> On Sep 17, 2022, at 08:18 , Tom Beecher <beec...@beecher.cc> wrote: > > I would honestly love it if IANA was able to say "As of X date, all LEGACY > IPv4 allocations are transferred to the RIRs . Assignees will not change, but > will now need to comply with each RIRs policies."
The first part of that statement is the status quo. The latter is not within IANA’s ability to effect. Some RIRs claim it is already the case. Some legacy holders disagree. A true court test of this with precedent has yet to actually occur, but generally the RIRs have prevailed in most cases. > Of course this will never happen, because it would just be a flood of > billable hours, lawsuits, and injunctions, where companies will claim > 'intellectual property' over something they didn't develop. I think it won’t happen more likely because to the extent that it can happen (and matter), it already has. > It's exhausting to watch this two tiered system where the legacy holders > bleat about what the rules should be for the rest of us, while they can do > whatever the heck they want, simply because they had the foresight to exist > at the right time. I don’t think that is an accurate characterization of the issue at all. And I say that with a pretty good knowledge of both perspectives as someone who holds both legacy and non-legacy resources and has been very involved in the community and the ARIN policy process for a long time. Owen > > On Sat, Sep 17, 2022 at 10:41 AM John Curran <jcur...@arin.net > <mailto:jcur...@arin.net>> wrote: > >> On 16 Sep 2022, at 10:11 PM, John Gilmore <g...@toad.com >> <mailto:g...@toad.com>> wrote: >> >> John Curran <jcur...@arin.net <mailto:jcur...@arin.net>> wrote: >>> ... the long-term direction is to provide the same services to all >>> customers under the same agreement and fees – anything else wouldn’t >>> be equitable. >> >> There are many "anything else"s that would indeed be equitable. It is >> equitable for businesses to sell yesterday's bread at a lower price than >> today's bread. Or to rent unused hotel rooms to late-night transients >> for lower prices than those charged to people who want pre-booked >> certainty about their overnight shelter. ARIN could equitably charge >> different prices to people in different situations; it already does. >> And ARIN could equitably offer services to non-members, by charging them >> transaction fees for services rendered, rather than trying to force them >> into a disadvantageous long term contract. Please don't confuse >> "seeking equity" with "forcing everyone into the same procrustean bed". > > John - > > ARIN can most certainly charge different fees for different customers – we’re > actually doing > exactly that today for all of the legacy resource holders who have entered an > agreement > with ARIN already or who choose to do so in the coming year. Rather than > paying the > same registration service fees as everyone else, they have a cap on their > total registry > maintenance fees (presently $150 per year, subject to an increase $25 per > year) which > is a unique fee benefit that’s been provided only to the legacy resource > holders. The > announcement just made is that we will cease offering this fee cap for legacy > resource > holders who sign an agreement after 31 Dec 2023; i.e. they will pay the same > fees as > everyone else based on total resources held. > > As others have already noted, this will move ARIN towards charging more > customers the > same fees for the same services. If you are a legacy resource holder that > was planning > on entering into an LRSA with ARIN, it would be beneficial to do so before > 2024. If you > are legacy resource holder that is not planning to enter an agreement with > ARIN, then > the change doesn’t matter to you (other than perhaps a providing an > opportunity to rail > on the mailing list in response anyway…) > >> As a simple example, ARIN's contract need not require its customers to >> give up their resources when ceasing to pay ARIN for services. (There's >> an existence proof: RIPE's doesn't.) Such a contract would likely >> result in more-equitable sharing of costs, since it would encourage >> legacy holders to pay ARIN (and legacy holders are still more than a >> quarter of the total IP addresses, possibly much more). The fact that >> ARIN hasn't made this happen says nothing about equity; it's about >> something else. > > A wonderful assertion, but false. Those issued resource before ARIN’s > formation have > a choice – if they wish to enter an agreement and normalize their > relationship they can > do so, but at that point they are subject to the same agreement as everyone > else. ARIN > has made a conscious decision to treat everyone the same, both in terms of > agreements > and fees (aside from the legacy resource holder fee cap that has been > provided for last > two decades as an incentive and, as noted, is being sunset at the end of > 2023.) > > Note that there are indeed circumstances where a party can exit the RSA and > the number > resources return to the prior status – this is what occurs if ARIN is found > in litigation to have > breached the agreement. > >> This whole tussle is about power. ARIN wants the power to take away >> legacy resources, while their current owners don't want that to happen. > > If that the goal were "take away legacy resources”, then there are far > easier and more > direct means to accomplish that, but as noted previously, the goal is rather > provide legacy > resource holders a choice if they want a formal relationship with ARIN or > not. Enter into > an LRSA or don’t, that’s entirely up to each legacy resource holder. > >> ARIN wants to be the puppeteer who pulls all the strings for the North >> American Internet. It pursues this desire by stealth and misdirection >> (e.g. "We strongly encourage all legacy resource holders who have not >> yet signed an LRSA to cover their legacy resources to consider doing so >> before 31 December 2023 in order to secure the most favorable fees for >> their ARIN Services...") > > ARIN certainly encourages legacy resource holders to enter an agreement - > this helps > spread our costs among a larger customer base and provides the customer > access to > our full suite of services – I’m not sure how that encouragement is seen as > "stealth and > misdirection”, particularly as we go out of our way to communicate changes > well in > advance and in forums such as this one. > >> ARIN is also trying to encourage ISPs to >> demand RPKI before providing transit to IP address holders, which would >> turn its optional RPKI service (that it has tied by contract into ARIN >> gaining control over legacy resources) into an effectively mandatory >> RPKI service. > > Again, ARIN encourages operators to deploy RPKI services to better protect > their > network routing, but we are very clear to take no stance on _requiring_ > deployment > of such services – this is matter best left for the operator community to > decide. > >> ARIN hides its power grab behind "our policies are set by our community" >> and "our board is elected by our community" misdirections. Its voting >> community consists almost entirely of those who aren't legacy holders >> (by definition: if you accept their contract, your legacy resource >> ownership goes away; if you don't, you can't vote). > > Almost accurate - the voting community is indeed those customers who have > resources > under services agreement (i.e. members) and therefore that does not include > legacy > resource holders unless they opt to enter an LRSA. That voting community > does elect > the ARIN Board of Trustees and our ARIN Advisory Council. > > However, the ARIN policy development process is open to all, and there are > many participants > who have legacy resources not under agreement and advocate on behalf of that > community – > again, it’s your choice is you wish to participate or not, but it would be > specious to assert that > the community that develops ARIN registry policy is limited to ARIN members. > >> That community >> would love to confiscate some "underused" legacy IP addresses to be >> handed out for free to their own "waiting list". So this is equivalent >> to putting foxes in charge of policy for a henhouse. > > Wow - I’m not certain you could be more incorrect. Note that the policies > that were in > effect _prior to ARIN’s formation_ reflect exactly that sentiment above: > i.e., per RFC 2050 – > > IP addresses are valid as long as the criteria continues to be met. > The IANA reserves the right to invalidate any IP assignments once it > is determined the the requirement for the address space no longer > exists. In the event of address invalidation, reasonable efforts > will be made by the appropriate registry to inform the organization > that the addresses have been returned to the free pool of IPv4 > address space. > > The community in this region (via ARIN’s policy development process) created > registry policies > that specifically recognize that “underused" IP address space is not subject > to reclamation but > can be transferred to another party that has need. (You can find these in > ARIN’s number resource > policy manual (NRPM) in section 8) > <https://www.arin.net/participate/policy/nrpm/#8-transfers > <https://www.arin.net/participate/policy/nrpm/#8-transfers>>. > > ARIN has also enshrined that same principle of ability to retain “underused > number resources” > in its RSA/LRSA, in section 6 – > > 6. REVIEW OF HOLDER’S NUMBER RESOURCES > > Whenever a transfer or additional IP address space is requested by Holder, > ARIN may review Holder’s utilization of previously allocated or assigned > number resources and other Services received from ARIN to determine if Holder > is complying with the Service Terms. Except as set forth in this Agreement, > (i) ARIN will take no action to reduce the Services currently provided for > Included Number Resources due to lack of utilization by the Holder, and (ii) > ARIN has no right to revoke any Included Number Resources under this > Agreement due to lack of utilization by Holder. However, ARIN may refuse to > permit transfers or additional allocations of number resources to Holder if > Holder’s Included Number Resources are not utilized in accordance with Policy. > >> Now that markets exist for IP addresses, all that IP addresses need is a >> deed-registry to discourage fraud, like a county real-estate registrar's >> office. IP addresses no longer need a bureacracy for socialistic >> determinations about which supplicants "deserve" addresses. > > That’s pretty much what ARIN’s policies have evolved into, although we do > still at present > have a requirement that the recipient of an address block during a transfer > have operational > need (i.e. they’re going to be used in an actual network at some point.) If > you don’t like that > constraint, you can whine about it here on the nanog mailing list, or you can > join others of > similar mind working in the ARIN policy development process – I actually > don’t care either > way; ARIN operates the registry per the policy but leaves the development of > registry policy > to the community. > >> Addresses now have prices, and if you want some, you buy them. Deed >> registries get to charge fees for transactions, but they don't get to take >> away >> your property, nor tell you that you can't buy any more property because >> they disapprove of how you managed your previous properties. Actual >> ownership of real estate is defined by contracts and courts, not by the >> registry, which is just a set of pointers to help people figure out the >> history and current status of each parcel. The registry is important, >> but it's not definitive. > > Agreed regarding contracts and courts - if you have an RSA with ARIN, you > have contract > and your IP address block is a specific set of contractual rights that civil, > criminal, probate, > bankruptcy and other courts all seem to have no problem understanding and > dealing with > under rule of law. Absent such, I think you’ll find courts to be an > interesting place indeed. > >> Deed-registry is apparently not a model that ARIN wants to be operating >> in. They initially tried to refuse to record purchases of address >> blocks, because it violated their model of "if you don't use your IP >> addresses, you must give them back to us and receive no money for them". > > Factually incorrect. We never refused to transfer address blocks from one > party to > another _if the transfer met the policies set by the community_. It was > actually the > ARIN community that established the first number resource transfer policy in > 2009 > <https://www.arin.net/vault/announcements/2009/20090601_nrpm.html > <https://www.arin.net/vault/announcements/2009/20090601_nrpm.html>> and this > was done at the encouragement of the ARIN Board of Trustees…. (please let’s > try > to stick with facts so an to keep the discussion here occurring on an > informed basis.) > >> They saw their job as being the power broker who hands out free favors. >> But when their supply of free IP addresses dried up, they had no >> remaining function other than to record ownership (be a deed registry), >> and to run an occasional conference. It dawned on them that if they >> refused to record these transactions, they would not even be a reliable >> deed-registry; they would have entirely outlived their usefulness. > > As noted, the above is completely specious; the ARIN Board and the community > developed > our registry policies for transfers to unrelated parties ahead of the first > transactions. > >> Sothey reluctantly agreed to do that job, but their policies are still >> left over from their power-broker past. They'd love to go back to it, >> if only they could figure out how. IPv6? Sure! RPKI maybe? Worth a >> try! >> >> ARIN prefers to be a power broker rather than a scribe. Who can blame >> them for that? But don't mistake their strategy for stewardship. >> "Doing what the community wants" or "seeking the equitable thing" quacks >> like stewardship, so of course they brand themselves that way. But >> in my opinion their power-seeking is self-serving, not community-serving. > > John - if you don’t like ARIN policies, I’d suggest that you join the others > in the policy > development process working to change them. ARIN makes sure that there’s > open > and transparent policy development process, leaves the community to set those > policies, and then we operate the registry accordingly. That’s what we > define as > stewardship" of the number registry. > > Thanks, > /John > > John Curran > President and CEO > American Registry for Internet Numbers > >