is an online training course giving out courses, giving out certificates called the RIPE NCC Academy. Now the new thing out there IPv6 Training Course. 0:44:46 Axel Pawlik: We need to talk to our members to understand what their needs are, we do this regularly, we do similar as APNIC does. Big surveys every three years and in between we do smaller ones. I spare you all the details on that, but basically we get from that what is needed and we bring that back to the members saying, "This is what we read from this, is this correct? This is what we have been doing, this is what we continue to do, and we'll do a next big survey next year as well." One of the things in the surveys always was, "Your website sucks, it's slow and we can't find stuff on it." And so what we did is, we redesigned it and repopulated content. It's a bit sleeker now, the search works much better, and generally the feedback is relatively positive. So please, do have a look if you care. 0:45:44 Axel Pawlik: Policy highlights, like I said and again I just click through this quickly. Most of it is around transfers, interregional transfers, and simplification of the whole application process in house as well. So we don't need more of that. Legacy. Yes, legacy is interesting we have by now, two years ago, agreed to the legacy resource holders on base that they can participate in full RIPE NCC services, of course by becoming a member if they're not yet already one, or to go through sponsoring LIRs or have direct, not membership contract with the NCC or just don't do anything. That also is quite a bit of work, finding those people and contacting them and getting them into those things. 0:46:35 Axel Pawlik: IANA Stewardship we heard a lot about already, it is higher on our agenda. Outreach apart from that, IGF is important, the regional IGFs as well. Other industry partners we have a whole big business event coming up at the end of the year as well, beyond the IGF. We do regular roundtable meetings for Goverments and Regulators twice a year roughly, and also similar to what I think also George said there. The law enforcing community, law enforcement community is very interested in what we are doing and they're using our services quite a bit for their purposes as well. So we try to reach out to them and help them with that. And of course, next RIPE meeting's coming up in Bucharest. I hope to see all of you there or at least a large number. And that's it from me with this one. [applause] [background conversation] 0:47:41 S1: So good afternoon, my name is Axel Pawlik I'm the chair of The Number Resource Organization this year, so I'll give you some update about that as well. And of course that is a rotating task that we, that you see also I'll do. So what is the NRO? The NRO is basically a loose corporation vehicle by the RIRs. It's not incorporated. We try to coordinate as much as possible, the mission statement here, "To be the flexible global leader for collaborative internet numbers and also the management as an essential element of an open, stable and secure internet." Then I need to take a new breath. So, basically, that's more or less what we all want to do, and the NRO wants to be, so helping that especially. A couple of things about it. It's based on the MOU the NRO that we signed in 2003 many, many years ago. It's an association and unincorporated. We coordinate ourselves. We also want to provide a single point of contact to the outside world, talking to all of the RIRs at once. 0:48:50 Axel Pawlik: Of course, we provide and support the coordinated registry system there, promote and support and defend the multi-stakeholder system. Joint activities among the RIRs is done mostly within the NRO. I mentioned that already. Of course, we also fulfill the role of the other supporting organization within ICANN. Coordination, global collaboration, governance coordination, monitoring Contributing to Global Internet Governance Discussions is what we are doing there as well. Those are the people within the NRO at this point in time. 0:49:30 Axel Pawlik: It's me as a Chair, Oscar as Secretary, John as Treasurer, Paul on holidays and Alan on holidays as well. Basically we don't have any particular function within the group, but they are very active and basically we can hand off stuff to them to do. The NRO Secretary is hosted by LACNIC at this point in time, but also, we have a continuing, ongoing Executive Secretary there... for this. He's formally employed by APNIC, but the cost is split among the RIRs. There are a couple of coordination groups for communications for public affairs, for engineering and around the registration services areas. Finances, like I said, we split the costs the we incur through the NRO mostly: Travels, communications, contributions to the IGF, contribution to ICANN, and the staff cost there. The budget, in general, the cost is split proportionally, determined every year at a new time based on the Registration Services Revenue from the, within the RIRs. 0:50:43 Axel Pawlik: A couple of other information. On the website, lots of things. Helpful occasionally is the Comparative Policy Overview that we have there to see what RIR does, what and which way? Policy wise, we have the governance matrix that we are still working on and have been working on for a long time. Basically, laying out how do the RIRs do their work in terms of corporate governance, who is doing what? Again, in which way that is important for ourselves. We occasionally find little holes that we can still improve our own workings. Also, it is increasingly important for the outside world that doesn't understand what the RIRs are, and what they do with the ICANN and the IANA Stewardship transition process. 0:51:28 Axel Pawlik: Everybody is talking about ICANN accountability. The RIRs are seen somewhere in that ICANN sphere as well. And then people say, "But RIR accountability, what is that?" So, this helps with that a bit as well. We hope it does. [background conversation] 0:51:53 Axel Pawlik: I won't talk about IANA stewardship transition. I've done that many times already. We participate in the cost community work group within ICANN on ICANN accountability as well, a little bit hands off because we have not that much to do with ICANN. But we want to make sure that they don't go into any strange areas that are counter to our interests, of course, or your interest there. We've done a regular review of the ASO, I think a couple of years ago already. There were a couple of recommendations we implemented, improvements there as well as we should. The Internet Governance Forum is coming up again. We went to the last one in Turkey. The next one, of course, we are focusing on that one now, is in Brazil at the end of the year. We say that the Internet Governance Office is the area for internet governance activities for the RIRs. So we focus very much on that. And that's it for now. I'll remain here until tomorrow. You have ample opportunity to ask me questions in a moment as well. Thank you. [applause] 0:53:11 Mark Elkins: No Master of Ceremonies today. Hi. I'm Mark Elkins. You may have seen me before. I am the ASO representative of the Board and these are my slides. The slides were taken mainly from slides we've previously done. I don't know how many people in the audience haven't already seen, more or less, what these slides are, etcetera. So I think I will go quite quickly through the first few. But, what are all the acronyms? What do they all mean? You've been listening to them already, so hopefully that's fine. Things that we do, appointments to the ICANN Board, and other ICANN groups, and we look after global policies. That's the same slide again in more detail. 0:54:14 Mark Elkins: Who's members of the ASO? AFRINIC, APNIC, ARIN, RIPE NCC, and LACNIC, of course. And Axel has gone through most of this already. So basically the ASO is where the RIR system meets the ICANN system, and there's mention of the NRO, which we've gone through already as well. 15 members are on the ASO, so that's three from each of the five regions. Two of those positions elected by the RIR community and one appointed by that RIR board. Normally a term is for three years, and different RIRs obviously have different processes or procedures for electing or appointing members. The characters are in AfriNIC, myself, Fiona and Douglas. I have taken over from Alan Barrett as he is now the CEO, so I've been doing this job for about six, eight weeks, and there hasn't been too many other changes in the characters. The first name against each RIR is the board appointee. And Louie Lee is the Chair of the ASO. And Filiz is the Vice Chair. Last name. 0:55:53 Mark Elkins: So work that's happened in the last six months since Mauritius... Oh! Would include for example looking after two of the seats. Seat nine and seat ten of the board, which are two seats staggered each by three years. So the ASO looks after nomination committee, appointments, the nomination review teams as well. So seat nine, my understanding is Ray Plzak is still there and seat ten is also occupied. Seat nine was up for reappointment, or is up for reappointment. The whole process has been completed. Elections were held. The name was published and that happens in October. The change of seat from Ray Plzak to Ron da Silva happens in September this year. So congratulations to Ron da Silva. That has been officially announced, I believe. Other people have other appointments, or have been appointed. So we have Hans Petter Holen on NomCom... And these are ASO AC appointed people who are on the cross-community working group, which does include Fiona. 0:57:50 Mark Elkins: Global Policy Processes. Global policy is an independent Number Resource policy that is accepted in totality by all five RIRs and obviously therefore requires action by IANA or another ICANN body. Must go through the policy development process separately in each region and reviewed by the NRO and ASO, ratified by the ICANN board. There are no current global policies at the moment on the table. Additional information, address aso.icann.org is the place to look at more information about ASO. And the NRO provides funding for the AC's activities and NRO Secretariat. It's almost the same slide as Axel had, is German Valdez. Thank you. [applause] 0:59:07 Pierre Dandjinou: So I'll call Pierre Dandjinou and then we will take questions. 0:59:23 Pierre Dandjinou: Thank you very much. I'm Pierre Dandjinou, VP ICANN... IANA activities update. My colleague, was supposed to be coming here to deliver these updates. Unfortunately, she had a very last minute issue to deal with and she could not do it. But since we are covering Africa, we are just doing these for her. Which means that of course if there are any questions, definitely I'll just take them back to to her. But I think briefly, the updates are going to be done in a kind of four points, quickly. Quick on the policy implementation, and then on the DRP implementation, the audits that are conducted and then the performance reports. So basically, three quick items. Of course the... What are the IANA É and mainly that is now working according to the global policy and as actually been discussed now in the community. So what was done so far, was to implement some of those policy, a kind of advise that was received. 1:01:01 Pierre Dandjinou: It has to be noticed that the IP, the preference allocation was done twice in the year, 1st of March and then 1st of September. And here briefly, you have what has been allocated for as of 2nd actually of March. And basically this is about the timeline, but also É a software thatÉ have to do this. Of course the general, the allocation now is provided there on the screenshot, and information is available on this, on the website as well. So the March 15 allocation under the Global Policy as well, what was made, and here is basically what has been achieved. So É.. equivalent and each RIR received 524,288 addresses. So they are there where they allocate it, and that's called designation and the end addresses are available to each region. And then, to the AS numbers, the advice was to allocate AS numbers block to RIR. And as of September 14, IANA had 496, 16 bits AS number available. One of the advice was that, each record request block of 124 numbers, that is made up of a specified number of 16 bits and 32 bits as well. So since then, 297 of those has been allocated to APNIC, LACNIC and ARIN. They're still around 199, 16 bits ASN remaining. 1:03:22 Pierre Dandjinou: Now, on to the second part of which is the Registration Data Access Protocol, so quick update on that as well. It is according to RFC's 7.24 finding the Authoritative Registration Data service was published in March 2015, and the IANA Department completed the creation of registries those specified in the RFC. Now, they are currently working with RIR to design a process to add and maintain the RDAP entries in the relevant registries. RDAP entries applied to the following IANA numbers registries, and as the IANA IPv4 address space registry. The IPv6 global unicast address assignments and the autonomous system numbers. And the IANA IPv4 address space new registry look like this one. More information are there. Those were reserved, those are allocated, and also information on the WHOIS webfinder. And Katia provide more information under the website as well that's available for these details. 1:05:00 Pierre Dandjinou: Then apart from this... Okay. So let's go to the third point which is the audit. And the audit actually are kind of mandatory and recently ICANN retained the service organization control and this is as you see a tree, certification of each Domain Name System. Maybe, DNSSEC, actually. Root Key Signing system for the fifth consecutive year. IANA also completed the second SS tool audit which evaluate key systems used to support IANA transaction processing functions. They are also undergoing independent audit and out of those help IANA to perform what it has to do. And this is also based on the integrity and security services level of the IANA functions, so these are quite important. 1:06:06 Pierre Dandjinou: Those audit are conducted every year and of course help IANA monitor and improve the system. And then on the performance report quickly, again, there's regular monthly reports that is published about the performance. Performance standards of course were developed in conjunction with the community, so IANA abide by those, and also so far the IANA currently either meets or exceeds all those performance targets. Details of the reporting is there especially on some of the targets in some of the criteria. The allocation of the Internet Numbering Resources, this also provides you with kind of result as the what we might call the performance evaluation and you'll see most of those places where they did meet the targets... The details, I am not going to go through them but of course, this is available on the website. 1:07:30 Pierre Dandjinou: Also it comes with the Root Zone Management. Just have to bear in mind that there were recently a few requests that were processed. What's important here is the number of requests you have in yellow here and then the appropriate, the average processing time in terms of days. All details are there, of course one can also come back on those and explain. But basically, I think IANA try to perform it the way it has to be done. Also, it's the nutshell that is the kind of updates I'd like to provide and of course if there's any question I would just take them back to IANA and my colleague. And thank you very much. [applause] 1:08:38 Vymala Thuron : Thank you. I'll take questions before we break off for coffee. And then we will have the service updates. Sean. 1:08:51 Seun Ojedeji: Thank you very much. My question is actually to the NRO. It looks like... 1:08:57 Vymala Thuron: But I think that Axel has left. 1:09:00 Seun Ojedeji: Yeah, so. 1:09:02 Vymala Thuron: Okay, maybe Mark can answer. 1:09:05 Seun Ojedeji: Ah, okay. Alright, so what I need to know is, does NRO, do they make budgets? Do they do anything financials in terms of... Because I understand that there's contributions that is made by each of the RIR... 1:09:25 Vymala Thuron: Seun, excuse me. Actually, Axel is coming back so you can state your question to him. Thank you, Axel. 1:09:32 Seun Ojedeji: Yeah, that is contributions that is made by each RIRs and it would be good to know if the NRO does make budget for that for the spending and if they do audit. Of course I understand that NRO as a body is not incorporated, but do you actually do your budgeting and the auditing of spending? And are those available on the NRO website? Thank you. [background conversation] 1:10:51 Axel Pawlik: So a large part of the cost that is incurred through the NRO to the RIRs is a part of the ICANN contribution that has been stable for the last 16 years or 15 years, US $823,000, then there's bit of trouble for the Address Council for the secretary, there's secretary's salary that comes through APNIC to us. And those costs we split among ourselves changing every year. It's based on the revenue that all the RIRs have based on the registration services. And the reason I'm saying this is because, for instance RIPE NCC there's lots of other things as well so we're looking at that registration services.... revenue. And then we calculate the percentages and roughly I think for the RIPE NCC, for us it's...