- Legend
- Added
- Deleted
European Internet Registry:
Procedures for DNS Delegation
in the IN-ADDR.ARPA Domain
David Kessens
June 1994
Document-ID: ripe-105++
Obsoletes: ripe-105
ABSTRACT
This document describes the procedures for the
delegation of zones in European subdomains of
IN-ADDR.ARPA.
Introduction
The domain tree below IN-ADDR.ARPA is used to facilitate "reverse"
mapping from IP addresses to domain names [RFC883, RFC1033]. This
document describes the procedures for the delegation of zones in
European subdomains of IN-ADDR.ARPA.
Randomly Assigned Numbers
There are two groups of European network numbers: hierarchically assigned
numbers and randomly assigned ones. The hierarchically assigned numbers
are part of the 193.x.y.0 and 194.x.y.0 network blocks. All other
European network numbers, class A, class B and 192.x.y.0 class Cs are
randomly assigned.
Hierarchically Assigned Numbers
The subdomains of IN-ADDR.ARPA corresponding to the hierarchically
assigned network numbers are administered by the RIPE NCC. These
numbers are currently:
193.0.0.0 - 194.255.255.255
The other addresses are administered by the other regional registries
that might have other procedures for requesting a reverse delegation.
For clarity we refer in the procedures and examples as described below to
the 193.x block of addresses, although we could have as well used the
other block(s) that RIPE administers.
With the assignment of class C network numbers following RFC1466,
large chunks of the address space are delegated to regional Internet
Registries. The regional registries delegate blocks of class C net-
work numbers to local Internet Registries. In this way a hierarchy
in the address space is created, which is similar to the hierarchy
in the domain name space. Due to this hierarchy the reverse DNS map-
ping can also be delegated in a similar model as used for the
normal Domain Name System.
For instance, Abstract
This document provides guidelines to Local Internet Registries (LIRs) on the steps to take when the organisation operating an LIR changes ownership (due to a merger, sale or takeover) or stops serving entirely as an LIR.
1.0 Introduction Link: #1.0
2.0 LIR Ownership Change Link: #2.0
2.1 IP Address Space Link: #2.1
2.2 Service Agreement Link: #2.2
2.3 Change in Operating Organisation Link: #2.3
2.4 Contact Person(s) Link: #2.4
2.5 RegID Link: #2.5
2.6 Transfers of Address Allocations Link: #2.6
2.7 Takeover Fee Link: #2.7
3.1 Further Assignments Link: #3.1
3.2 Finance Link: #3.2
3.3 Transfers of Address Allocations from a Closing LIR Link: #3.3
3.4 Open Address Space Requests Link: #3.4
3.5 End Users Keeping Address Assignments Link: #3.5
3.6 Continued Internet Connectivity to End Users Link: #3.6
3.7 Discontinued Internet Connectivity to End Users Link: #3.7
3.8 Database Responsibilities Link: #3.8
3.9 Unassigned Address Space Link: #3.9 4.0 When an LIR is Closed by the RIPE NCC Link: #4.0
1.0 Introduction
When an organisation or company operating an LIR changes ownership status or stops serving as an LIR there are financial, IP address space and RIPE Database issues that need resolving. Therefore, the RIPE NCC has been delegated the complete class C
address space starting with 193. It is therefore possible to
delegate the 193.IN-ADDR.ARPA domain completely to the RIPE NCC,
instead of each and every reverse mapping in the 193.IN-ADDR.ARPA
domain to be registered with the InterNIC. This implies that all
193.IN-ADDR.ARPA delegations in turn will be done by the RIPE NCC.
Even better, since local registries usually receive blocks of 256 class C
networks from the RIPE NCC, the NCC can delegate the reverse
registrations for such complete blocks to these local registries. This
implies that customers of these service providers no longer have to
register their reverse domain mapping with the InterNIC or the NCC, but
the service providers have authority over that part of the reverse
mapping. This decreases the workload on the InterNIC and the RIPE NCC,
and at the same time improves the service a provider can offer its
customers by improving response times for reverse mapping changes.
In order to provide a reliable service some procedures have been agreed
and must be followed in order to avoid confusion and inconsistencies.
These procedures are covered in the procedure section.
The registration of the reverse zones for individual class C net-
works will usually be done by the registry administering the
class C block this network has been assigned from.
If the subdomain has not yet been delegated to the registry con-
cerned the RIPE NCC will register the individual networks. However
this service is only provided at a "best-effort" level and no ser-
vice guarantees are given. The local registries should whenever
possible provide this service locally.
Responsibilities for the DNS administrator of a reverse block delegation:
As with all domain name space, running the reverse server for class C
blocks does not imply that one controls that part of the reverse domain.
It only implies that one administers that part of the reverse domain. If
after repeated complaints the delegated name space is still not
administered properly the RIPE NCC has to revoke the delegation.
Before adding individual nets, the administrator of a reverse domain must
check whether all servers to be added for these nets are indeed set up
properly.
There are some serious implications when a customer that uses
address space out of the service provider class C blocks, moves
to another service provider. The previous service provider
cannot force its ex-customer to change network addresses, and
will have to continue to provide the appropriate delegation
records for reverse mapping of these addresses, even though
they are no longer belonging to a customer.
The registration of the reverse zones for individual class C
networks will usually be done by the registry administering
the class C block this network has been assigned from. The
registry will make the necessary changes to the zone files.
The registry will also make sure that the network objects in
the RIPE database for these networks are updated with the
correct "rev-srv" attributes.
In case the RIPE NCC receives a request for the reverse zone of
an individual class C network out of a block that has been
delegated, the request will be forwarded to the mailbox speci-
field in the SOA RR for the zone concerned and to the zone-
contact registered in the RIPE database for that zone.
The NCC also suggests that similar procedures are set up for the
delegation of reverse zones for individual class C networks from
the registries to individual organisations.
Procedures
The procedure for asking the reverse delegation of a block (256 C's) of
addresses or network (1 or more C's) addresses is quite similar but there
are some differences. Therefor they are described as one procedure with
clear remarks when something only applies for block or network delegations.
Note that we will be a little bit more stringent on the rules for block
delegations since we need to be sure that other people can rely on you
for proper operation of the DNS system.
Above procedures are defined to ensure the necessary high availabil- ity
for the reverse domains, and to minimise confusion. The NCC will ensure
fast response times for addition requests, and will in principle update
the 193.IN-ADDR.ARPA domain at least once per working day, if needed. Any
problems regarding the reverse zones in 193.IN-ADDR.ARPA should be
reported to <[email protected]>.
1. We only reverse delegate when all addresses are assigned to you.
2. Your nameservers should be configured and running and should have
good reachability on the internet. Nameservers for block delegations
must meet similar connectivity requirements as top-level domain
servers.
The NCC recommends to use the following timers and counters (as
advised by RFC1537):
28800 ;refresh period (8 hours)
7200 ;retry interval (2 hours)
604800 ;expire time (1 week)
86400 ;default ttl (1 day)
It is mandatory for network (C) reverse delegations:
- ns.ripe.net is NOT one of the secondary/primary nameservers
- at least two nameservers should be used
- We need a RIPE database 'inetnum' object with 'rev-srv:'
attributes for the name (not IP address) of each nameserver.
It is mandatory for block reverse delegations:
- ns.ripe.net is one the secondary (never primary) nameservers
- at least two other nameservers that don't reside on the same
ethernet are required
- Operators of the primary nameservers should be familiar with
RFC1537 and this document
- We need a RIPE database 'domain' object for each delegation
with 'nserver:' attributes for the name (not IP address) of each
nameserver
3. Send an E-mail request to <[email protected]> with:
- In the header (or body if not possible) of your E-mail message:
X-NCC-RegID: Country.RegistryName
This is not required, though easy for keeping track of the
requests. Of course, we don't need your local registry ID if you
are not from a RIPE local registry.
For network (C) reverse delegations:
- We need a RIPE database 'inetnum' object with 'rev-srv:'
attributes for the name (not IP address) of each nameserver
For block reverse delegations:
- State in your request that you know about RFC1537 & this document
- A RIPE database 'domain' object for each delegation
with 'nserver:' attributes for the name (not IP address) of each
nameserver
4. Your request will first go through to an automatic checking program.
The program will check your zone files and report you about errors
(that should be fixed), warnings (that you might want to change), or
that no errors have been found. If errors are found, you will be
asked to fix them and resubmit your request and the automatic checks
will be done again.
If no errors (warnings are allowed, but we strongly suggest that you
at least take a look at them) are found your request will be
acknowledged and your request will be forwarded to the person in
charge of the reverse delegation requests. He/she processes the
request further. If no additional problems are found the object will
included in the database and the block/network reverse delegated.
You will always receive an acknowledgment when the delegation has
been done or an explanation why not.
Example of a network delegation request:
From: "Anne X. Ample" <[email protected]>
To: RIPE Hostmaster <[email protected]>
Subject: LONGACK 2.1.193.in-addr.arpa delegation please
Please delegate 2.1.193.in-addr.arpa as specified below.
Thank you!
For the AMPLE Corporation
Anne X. Ample
inetnum: 193.1.2.0 - 193.1.3.255
netname: AMPLE
descr: AMPLE Corporation
descr: Amsterdam, Netherlands
country: NL
admin-c: Anne X. Ample
tech-c: G. E. K. Ample
aut-sys: 4711
rev-srv: ns.ample.nl
rev-srv: ns.elpma.ln
changed: [email protected] 930101
source: RIPE
Example of a block (256 C's) reverse delegation:
From: Marten Terpstra <[email protected]>
To: RIPE Hostmaster <[email protected]>
Subject: LONGACK 202.193.in-addr.arpa delegation please
Dear NCC people,
I have read and understood ripe-105++ and RFC1537.
Could you please delegate 202.193.in-addr.arpa as specified below.
Thank you!
Marten Terpstra
domain: 202.193.in-addr.arpa
descr: Pan European Organisations class C block
admin-c: Daniel Karrenberg
tech-c: Marten Terpstra
zone-c: Marten Terpstra
nserver: ns.eu.net
nserver: sunic.sunet.se
nserver: ns.ripe.net
changed: [email protected] 930319
source: RIPE
Some notes on the automatic checking program:
You can use some keywords in the 'Subject:' line of your E-mail to
control the checking process. The use of the LONGACK keyword is very
recommended. For changing an existing delegation put the keyword CHANGE
in the 'Subject:' line of your E-mail message.
HELP - will send you this document
CHANGE - is needed if you want to change an existing reverse delegation
LONGACK - will give you the most verbose output as possible
TEST - will only test your zone files without actually doing
the request
When you want to to a request for a block delegation and you want to know
if there are already reverse zones registered within the zone of the
requested block delegation, just send in your request and you will
receive an error report that includes a copy of our zone file regarding
this zone! 2.0 LIR Ownership Change
In the case of an LIR ownership change, the LIR should contact the RIPE NCC at [email protected] Link: mailto:[email protected] .
Only registered LIR contact person(s) can discuss the change of an LIR ownership with the RIPE NCC.
The following steps are required to change the organisation operating an LIR:
1. Clarify the type of change:
A takeover of one LIR by another LIR, closing one of the LIRs.A takeover of one LIR by another LIR, both remain open.A takeover of an LIR by a non-LIR.
2. Outline the details of the change, stating:
The reason for the change of organisation.The name of the company/companies involved.The number of LIRs affected by the change.The RegID(s) of the LIR(s) affected by the change.
3. Present the following documents to the RIPE NCC:
Confirmation from all parties agreeing to the change (See section 2.3 Link: #2.3 ).Updated list of contact person(s) (See section 2.4 Link: #2.4 ).Updated billing e-mail contact details, including any changes to VAT number.A new service agreement, if applicable (See section 2.2 Link: #2.2 ).Legal documentation supporting the name change, if applicable (See section 2.2 Link: #2.2 ).Overview of utilisation in all allocations (See section 2.6 Link: #2.6 ).
2.1 IP Address Space
Following any type of change (such as mergers, acquisitions or takeovers) of an organisation operating an LIR, the RIPE NCC will review the status of any IP address allocations that are held by the new organisation.
2.2 Service Agreement
When an organisation operating an LIR changes ownership, a new service agreement may need to be signed. The RIPE NCC will need to request a new service agreement from the new owners if:
The organisation operating the LIR changes name, orThe LIR wishes to change their RegID.
The registration documentation from the relevant Chamber of Commerce, or its country equivalent, supporting the name change must be submitted to the RIPE NCC.
The Standard RIPE NCC Service Agreement is available from the RIPE Document Store at:
http://www.ripe.net/ripe/docs/service-agreement.html Link: https://www.ripe.net/ripe/docs/service-agreement.html
If the organisation operating the LIR does not change its name and keeps the original RegID, the LIR can continue operating under the same service agreement.
2.3 Change in Operating Organisation
In cases where an organisation operating an LIR takes over one or more LIRs, confirmation of the takeover from all parties involved or their legal successors must be included.
2.4 Contact Person(s)
It is very important to notify the RIPE NCC, if there is a change of contact person(s). This is essential, as only registered contact person(s) can submit Internet resource requests to the RIPE NCC and provide updates to our internal registry files.
If the contact person(s) of the affected LIR has changed, the RIPE NCC may adjust the Assignment Window of the LIR until the contact person(s) is up-to-date with RIPE NCC procedures and RIPE community policies.
If there are no current registered contacts remaining with the LIR, a fax signed by the Managing Director of the LIR on organisation letterhead is required to implement these changes. These changes should include the new registered contact person(s) for the LIR.
2.5 RegID
It is not necessary to obtain a new Registry Identifier (RegID) if the name of the organisation that operates the LIR changes. The RegID is merely an internal identifier used by the RIPE NCC to distinguish the various LIRs. It does not have to correspond to the legal name of the organisation operating the LIR.
If an LIR insists on changing their RegID, a fee corresponding to the sign-up fee for a new LIR will be charged to cover additional administrative work generated. Please see the current version of the RIPE NCC Charging Scheme available from the RIPE Document Store at:
http://www.ripe.net/ripe/docs/charging.html Link: http://www.ripe.net/ripe/docs/charging.html
2.6 Transfers of Address Allocations
All transfers of address allocations from one LIR to another LIR (or to a non-LIR) require approval by the RIPE NCC. It is expected that all database objects relating to this allocation be correct and up-to-date before the transfer occurs. Transferred allocations containing a large amount of unassigned address space may be set aside and kept by the RIPE NCC until the other allocations held by the LIR are considered fully used (about 80%). Once the LIR has reached full utilisation in its other allocations, the reserved allocations will be made available to the LIR. For further details on allocation policy, please refer to the document "IPv4 Address Allocation and Assignment Policies in the RIPE NCC Service Region" available from the RIPE Document Store at:
http://www.ripe.net/ripe/docs/ipv4-policies.html Link: http://www.ripe.net/ripe/docs/ipv4-policies.html
2.7 Takeover Fee
In cases where an organisation operating an LIR takes over one or more LIRs, a takeover fee is due for every LIR taken over (e.g. if three LIRs are taken over, the fee is paid three times). All current outstanding invoices for the LIRs being taken over will also have to be paid in full.
The transfer of address allocations also incurs a takeover fee and does not vary according to the amount of address space being transferred (e.g. if three allocations are being transferred from LIR A to LIR B, the fee is only paid once).
3.0 Closing an LIR
In the case of a closure of an LIR, the RIPE NCC should be contacted at least three months prior to the required closure date at [email protected] Link: mailto:[email protected] .
Only registered LIR contact person(s) can discuss a closure of an LIR with the RIPE NCC. In case of bankruptcy, the court-appointed administrator may take over these responsibilities.
To cease operations, an LIR is required to take the following four steps:
1. Send the RIPE NCC a written request to officially close the LIR. State the reasons for closure of the LIR and state the intention to return the unassigned address space.
2. Provide the RIPE NCC with documentation of all IP assignments made from address space allocated by the RIPE NCC.
3. Provide a list of any End Users that have expressed a need to keep their assigned IP address space and/or Autonomous System Number (ASN). Contact information such as e-mail addresses of these End Users should be included. (See section 3.7 Link: #3.7 )
4. Verify that the contents of the RIPE Database are up-to-date. A closing LIR is responsible for removing any objects entered by them in the RIPE Database that are no longer valid. Please send a confirmation to the RIPE NCC that all obsolete and invalid objects have been removed. (See section 3.8 Link: #3.8 )
3.1 Further Assignments
A closing LIR is not allowed to make any further assignments from its address space allocations.
3.2 Finance
An LIR will continue to be billed for services until a formal request to be closed is sent by a registered contact person(s) of the LIR.
In cases of mergers, the LIR whose allocation has been transferred to another LIR will continue to be billed until any inconsistencies are resolved.
3.3 Transfers of Address Allocations from a Closing LIR
If an LIR wishes to transfer its allocations to another existing LIR, it must provide the documentation about all assignments to the LIR receiving the transferred allocation. As outlined above, all transfers require approval by the RIPE NCC and all database objects must be valid and up-to-date.
3.4 Open Address Space Requests
As soon as the LIR decides to close, it should halt any open requests for IP address space and refer the End Users to the list of LIRs. This will prevent the customer from having to renumber at a later date. This list is available at:
3.5 End Users Keeping Address Assignments
A closing LIR should always encourage its End Users to renumber into an address allocation held by another LIR. This way, customer assignments can then be routed as part of the other LIR's allocation. Organisations in receipt of a Provider Aggregatable (PA) assignment should note that a new provider will not be able to announce an aggregate block. They may, therefore, have problems getting their addresses routed.
For more information, please see the RIPE documents "Smallest RIPE NCC Allocation / Assignment Sizes" and "Provider Independent versus Provider Aggregatable Address Space" available from the RIPE Document Store at:
http://www.ripe.net/ripe/docs/smallest-alloc-sizes.html
http://www.ripe.net/ripe/docs/pi-pa.html
The LIR should also supply the RIPE NCC with a list of Assignments kept by End Users in the following format:
Inetnum Range Size Date Netname
193.0.0.0 - 193.0.1.255 512 19950101 RIPE-NCC
3.6 Continued Internet Connectivity to End Users
The End Users can continue to use the address space already assigned to them by the closing LIR. The LIR will continue to provide Internet connectivity to its End Users as an Internet Service Provider (ISP). Assignments made by an LIR that has closed are valid for as long as the original criteria under which they were assigned remain valid. (See section 3.8 Link: #3.8 )
3.7 Discontinued Internet Connectivity to End Users
If the LIR will no longer provide Internet connectivity to End Users with assigned address space, this address space should be retrieved from the End Users by the LIR as they renumber. It is the LIR's responsibility to help its End Users with renumbering.
3.8 Database Responsibilities
LIRs are responsible for the accuracy of the data they enter into the RIPE Database. In the case of a closure of an LIR, the LIR should remove any objects in the RIPE Database that are no longer valid. This includes inetnum, aut-num and domain objects with obsolete information.
In cases where End Users of an LIR keep the address space assigned to them after the LIR closes, the LIR maintainer in the database objects representing these assignments needs to be removed and replaced by the RIPE NCC maintainer. The LIR should provide the RIPE NCC with a list of relevant database objects agreeing to the RIPE NCC overwriting the current LIR maintainer.
3.9 Unassigned Address Space
Unassigned address space will be returned to the RIPE NCC and will revert back to the public pool of IP address space. It can be assigned by the RIPE NCC as necessary. Should an LIR decide to close and reopen at a later date, it must repeat all formal steps required to establish a new LIR.
4.0 When an LIR is Closed by the RIPE NCC
The RIPE NCC may decide to close an LIR that stops paying its bills to the RIPE NCC and/or cannot be contacted by the RIPE NCC for a significant period of time. Moreover, if an LIR consistently violates the policies established by the Internet Assigned Numbers Authority (IANA) or the RIPE community, in spite of multiple warnings, it may be closed.
The RIPE NCC will send the LIR a message to notify it of its closure. The LIR must then provide documentation to the RIPE NCC regarding its allocated address space and follow the other procedures for closing an LIR as stated in section 3.0 Link: #3.0 .
If the LIR does not provide the RIPE NCC with the proper Documentation, the RIPE NCC will determine which address space should be returned to the public pool of IP address space.