RIPE NCC Routing Information Service (RIS)

Massimo Candela | LACNIC 29 | May 2018 What is RIS? What is RIS? • Routing Information Service • Worldwide network of BGP collectors • Deployed at Internet Exchange Points • Collects raw BGP data from peers • Stores BGP updates and routing table dumps • 15+ years of history • Used by network operators and researchers every day

Massimo Candela | LACNIC 29 | May 2018 3 Collector locations • 19 collectors and growing • 600+ peers • 150+ full-feed peers

Massimo Candela | LACNIC 29 | May 2018 4 What you can see

Massimo Candela | LACNIC 29 | May 2018 5 Why RIS? Why are we doing this? A bit of history Why RIS? • Original project was defined in 1999: “ In other words, it can be regarded as one integrated Looking-Glass for the entire Internet that includes history information” • Looking glasses are instantaneous • Routing problems are also instantaneous • BGP history is recorded to track what is happening and what has happened • Also to provide statistics and reporting on routing table metrics Massimo Candela | LACNIC 29 | May 2018 7 Why the RIPE NCC RIS? • RIPE NCC is a neutral body • Experience running measurement and data collection platforms

- Test Traffic Measurement project - RIPE Atlas (40k+ results on Google Scholar) - IPmap - RIPEstat (50M queries/day) • Supporting operators and researchers around the world

Massimo Candela | LACNIC 29 | May 2018 8 RIS data access What can you get? And how do you get it? Raw data! • 15+ years of raw data (5.8 TB) available to download - https://www.ripe.net/analyse/internet-measurements/ routing-information-service-ris/ris-raw-data • Data stored in MRT (RFC6396) format • Readable using BGPdump utility - open source, maintained by RIPE NCC - https://bitbucket.org/ripencc/bgpdump - Other third party tools also available

Massimo Candela | LACNIC 29 | May 2018 10 RIPEstat (https://stat.ripe.net)

• RIPEstat is a portal that provides everything you ever wanted to know about IP address space, Autonomous System Numbers (ASNs), and countries with easy to use visualisations.

Massimo Candela | LACNIC 29 | May 2018 11 Routing History

Massimo Candela | LACNIC 29 | May 2018 12 Routing History + Free Time

Massimo Candela | LACNIC 29 | May 2018 13 Looking Glass

Massimo Candela | LACNIC 29 | May 2018 14 BGPlay

Massimo Candela | LACNIC 29 | May 2018 15 Preview of something new!

Massimo Candela | LACNIC 29 | May 2018 16 RIPEstat Data API • All these queries are available through an API • Actually, all those shiny web interfaces use the API anyway • You can use it too!! Write your own scripts, etc.

• https://stat.ripe.net/docs/data_api

• There are also some extra API calls which are not yet visualised Massimo Candela | LACNIC 29 | May 2018 17 Live stream (prototype)

• http://stream-dev.ris.ripe.net/demo • Live stream enables new applications - Real time anomaly analysis and BGP hijack detection

- Live dashboards (live BGPlay!)

Massimo Candela | LACNIC 29 | May 2018 18 RIS growth

Because the internet keeps growing Size of compressed raw BGP updates per month

rrc21 60 rrc20 rrc19 rrc18 50 rrc16 rrc15 rrc14 rrc13 40 rrc12 rrc11 rrc10 rrc09

gigabytes 30 rrc08 rrc07 rrc06 20 rrc05 rrc04 rrc03 rrc02 10 rrc01 rrc00

0 2011.11 2011.11 2001.11 2001.11 2006.11 2011.01 2011.06 2016.11 2001.01 2001.06 2002.04 2002.09 2003.02 2003.07 2003.12 2004.05 2004.10 2005.03 2005.08 2006.01 2006.06 2007.04 2007.09 2008.02 2008.07 2008.12 2009.05 2009.10 2010.03 2010.08 2012.04 2012.09 2013.02 2013.07 2013.12 2014.05 2014.10 2015.03 2015.08 2016.01 2016.06 2017.04 2017.09

Massimo Candela | LACNIC 29 | May 2018 20 Size of compressed BGP dumps per month

rrc21 60 rrc20 rrc19 rrc18 50 rrc16 rrc15 rrc14 rrc13 40 rrc12 rrc11 rrc10 rrc09

gigabytes 30 rrc08 rrc07 rrc06 20 rrc05 rrc04 rrc03 rrc02 10 rrc01 rrc00

Massimo Candela | LACNIC 29 | May 2018 21 Number of IPv4 prefixes seen

900000 /32 /31 /30 /29 800000 /28 /27 /26 700000 /25 /24 /23 600000 /22 /21 /20 /19 500000 /18 /17 /16 400000 /15 /14 /13 /12 300000 /11 /10 /9 200000 /8 /7 /6 100000 /5 /4 /3 /2 0 /1 /0

Massimo Candela | LACNIC 29 | May 2018 22 Number of IPv6 prefixes seen

60000

50000

40000

30000

20000

10000

Massimo Candela | LACNIC 29 | May 2018 23 RIS Architecture Data collection

Massimo Candela | LACNIC 29 | May 2018 25 Back-end data distribution

Massimo Candela | LACNIC 29 | May 2018 26 How can you help? How can you help?

• Peer with us!!! CIXP, Geneva (RRC04)! DIX-IE, Tokyo (RRC06)! - AS12654 Netnod, Stockholm (RRC07)! - http://www.ris.ripe.net/cgi- MIX, Milan (RRC10)! bin/peerreg.cgi NYIIX, New York City (RRC11)! • Send us your routes MSK-IX, Moscow (RRC13)! PAIX, Palo Alto (RRC14)!

- If you can send us your full PTTMetro, Sao Paulo (RRC15)! BGP table, please do! NOTA, Miami (RRC16)!

- If not, send us what you Catnix, Barcelona (RRC18)!

can! NAP Africa JB, Johannesburg (RRC19)! - We will be recording them SwissIX, Zurich (RRC20)! forever ;-) France-IX, Paris (RRC21)!

Massimo Candela | LACNIC 29 | May 2018 28 Interested in hosting an RRC?

Massimo Candela | LACNIC 29 | May 2018 29 Questions [email protected]