Hi Aleksi,
That one strikes me as well. I don't know how often people arguing about
ASN stockpiling really apply for ASN's but my experience is that it takes
quite a lot of explanation even to get a second ASN for the same
entity.
But maybe I am missing something here and the "non multihoming" rule means
the NCC will not check anything at all in the future and just give away
ASN's to anyone asking for them, no matter how many?
On Mon, 19 Jan 2015, Aleksi Suhonen wrote:
Hi,
There was a small ruckus on this mailing list about the 1000 ASN limit during
the holidays. The whole disagreement is centred around the fact that ASNs are
free now. I've read a lot of messages that seem to suggest that there should
be some charge related to them that prevents amassing them in the billions. I
sort of agree with that, but...
Is there someone in this community that feels they should be completely free,
no matter how many you have?
I'd like to offer some more food for thought. These are not realistic
suggestions, but I hope they will close the gap between the two debating
sides:
How many ASNs can a LIR get using one email or one click on the RIPE portal?
My understanding is that even after 2014-03 is implemented, the answer will
be one(1).
After that email/click, the LIR will go through the Process. I don't think
any amount of policy simplification will reduce the work required per Process
Instance at both the LIR and the RIR below two minutes.
In the crypto(slash)security community this is called the proof-of-work
system.
So, for a thousand ASNs this would mean about 33 hours. As we want to turn
that into money, working at ten Euros per hour the cost would be 330 Euros.
You can twist the numbers every which way, but it's hard to twist them so far
that the result would be much smaller than Nick's example of setting up
another company for 10 Euros (+work.)
If we want to make sure that a LIR doesn't automate their email responses to
the Process, we can include another random proof-of-work such as "what is the
sum of the digits in today's date?", "how much is this ticket number divided
by the number of ASNs you already have?" or "when do the cows come home to
roost?" Or just a plain old CAPTCHA.
Someone suggested that if the ASNs were free and someone got four billion of
them, we can fix that post-fact by raising the ASN fee above zero. The same
person, in the same sentence, also hinted that this special someone would be
based at some tax haven sort of place, where exacting this fee won't really
be possible, should the someone refuse to pay the new fee.
The resulting reclamation process would leave us without ASNs for a couple of
years. Then again, according to my above thesis of ASN acquisition speed, it
would take thousands of years for the bad guy to finish all the Processes to
get all the ASNs in the first place.
There, a couple of cents worth...
--
Aleksi Suhonen / Let bogons be bogons.
Best Regards,
Daniel Stolpe
_________________________________________________________________________________
Daniel Stolpe Tel: 08 - 688 11 81
[email protected]
Resilans AB Fax: 08 - 55 00 21 63
http://www.resilans.se/
Box 45 094
556741-1193
104 30 Stockholm
