[rpd] Fwd: [arin-ppml] Global internet stability is at risk due to AFRINIC's current mismanagement

[Omo Oaiya]

>As claims of errors in implementation of policy are fairly routine in

nature, it would appear to be best handled by the individual RIR, >and/or
its community and related legal system.

Sounds like a matter for the PDWG

Cheers
Omo

---------- Forwarded message ---------
From: John Curran <jcurran at arin.net>
Date: Thu, 8 Jul 2021 at 18:52
Subject: Re: [arin-ppml] Global internet stability is at risk due to
AFRINIC's current mismanagement
To: Anthony Ubah <anthonyubah512 at gmail.com>
Cc: arin-ppml at arin.net <arin-ppml at arin.net>


Mr. Ubah -

Each RIR manages its own services, and AFRINIC has been duly recognized to
administer the number resources in its region. There is ongoing litigation
in Mauritius brought against AFRINIC related to these allegations that
purportedly seeks damages of $1.8 billion (U.S. dollars). It appears that
this letter is part of the same campaign against AFRINIC as that
litigation, as the letter contains nearly identical allegations (albeit
from a series of different complainants.)

ARIN intends to await the outcome of that litigation before considering any
aspects of the allegations made below. However, from the very nature of the
allegations, they would appear to pertain to disagreements with AFRINIC on
its implementation of policy.  As claims of errors in implementation of
policy are fairly routine in nature, it would appear to be best handled by
the individual RIR, and/or its community and related legal system.

Sincerely,
/John

John Curran
President and CEO
American Registry for Internet Numbers


> On 8 Jul 2021, at 11:03 AM, Anthony Ubah <anthonyubah512 at gmail.com> wrote:

>

> Dear Community,

>

> We are writing this letter to let you know that AFRINIC's recent actions

have brought some serious risks to the hundreds of millions of users of the
Internet Ecosystem.

>

> A global internet depends on cooperation. Being one of five regional

Internet Registries, AFRINIC has the power to delete the registration of
more than a hundred million IP addresses. This power could be  even more
destructive with the addition of AS0 ROAs for space which is disputed or
reclaimed. Therefore, billions users and large scale content and services
that rely on those IP addresses could face instant lost of connection if
AFRINIC starts revoking registrations of its members with IP addresses used
in active service. Such disconnection will disrupt the connectivity of
users as well as impact service at a global scale that has never been seen
in human history.

>

> AFRINIC has been sending the following lines to members who have active

users and service in their IP addresses:

>

> “(AFRINIC) will in its sole discretion determine whether to immediately

terminate the said Agreement as well as to proceed with the reclaiming of
the aforesaid IP Number Resources.

>

> You are further informed that AFRINIC shall not be held liable for any

loss or damage of whatever nature arising out of the present notice or any
action that AFRINIC may take in accordance thereof.”

>

> We have confirmed that many members have also received such notice on

AFRINIC's pretense of violation of their RSA (Registration Service
Agreement), in addition to their Bylaws, their CPM (Consolidate Policy
Manual). The combined scale of those members services impacts tens of
millions of Internet users and services globally.

>

>

> AFRINIC's claims were mainly based on the following:

>

> 1.  "Any change in network or service provided, will request AFRINIC's

approval and is subject to re-justification of the allocation.(NOT
assignment)."

>

> In reality, the CPM has provided a distinctive use of "Allocation" and

"Assignment". Its intended allocations are for general purpose that LIRs
can use or assign (or in some cases sub-allocate) and assignments are made
within an allocation (or directly from AFRINIC to end users) to serve a
specific purpose. To request an LIR to return its allocation when the
specific purpose of the assignment has changed, has never happened in any
RIR, and was never the intention of any RIR policy.

>

> 2.  "AFRINIC space cannot be used outside of the AFRINIC region with the

exception of soft landing space only for the purpose of supporting
connectivity back to Africa. "

>

> In fact, the community has manifested its consensus regarding the fact

that there is no regional restrictions for the use of IP addresses for
pre-soft landing space. The only territorial restrictions to ever gain
consensus in the community specifically covers space issued after the start
of the soft landing policy which is clearly stipulated under the CPM. Any
act by AFRINIC to disregard this is a blatant act against the
community-approved document, CPM.

>

> 3. Multiple AFRINIC resource members have been asked to provide

information about third parties that are not using addresses issued to said
resource member (e.g. about BYOA(Bring Your Own Address) transit customers).

>

> In scenarios where one resource member (A) is a customer of another

resource member (B), there have been multiple instances of AFRINIC
demanding that B report utilisation details of A. B is not responsible for
the RIR compliance of B's customers except in regards to space issued to B
under B's registration service agreement (RSA). Hence, AFRINIC's actions
here attempt to force the resource member to violate customer
confidentiality and potentially violate data protection laws. We know of a
number of members whose resource requests have been delayed or denied
pending compliance with such demands. In some cases, AFRINIC has gone so
far as to threaten RSA termination based on failure to comply with these
demands.

>

> 4. "AFRINIC can disconnect millions of users and services without taking

any liability and at their will whenever they would like."

>

> (All the references to AFRINIC's claims, in their actual wording that

were sent to the resource members, have been attached at the bottom of this
letter, except for point 4, which was shared at the beginning of the letter)

>

> The above claims do not correspond with AFRINIC's governing documents

(CPM, RSA, and bylaw). They are a misinterpretation of those documents that
have led to an incorrect conclusion. Using those claims to manage people’s
network and trying to reclaim people active and legitimately utilised IP
addresses without having any concerns about the end users or services that
are being impacted is a direct and serious threat to the global internet.

>

> We are hoping the global community can realise and act together, to right

this wrong. If you are part of AFRINIC's resource membership, please speak
out and express your need for::

>

> 1.     The freedom to run your network as you see fit

> 2.     The ability to protect the internet connectivity of your users.

> 3.     The ability to disclose only that data which is necessary for the

legitimate administrative purposes of the registry.

>

> The reference details of AFRINIC’s claims are shown as below:

>

> Point 1:

>

> “AFRINIC acknowledges the feedback provided and further takes note that

the current utilisation of the allocated no longer matches the "needs"
expressed when resources were issued, in accordance with the RSA and we
hereby refer you to clause 6(d)(iii) of the RSA; which your organisation
signed, thereby acknowledged and agreed that the “right of use” of IP
Number Resources is bestowed within the ambit of the “need” which is
justified in its application and for no other purpose during the currency
of the present agreement.”

>

> Point 2:

>

> “AFRINIC space cannot be used outside of the AFRINIC region with the

exception of soft landing space only for the purpose of supporting
connectivity back to Africa according to section 6 of the bylaw"

>

> Section 6 of the bylaws only states what type of membership each entity

qualifies for and the requirements of said membership, nothing about IP
usage. The relevant portion of section 6 is below:

>

> 6.1) Subject to the other provisions of this Article, membership shall be

open to:

> ●      Any Person who is geographically based within, and providing

services in the African region, and who is engaged in the use of, or
business of providing, open system protocol network services; or

> ●      Any other Person who is approved by the Board or the members.

>

> Point 3:

>

> AFRINIC requests the following information to its member regarding a

customer that does not use his AFRINIC IP:

>

> “Kindly provide the name and the actual service being provided to that

client. Moreover, please share with us the reason that the client gave to
justify their need for a third-party AS number. You may alternatively share
the agreement which you have with that particular customer.”

>

>

> The signatures of dozens of community members and resource members are

attached in the Google drive link below :

>

https://drive.google.com/drive/folders/1-4ihJZjnDpca4F0JUL8N3yY_eoGhiEjX?usp=sharing

>

>

> Regards,

> _______________________________________________

> ARIN-PPML

> You are receiving this message because you are subscribed to

> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).

> Unsubscribe or manage your mailing list subscription at:

> https://lists.arin.net/mailman/listinfo/arin-ppml

> Please contact info at arin.net if you experience any issues.


_______________________________________________
ARIN-PPML
You are receiving this message because you are subscribed to
the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
Unsubscribe or manage your mailing list subscription at:
https://lists.arin.net/mailman/listinfo/arin-ppml
Please contact info at arin.net if you experience any issues.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/rpd/attachments/20210708/536de2e9/attachment-0001.html>