On 17/01/25 12:19, babydr DBA James W. Laferriere wrote:
Hello , All ...
On Thu, 16 Jan 2025, William Herrin wrote:
On Thu, Jan 16, 2025 at 9:00?AM Ben Cartwright-Cox via NANOG
<nanog@nanog.org> wrote:
https://www.whitehouse.gov/briefing-room/presidential-actions/2025/01/16/executive-order-on-strengthening-and-promoting-innovation-in-the-nations-cybersecurity/
(i) Within 90 days of the date of this order, FCEB agencies
shall take steps to ensure that all of their assigned Internet
number resources (Internet Protocol (IP) address blocks and
Autonomous System Numbers) are covered by a Registration Services
Agreement with the American Registry for Internet Numbers or
another appropriate regional Internet registry.
I don't have numbers on hand for how much US Gov space is already with
ARIN, but this seems like a pretty nice win for ARIN getting an order
for the US Gov legacy space attached to them (mentioned by name),
while other RIRs are available in that order, I don't imagine it's
going to other RIRs :)
For clarity, FCEB stands for Federal CIVILIAN Executive Branch. So,
this order excludes the military, probably the intelligence agencies,
state and local governments, etc. And not everything operated for the
Federal government is done on their IP addresses. This won't affect
address space assigned to federal contractors.
In a nutshell, this means that the few non-military federal agencies
still operating on "legacy" IPv4 addresses will now have to officially
sign a contract with ARIN. And nothing more than that.
Regards,
Bill Herrin
While it maybe associated with only FCEB agencies .
Seems like one more step toward a State sanctoined Monopoly .
Which even in anyones eyes ARIN is , Within the U.S.A. Region .
Tooldes , JimL
Please indulge me - as a non-American perhaps this is obvious.
The directive states 'or another appropriate regional Internet
registry'. Of course there's a default assumption (or perhaps, just
obvious example) of ARIN for a North American nature. But given any
other "appropriate regional Internet registry" is also valid, I don't
see that this is the aspect that should have any focus.
Put it another way - what _assigned_ resources (the use of the word
'assigned' needs to be considered) would any FCEB be using that aren't
from either ARIN or another appropriate registry? And where they're
not, perhaps they should be as this would be an important measure for
risk management (liability protection?)
I feel like people are reading too much into it; it's not about
monopolistic behaviour (except to the degree that the RIR's _are_
monopolies within the economies they serve). It's just about ensuring
good/correct practices are in place, which feels reasonable.
Mark.
