300 likes | 399 Views
Discover why using AusRegistry's proven DNS infrastructure for ENUM trials is cost-effective, secure, and compliant with industry standards. Benefit from stable and reliable services run by professionals with expertise in DNS.
E N D
Overview • Who is AusRegistry? • Why use the existing infrastructure? • What this means for you? • Questions raised and Important points
AusRegistry is… • Registry Services Provider • Registration Services (EPP and Web based) • WhoIs Services (Port 43 and Web based) • DNS Services
Why use the existing DNS and provisioning infrastructure for the purpose of the ENUM trials?
What is the existing infrastructure? • Registry – AusRegistry • Database, WhoIs Services, DNS Services, Administrative functions. • Registrars – eg. MelbourneIT • Policy implementers, DNS hosting providers and provisioning channel.
What is the existing infrastructure? • An international network of 11 fully STD0013 compliant name servers located throughout Australia the USA and Europe. • A Registry System currently successfully serving multiple ccTLDs, with over 2 million objects and 20 Registrars.
ENUM = DNS therefore Provisioning methods should be DNS based (eg EPP or RRP)
ENUM (model) Tier 0 Registry Tier 1 Registry Tier 2 Registry .au IANA Registry Registrars => => =>
Proven System • Existing proven model – Registry/Registrar • Production Grade • It is operational and working NOW • 300,000 transactions a day (3.4tx/s) • 90 million DNS queries a day • 100% DNS uptime since “go-live” in July 2002
High Tier 1 Security • Firewalls and DOS detection/prevention • Connection limiting • Systems kept up to date • Physical Security • 3 layer authentication • Certificate • Username/Password • Source IP address
Tier 1 Stability and Reliability • Load balancing Application Clusters • Oracle 9i RAC • Redundant multi-homed network • High grade data centre • Full backup and Disaster Recovery • “Best of breed” equipment
Conformance to Standards • Engineered to world standards • Industry standard software (eg BIND) • EPP (IETF – purposed standard) • RFC1034, 1035, 2181, 2182, STD0013 compliant DNS • RFC954 compliant WhoIs • RFC2068, 2821, IETF SECSH, STD0015 SNMP • Netscape SSL v2/3 specification and RFC2246
Minimal Implementation Time • The ENUM “test bed” Registry System could be fully operational in a maximum of 12 hours. • In parallel to the Registry, Tier 2 operations (Registrars) could be established in a maximum of 12 hours concurrently. • 12 hours for FULL implementation of Tier 1 and 2 (Pending IANA delegation)
Low Costs Minimal Build Costs + Minimal Development Costs + Minimal infrastructure Costs = Minimal Costs Overall
Interoperability • “Thick” Registry model • EPP provisioning • Standards conformance • Similar to those purposed in the US, UK and European trials
Experience and Expertise • Dedicated customer support • DNS is the core business of these entities • Technical experts in iterative DNS and the associated pitfalls and problems • High level of industry involvement representatives attend ICANN and IETF conferences
The advantages in summary • Low Cost • Highly Secure • Stable and Reliable • Production Grade • Standards Compliant • Interoperable
This means… • Access to a proven stable and secure, production grade platform that is ready to be used NOW run by professionals whom DNS is their core business. Why re-invent the wheel? • Allows you to concentrate on what ENUM can do for your business and develop and test applications confidently. • Allows you to concentrate on developing policies for the use and regulation of ENUM and trialling those policies.
Possible Arguments Against • Limiting potential Tier 2 Registries to those already in the “know” • Need to test and select a provisioning protocol and method • Need to test possible DNS changes and new implementations to enhance security and privacy
Questions Raised • What is the purpose of the trial? • What is the primary use of ENUM? • Where should NAPTR records be held? • How important is stability to you? • Why reinvent the wheel?
Important Points • There is nothing stopping people running their own trials • Mainstream trial should be for the benefit of most parties involved • Keep things simple
The need for a policy body • Industry regulation • Policy creation, revision and enforcement • Prevents rail-roading - a single company or alliance dictating the direction of ENUM • Provides point of contact for government, other organisations and individuals • Look at the ICANN / auDA model used in the .au name space