From asiboh.francis at elude.in Sat Apr 6 15:43:51 2019 From: asiboh.francis at elude.in (asiboh.francis at elude.in) Date: Sat, 06 Apr 2019 15:43:51 -0000 Subject: [Community-Discuss] RPKI DOWN, BLOCKED EMAILS ON COMMUNITY-DISCUSS Message-ID: Dear CEO of Afrinic, I have send an email to community discuss and its not going through. I'm reporting to you the case of RPKI being down. When will this be fixed? Regards, Francis ASIBOH Network Engineer From asiboh.francis at elude.in Sat Apr 6 15:12:13 2019 From: asiboh.francis at elude.in (asiboh.francis at elude.in) Date: Sat, 06 Apr 2019 15:12:13 -0000 Subject: [Community-Discuss] RPKI PROBLEM Message-ID: Dear community members, What is happening with Afrinic RPKI? https://twitter.com/nusenu_/status/1114511314334965760 Regards Francis ASIBOH Network Engineer From cedrick.mbeyet at afrinic.net Sat Apr 6 18:31:44 2019 From: cedrick.mbeyet at afrinic.net (Cedrick Adrien Mbeyet) Date: Sat, 6 Apr 2019 22:31:44 +0400 Subject: [Community-Discuss] RPKI PROBLEM In-Reply-To: References: Message-ID: <406b7645-e2fe-ce33-b6ef-1cae864dd5ad@afrinic.net> Dear Mr. Asiboh, Thank you for your email and for sharing your concern. Please note that issue has been reported on AFRINIC Status page (https://status.afrinic.net/). AFRINIC NOC team has picked it up and is busy fixing the issue. Updates on the issues will be posted there. Feel free to drop any concern or comment to noc[at]afrinic[dot]net. A member of AFRINIC NOC team will for sure respond to you. Regards, -- _______________________________________________________________ Cedrick Adrien Mbeyet Infrastructure Unit Manager, AFRINIC Ltd. t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia ______________________________________________________ On 06/04/2019 19:12, francis asiboh via Community-Discuss wrote: > Dear community members, > > What is happening with Afrinic RPKI? > > https://twitter.com/nusenu_/status/1114511314334965760 > > Regards > Francis ASIBOH > Network Engineer > > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss From kaddyjatou2 at gmail.com Sat Apr 6 19:00:24 2019 From: kaddyjatou2 at gmail.com (Kaddyjatou Drammeh) Date: Sat, 6 Apr 2019 19:00:24 +0000 Subject: [Community-Discuss] join list Message-ID: hello I have joined the list. I will want to be part of the fellowship next time soon. from kaddyjatou drammeh -------------- next part -------------- An HTML attachment was scrubbed... URL: From asiboh.francis at elude.in Sat Apr 6 20:13:36 2019 From: asiboh.francis at elude.in (asiboh.francis at elude.in) Date: Sat, 06 Apr 2019 20:13:36 -0000 Subject: [Community-Discuss] RPKI PROBLEM In-Reply-To: <406b7645-e2fe-ce33-b6ef-1cae864dd5ad@afrinic.net> References: <406b7645-e2fe-ce33-b6ef-1cae864dd5ad@afrinic.net> Message-ID: <7e00667e97a27560478884fc8a225d68@elude.in> Hello Mr MBEYET, Its "Mrs." and not "Mr." I do not see any pro-activeness of Afrinic in this particular issue. Also, why do you rely on Twitter as your monitoring system to look into the matter? Why the monitoring system of Afrinic did not respond promptly for this RPKI incident? Had the monitoring respond promptly to this incident, you would have detected and sorted out this issue much earlier! One of my mail has even been blocked/hold on that mailing list. Regards, Francis ASIBOH Network Engineer From cedrick.mbeyet at afrinic.net Mon Apr 8 15:46:39 2019 From: cedrick.mbeyet at afrinic.net (Cedrick Adrien Mbeyet) Date: Mon, 8 Apr 2019 19:46:39 +0400 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report Message-ID: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> Dear AFRINIC community, Find below postmortem report on the incident that happen on 06 April 2019. ? The AFRINIC RPKI engine has an offline part that has to be renewed on a monthly bases. The process is known, documented and automated reminders set. The system is set to send 2 reminders each month, one 15 days prior to the expiry date and the second one 7 days before expiry. On the 2nd half of March, the monitoring system sent a reminder to perform the offline refresh but this was not acted upon. ? ? On Saturday 06 April 2019,? Certificate revocation List (CRL) and the manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our monitoring system picked this up. The immediate action was to generate new certificates and manifest file and upload them onto RPKI engine system. ? The failure was as a result of human error, no changes were made on the system but we have taken additional steps to the existing process to ensure that this does not happen again. We do acknowledge that it is unacceptable to have such a failure with critical infrastructure and necessary done in this regard. ? ? We do apologize for the inconvenience caused and thank you for your patience in this regard. -- _______________________________________________________________ Cedrick Adrien Mbeyet Infrastructure Unit Manager, AFRINIC Ltd. t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia ______________________________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: From cedrick.mbeyet at afrinic.net Mon Apr 8 15:48:35 2019 From: cedrick.mbeyet at afrinic.net (Cedrick Adrien Mbeyet) Date: Mon, 8 Apr 2019 19:48:35 +0400 Subject: [Community-Discuss] RPKI PROBLEM In-Reply-To: <7e00667e97a27560478884fc8a225d68@elude.in> References: <406b7645-e2fe-ce33-b6ef-1cae864dd5ad@afrinic.net> <7e00667e97a27560478884fc8a225d68@elude.in> Message-ID: Dear Mrs. Francis, ? Sorry for the mistake in the title. Please note that a postmortem report has been posted on the community-discuss mailing list. Regarding your email being block/hold, please note that posting is open to all the community-discuss subscribers. We saw that you tried to post before with another email which is not subscribe on community-discuss mailing list. Reason why when you subscribe this email, you were now able to post on the mailing list. Regards, -- _______________________________________________________________ Cedrick Adrien Mbeyet Infrastructure Unit Manager, AFRINIC Ltd. t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia ______________________________________________________ On 07/04/2019 00:13, asiboh.francis at elude.in wrote: > Hello Mr MBEYET, > > Its "Mrs." and not "Mr." > I do not see any pro-activeness of Afrinic in this particular issue. > Also, why do you rely on Twitter as your monitoring system to look into > the matter? > Why the monitoring system of Afrinic did not respond promptly for this > RPKI incident? > Had the monitoring respond promptly to this incident, you would have > detected and sorted out this issue much earlier! > > One of my mail has even been blocked/hold on that mailing list. > > Regards, > Francis ASIBOH > Network Engineer > -------------- next part -------------- An HTML attachment was scrubbed... URL: From asiboh.francis at elude.in Mon Apr 8 17:49:28 2019 From: asiboh.francis at elude.in (asiboh.francis at elude.in) Date: Mon, 08 Apr 2019 17:49:28 -0000 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> Message-ID: <9467aa93107160fafe4a6fe27668fffd@elude.in> Hello Thank you for the report. However, it does not look professional that a critical service of Afrinic is down for so long. Several times, the "whois" service of Afrinic was down without any postmortem reports. This is so ugly that only if someone complains over the mailing list only then actions are taken. That's too in an unprofessional manner. Mr. MBEYET, there are African companies who are running critical services which are more reliable than Afrinic services.? It is time for Afrinic to invest more in its core services.? Board member of Afrinic, I am addressing to you all. Please, make sure that Afrinic is maturely managing its resources and finance to support its core services without which the future of Afrinic and the Internet will be depressive, dull and bleak. Regards, Francis ASIBOH Network Engineer From asiboh.francis at elude.in Mon Apr 8 18:24:22 2019 From: asiboh.francis at elude.in (asiboh.francis at elude.in) Date: Mon, 08 Apr 2019 18:24:22 -0000 Subject: [Community-Discuss] Core and Extra services of Afrinic Message-ID: Hello, It came to my attention that Afrinic is spending too much money and time on extra services such as IPv6 workshops and outreach activities while core services do not appear to have proper monitoring and on-call support for core services in place. For instance, in the financial statement for the year 2018, there was a surplus of $429,700. This is very good, but what is the point of such a surplus when core services are failing again and again?? Also, to take into consideration if there is a return on investment in the training of IPv6 in the African region, as very few ISPs are dual stack. Afrinic should first invest in its core services prior before making a heavy investment in capacity building and outreach. I am perplexed seeing the number of staffs in capacity building team in Afrinic. Board members of Afrinic, how do you prioritize what is critical and what is not? Afrinic, where is your risk analysis report? Regards, Francis ASIBOH Network Engineer From owen at delong.com Mon Apr 8 21:27:54 2019 From: owen at delong.com (Owen DeLong) Date: Mon, 8 Apr 2019 14:27:54 -0700 Subject: [Community-Discuss] Core and Extra services of Afrinic In-Reply-To: References: Message-ID: <023F1D7D-B72C-472F-90DC-41179C48CA28@delong.com> > Also, to take into consideration if there is a return on investment in the > training of IPv6 in the African region, as very few ISPs are dual stack. The main purpose of the training is to help change that sad fact. > Afrinic should first invest in its core services prior before making a > heavy investment in capacity building and outreach. I?m not convinced that the core infrastructure problems are the result of money not being spent where it is needed. Do you have some evidence to show that is the cause? > I am perplexed seeing the number of staffs in capacity building team in > Afrinic. I understand that you don?t value capacity building. Many other members of the community have expressed a strong desire for it and it has definitely helped accelerate the pace of development in the region. > Board members of Afrinic, how do you prioritize what is critical and what > is not? I would hope, in part, that they listen to the full community and look at the genuine needs overall and make reasonable decisions as to the fiscal management of the organization. So far, I think that?s mostly what is happening. Owen From benm at workonline.africa Tue Apr 9 11:59:00 2019 From: benm at workonline.africa (Ben Maddison) Date: Tue, 9 Apr 2019 11:59:00 +0000 Subject: [Community-Discuss] RPKI Route Origin Validation - Africa Message-ID: Hello all. In November 2018 during the ZAPF (South African Peering Forum) meeting in Cape Town, 3 major African ISP's announced that they would enable RPKI-based ROV (Route Origin Validation), including dropping Invalid routes as part of efforts to improve Internet routing security, on the 1st April, 2019. On the 1st of April, Workonline Communications (AS37271) enabled ROV and began dropping Invalid routes. This applies to all eBGP sessions, both IPv4 and IPv6. On the 5th of April, SEACOM (AS37100) enabled ROV and began dropping Invalid routes. This applies to eBGP sessions with public peers, private peers and transit providers, both for IPv4 and IPv6. eBGP sessions toward downstream customers will follow in 3 months time. Implementation at the third ISP has yet to be completed. We are sure they will communicate with the community when they are ready to do so. Please note that for the legal reasons previously discussed in various fora, neither Workonline nor SEACOM are utilising the ARIN TAL. As a result, any routes covered only by a ROA issued under the ARIN TAL will fall back to a status of Not Found. Unfortunately, this means that ARIN members will not see any improved routing security for their prefixes on our networks until this is resolved. We will each re-evaluate this decision if and when ARIN's policy changes. We are hopeful that this will happen sooner rather than later. If you interconnect with either of us and believe that you are experiencing any routing issues potentially related to this new policy, please feel free to reach out to either: - noc at workonline.africa - peering at seacom.mu Workonline Communications and SEACOM hope that this move encourages the rest of the ISP community around the world to ramp up their deployment of RPKI ROV and begin dropping Invalid routes. We appreciate the work that AT&T and others have carried out in the same vein. In the mean time, we are happy to answer any questions you may have about our deployments. Thanks, Mark Tinka (SEACOM) & Ben Maddison (Workonline Communications). -------------- next part -------------- An HTML attachment was scrubbed... URL: From kaddyjatou2 at gmail.com Tue Apr 9 12:08:50 2019 From: kaddyjatou2 at gmail.com (Kaddyjatou Drammeh) Date: Tue, 9 Apr 2019 12:08:50 +0000 Subject: [Community-Discuss] hello Message-ID: -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark.tinka at seacom.mu Wed Apr 10 06:32:04 2019 From: mark.tinka at seacom.mu (Mark Tinka) Date: Wed, 10 Apr 2019 08:32:04 +0200 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> Message-ID: <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> Thanks, Cedrick. A question that is, perhaps, obvious... are you able to take the human component out of this? If 2 reminders were not enough to get the humans to act, I'm not sure the current methodology is sustainable. Mark. On 8/Apr/19 17:46, Cedrick Adrien Mbeyet wrote: > > Dear AFRINIC community, > > > Find below postmortem report on the incident that happen on 06 April > 2019. > > ? > > The AFRINIC RPKI engine has an offline part that has to be renewed on > a monthly bases. The process is known, documented and automated > reminders set. The system is set to send 2 reminders each month, one > 15 days prior to the expiry date and the second one 7 days before > expiry. On the 2nd half of March, the monitoring system sent a > reminder to perform the offline refresh but this was not acted upon. > > ? > > ? > > On Saturday 06 April 2019,? Certificate revocation List (CRL) and the > manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). > Our monitoring system picked this up. The immediate action was to > generate new certificates and manifest file and upload them onto RPKI > engine system. > > ? > > The failure was as a result of human error, no changes were made on > the system but we have taken additional steps to the existing process > to ensure that this does not happen again. We do acknowledge that it > is unacceptable to have such a failure with critical infrastructure > and necessary done in this regard. > > ? > > ? > > We do apologize for the inconvenience caused and thank you for your > patience in this regard. > > -- > _______________________________________________________________ > Cedrick Adrien Mbeyet > Infrastructure Unit Manager, AFRINIC Ltd. > t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net > facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia > ______________________________________________________ > -------------- next part -------------- An HTML attachment was scrubbed... URL: From saul at enetworks.co.za Wed Apr 10 09:55:46 2019 From: saul at enetworks.co.za (Saul Stein) Date: Wed, 10 Apr 2019 11:55:46 +0200 (SAST) Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> Message-ID: <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> Agreed. There is a bigger issue at stake here: I have yet to see any evidence that AFRINIC takes RPKI seriously. The last issue I had, when no ROAs could be added, deleted etc, it was admitted that the issue was known about for over two weeks without anything on the announce list or being fixed! After escalation to the CEO and others it was fixed in a couple of hours! RPKI is serious and needs to be taken seriously. We can?t continuously be having issues with it. It is like customs at immigration being offline! Cheers Saul From: Mark Tinka [mailto:mark.tinka at seacom.mu] Sent: 10 April 2019 08:32 AM To: community-discuss at afrinic.net Subject: Re: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report Thanks, Cedrick. A question that is, perhaps, obvious... are you able to take the human component out of this? If 2 reminders were not enough to get the humans to act, I'm not sure the current methodology is sustainable. Mark. On 8/Apr/19 17:46, Cedrick Adrien Mbeyet wrote: Dear AFRINIC community, Find below postmortem report on the incident that happen on 06 April 2019. The AFRINIC RPKI engine has an offline part that has to be renewed on a monthly bases. The process is known, documented and automated reminders set. The system is set to send 2 reminders each month, one 15 days prior to the expiry date and the second one 7 days before expiry. On the 2nd half of March, the monitoring system sent a reminder to perform the offline refresh but this was not acted upon. On Saturday 06 April 2019, Certificate revocation List (CRL) and the manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our monitoring system picked this up. The immediate action was to generate new certificates and manifest file and upload them onto RPKI engine system. The failure was as a result of human error, no changes were made on the system but we have taken additional steps to the existing process to ensure that this does not happen again. We do acknowledge that it is unacceptable to have such a failure with critical infrastructure and necessary done in this regard. We do apologize for the inconvenience caused and thank you for your patience in this regard. -- _______________________________________________________________ Cedrick Adrien Mbeyet Infrastructure Unit Manager, AFRINIC Ltd. t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia ______________________________________________________ -------------- next part -------------- An HTML attachment was scrubbed... URL: From noah at neo.co.tz Wed Apr 10 10:09:00 2019 From: noah at neo.co.tz (Noah) Date: Wed, 10 Apr 2019 13:09:00 +0300 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> Message-ID: +1 and Ack @saul On Wed, 10 Apr 2019, 12:57 Saul Stein, wrote: > Agreed. > > > > There is a bigger issue at stake here: I have yet to see any evidence that > AFRINIC takes RPKI seriously. > > The last issue I had, when no ROAs could be added, deleted etc, it was > admitted that the issue was known about for over two weeks without anything > on the announce list or being fixed! After escalation to the CEO and others > it was fixed in a couple of hours! > > > > RPKI is serious and needs to be taken seriously. We can?t continuously be > having issues with it. It is like customs at immigration being offline! > > > > Cheers > > Saul > > > > *From:* Mark Tinka [mailto:mark.tinka at seacom.mu] > *Sent:* 10 April 2019 08:32 AM > *To:* community-discuss at afrinic.net > *Subject:* Re: [Community-Discuss] 06 April 2019 RPKI incident - > Postmortem report > > > > Thanks, Cedrick. > > A question that is, perhaps, obvious... are you able to take the human > component out of this? If 2 reminders were not enough to get the humans to > act, I'm not sure the current methodology is sustainable. > > Mark. > > On 8/Apr/19 17:46, Cedrick Adrien Mbeyet wrote: > > Dear AFRINIC community, > > > > Find below postmortem report on the incident that happen on 06 April 2019. > > > > The AFRINIC RPKI engine has an offline part that has to be renewed on a > monthly bases. The process is known, documented and automated reminders > set. The system is set to send 2 reminders each month, one 15 days prior to > the expiry date and the second one 7 days before expiry. On the 2nd half of > March, the monitoring system sent a reminder to perform the offline refresh > but this was not acted upon. > > > > > > On Saturday 06 April 2019, Certificate revocation List (CRL) and the > manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our > monitoring system picked this up. The immediate action was to generate new > certificates and manifest file and upload them onto RPKI engine system. > > > > The failure was as a result of human error, no changes were made on the > system but we have taken additional steps to the existing process to ensure > that this does not happen again. We do acknowledge that it is unacceptable > to have such a failure with critical infrastructure and necessary done in > this regard. > > > > > > We do apologize for the inconvenience caused and thank you for your > patience in this regard. > > -- > > _______________________________________________________________ > > Cedrick Adrien Mbeyet > > Infrastructure Unit Manager, AFRINIC Ltd. > > t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net > > facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia > > ______________________________________________________ > > > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: From sfolayan at gmail.com Wed Apr 10 10:34:36 2019 From: sfolayan at gmail.com (Sunday Folayan) Date: Wed, 10 Apr 2019 11:34:36 +0100 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> Message-ID: Hi Cedrick and the team, Can the certificate generation and update be automated and handled by a script? I guess alerts when such an update fails will be taken more seriously. Can the AfriNIC RPKI-WG be more involved in assuring stability rather than leave the community to discover and complain? Just musing. Good luck with the automation. Sunday. On Mon, Apr 8, 2019, 16:46 Cedrick Adrien Mbeyet wrote: > Dear AFRINIC community, > > > Find below postmortem report on the incident that happen on 06 April 2019. > > > > The AFRINIC RPKI engine has an offline part that has to be renewed on a > monthly bases. The process is known, documented and automated reminders > set. The system is set to send 2 reminders each month, one 15 days prior to > the expiry date and the second one 7 days before expiry. On the 2nd half of > March, the monitoring system sent a reminder to perform the offline refresh > but this was not acted upon. > > > > > > On Saturday 06 April 2019, Certificate revocation List (CRL) and the > manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our > monitoring system picked this up. The immediate action was to generate new > certificates and manifest file and upload them onto RPKI engine system. > > > > The failure was as a result of human error, no changes were made on the > system but we have taken additional steps to the existing process to ensure > that this does not happen again. We do acknowledge that it is unacceptable > to have such a failure with critical infrastructure and necessary done in > this regard. > > > > > We do apologize for the inconvenience caused and thank you for your > patience in this regard. > > > -- > _______________________________________________________________ > Cedrick Adrien Mbeyet > Infrastructure Unit Manager, AFRINIC Ltd. > t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.netfacebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia > ______________________________________________________ > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: From benm at workonline.africa Wed Apr 10 10:57:30 2019 From: benm at workonline.africa (Ben Maddison) Date: Wed, 10 Apr 2019 10:57:30 +0000 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za>, Message-ID: Hi all, On 2019-04-10 12:10:22+02:00 Noah wrote: +1 and Ack @saul On Wed, 10 Apr 2019, 12:57 Saul Stein, > wrote: Agreed. There is a bigger issue at stake here: I have yet to see any evidence that AFRINIC takes RPKI seriously. Until relatively recently, this attitude may have been understandable, since the RPKI was largely a curiosity with almost no impact on operations. This is no longer the case, and all of the RIRs have serious work to do to improve operations in this area. This is clearly the case in this region. The last issue I had, when no ROAs could be added, deleted etc, it was admitted that the issue was known about for over two weeks without anything on the announce list or being fixed! After escalation to the CEO and others it was fixed in a couple of hours! As an operator community, we need to have a serious conversation about what we expect from afrinic (and the other RIRs). 24x7 availability comes with a price tag, as everyone on this list should be all too aware. It is quite clear however, both from recent experience and from the postmortem below, that the current system is unfit for purpose. RPKI is serious and needs to be taken seriously. We can?t continuously be having issues with it. It is like customs at immigration being offline! Maybe we can move this to rpki-discuss, and have a proper conversation about a plan of action that the interested members of the community can help refine and comment on? That may prove more productive than waving our metaphors around. Cheers, Ben Cheers Saul From: Mark Tinka [mailto:mark.tinka at seacom.mu] Sent: 10 April 2019 08:32 AM To: community-discuss at afrinic.net Subject: Re: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report Thanks, Cedrick. A question that is, perhaps, obvious... are you able to take the human component out of this? If 2 reminders were not enough to get the humans to act, I'm not sure the current methodology is sustainable. Mark. On 8/Apr/19 17:46, Cedrick Adrien Mbeyet wrote: Dear AFRINIC community, Find below postmortem report on the incident that happen on 06 April 2019. The AFRINIC RPKI engine has an offline part that has to be renewed on a monthly bases. The process is known, documented and automated reminders set. The system is set to send 2 reminders each month, one 15 days prior to the expiry date and the second one 7 days before expiry. On the 2nd half of March, the monitoring system sent a reminder to perform the offline refresh but this was not acted upon. On Saturday 06 April 2019, Certificate revocation List (CRL) and the manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our monitoring system picked this up. The immediate action was to generate new certificates and manifest file and upload them onto RPKI engine system. The failure was as a result of human error, no changes were made on the system but we have taken additional steps to the existing process to ensure that this does not happen again. We do acknowledge that it is unacceptable to have such a failure with critical infrastructure and necessary done in this regard. We do apologize for the inconvenience caused and thank you for your patience in this regard. -- _______________________________________________________________ Cedrick Adrien Mbeyet Infrastructure Unit Manager, AFRINIC Ltd. t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia ______________________________________________________ _______________________________________________ Community-Discuss mailing list Community-Discuss at afrinic.net https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Wed Apr 10 12:59:50 2019 From: owen at delong.com (Owen DeLong) Date: Wed, 10 Apr 2019 05:59:50 -0700 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> Message-ID: <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> > On Apr 10, 2019, at 3:57 AM, Ben Maddison via Community-Discuss wrote: > > Hi all, > > On 2019-04-10 12:10:22+02:00 Noah wrote: > > +1 and Ack @saul > > On Wed, 10 Apr 2019, 12:57 Saul Stein, > wrote: > Agreed. > > > There is a bigger issue at stake here: I have yet to see any evidence that AFRINIC takes RPKI seriously. > > > Until relatively recently, this attitude may have been understandable, since the RPKI was largely a curiosity with almost no impact on operations. > This is no longer the case, and all of the RIRs have serious work to do to improve operations in this area. This is clearly the case in this region. Absent a badly flawed implementation, there?s no serious consequence to an RPKI outage? It merely reverts routing back to it?s previous unauthenticated state. I?m not convinced that all of the RIRs have serious work to do here. I think some of the RIRs have stable, reliable operations in this regard. I?m not yet convinced that the level of stability in AfriNIC operations here is impactful, let alone seriously impactful to operations. > The last issue I had, when no ROAs could be added, deleted etc, it was admitted that the issue was known about for over two weeks without anything on the announce list or being fixed! After escalation to the CEO and others it was fixed in a couple of hours! > > > As an operator community, we need to have a serious conversation about what we expect from afrinic (and the other RIRs). 24x7 availability comes with a price tag, as everyone on this list should be all too aware. Any availability comes with a price tag. The higher the level of availability, the higher the price tag. > It is quite clear however, both from recent experience and from the postmortem below, that the current system is unfit for purpose. Is it? I?m unconvinced at this time? > RPKI is serious and needs to be taken seriously. We can?t continuously be having issues with it. It is like customs at immigration being offline! > RPKI is operational. I?m not sure how serious it is, as I have trouble taking seriously a system which, at best, tells you what you need to prepend. It?s a nice protection from fat fingers, but, in its current state, it provides little to no protection beyond that for anyone but the largest operators. Nonetheless, even if one wants to take RPKI seriously, a quick review of the RFCs and IETF guidance on the matter shows that the worst case scenario for an RIR outage on ROA publication should be that routing reverts to its pre-RPKI unauthenticated state. It should not cause any sort of outage (except to the extent you might start accepting routes you previously rejected). If you?re rejecting routes for RPKI validation failure, you should be tracking down the advertisers and getting those situations corrected. If you?re doing that, then any such outages should be somewhere between minimal and non-existent. Did any packets go the wrong way due to the AfriNIC outage? Was there any actual operational impact? I suspect not. I suspect that this is a lot of handwaving about a non-issue. Don?t get me wrong, I?m all for making AfriNIC?s systems more resilient and more available, but, I think we also need to consider the actual impact of failures and not over-react to failures without impact. Based on the information in the post mortem, it does not look like a systems failure, but purely human error. Taking the humans out of the loop on that monthly maintenance would involve compromising the integrity of the private key and thus reduce the validity of the RPKI data. As such, I?m not convinced that there is a problem here to solve beyond the procedural changes that AfriNIC says they have already implemented. Owen > From: Mark Tinka [mailto:mark.tinka at seacom.mu ] > Sent: 10 April 2019 08:32 AM > To: community-discuss at afrinic.net > Subject: Re: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report > > > Thanks, Cedrick. > > A question that is, perhaps, obvious... are you able to take the human component out of this? If 2 reminders were not enough to get the humans to act, I'm not sure the current methodology is sustainable. > > Mark. > > On 8/Apr/19 17:46, Cedrick Adrien Mbeyet wrote: > > Dear AFRINIC community, > > > Find below postmortem report on the incident that happen on 06 April 2019. > > > The AFRINIC RPKI engine has an offline part that has to be renewed on a monthly bases. The process is known, documented and automated reminders set. The system is set to send 2 reminders each month, one 15 days prior to the expiry date and the second one 7 days before expiry. On the 2nd half of March, the monitoring system sent a reminder to perform the offline refresh but this was not acted upon. > > > > On Saturday 06 April 2019, Certificate revocation List (CRL) and the manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our monitoring system picked this up. The immediate action was to generate new certificates and manifest file and upload them onto RPKI engine system. > > > The failure was as a result of human error, no changes were made on the system but we have taken additional steps to the existing process to ensure that this does not happen again. We do acknowledge that it is unacceptable to have such a failure with critical infrastructure and necessary done in this regard. > > > > We do apologize for the inconvenience caused and thank you for your patience in this regard. > > -- > _______________________________________________________________ > Cedrick Adrien Mbeyet > Infrastructure Unit Manager, AFRINIC Ltd. > t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net > facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia > ______________________________________________________ > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Wed Apr 10 13:02:53 2019 From: owen at delong.com (Owen DeLong) Date: Wed, 10 Apr 2019 06:02:53 -0700 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> Message-ID: <1F40359F-A556-4E73-9601-E63EA6067CE3@delong.com> If you automate the process, you have to store the private key in a manner in which it can be accessed automatically. This compromises the integrity of the key as it must be stored online (or be usable through an on-line process) rather than being kept offline and utilized via an HSM or other secure process. Owen > On Apr 10, 2019, at 3:34 AM, Sunday Folayan wrote: > > Hi Cedrick and the team, > > Can the certificate generation and update be automated and handled by a script? I guess alerts when such an update fails will be taken more seriously. > > Can the AfriNIC RPKI-WG be more involved in assuring stability rather than leave the community to discover and complain? > > Just musing. > > Good luck with the automation. > > Sunday. > > On Mon, Apr 8, 2019, 16:46 Cedrick Adrien Mbeyet > wrote: > > Dear AFRINIC community, > > > > Find below postmortem report on the incident that happen on 06 April 2019. > > > The AFRINIC RPKI engine has an offline part that has to be renewed on a monthly bases. The process is known, documented and automated reminders set. The system is set to send 2 reminders each month, one 15 days prior to the expiry date and the second one 7 days before expiry. On the 2nd half of March, the monitoring system sent a reminder to perform the offline refresh but this was not acted upon. > > > > On Saturday 06 April 2019, Certificate revocation List (CRL) and the manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our monitoring system picked this up. The immediate action was to generate new certificates and manifest file and upload them onto RPKI engine system. > > > The failure was as a result of human error, no changes were made on the system but we have taken additional steps to the existing process to ensure that this does not happen again. We do acknowledge that it is unacceptable to have such a failure with critical infrastructure and necessary done in this regard. > > > > We do apologize for the inconvenience caused and thank you for your patience in this regard. > > -- > _______________________________________________________________ > Cedrick Adrien Mbeyet > Infrastructure Unit Manager, AFRINIC Ltd. > t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net > facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia > ______________________________________________________ > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Wed Apr 10 13:04:55 2019 From: owen at delong.com (Owen DeLong) Date: Wed, 10 Apr 2019 06:04:55 -0700 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> Message-ID: <468E627E-EF3A-4EFA-8D87-42DC6927E97B@delong.com> > The last issue I had, when no ROAs could be added, deleted etc, it was admitted that the issue was known about for over two weeks without anything on the announce list or being fixed! After escalation to the CEO and others it was fixed in a couple of hours! > I believe that is a mischaracterization of what happened? An alert that the issue was pending was not acted upon for two weeks before the issue started. The issue was resolved within hours of when the issue started, if I understood the postmortem correctly. Owen -------------- next part -------------- An HTML attachment was scrubbed... URL: From danielshaw at protonmail.com Wed Apr 10 13:11:04 2019 From: danielshaw at protonmail.com (Daniel Shaw) Date: Wed, 10 Apr 2019 13:11:04 +0000 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> Message-ID: <6O8xFXW8BAWxBR3qwXbJo_bKr7japeknGep9gTcJ2JE3Po5lPQMaizYpfI1EHxLFCxjJFnAzOZx9-n_AVfgHkBUBiAS6OJvRqKqVPg2TJ3c=@protonmail.com> Hi Mark, Saul, Sunday, all, I suppose that Cedrick or other staff may possibly reply in due course with more details as regards this specific implementation of a CA (aka the AFRINIC RPKI CA). However let me respond a bit generally about the reason to have an offline portion of a CA. Ultimately, a CA involves certificates and crypto as we all know. And this needs keys, including private keys. The integrity of the entire system below the CA depends on the top level private keys being ... private. To automate anything the system doing the automation needs to connect to the system being automated. In other words everything has to be "online" to an extent. The thinking, generally, is that anything that is connected to other things has the potential, however small the chance to be compromised. Therefore, the best way to ensure absolute and certain privacy of the all-important private key material is to "air-gap" it. And thus it follows that when something else needs to be signed/verified using these offline keys, you also don't want to copy them online, even briefly and so you do the work offline and then copy the results back online. It is this copy - bridging the air gap - that requires a human. Put another way: You can't really automate sneaker-net. - Daniel ??????? Original Message ??????? On Wednesday, April 10, 2019 8:32 AM, Mark Tinka wrote: > Thanks, Cedrick. > > A question that is, perhaps, obvious... are you able to take the human component out of this? -------------- next part -------------- An HTML attachment was scrubbed... URL: From sfolayan at gmail.com Wed Apr 10 13:23:57 2019 From: sfolayan at gmail.com (Sunday Folayan) Date: Wed, 10 Apr 2019 14:23:57 +0100 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <6O8xFXW8BAWxBR3qwXbJo_bKr7japeknGep9gTcJ2JE3Po5lPQMaizYpfI1EHxLFCxjJFnAzOZx9-n_AVfgHkBUBiAS6OJvRqKqVPg2TJ3c=@protonmail.com> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <6O8xFXW8BAWxBR3qwXbJo_bKr7japeknGep9gTcJ2JE3Po5lPQMaizYpfI1EHxLFCxjJFnAzOZx9-n_AVfgHkBUBiAS6OJvRqKqVPg2TJ3c=@protonmail.com> Message-ID: Thanks Danny, Better understood, the offline portion of the process. So ..... A simple Nagios plugin can be bright yellow 7 days to doomsday and blood red, three days to doomsday. Visible to all devops. Email is just too basic as an alert. Sunday. On Wed, Apr 10, 2019, 14:11 Daniel Shaw via Community-Discuss < community-discuss at afrinic.net> wrote: > Hi Mark, Saul, Sunday, all, > > I suppose that Cedrick or other staff may possibly reply in due course > with more details as regards this specific implementation of a CA (aka the > AFRINIC RPKI CA). However let me respond a bit generally about the reason > to have an offline portion of a CA. > > Ultimately, a CA involves certificates and crypto as we all know. And this > needs keys, including private keys. The integrity of the entire system > below the CA depends on the top level private keys being ... private. > > To automate anything the system doing the automation needs to connect to > the system being automated. In other words everything has to be "online" to > an extent. The thinking, generally, is that anything that is connected to > other things has the potential, however small the chance to be compromised. > Therefore, the best way to ensure absolute and certain privacy of the > all-important private key material is to "air-gap" it. > > And thus it follows that when something else needs to be signed/verified > using these offline keys, you also don't want to copy them online, even > briefly and so you do the work offline and then copy the results back > online. It is this copy - bridging the air gap - that requires a human. > > Put another way: You can't really automate sneaker-net. > > - Daniel > > > > ??????? Original Message ??????? > On Wednesday, April 10, 2019 8:32 AM, Mark Tinka > wrote: > > Thanks, Cedrick. > > A question that is, perhaps, obvious... are you able to take the human > component out of this? > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: From saul at enetworks.co.za Wed Apr 10 13:43:58 2019 From: saul at enetworks.co.za (Saul Stein) Date: Wed, 10 Apr 2019 15:43:58 +0200 (SAST) Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <468E627E-EF3A-4EFA-8D87-42DC6927E97B@delong.com> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> <468E627E-EF3A-4EFA-8D87-42DC6927E97B@delong.com> Message-ID: <008401d4efa3$72d1b240$587516c0$@enetworks.co.za> Owen, The issue I am referring to is another issue ? I was told it was Javascript related. It was December 2018 ? known issue for 3 weeks. I think that Ben has the right idea ? we need to move this to the RPKI list and manage expectations. Cheers Saul From: Owen DeLong [mailto:owen at delong.com] Sent: 10 April 2019 03:05 PM To: Noah Cc: Saul Stein ; General Discussions of AFRINIC Subject: Re: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report The last issue I had, when no ROAs could be added, deleted etc, it was admitted that the issue was known about for over two weeks without anything on the announce list or being fixed! After escalation to the CEO and others it was fixed in a couple of hours! I believe that is a mischaracterization of what happened? An alert that the issue was pending was not acted upon for two weeks before the issue started. The issue was resolved within hours of when the issue started, if I understood the postmortem correctly. Owen -------------- next part -------------- An HTML attachment was scrubbed... URL: From noah at neo.co.tz Wed Apr 10 13:57:42 2019 From: noah at neo.co.tz (Noah) Date: Wed, 10 Apr 2019 16:57:42 +0300 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <1F40359F-A556-4E73-9601-E63EA6067CE3@delong.com> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <1F40359F-A556-4E73-9601-E63EA6067CE3@delong.com> Message-ID: On Wed, Apr 10, 2019 at 4:04 PM Owen DeLong wrote: > If you automate the process, you have to store the private key in a manner > in which it can be accessed automatically. > The only process that needs automation is the timing of when certificates expire next [1] so as to best inform the humans and invoke pro-activeness which includes offline testing to avoid any human errors that may result in live production. Noah [1] they indicated the monitoring system picked the issue up but perhaps more pro-activeness and offline testing to avoid human errors in the future would come in handy. -------------- next part -------------- An HTML attachment was scrubbed... URL: From benm at workonline.africa Wed Apr 10 14:00:12 2019 From: benm at workonline.africa (Ben Maddison) Date: Wed, 10 Apr 2019 14:00:12 +0000 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> , <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> Message-ID: Hi Owen, On 2019-04-10 15:00:28+02:00 Owen DeLong wrote: On Apr 10, 2019, at 3:57 AM, Ben Maddison via Community-Discuss > wrote: Hi all, On 2019-04-10 12:10:22+02:00 Noah wrote: +1 and Ack @saul On Wed, 10 Apr 2019, 12:57 Saul Stein, > wrote: Agreed. There is a bigger issue at stake here: I have yet to see any evidence that AFRINIC takes RPKI seriously. Until relatively recently, this attitude may have been understandable, since the RPKI was largely a curiosity with almost no impact on operations. This is no longer the case, and all of the RIRs have serious work to do to improve operations in this area. This is clearly the case in this region. Absent a badly flawed implementation, there?s no serious consequence to an RPKI outage? It merely reverts routing back to it?s previous unauthenticated state. That's not entirely true. A partial outage (where for example a single TAL becomes unverifiable, as in this case) may lead to a missing ROA for a prefix that remains covered by other ROAs issued under other TALs. Consider ROAs: {prefix: 2001:db8::/32, maxLength: 48, asn: 65000, tal: AFRINIC} {prefix: 2001:db8:f00::/48, maxLength: 48, asn: 65001, tal: RIPE} With the above, a route 2001:db8:f00::/48 via 65000_65001 will have a status Valid. If the RIPE TAL fails verification, it will become Invalid. This is most certainly a corner case, but is at least theoretically possible given that all RIRs claim 0/0 in their root certs. A more likely scenario is that an existing mis-origination that is being dropped as Invalid suddenly becomes Not Found, and wins path selection, thereby misdirecting traffic. I'm not aware of any such cases on our network from this last outage, but it's possible that they went undetected. The likelihood of this case increases substantially as more operators begin to drop Invalids. I?m not convinced that all of the RIRs have serious work to do here. I think some of the RIRs have stable, reliable operations in this regard. I?m not yet convinced that the level of stability in AfriNIC operations here is impactful, let alone seriously impactful to operations. The last issue I had, when no ROAs could be added, deleted etc, it was admitted that the issue was known about for over two weeks without anything on the announce list or being fixed! After escalation to the CEO and others it was fixed in a couple of hours! As an operator community, we need to have a serious conversation about what we expect from afrinic (and the other RIRs). 24x7 availability comes with a price tag, as everyone on this list should be all too aware. Any availability comes with a price tag. The higher the level of availability, the higher the price tag. It is quite clear however, both from recent experience and from the postmortem below, that the current system is unfit for purpose. Is it? I?m unconvinced at this time? A system, whether human or computerised, that fails to mitigate an impending and predictable failure, and then takes several hours to correct it is, in my book the very definition of unfit for purpose. RPKI is serious and needs to be taken seriously. We can?t continuously be having issues with it. It is like customs at immigration being offline! RPKI is operational. I?m not sure how serious it is, as I have trouble taking seriously a system which, at best, tells you what you need to prepend. It?s a nice protection from fat fingers, but, in its current state, it provides little to no protection beyond that for anyone but the largest operators. Becoming bestpath in a densely-interconnected network using a forged-origin hijack in the face of a ROA that has all it's covered prefixes in the DFZ is actually not trivial, and often not possible, because you loose on path-length. This is even more true in networks that filter peers and customers by prefix, as you have less chance of exploiting a higher local-pref to overcome path-length. As a result, the protection that OV offers is not meaningless. OV is also a prerequisite for validating the entire path against stated policy, various mechanisms for which are currently WIP in SIDROPS and GROW. Nonetheless, even if one wants to take RPKI seriously, a quick review of the RFCs and IETF guidance on the matter shows that the worst case scenario for an RIR outage on ROA publication should be that routing reverts to its pre-RPKI unauthenticated state. It should not cause any sort of outage (except to the extent you might start accepting routes you previously rejected). If you?re rejecting routes for RPKI validation failure, you should be tracking down the advertisers and getting those situations corrected. If you?re doing that, then any such outages should be somewhere between minimal and non-existent. If issuing party tools are unavailable to resource holders, they will be unable to effect the correction. Did any packets go the wrong way due to the AfriNIC outage? Was there any actual operational impact? I suspect not. I suspect that this is a lot of handwaving about a non-issue. I suspect some, though certainly few. The same incident at a time when more networks are performing OV could look very different, and I'm simply suggesting that we look closely at the options before that happens. Don?t get me wrong, I?m all for making AfriNIC?s systems more resilient and more available, but, I think we also need to consider the actual impact of failures and not over-react to failures without impact. Based on the information in the post mortem, it does not look like a systems failure, but purely human error. Taking the humans out of the loop on that monthly maintenance would involve compromising the integrity of the private key and thus reduce the validity of the RPKI data. As such, I?m not convinced that there is a problem here to solve beyond the procedural changes that AfriNIC says they have already implemented. I'm not arguing for any specific change. I would point out that when there are humans in the system, then a human failure *is* a system failure, and we should be clear on what failure modes can and cannot be tolerated. Adding rpki-discuss, so that we can continue there... Cheers, Ben Owen From: Mark Tinka [mailto:mark.tinka at seacom.mu] Sent: 10 April 2019 08:32 AM To: community-discuss at afrinic.net Subject: Re: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report Thanks, Cedrick. A question that is, perhaps, obvious... are you able to take the human component out of this? If 2 reminders were not enough to get the humans to act, I'm not sure the current methodology is sustainable. Mark. On 8/Apr/19 17:46, Cedrick Adrien Mbeyet wrote: Dear AFRINIC community, Find below postmortem report on the incident that happen on 06 April 2019. The AFRINIC RPKI engine has an offline part that has to be renewed on a monthly bases. The process is known, documented and automated reminders set. The system is set to send 2 reminders each month, one 15 days prior to the expiry date and the second one 7 days before expiry. On the 2nd half of March, the monitoring system sent a reminder to perform the offline refresh but this was not acted upon. On Saturday 06 April 2019, Certificate revocation List (CRL) and the manifest file of AFRINIC RPKI repository expired (around 07:24AM UTC). Our monitoring system picked this up. The immediate action was to generate new certificates and manifest file and upload them onto RPKI engine system. The failure was as a result of human error, no changes were made on the system but we have taken additional steps to the existing process to ensure that this does not happen again. We do acknowledge that it is unacceptable to have such a failure with critical infrastructure and necessary done in this regard. We do apologize for the inconvenience caused and thank you for your patience in this regard. -- _______________________________________________________________ Cedrick Adrien Mbeyet Infrastructure Unit Manager, AFRINIC Ltd. t: +230 403 5100 / 403 5115 | f: +230 466 6758 | tt: @afrinic | w: www.afrinic.net facebook.com/afrinic | flickr.com/afrinic | youtube.com/afrinicmedia ______________________________________________________ _______________________________________________ Community-Discuss mailing list Community-Discuss at afrinic.net https://lists.afrinic.net/mailman/listinfo/community-discuss _______________________________________________ Community-Discuss mailing list Community-Discuss at afrinic.net https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From kaddyjatou2 at gmail.com Wed Apr 10 15:58:59 2019 From: kaddyjatou2 at gmail.com (kaddyjatou2) Date: Wed, 10 Apr 2019 15:58:59 +0000 Subject: [Community-Discuss] Hi Message-ID: <5cae12d8.1c69fb81.3cd8.38de@mx.google.com> I am new to this discussion, can someone update about the topics. Sent from my Samsung Galaxy smartphone. -------------- next part -------------- An HTML attachment was scrubbed... URL: From sander at steffann.nl Wed Apr 10 16:25:26 2019 From: sander at steffann.nl (Sander Steffann) Date: Wed, 10 Apr 2019 18:25:26 +0200 Subject: [Community-Discuss] Hi In-Reply-To: <5cae12d8.1c69fb81.3cd8.38de@mx.google.com> References: <5cae12d8.1c69fb81.3cd8.38de@mx.google.com> Message-ID: Hello, > I am new to this discussion, can someone update about the topics. There is a lot of history. I suggest you go to https://lists.afrinic.net/pipermail/community-discuss/ to read up on what has been happening here. You can find the full history of this list there. Cheers, Sander -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 488 bytes Desc: Message signed with OpenPGP URL: From mark.tinka at seacom.mu Wed Apr 10 18:45:20 2019 From: mark.tinka at seacom.mu (Mark Tinka) Date: Wed, 10 Apr 2019 20:45:20 +0200 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> Message-ID: On 10/Apr/19 14:59, Owen DeLong wrote: > > RPKI is operational. I?m not sure how serious it is, as I have trouble > taking seriously a system which, at best, tells you what you need to > prepend. It?s a nice protection from fat fingers, but, in its current > state, it provides little to no protection beyond that for anyone but > the largest operators. > > Nonetheless, even if one wants to take RPKI seriously, a quick review > of the RFCs and IETF guidance on the matter shows that the worst case > scenario for an RIR outage on ROA publication should be that routing > reverts to its pre-RPKI unauthenticated state. It should not cause any > sort of outage (except to the extent you might start accepting routes > you previously rejected). > > If you?re rejecting routes for RPKI validation failure, you should be > tracking down the advertisers and getting those situations corrected. > If you?re doing that, then any such outages should be somewhere > between minimal and non-existent. > > Did any packets go the wrong way due to the AfriNIC outage? Was there > any actual operational impact? > > I suspect not. I suspect that this is a lot of handwaving about a > non-issue. > > Don?t get me wrong, I?m all for making AfriNIC?s systems more > resilient and more available, but, I think we also need to consider > the actual impact of failures and not over-react to failures without > impact. I, for one, need to gain operational experience about RPKI, and start to form some BCP's that will be helpful in the coming months/years. RPKI is here (like IPv6 and DNSSEC), so the time to argue its merits is long gone. One is welcome not to use it if they so wish, but for those that want to, we can only gain experience when the base system is stable and free of simple, reasonably avoidable errors. Mark. From owen at delong.com Wed Apr 10 19:39:04 2019 From: owen at delong.com (Owen DeLong) Date: Wed, 10 Apr 2019 12:39:04 -0700 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> Message-ID: <78AB9BD0-94E4-4C87-B0AC-317C0A4E8F54@delong.com> > On Apr 10, 2019, at 7:00 AM, Ben Maddison wrote: > > Hi Owen, > > On 2019-04-10 15:00:28+02:00 Owen DeLong wrote: > > >> >> On Apr 10, 2019, at 3:57 AM, Ben Maddison via Community-Discuss > wrote: >> >> Hi all, >> >> On 2019-04-10 12:10:22+02:00 Noah wrote: >> >> +1 and Ack @saul >> >> On Wed, 10 Apr 2019, 12:57 Saul Stein, > wrote: >> Agreed. >> >> >> There is a bigger issue at stake here: I have yet to see any evidence that AFRINIC takes RPKI seriously. >> >> >> Until relatively recently, this attitude may have been understandable, since the RPKI was largely a curiosity with almost no impact on operations. >> This is no longer the case, and all of the RIRs have serious work to do to improve operations in this area. This is clearly the case in this region. > Absent a badly flawed implementation, there?s no serious consequence to an RPKI outage? It merely reverts routing back to it?s previous unauthenticated state. > > That's not entirely true. A partial outage (where for example a single TAL becomes unverifiable, as in this case) may lead to a missing ROA for a prefix that remains covered by other ROAs issued under other TALs. > > Consider ROAs: > {prefix: 2001:db8::/32, maxLength: 48, asn: 65000, tal: AFRINIC} > {prefix: 2001:db8:f00::/48, maxLength: 48, asn: 65001, tal: RIPE} > > With the above, a route 2001:db8:f00::/48 via 65000_65001 will have a status Valid. > If the RIPE TAL fails verification, it will become Invalid. If I understand it correctly, however, ALL of the RIRs mirror all of the other RIRs data, so you should be able to get a complete set of data from any RIR. The TAL is very long term cacheable (at least 30 days). What happened in this instance wasn?t an issue of the TAL becoming unavailable, but the TAL (and related certificates) going past their expiration date without being renewed. Further, absent inter-RIR IPv6 transfers (which to the best of my knowledge are only permitted from RIPE to RIPE), that circumstance cannot occur. > This is most certainly a corner case, but is at least theoretically possible given that all RIRs claim 0/0 in their root certs. Only if Inter-RIR IPv6 transfers are permitted. So, this is, in fact, a valid argument against a current ARIN proposal to allow such transfers, but in the current instance, it?s not actually a concern. > A more likely scenario is that an existing mis-origination that is being dropped as Invalid suddenly becomes Not Found, and wins path selection, thereby misdirecting traffic. I did mention that as a possible consequence below. > I'm not aware of any such cases on our network from this last outage, but it's possible that they went undetected. The likelihood of this case increases substantially as more operators begin to drop Invalids. My point earlier was that it actually shouldn?t. If there is growth in the number of rejected routes from RPKI, that indicates that operators aren?t doing their due diligence when that happens. A route should only be dropped by RPKI for a very short period of time while the originating ASN and/or upstreams of the originating ASN are contacted to cease and desist the announcement of this route. > I?m not convinced that all of the RIRs have serious work to do here. I think some of the RIRs have stable, reliable operations in this regard. I?m not yet convinced that the level of stability in AfriNIC operations here is impactful, let alone seriously impactful to operations. > >> >> The last issue I had, when no ROAs could be added, deleted etc, it was admitted that the issue was known about for over two weeks without anything on the announce list or being fixed! After escalation to the CEO and others it was fixed in a couple of hours! >> >> >> As an operator community, we need to have a serious conversation about what we expect from afrinic (and the other RIRs). 24x7 availability comes with a price tag, as everyone on this list should be all too aware. > Any availability comes with a price tag. The higher the level of availability, the higher the price tag. > >> >> It is quite clear however, both from recent experience and from the postmortem below, that the current system is unfit for purpose. > Is it? I?m unconvinced at this time? > > A system, whether human or computerised, that fails to mitigate an impending and predictable failure, and then takes several hours to correct it is, in my book the very definition of unfit for purpose. Not necessarily. It is certainly the definition of a system which can be improved and which has flaws in its inherent design. >> RPKI is serious and needs to be taken seriously. We can?t continuously be having issues with it. It is like customs at immigration being offline! >> > RPKI is operational. I?m not sure how serious it is, as I have trouble taking seriously a system which, at best, tells you what you need to prepend. It?s a nice protection from fat fingers, but, in its current state, it provides little to no protection beyond that for anyone but the largest operators. > > Becoming bestpath in a densely-interconnected network using a forged-origin hijack in the face of a ROA that has all it's covered prefixes in the DFZ is actually not trivial, and often not possible, because you loose on path-length. If you?re forging a major provider?s origin AS, sure. If you?re forging a remote single-homed customer of a small rural ISP that buys from a reseller of a reseller of a transit backbone, it gets fairly trivial if you can find a cooperative (or inattentive) network close to a major IX (not so hard currently). > This is even more true in networks that filter peers and customers by prefix, as you have less chance of exploiting a higher local-pref to overcome path-length. > As a result, the protection that OV offers is not meaningless. Yes, but you only need to tie the path length, and you don?t necessarily need to hijack 100% of traffic to achieve a useful result, depending on the goal of your particular hijack. > OV is also a prerequisite for validating the entire path against stated policy, various mechanisms for which are currently WIP in SIDROPS and GROW. Yes, but none of those has much promise of producing a useful result in the foreseeable future. Once they do, then I might consider this serious vs. merely operational. > Nonetheless, even if one wants to take RPKI seriously, a quick review of the RFCs and IETF guidance on the matter shows that the worst case scenario for an RIR outage on ROA publication should be that routing reverts to its pre-RPKI unauthenticated state. It should not cause any sort of outage (except to the extent you might start accepting routes you previously rejected). > If you?re rejecting routes for RPKI validation failure, you should be tracking down the advertisers and getting those situations corrected. If you?re doing that, then any such outages should be somewhere between minimal and non-existent. > If issuing party tools are unavailable to resource holders, they will be unable to effect the correction. True. But it?s going to take longer to get to the point of being ready to make the correction than my understanding of the duration of this outage. > Did any packets go the wrong way due to the AfriNIC outage? Was there any actual operational impact? > I suspect not. I suspect that this is a lot of handwaving about a non-issue. > > I suspect some, though certainly few. The same incident at a time when more networks are performing OV could look very different, and I'm simply suggesting that we look closely at the options before that happens. As I understand it, AfriNIC has already modified their human procedures to address exactly this. What am I missing? I suspect no actual packets were harmed in the making of this email thread. > Don?t get me wrong, I?m all for making AfriNIC?s systems more resilient and more available, but, I think we also need to consider the actual impact of failures and not over-react to failures without impact. > Based on the information in the post mortem, it does not look like a systems failure, but purely human error. Taking the humans out of the loop on that monthly maintenance would involve compromising the integrity of the private key and thus reduce the validity of the RPKI data. As such, I?m not convinced that there is a problem here to solve beyond the procedural changes that AfriNIC says they have already implemented. > > I'm not arguing for any specific change. I would point out that when there are humans in the system, then a human failure *is* a system failure, and we should be clear on what failure modes can and cannot be tolerated. Yep? And the design specs of RPKI call for this kind of failure to be tolerable. If that?s not acceptable, then go address the RFCs and redesign RPKI to be more resilient. Owen -------------- next part -------------- An HTML attachment was scrubbed... URL: From owen at delong.com Wed Apr 10 19:43:51 2019 From: owen at delong.com (Owen DeLong) Date: Wed, 10 Apr 2019 12:43:51 -0700 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <1F40359F-A556-4E73-9601-E63EA6067CE3@delong.com> Message-ID: <7493AB12-E9E7-4231-AD4A-419B6B7D3B47@delong.com> > On Apr 10, 2019, at 6:57 AM, Noah wrote: > > > > On Wed, Apr 10, 2019 at 4:04 PM Owen DeLong > wrote: > If you automate the process, you have to store the private key in a manner in which it can be accessed automatically. > > The only process that needs automation is the timing of when certificates expire next [1] so as to best inform the humans and invoke pro-activeness which includes offline testing to avoid any human errors that may result in live production. > > Noah > [1] they indicated the monitoring system picked the issue up but perhaps more pro-activeness and offline testing to avoid human errors in the future would come in handy. AIUI, the timing is every 30 days and the humans were notified 15 days ahead and failed to act. Further, AIUI, they?ve taken steps to make sure that the humans don?t fail to act on such notification in the future. I ask that AfriNIC staff provide clarification if either of my above understandings of their report is inaccurate. Owen -------------- next part -------------- An HTML attachment was scrubbed... URL: From virtual.borg at gmail.com Thu Apr 11 04:21:59 2019 From: virtual.borg at gmail.com (Chevalier du Borg) Date: Thu, 11 Apr 2019 08:21:59 +0400 Subject: [Community-Discuss] Core and Extra services of Afrinic In-Reply-To: References: Message-ID: Le lun. 8 avr. 2019 ? 22:26, francis asiboh via Community-Discuss < community-discuss at afrinic.net> a ?crit : > > It came to my attention that Afrinic is spending too much money and time > on extra services such as IPv6 workshops and outreach activities while > core services do not appear to have proper monitoring and on-call support > for core services in place. > +1 especially when there have been no workshop or training in last 1 year. > > For instance, in the financial statement for the year 2018, there was a > surplus of $429,700. This is very good, but what is the point of such a > surplus when core services are failing again and again? > not all problem can be fix with money. > > Also, to take into consideration if there is a return on investment in the > training of IPv6 in the African region, as very few ISPs are dual stack. > if training is very bad, then it explain why few ISP are dual stack in Africa. i hope CEO and BoD > > Afrinic should first invest in its core services prior before making a > heavy investment in capacity building and outreach. > > I am perplexed seeing the number of staffs in capacity building team in > Afrinic. > especially since there is no workshop since 2018. what are those staff doing? > > Board members of Afrinic, how do you prioritize what is critical and what > is not? > > Afrinic, where is your risk analysis report? > > Regards, > Francis ASIBOH > Network Engineer > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -- Borg le Chevalier ___________________________________ "Common sense is what tells us the world is flat" -------------- next part -------------- An HTML attachment was scrubbed... URL: From sfolayan at gmail.com Thu Apr 11 05:33:08 2019 From: sfolayan at gmail.com (Sunday Folayan) Date: Thu, 11 Apr 2019 06:33:08 +0100 Subject: [Community-Discuss] Core and Extra services of Afrinic In-Reply-To: References: Message-ID: Hello, IMHO, The community you train today, is the pool of professionals that will work for you tomorrow. Capacity building is investment, insurance and assurance, all in one package. It is the core of all cores. If some services are challenging today, that can be addressed without dissing or aborting some greater goals. Thanks. Sunday. On Mon, Apr 8, 2019, 19:25 francis asiboh via Community-Discuss < community-discuss at afrinic.net> wrote: > Hello, > > It came to my attention that Afrinic is spending too much money and time > on extra services such as IPv6 workshops and outreach activities while > core services do not appear to have proper monitoring and on-call support > for core services in place. > > For instance, in the financial statement for the year 2018, there was a > surplus of $429,700. This is very good, but what is the point of such a > surplus when core services are failing again and again? > > Also, to take into consideration if there is a return on investment in the > training of IPv6 in the African region, as very few ISPs are dual stack. > > Afrinic should first invest in its core services prior before making a > heavy investment in capacity building and outreach. > > I am perplexed seeing the number of staffs in capacity building team in > Afrinic. > > Board members of Afrinic, how do you prioritize what is critical and what > is not? > > Afrinic, where is your risk analysis report? > > Regards, > Francis ASIBOH > Network Engineer > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mark.tinka at seacom.mu Thu Apr 11 05:41:14 2019 From: mark.tinka at seacom.mu (Mark Tinka) Date: Thu, 11 Apr 2019 07:41:14 +0200 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <78AB9BD0-94E4-4C87-B0AC-317C0A4E8F54@delong.com> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> <78AB9BD0-94E4-4C87-B0AC-317C0A4E8F54@delong.com> Message-ID: <5856c424-237e-3996-730f-1ecb1020cbae@seacom.mu> On 10/Apr/19 21:39, Owen DeLong wrote: > > > If I understand it correctly, however, ALL of the RIRs mirror all of > the other RIRs data,... You mean of the TAL? Mark. From owen at delong.com Thu Apr 11 15:33:41 2019 From: owen at delong.com (Owen DeLong) Date: Thu, 11 Apr 2019 08:33:41 -0700 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <5856c424-237e-3996-730f-1ecb1020cbae@seacom.mu> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> <78AB9BD0-94E4-4C87-B0AC-317C0A4E8F54@delong.com> <5856c424-237e-3996-730f-1ecb1020cbae@seacom.mu> Message-ID: <185C15CD-3865-401C-AC38-145357F74F86@delong.com> > On Apr 10, 2019, at 10:41 PM, Mark Tinka wrote: > > > > On 10/Apr/19 21:39, Owen DeLong wrote: > >> >> >> If I understand it correctly, however, ALL of the RIRs mirror all of >> the other RIRs data,... > > You mean of the TAL? I believe the TALs are not mirrored, but I believe that the ROAs and such are. Owen From amreesh.phokeer at gmail.com Thu Apr 11 15:48:55 2019 From: amreesh.phokeer at gmail.com (Amreesh Phokeer) Date: Thu, 11 Apr 2019 19:48:55 +0400 Subject: [Community-Discuss] 06 April 2019 RPKI incident - Postmortem report In-Reply-To: <185C15CD-3865-401C-AC38-145357F74F86@delong.com> References: <536476d1-635c-6c84-eb0c-22e8730afe51@afrinic.net> <73d8d558-ef23-d349-35d1-8dbf2161c70c@seacom.mu> <2a5f01d4ef83$915c0c30$b4142490$@enetworks.co.za> <3E639B6A-B38B-4C50-98C4-80FCAA6F31DF@delong.com> <78AB9BD0-94E4-4C87-B0AC-317C0A4E8F54@delong.com> <5856c424-237e-3996-730f-1ecb1020cbae@seacom.mu> <185C15CD-3865-401C-AC38-145357F74F86@delong.com> Message-ID: On Thu, Apr 11, 2019 at 7:34 PM Owen DeLong wrote: > I believe the TALs are not mirrored, but I believe that the ROAs and such > are. > As it stands ROAs aren't mirrored by any other RIR as it is the case for IRR objects. -------------- next part -------------- An HTML attachment was scrubbed... URL: From comm-announce at afrinic.net Tue Apr 23 14:37:58 2019 From: comm-announce at afrinic.net (AFRINIC Communication) Date: Tue, 23 Apr 2019 18:37:58 +0400 Subject: [Community-Discuss] Webinar - AFRINIC Board Elections 2019 Message-ID: [French and Arabic versions below] Dear Colleagues, The 2019 Nominations Committee invites all interested community members to a webinar taking place on Thursday 25th April from 09:00 ? 10:00 UTC The webinar?s purpose is to interest more able individuals within the community into getting on the AFRINIC Board, and is aimed at anyone interested in understanding the Board election and nominations process, what is expected of an AFRINIC Board member and how to actually get involved. You will interact with Serge-Parfait Iyedi Goma, the NOMCOM Chairperson ? along with the rest of the NomCom team. Among others, we will talk about: - Who can be nominated? - Under which conditions? - Which seats are available? - What are timelines? - Q & A. The webinar will be available at the following ZOOM url https://zoom.us/j/665571395, and will open 15 minutes earlier starting 0845 UTC on Thursday 25th April. See you online! Serge-Parfait Iyedi Goma Chair 2019 Nominations Committee ????????????????????????? Chers coll?gues, Le Comit? de nomination 2019 invite tous les membres de la communaut? int?ress?s ? un webinaire qui aura lieu le jeudi 25 avril de 09h00 ? 10h00 UTC. L?objectif du webinaire est d?int?resser les membres les plus aptes de la communaut? ? si?ger au conseil d?AFRINIC, et s'adresse ? toute personne int?ress?e ? comprendre le processus d??lection et de nomination du conseil, ce qu?on attend d?un membre du conseil d?AFRINIC et la fa?on de s?impliquer r?ellement. Vous dialoguerez avec Serge-Parfait Iyedi Goma, pr?sident du NOMCOM, ainsi qu'avec le reste de l'?quipe du NomCom. Entre autres, nous parlerons de: - Qui peut ?tre nomm?? - Dans quelles conditions? - Quelles sont les places disponibles? - Quels sont les d?lais? - Q & A. Le webinaire sera disponible ? l?URL ZOOM suivante https://zoom.us/j/665571395 et ouvrira 15 minutes plus t?t ? partir de 08h45 UTC le jeudi 25 avril. A bient?t en ligne! Serge-Parfait Iyedi Goma Pr?sident Comit? de nomination 2019 ???????????????????????????????????????.. ?????? ???????? ???? ???? ????????? ???? 2019 ???? ????? ??????? ???????? ??? ???? ??? ???????? ???? ??? ?????? 25 ????? ?? ?????? 9:00 ??? ?????? 10:00 UTC. ????? ?? ????????? ?? ??? ?????? ??????? ?????? ???? ???? ??????? ???????? ??? ???? ????? AFRINIC ? ????? ??? ?? ??? ???? ???? ????? ?????? ???? ??????? ?????????? ? ??? ?? ????? ?? ??? ???? ????? AFRINIC ?????? ???????? ??????. ??????? ?? Serge-Parfait Iyedi Goma ? ???? NOMCOM - ?? ???? ???? NomCom. ?? ??? ???? ???? ? ?????? ??: - ?? ???? ???? ??????? - ??? ?? ????? - ?? ?? ??????? ???????? - ?? ?? ??????? ???????? - ???? ????? ????? ????????? ?????? ??? ????? ZOOM url ?????? https://zoom.us/j/665571395 ? ????? ???? ??? 15 ????? ?? ?????? 0845 ???????? ??????? ??? ?????? ??????? 25 ?????. ???? ??? ????????! ???? ?????? ???? ???? ???? 2019 ???? ????????? From iyedigoma at gmail.com Sat Apr 27 00:11:25 2019 From: iyedigoma at gmail.com (Iyedi Goma) Date: Sat, 27 Apr 2019 01:11:25 +0100 Subject: [Community-Discuss] Webinar election process AFRINIC Message-ID: Dear all On behalf of 2019 nomcom, we want to thank you for your participation and contribution during the webinar. please find the link of the presentation material https://docs.google.com/presentation/d/1JAD7_4PiWb4xOD_TzDbz_nuOHwWiuFMjJbfo-tnQqPs/edit?usp=sharing ############################################################ Bonjour ? tous Au nom du nomcom 2019 , je souhaiterais venir vous remercier de vos participation et active contribution pour ce webinaire pri?re trouver ci-joint le lien du document sur la pr?sentation https://docs.google.com/presentation/d/1JAD7_4PiWb4xOD_TzDbz_nuOHwWiuFMjJbfo-tnQqPs/edit?usp=sharing best regards Serge-Parfait Goma AFRINIC 2019 NOMCOM chair -------------- next part -------------- An HTML attachment was scrubbed... URL: From iyedigoma at gmail.com Mon Apr 29 13:04:18 2019 From: iyedigoma at gmail.com (Iyedi Goma) Date: Mon, 29 Apr 2019 14:04:18 +0100 Subject: [Community-Discuss] Internet shutdown in Africa Message-ID: Dear all Now Benin gov learn how to block the internet and the counter measure (VPNs and Co) Africa governments are always ready to learn bad habits as if it's a curse. what do you think about digital future of africa???? best regards Serge-parfait Goma -------------- next part -------------- An HTML attachment was scrubbed... URL: From oloyede.aa at unilorin.edu.ng Mon Apr 29 13:22:13 2019 From: oloyede.aa at unilorin.edu.ng (ABDULKARIM AYOPO OLOYEDE) Date: Mon, 29 Apr 2019 14:22:13 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: Message-ID: Hi, It is really a shame. I think we need to speak out more about this and tell them this is very wrong. But the good thing about the current internet structure is there is always a back door. We need to make sure we continue to fight to make the system more decentralised and indipenden to prevent cases like this. Regards Abdulkarim Oloyede PhD. On Mon, 29 Apr 2019, 14:06 Iyedi Goma, wrote: > > Dear all > > Now Benin gov learn how to block the internet and the counter measure > (VPNs and Co) > Africa governments are always ready to learn bad habits as if it's a curse. > what do you think about digital future of africa???? > > best regards > > Serge-parfait Goma > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -- Website ,?Weekly Bulletin ?UGPortal PGPortal -------------- next part -------------- An HTML attachment was scrubbed... URL: From iyedigoma at gmail.com Mon Apr 29 15:56:35 2019 From: iyedigoma at gmail.com (Iyedi Goma) Date: Mon, 29 Apr 2019 16:56:35 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: Message-ID: Hello Yes you are really right, we need to talk about we need to find the way to solve such case. Specifically by bringing our silence Le lun. 29 avr. 2019 ? 14:22, ABDULKARIM AYOPO OLOYEDE < oloyede.aa at unilorin.edu.ng> a ?crit : > Hi, > It is really a shame. I think we need to speak out more about this and > tell them this is very wrong. > But the good thing about the current internet structure is there is always > a back door. We need to make sure we continue to fight to make the system > more decentralised and indipenden to prevent cases like this. > Regards > > Abdulkarim Oloyede PhD. > > > > > On Mon, 29 Apr 2019, 14:06 Iyedi Goma, wrote: > >> >> Dear all >> >> Now Benin gov learn how to block the internet and the counter measure >> (VPNs and Co) >> Africa governments are always ready to learn bad habits as if it's a >> curse. >> what do you think about digital future of africa???? >> >> best regards >> >> Serge-parfait Goma >> >> >> _______________________________________________ >> Community-Discuss mailing list >> Community-Discuss at afrinic.net >> https://lists.afrinic.net/mailman/listinfo/community-discuss >> > > Website , Weekly Bulletin > UGPortal > PGPortal > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From yakanho2 at yahoo.fr Mon Apr 29 19:22:00 2019 From: yakanho2 at yahoo.fr (Yazid AKANHO) Date: Mon, 29 Apr 2019 19:22:00 +0000 (UTC) Subject: [Community-Discuss] =?utf-8?q?Re=C2=A0=3ARe=3A__Internet_shutdown?= =?utf-8?q?_in_Africa?= In-Reply-To: References: Message-ID: <1662880472.3258338.1556565720131@mail.yahoo.com> Dear all,?What happened yesterday was an unbelievable nightmare.Up to twenty social media and some VPN as Openvpn were blocked around 12 am on saturday night. Both MNO subscribers were affected. The internet community used alternative VPN apps and started designing a plan and posting tweets.From 10am to 01PM, we started notice complete shutdown of ISPs and MNO one after one.The community abroad continued the tweets and a joined statement involving many associations was published (URL below). Finally, Internet came back around 12:20 AM on monday morning. Till now, no official answer from the government or regulator despite the multiple calls.The community is still organizing to continue actions.?Thanks to all those who are supporting us.I will keep you informed. statement:FR?:?https://www.accessnow.org/lettre-ouverte-sur-le-maintien-de-linternet-ouvert-et-securise-au-benin/ EN:?https://www.accessnow.org/benin-heads-to-elections-without-social-media-and-opposition-parties/?? Envoy? depuis Yahoo?Mail pour Android Le lun., avr. 29, 2019 ? 16:58, Iyedi Goma a ?crit : _______________________________________________ Community-Discuss mailing list Community-Discuss at afrinic.net https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: Untitled URL: From gregoire.ehoumi at yahoo.fr Tue Apr 30 01:35:11 2019 From: gregoire.ehoumi at yahoo.fr (Gregoire EHOUMI) Date: Mon, 29 Apr 2019 21:35:11 -0400 Subject: [Community-Discuss] =?utf-8?q?Re=C2=A0=3ARe=3A__Internet_shutdown?= =?utf-8?q?_in_Africa?= In-Reply-To: <1662880472.3258338.1556565720131@mail.yahoo.com> References: <1662880472.3258338.1556565720131@mail.yahoo.com> Message-ID: Il s?agit la, d'un exemple de mauvaise reputation pour nos noms de domaine pays ccTLD, et pour l??conomie num?rique. Les op?rateurs ?conomique ne pourront pas faire totalement confiance a des ressources Internet g?r?es par nos gouvernements. --Gr?goire EHOUMI > Le 29 avr. 2019 ? 15:22, Yazid AKANHO via Community-Discuss a ?crit : > > Dear all, > What happened yesterday was an unbelievable nightmare. > Up to twenty social media and some VPN as Openvpn were blocked around 12 am on saturday night. Both MNO subscribers were affected. The internet community used alternative VPN apps and started designing a plan and posting tweets. > From 10am to 01PM, we started notice complete shutdown of ISPs and MNO one after one. > The community abroad continued the tweets and a joined statement involving many associations was published (URL below). > > Finally, Internet came back around 12:20 AM on monday morning. > > Till now, no official answer from the government or regulator despite the multiple calls. > The community is still organizing to continue actions. > Thanks to all those who are supporting us. > I will keep you informed. > > statement: > FR : https://www.accessnow.org/lettre-ouverte-sur-le-maintien-de-linternet-ouvert-et-securise-au-benin/ > > EN: https://www.accessnow.org/benin-heads-to-elections-without-social-media-and-opposition-parties/ > > > Envoy? depuis Yahoo?Mail pour Android > Le lun., avr. 29, 2019 ? 16:58, Iyedi Goma > a ?crit : > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: Untitled.txt URL: -------------- next part -------------- An HTML attachment was scrubbed... URL: From wdelnour at gmail.com Tue Apr 30 01:52:39 2019 From: wdelnour at gmail.com (Mohd. E.Hafez) Date: Tue, 30 Apr 2019 09:52:39 +0800 Subject: [Community-Discuss] =?utf-8?q?Re=C2=A0=3ARe=3A_Internet_shutdown_?= =?utf-8?q?in_Africa?= In-Reply-To: References: <1662880472.3258338.1556565720131@mail.yahoo.com> Message-ID: <058bdd23-2db1-611a-d428-485f40837cf3@gmail.com> hi community, we (in Sudan) have a great experience during the last 5 to 6 months ago, people were using? (psiphon, touch vpn) for Android. although it violating users privacy, BUT it was enough to make one of the biggest change in the country. all the best for Africa. m.hfz On 4/30/19 9:35 AM, Gregoire EHOUMI via Community-Discuss wrote: > > Il s?agit la, d'un exemple de mauvaise reputation pour nos noms de > domaine pays ccTLD, et pour l??conomie num?rique. > > Les op?rateurs ?conomique ne pourront pas faire totalement confiance a > des ressources Internet g?r?es par nos gouvernements. > > > --Gr?goire EHOUMI > > >> Le 29 avr. 2019 ? 15:22, Yazid AKANHO via Community-Discuss >> > > a ?crit : >> >> Dear all, >> What happened yesterday was an unbelievable nightmare. >> Up to twenty social media and some VPN as Openvpn were blocked around >> 12 am on saturday night. Both MNO subscribers were affected. The >> internet community used alternative VPN apps and started designing a >> plan and posting tweets. >> From 10am to 01PM, we started notice complete shutdown of ISPs and >> MNO one after one. >> The community abroad continued the tweets and a joined statement >> involving many associations was published (URL below). >> >> Finally, Internet came back around 12:20 AM on monday morning. >> >> Till now, no official answer from the government or regulator despite >> the multiple calls. >> The community is still organizing to continue actions. >> Thanks to all those who are supporting us. >> I will keep you informed. >> >> statement: >> *FR*?: >> https://www.accessnow.org/lettre-ouverte-sur-le-maintien-de-linternet-ouvert-et-securise-au-benin/ >> >> >> *EN*: >> https://www.accessnow.org/benin-heads-to-elections-without-social-media-and-opposition-parties/ >> >> >> >> Envoy? depuis Yahoo?Mail pour Android >> >> >> Le lun., avr. 29, 2019 ? 16:58, Iyedi Goma >> > a ?crit : >> _______________________________________________ >> Community-Discuss mailing list >> Community-Discuss at afrinic.net >> https://lists.afrinic.net/mailman/listinfo/community-discuss >> > >> _______________________________________________ >> Community-Discuss mailing list >> Community-Discuss at afrinic.net >> https://lists.afrinic.net/mailman/listinfo/community-discuss > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From iyedigoma at gmail.com Tue Apr 30 07:01:27 2019 From: iyedigoma at gmail.com (Iyedi Goma) Date: Tue, 30 Apr 2019 08:01:27 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: <1662880472.3258338.1556565720131@mail.yahoo.com> Message-ID: Salut Gr?goire C est la, l un des aspects les plus importants, l impact ?conomique sur les d?cisions prises. Voici un lien qui parle de l impact de la coupure du Benin https://beninwebtv.com/2019/04/benin-legislative-2019-impact-economique-de-la-perturbation-dinternet/ Quel peut ?tre la solution pour que ce genre des choses ne se r?p?te plus ??? Cordialement Le mar. 30 avr. 2019 ? 02:35, Gregoire EHOUMI a ?crit : > > Il s?agit la, d'un exemple de mauvaise reputation pour nos noms de domaine > pays ccTLD, et pour l??conomie num?rique. > > Les op?rateurs ?conomique ne pourront pas faire totalement confiance a des > ressources Internet g?r?es par nos gouvernements. > > > --Gr?goire EHOUMI > > > Le 29 avr. 2019 ? 15:22, Yazid AKANHO via Community-Discuss < > community-discuss at afrinic.net> a ?crit : > > Dear all, > What happened yesterday was an unbelievable nightmare. > Up to twenty social media and some VPN as Openvpn were blocked around 12 > am on saturday night. Both MNO subscribers were affected. The internet > community used alternative VPN apps and started designing a plan and > posting tweets. > From 10am to 01PM, we started notice complete shutdown of ISPs and MNO one > after one. > The community abroad continued the tweets and a joined statement involving > many associations was published (URL below). > > Finally, Internet came back around 12:20 AM on monday morning. > > Till now, no official answer from the government or regulator despite the > multiple calls. > The community is still organizing to continue actions. > Thanks to all those who are supporting us. > I will keep you informed. > > statement: > *FR* : > https://www.accessnow.org/lettre-ouverte-sur-le-maintien-de-linternet-ouvert-et-securise-au-benin/ > > *EN*: > https://www.accessnow.org/benin-heads-to-elections-without-social-media-and-opposition-parties/ > > > Envoy? depuis Yahoo Mail pour Android > > > Le lun., avr. 29, 2019 ? 16:58, Iyedi Goma > a ?crit : > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From khaled at ati.tn Tue Apr 30 07:24:23 2019 From: khaled at ati.tn (khaled) Date: Tue, 30 Apr 2019 08:24:23 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: Message-ID: <20190430072426.3953DB25790@mail.ati.nat.tn> Salut Goma,En tant que communaut? faut-il cr?er un groupe de travail sur la r?putation des cctld africains?Cordialement?Envoy? depuis mon smartphone Samsung Galaxy. -------- Message d'origine --------De : Iyedi Goma Date : 30/04/2019 08:01 (GMT+01:00) ? : Gregoire EHOUMI Cc : community-discuss-request at afrinic.net, community-discuss at afrinic.net Objet : Re: [Community-Discuss] Internet shutdown in Africa Salut Gr?goireC est la, l un des aspects les plus importants, l impact ?conomique sur les d?cisions prises.?Voici un lien qui parle de l impact de la coupure du Benin??https://beninwebtv.com/2019/04/benin-legislative-2019-impact-economique-de-la-perturbation-dinternet/Quel peut ?tre la solution pour que ce genre des choses ne se r?p?te plus ???Cordialement?Le mar. 30 avr. 2019 ? 02:35, Gregoire EHOUMI a ?crit?:Il s?agit la, d'un exemple de mauvaise reputation pour nos noms de domaine pays ccTLD, et pour l??conomie num?rique.Les op?rateurs ?conomique ne pourront pas faire totalement confiance a des ressources Internet g?r?es par nos gouvernements.--Gr?goire EHOUMI Le 29 avr. 2019 ? 15:22, Yazid AKANHO via Community-Discuss a ?crit :Dear all,?What happened yesterday was an unbelievable nightmare.Up to twenty social media and some VPN as Openvpn were blocked around 12 am on saturday night. Both MNO subscribers were affected. The internet community used alternative VPN apps and started designing a plan and posting tweets.From 10am to 01PM, we started notice complete shutdown of ISPs and MNO one after one.The community abroad continued the tweets and a joined statement involving many associations was published (URL below).Finally, Internet came back around 12:20 AM on monday morning.Till now, no official answer from the government or regulator despite the multiple calls.The community is still organizing to continue actions.?Thanks to all those who are supporting us.I will keep you informed.statement:FR?:?https://www.accessnow.org/lettre-ouverte-sur-le-maintien-de-linternet-ouvert-et-securise-au-benin/EN:?https://www.accessnow.org/benin-heads-to-elections-without-social-media-and-opposition-parties/??Envoy? depuis Yahoo?Mail pour Android Le lun., avr. 29, 2019 ? 16:58, Iyedi Goma a ?crit : _______________________________________________Community-Discuss mailing listCommunity-Discuss at afrinic.nethttps://lists.afrinic.net/mailman/listinfo/community-discuss _______________________________________________Community-Discuss mailing listCommunity-Discuss at afrinic.nethttps://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From iyedigoma at gmail.com Tue Apr 30 09:15:47 2019 From: iyedigoma at gmail.com (Iyedi Goma) Date: Tue, 30 Apr 2019 10:15:47 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: <20190430072426.3953DB25790@mail.ati.nat.tn> References: <20190430072426.3953DB25790@mail.ati.nat.tn> Message-ID: Oui mais comment pouvez vous donner de la notori?t? ? ce groupe si ceux qui ont le pouvoir de d?cider continuent ? avoir un comportement contraire au respect des droit des consommateurs et la libert? des droits ? Comment ce groupe va t il redonner de la confiance si le mal ou le risque reste la. Cordialement Le mar. 30 avr. 2019 ? 08:25, khaled a ?crit : > Salut Goma, > En tant que communaut? faut-il cr?er un groupe de travail sur la > r?putation des cctld africains? > Cordialement > > > > Envoy? depuis mon smartphone Samsung Galaxy. > > -------- Message d'origine -------- > De : Iyedi Goma > Date : 30/04/2019 08:01 (GMT+01:00) > ? : Gregoire EHOUMI > Cc : community-discuss-request at afrinic.net, community-discuss at afrinic.net > Objet : Re: [Community-Discuss] Internet shutdown in Africa > > Salut Gr?goire > > C est la, l un des aspects les plus importants, l impact ?conomique sur > les d?cisions prises. > > Voici un lien qui parle de l impact de la coupure du Benin > https://beninwebtv.com/2019/04/benin-legislative-2019-impact-economique-de-la-perturbation-dinternet/ > > Quel peut ?tre la solution pour que ce genre des choses ne se r?p?te plus > ??? > > Cordialement > > Le mar. 30 avr. 2019 ? 02:35, Gregoire EHOUMI > a ?crit : > >> >> Il s?agit la, d'un exemple de mauvaise reputation pour nos noms de >> domaine pays ccTLD, et pour l??conomie num?rique. >> >> Les op?rateurs ?conomique ne pourront pas faire totalement confiance a >> des ressources Internet g?r?es par nos gouvernements. >> >> >> --Gr?goire EHOUMI >> >> >> Le 29 avr. 2019 ? 15:22, Yazid AKANHO via Community-Discuss < >> community-discuss at afrinic.net> a ?crit : >> >> Dear all, >> What happened yesterday was an unbelievable nightmare. >> Up to twenty social media and some VPN as Openvpn were blocked around 12 >> am on saturday night. Both MNO subscribers were affected. The internet >> community used alternative VPN apps and started designing a plan and >> posting tweets. >> From 10am to 01PM, we started notice complete shutdown of ISPs and MNO >> one after one. >> The community abroad continued the tweets and a joined statement >> involving many associations was published (URL below). >> >> Finally, Internet came back around 12:20 AM on monday morning. >> >> Till now, no official answer from the government or regulator despite the >> multiple calls. >> The community is still organizing to continue actions. >> Thanks to all those who are supporting us. >> I will keep you informed. >> >> statement: >> *FR* : >> https://www.accessnow.org/lettre-ouverte-sur-le-maintien-de-linternet-ouvert-et-securise-au-benin/ >> >> *EN*: >> https://www.accessnow.org/benin-heads-to-elections-without-social-media-and-opposition-parties/ >> >> >> Envoy? depuis Yahoo Mail pour Android >> >> >> Le lun., avr. 29, 2019 ? 16:58, Iyedi Goma >> a ?crit : >> _______________________________________________ >> Community-Discuss mailing list >> Community-Discuss at afrinic.net >> https://lists.afrinic.net/mailman/listinfo/community-discuss >> >> _______________________________________________ >> Community-Discuss mailing list >> Community-Discuss at afrinic.net >> https://lists.afrinic.net/mailman/listinfo/community-discuss >> >> >> -------------- next part -------------- An HTML attachment was scrubbed... URL: From comm-announce at afrinic.net Tue Apr 30 13:34:56 2019 From: comm-announce at afrinic.net (AFRINIC Communication) Date: Tue, 30 Apr 2019 17:34:56 +0400 Subject: [Community-Discuss] AFRINIC Board of Directors Announces Departure of AFRINIC CEO Message-ID: <94C09D49-3A5E-4B79-B6FB-451B8FF8B02E@afrinic.net> Ebene, Mauritius, 30 April 2019. - The AFRINIC Board of Directors would like to announce that the Chief Executive Officer, Mr. Alan Barrett, will be leaving AFRINIC with effect from 26th July 2019. The AFRINIC Board of Directors sincerely thank Mr. Alan Barrett for his selfless dedication, commitment and outstanding contribution to the global and African Internet community. ?I have taken the difficult decision to leave AFRINIC, after four years as CEO. I have been both proud to serve the African community, and humble to realise how small my own contributions have been. Any success that AFRINIC has enjoyed has been the result of a joint effort by many people, including the previous CEO, our dedicated and talented staff, Board members past and present, our vibrant community, and volunteers who serve on various committees. Much work remains to be done to make Internet access affordable, open, and available throughout Africa. I firmly believe in AFRINIC?s vision to be the leading force in growing the Internet for Africa's sustainable development, and I have every confidence that the Board and staff will continue to work towards that goal,? says Mr. Alan Barrett Mr. Alan Barrett leaves AFRINIC in a good position for future growth and we wish Mr. Alan Barrett the very best in his future endeavours. The AFRINIC Board of Directors will launch a CEO search process that will culminate in the appointment of a new CEO as soon as possible. In the meantime, all measures will be taken to ensure a smooth transition including business continuity. Best Regards, Christian D. Bope, PhD Chairman, AFRINIC Board ?????????????. Ebene, Maurice, 30 avril 2019.- Le conseil d'administration d?AFRINIC tient ? vous informer que M. Alan Barrett, directeur g?n?ral, a soumis sa d?mission et quittera son poste ? compter du 26 juillet 2019. Le conseil d'administration d'AFRINIC remercie sinc?rement M. Alan Barrett pour son d?vouement, son engagement et sa contribution exceptionnelle ? notre communaut? Internet. ?J'ai pris la difficile d?cision de quitter AFRINIC apr?s quatre ans en tant que DG. J'ai ?t? ? la fois fi?re de servir humblement la communaut? africaine et apporter mes contributions au d?veloppement de la compagnie.. Les succ?s d'AFRINIC r?sultent des efforts conjugu?s de nombreuses personnes, notamment l?ancien DG, notre personnel d?vou? et talentueux, les membres du conseil d?administration pass?s et pr?sents, notre communaut? dynamique et les b?n?voles qui si?gent ? divers comit?s. Il reste encore beaucoup ? faire pour rendre l'acc?s ? Internet abordable, ouvert et disponible dans toute l'Afrique. Je crois fermement en la vision d?AFRINIC de devenir la principale force de la croissance d?Internet pour le d?veloppement durable de l?Afrique, et je suis confiant que le conseil d'administration et le personnel continueront ? ?uvrer ? la r?alisation de cet objectif. ", a d?clar? M. Alan Barrett. M. Alan Barrett laisse AFRINIC dans une position favorable pour la croissance future et nous souhaitons ? M. Alan Barrett le meilleur des succ?s dans ses projets futurs. Le conseil d?administration d?AFRINIC lancera un processus de recrutement qui aboutira ? la nomination d?un nouveau DG d?s que possible. Entre-temps, toutes les mesures seront prises pour assurer une transition efficace, y compris la continuit? des activit?s d'AFRINIC. Meilleures salutations, Christian D. Bope, PhD Pr?sident du conseil d'administration d?AFRINIC From ish.sookun at lasentinelle.mu Tue Apr 30 15:42:34 2019 From: ish.sookun at lasentinelle.mu (Ish Sookun) Date: Tue, 30 Apr 2019 19:42:34 +0400 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: Message-ID: Hi Abdulkarim, On 4/29/19 5:22 PM, ABDULKARIM AYOPO OLOYEDE wrote: > But the good thing about the current internet structure is there is > always a back door. We need to make sure? we continue to fight to make > the system more decentralised and indipenden to prevent cases like this.? I did not understand your comment about "current internet structure is there is always a back door". Could you please clarify what you mean? Regards, Ish Sookun From ish.sookun at lasentinelle.mu Tue Apr 30 15:47:04 2019 From: ish.sookun at lasentinelle.mu (Ish Sookun) Date: Tue, 30 Apr 2019 19:47:04 +0400 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: Message-ID: Hi Serge, I recall from lengthy discussions when the idea of an "anti internet shutdown policy" was tossed here, it was argued that AFRINIC might not be the right platform to raise the issue but instead perhaps it could be raised through the Internet Governance Forum. That being said, what do you think AFRINIC could do to against internet shutdowns in Africa? Regards, Ish Sookun On 4/29/19 7:56 PM, Iyedi Goma wrote: > Hello > Yes you are really right, we need to talk about we need to find the way > to solve such case. > Specifically by bringing our silence? > > Le lun. 29 avr. 2019 ? 14:22, ABDULKARIM AYOPO OLOYEDE > > a ?crit?: > > Hi, > It is really a shame. I think we need to speak out more about this > and tell them this is very wrong.? > But the good thing about the current internet structure is there is > always a back door. We need to make sure? we continue to fight to > make the system more decentralised and indipenden to prevent cases > like this.? > Regards? > > Abdulkarim Oloyede PhD. > > > > > On Mon, 29 Apr 2019, 14:06 Iyedi Goma, > wrote: > > > Dear all > > Now Benin gov learn how to block? the internet? and the counter > measure (VPNs and Co) > Africa governments are always ready to learn bad habits as if > it's a curse. > what do you think about digital future of africa???? > > best regards > > Serge-parfait Goma > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > > > Website ,?Weekly Bulletin > ?UGPortal > PGPortal > > > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > From dewole at forum.org.ng Tue Apr 30 16:22:37 2019 From: dewole at forum.org.ng (Dewole Ajao) Date: Tue, 30 Apr 2019 17:22:37 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: Message-ID: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> Realistically, the only effective thing we can (attempt to) do is seek out the policy makers, educate them about how an uninterrupted Internet is really important to us, listen to their concerns, and help them formulate policies that address their concerns without shutting down the Internet. Easier said than done, yeah. Worth a try though. Dewole. On 4/30/2019 4:47 PM, Ish Sookun wrote: > Hi Serge, > > I recall from lengthy discussions when the idea of an "anti internet > shutdown policy" was tossed here, it was argued that AFRINIC might not > be the right platform to raise the issue but instead perhaps it could be > raised through the Internet Governance Forum. > > That being said, what do you think AFRINIC could do to against internet > shutdowns in Africa? > > Regards, > > Ish Sookun > > On 4/29/19 7:56 PM, Iyedi Goma wrote: >> Hello >> Yes you are really right, we need to talk about we need to find the way >> to solve such case. >> Specifically by bringing our silence >> >> Le lun. 29 avr. 2019 ? 14:22, ABDULKARIM AYOPO OLOYEDE >> > a ?crit?: >> >> Hi, >> It is really a shame. I think we need to speak out more about this >> and tell them this is very wrong. >> But the good thing about the current internet structure is there is >> always a back door. We need to make sure? we continue to fight to >> make the system more decentralised and indipenden to prevent cases >> like this. >> Regards >> >> Abdulkarim Oloyede PhD. >> >> >> >> >> On Mon, 29 Apr 2019, 14:06 Iyedi Goma, > > wrote: >> >> >> Dear all >> >> Now Benin gov learn how to block? the internet? and the counter >> measure (VPNs and Co) >> Africa governments are always ready to learn bad habits as if >> it's a curse. >> what do you think about digital future of africa???? >> >> best regards >> >> Serge-parfait Goma >> >> >> _______________________________________________ >> Community-Discuss mailing list >> Community-Discuss at afrinic.net >> https://lists.afrinic.net/mailman/listinfo/community-discuss >> >> >> Website ,?Weekly Bulletin >> ?UGPortal >> PGPortal >> >> >> >> _______________________________________________ >> Community-Discuss mailing list >> Community-Discuss at afrinic.net >> https://lists.afrinic.net/mailman/listinfo/community-discuss >> > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss From oloyede.aa at unilorin.edu.ng Tue Apr 30 17:40:25 2019 From: oloyede.aa at unilorin.edu.ng (ABDULKARIM AYOPO OLOYEDE) Date: Tue, 30 Apr 2019 18:40:25 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> Message-ID: Dear Ish, I totally agree with you that it is an internet governance issue and not directly related to AFRINIC. However, there is a kind of interconnection between all the players in the internet ecosystem which include AFRINIC and I think that was the reason Serge-parfait raised it here. Just as a form of awareness and seeking ways of moving forward. Then my point about the "back door". What I mean is that what we know about the internet today is a richly interconnected network without a single killer switch. The government can only speak to ISP's within their domain to shut down the internet within a country but there are other ways of bypassing that because of the interconnections. This can be bypassing local connections or even via the intranet of companies and so on. There are ways around it but not ideal. I mentioned that just so that we know that there is no single killer switch in a govermnet shutdown situation. Thanks AK On Tue, Apr 30, 2019 at 5:23 PM Dewole Ajao wrote: > Realistically, the only effective thing we can (attempt to) do is seek > out the policy makers, educate them about how an uninterrupted Internet > is really important to us, listen to their concerns, and help them > formulate policies that address their concerns without shutting down the > Internet. > > Easier said than done, yeah. Worth a try though. > > Dewole. > > On 4/30/2019 4:47 PM, Ish Sookun wrote: > > Hi Serge, > > > > I recall from lengthy discussions when the idea of an "anti internet > > shutdown policy" was tossed here, it was argued that AFRINIC might not > > be the right platform to raise the issue but instead perhaps it could be > > raised through the Internet Governance Forum. > > > > That being said, what do you think AFRINIC could do to against internet > > shutdowns in Africa? > > > > Regards, > > > > Ish Sookun > > > > On 4/29/19 7:56 PM, Iyedi Goma wrote: > >> Hello > >> Yes you are really right, we need to talk about we need to find the way > >> to solve such case. > >> Specifically by bringing our silence > >> > >> Le lun. 29 avr. 2019 ? 14:22, ABDULKARIM AYOPO OLOYEDE > >> > a > ?crit : > >> > >> Hi, > >> It is really a shame. I think we need to speak out more about this > >> and tell them this is very wrong. > >> But the good thing about the current internet structure is there is > >> always a back door. We need to make sure we continue to fight to > >> make the system more decentralised and indipenden to prevent cases > >> like this. > >> Regards > >> > >> Abdulkarim Oloyede PhD. > >> > >> > >> > >> > >> On Mon, 29 Apr 2019, 14:06 Iyedi Goma, >> > wrote: > >> > >> > >> Dear all > >> > >> Now Benin gov learn how to block the internet and the counter > >> measure (VPNs and Co) > >> Africa governments are always ready to learn bad habits as if > >> it's a curse. > >> what do you think about digital future of africa???? > >> > >> best regards > >> > >> Serge-parfait Goma > >> > >> > >> _______________________________________________ > >> Community-Discuss mailing list > >> Community-Discuss at afrinic.net Community-Discuss at afrinic.net> > >> https://lists.afrinic.net/mailman/listinfo/community-discuss > >> > >> > >> Website , Weekly Bulletin > >> UGPortal > >> PGPortal > >> > >> > >> > >> _______________________________________________ > >> Community-Discuss mailing list > >> Community-Discuss at afrinic.net > >> https://lists.afrinic.net/mailman/listinfo/community-discuss > >> > > _______________________________________________ > > Community-Discuss mailing list > > Community-Discuss at afrinic.net > > https://lists.afrinic.net/mailman/listinfo/community-discuss > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -- *Dr. Abdulkarim A.Oloyede*. *B. Eng (BUK), M.Sc (York), PhD (York), R.Eng, A+* *Senior Lecturer, **Department of Telecommunications Science, University of Ilorin, Nigeria* *Vice Chairman, Telecommunications Development Advisory Group (TDAG), **International Telecommunication Union (ITU).* *Alternative Emails: olouss at yahoo.com OR aao500 at york.ac.uk * -- Website ,?Weekly Bulletin ?UGPortal PGPortal -------------- next part -------------- An HTML attachment was scrubbed... URL: From ish.sookun at lasentinelle.mu Tue Apr 30 18:32:14 2019 From: ish.sookun at lasentinelle.mu (Ish Sookun) Date: Tue, 30 Apr 2019 22:32:14 +0400 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> Message-ID: Hi Abdulkarim, On 4/30/19 9:40 PM, ABDULKARIM AYOPO OLOYEDE wrote: > > Then my point about the "back door". > What I mean is that what we know about the internet today is a richly > interconnected network without a single killer switch.? The government > can only speak to ISP's within their domain to shut down the internet > within a country but there are other ways of bypassing that because of > the interconnections. This can be bypassing local connections or even > via the intranet of companies and so on. There are ways around it but > not ideal. I mentioned that just so that we know that there is no single > killer switch in a govermnet shutdown situation.?? > Thank you for the clarification. However, I look at it in a simple way. If I am an ordinary internet user and my ISP cuts my internet access following a government order, then I do not see an alternative that will allow me to access websites. For example, if there is an internet shutdown in Mauritius I will not be able to access www.afrinic.net. Regards, Ish Sookun From ish.sookun at lasentinelle.mu Tue Apr 30 18:49:05 2019 From: ish.sookun at lasentinelle.mu (Ish Sookun) Date: Tue, 30 Apr 2019 22:49:05 +0400 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> Message-ID: Hi Dewole, On 4/30/19 8:22 PM, Dewole Ajao wrote: > Realistically, the only effective thing we can (attempt to) do is seek > out the policy makers, educate them about how an uninterrupted Internet > is really important to us, listen to their concerns, and help them > formulate policies that address their concerns without shutting down the > Internet. > The ICT regulator in Mauritius has installed a National Internet Filtering System [1] to block internet content. It can be used to block Facebook. Should Facebook be blocked if that is a concern of policy makers? Regards, Ish Sookun [1] https://www.icta.mu/internet.html#int3 From oloyede.aa at unilorin.edu.ng Tue Apr 30 18:48:28 2019 From: oloyede.aa at unilorin.edu.ng (ABDULKARIM AYOPO OLOYEDE) Date: Tue, 30 Apr 2019 19:48:28 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> Message-ID: Dear Ish, Agreed but am not refereeing to ordinary users here. I was talking about getting desperate news out in a shutdown situation. AK On Tue, Apr 30, 2019 at 7:31 PM Ish Sookun wrote: > Hi Abdulkarim, > > On 4/30/19 9:40 PM, ABDULKARIM AYOPO OLOYEDE wrote: > > > > Then my point about the "back door". > > What I mean is that what we know about the internet today is a richly > > interconnected network without a single killer switch. The government > > can only speak to ISP's within their domain to shut down the internet > > within a country but there are other ways of bypassing that because of > > the interconnections. This can be bypassing local connections or even > > via the intranet of companies and so on. There are ways around it but > > not ideal. I mentioned that just so that we know that there is no single > > killer switch in a govermnet shutdown situation. > > > > Thank you for the clarification. > > However, I look at it in a simple way. If I am an ordinary internet user > and my ISP cuts my internet access following a government order, then I > do not see an alternative that will allow me to access websites. For > example, if there is an internet shutdown in Mauritius I will not be > able to access www.afrinic.net. > > Regards, > > Ish Sookun > -- Website ,?Weekly Bulletin ?UGPortal PGPortal -------------- next part -------------- An HTML attachment was scrubbed... URL: From ish.sookun at lasentinelle.mu Tue Apr 30 18:53:40 2019 From: ish.sookun at lasentinelle.mu (Ish Sookun) Date: Tue, 30 Apr 2019 22:53:40 +0400 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> Message-ID: <0376bb7a-1aec-172d-10aa-0f96d4f94d5d@lasentinelle.mu> Hi Abdulkarim, On 4/30/19 10:48 PM, ABDULKARIM AYOPO OLOYEDE wrote: > Agreed but am not refereeing to ordinary users here. I was talking about > getting desperate news out in a shutdown situation. If there is a nationwide internet shutdown, how would someone use a company intranet to get information out of the country? Regards, Ish Sookun From dewole at forum.org.ng Tue Apr 30 19:25:54 2019 From: dewole at forum.org.ng (Dewole Ajao) Date: Tue, 30 Apr 2019 20:25:54 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> Message-ID: <0e3906be-9f31-7a72-4ef5-f9e9a0b17b48@forum.org.ng> I wouldn't say any website should be blocked. If the policy makers have a concern (founded or unfounded), all we can do is try to educate them and show them better ways to deal with their concerns. Now is the time to start that engagement (if possible) - not after they have started blocking stuff. Regards, Dewole. On 4/30/2019 7:49 PM, Ish Sookun wrote: > Hi Dewole, > > On 4/30/19 8:22 PM, Dewole Ajao wrote: >> Realistically, the only effective thing we can (attempt to) do is seek >> out the policy makers, educate them about how an uninterrupted Internet >> is really important to us, listen to their concerns, and help them >> formulate policies that address their concerns without shutting down the >> Internet. >> > The ICT regulator in Mauritius has installed a National Internet > Filtering System [1] to block internet content. It can be used to block > Facebook. Should Facebook be blocked if that is a concern of policy makers? > > Regards, > > Ish Sookun > > [1] https://www.icta.mu/internet.html#int3 From ish.sookun at lasentinelle.mu Tue Apr 30 20:01:04 2019 From: ish.sookun at lasentinelle.mu (Ish Sookun) Date: Wed, 1 May 2019 00:01:04 +0400 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: <0e3906be-9f31-7a72-4ef5-f9e9a0b17b48@forum.org.ng> References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> <0e3906be-9f31-7a72-4ef5-f9e9a0b17b48@forum.org.ng> Message-ID: <808ff273-4972-b401-06a6-00e2eeb46379@lasentinelle.mu> Hi Dewole, On 4/30/19 11:25 PM, Dewole Ajao wrote: > I wouldn't say any website should be blocked. If the policy makers have > a concern (founded or unfounded), all we can do is try to educate them > and show them better ways to deal with their concerns. Now is the time > to start that engagement (if possible) - not after they have started > blocking stuff. I believe that fits the IGF. It would be ideal if a discussion could start here and reach people with decision-making mandates. At the moment, I do not see anything within AFRINIC that could take things beyond the mailing list, except the will of people. Benin is part of the West African Internet Governance Forum (WAIGF). There is no mention of the internet shutdown that happened in Benin at https://www.waigf.org/news. Shouldn't the regional IGFs write in support of internet users of Benin? Regards, Ish Sookun From dewole at forum.org.ng Tue Apr 30 20:20:22 2019 From: dewole at forum.org.ng (Dewole Ajao) Date: Tue, 30 Apr 2019 21:20:22 +0100 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: <808ff273-4972-b401-06a6-00e2eeb46379@lasentinelle.mu> References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> <0e3906be-9f31-7a72-4ef5-f9e9a0b17b48@forum.org.ng> <808ff273-4972-b401-06a6-00e2eeb46379@lasentinelle.mu> Message-ID: <04f67cfd-7037-a722-0ef2-5a2b7544f3c6@forum.org.ng> I was of the opinion that this was a community discussion and we were each speaking in our capacity as (potentially) affected users - not from an AFRINIC perspective; AFRINIC does not determine the engagement in our countries anyway. You are right, though - the local Internet Governance initiative such as Benin IGF (if it exists in a multi- stakeholder fashion) would be a good platform for engaging with and educating the policy makers. Dewole. On 4/30/2019 9:01 PM, Ish Sookun wrote: > Hi Dewole, > > On 4/30/19 11:25 PM, Dewole Ajao wrote: >> I wouldn't say any website should be blocked. If the policy makers have >> a concern (founded or unfounded), all we can do is try to educate them >> and show them better ways to deal with their concerns. Now is the time >> to start that engagement (if possible) - not after they have started >> blocking stuff. > I believe that fits the IGF. > > It would be ideal if a discussion could start here and reach people with > decision-making mandates. At the moment, I do not see anything within > AFRINIC that could take things beyond the mailing list, except the will > of people. > > Benin is part of the West African Internet Governance Forum (WAIGF). > There is no mention of the internet shutdown that happened in Benin at > https://www.waigf.org/news. Shouldn't the regional IGFs write in support > of internet users of Benin? > > Regards, > > Ish Sookun From noah at neo.co.tz Tue Apr 30 20:33:28 2019 From: noah at neo.co.tz (Noah) Date: Tue, 30 Apr 2019 23:33:28 +0300 Subject: [Community-Discuss] Internet shutdown in Africa In-Reply-To: <0e3906be-9f31-7a72-4ef5-f9e9a0b17b48@forum.org.ng> References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> <0e3906be-9f31-7a72-4ef5-f9e9a0b17b48@forum.org.ng> Message-ID: Folks Policies and IGF are all good until political power is threatened. In such a situation, politics will always win the day in some countries where the administrative state see it fit to temp shut down your beloved Internet after all its feasible in term of saving the day. As long as the administrative state believes it does not have the mechanism to control how information is spread, It will definately curtain the means of information dissamination. Internet shutdowns as temporaly as they have become across various countries globally... we ought to accept that they are politically motivated as most incubents believe that control of the political narrative especially during national elections would be of great advantage to those in power and they would stop at nothing to shutdown the big I. In some poweful countries, some part of the big I is censored and continues to be censored. Its just what it is. Power vs the big I. You choose. Thinking out loud. Noah On Tue, 30 Apr 2019, 22:27 Dewole Ajao, wrote: > I wouldn't say any website should be blocked. If the policy makers have > a concern (founded or unfounded), all we can do is try to educate them > and show them better ways to deal with their concerns. Now is the time > to start that engagement (if possible) - not after they have started > blocking stuff. > > Regards, > > Dewole. > > On 4/30/2019 7:49 PM, Ish Sookun wrote: > > Hi Dewole, > > > > On 4/30/19 8:22 PM, Dewole Ajao wrote: > >> Realistically, the only effective thing we can (attempt to) do is seek > >> out the policy makers, educate them about how an uninterrupted Internet > >> is really important to us, listen to their concerns, and help them > >> formulate policies that address their concerns without shutting down the > >> Internet. > >> > > The ICT regulator in Mauritius has installed a National Internet > > Filtering System [1] to block internet content. It can be used to block > > Facebook. Should Facebook be blocked if that is a concern of policy > makers? > > > > Regards, > > > > Ish Sookun > > > > [1] https://www.icta.mu/internet.html#int3 > > _______________________________________________ > Community-Discuss mailing list > Community-Discuss at afrinic.net > https://lists.afrinic.net/mailman/listinfo/community-discuss > -------------- next part -------------- An HTML attachment was scrubbed... URL: From yakanho2 at yahoo.fr Tue Apr 30 22:59:57 2019 From: yakanho2 at yahoo.fr (Yazid AKANHO) Date: Tue, 30 Apr 2019 22:59:57 +0000 (UTC) Subject: [Community-Discuss] =?utf-8?q?Re=C2=A0=3ARe=3A__Internet_shutdown?= =?utf-8?q?_in_Africa?= In-Reply-To: <04f67cfd-7037-a722-0ef2-5a2b7544f3c6@forum.org.ng> References: <3b54256d-950c-0e8f-476b-dd100615ec7f@forum.org.ng> <0e3906be-9f31-7a72-4ef5-f9e9a0b17b48@forum.org.ng> <808ff273-4972-b401-06a6-00e2eeb46379@lasentinelle.mu> <04f67cfd-7037-a722-0ef2-5a2b7544f3c6@forum.org.ng> Message-ID: <1997862979.4222033.1556665197261@mail.yahoo.com> Dears,?Yes Benin IGF exists as well as ISOC Benin and other organizations like Igbanet and ABC-PN fighting to have a safe, stable, secured, available Internet in Benin.?6 months back, the same government introduced tax on social media and Benin Internet community (mainly composed of the organizations i listed above) fighted a lot via #TaxePasMesMo campaign and finally the government resigned and engaged the dialogue with the community.It is unbelievable that just 6 months later, the same government shutdown completely the Internet a full day. Sometime, you just ask yourself in which language you should talk to the government so that they understand. Any voice, any idea wyerever it comes from is welcome to build a strategy to make them understand. Envoy? depuis Yahoo?Mail pour Android Le mar., avr. 30, 2019 ? 21:21, Dewole Ajao a ?crit : I was of the opinion that this was a community discussion and we were each speaking in our capacity as (potentially) affected users - not from an AFRINIC perspective; AFRINIC does not determine the engagement in our countries anyway. You are right, though - the local Internet Governance initiative such as Benin IGF (if it exists in a multi- stakeholder fashion) would be a good platform for engaging with and educating the policy makers. Dewole. On 4/30/2019 9:01 PM, Ish Sookun wrote: > Hi Dewole, > > On 4/30/19 11:25 PM, Dewole Ajao wrote: >> I wouldn't say any website should be blocked. If the policy makers have >> a concern (founded or unfounded), all we can do is try to educate them >> and show them better ways to deal with their concerns. Now is the time >> to start that engagement (if possible) - not after they have started >> blocking stuff. > I believe that fits the IGF. > > It would be ideal if a discussion could start here and reach people with > decision-making mandates. At the moment, I do not see anything within > AFRINIC that could take things beyond the mailing list, except the will > of people. > > Benin is part of the West African Internet Governance Forum (WAIGF). > There is no mention of the internet shutdown that happened in Benin at > https://www.waigf.org/news. Shouldn't the regional IGFs write in support > of internet users of Benin? > > Regards, > > Ish Sookun _______________________________________________ Community-Discuss mailing list Community-Discuss at afrinic.net https://lists.afrinic.net/mailman/listinfo/community-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: