Network Working Group A. Newton Internet-Draft VeriSign, Inc. Expires: December 5, 2003 June 06, 2003 IRIS - An Address Registry (areg) Type for the Internet Registry Information Service draft-ietf-crisp-iris-areg-02 Status of this Memo This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC2026. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http:// www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on December 5, 2003. Copyright Notice Copyright (C) The Internet Society (2003). All Rights Reserved. Abstract This document describes an IRIS (draft-ietf-crisp-iris-core-02.txt ) registry schema for IP address information. The schema extends the necessary query and result operations of IRIS to provide the functional information service needs for syntaxes and results used by Internet Protocol address registries. Newton Expires December 5, 2003 [Page 1] Internet-Draft iris-areg June 2003 Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Document Terminology . . . . . . . . . . . . . . . . . . . . 4 3. Schema Description . . . . . . . . . . . . . . . . . . . . . 5 3.1 Query Derivatives . . . . . . . . . . . . . . . . . . . . . 5 3.1.1 Query . . . . . . . . . . . . . . . . . . . . 5 3.1.2 , , and . . . . . . . . . . . . . . . . . . . . . . . 5 3.1.3 . . . . . . . . . . . . . . . . . . . 5 3.1.4 . . . . . . . . . . . . . . . . . 6 3.2 Result Derivatives . . . . . . . . . . . . . . . . . . . . . 6 3.2.1 Result . . . . . . . . . . . . . . . . . . . . 6 3.2.2 Result . . . . . . . . . . . . . . . . . . . . 6 3.2.3 Result . . . . . . . . . . . . . . . . . . . . 7 3.2.4 Result . . . . . . . . . . . . . . . . . 8 3.2.5 Result . . . . . . . . . . . . . . . . . . . . . . 9 3.2.6 Result . . . . . . . . . . . . . . . . . . . 9 3.3 Support for . . . . . . . . . . . . . . 10 4. Formal XML Syntax . . . . . . . . . . . . . . . . . . . . . 12 5. BEEP Transport Compliance . . . . . . . . . . . . . . . . . 23 5.1 Message Pattern . . . . . . . . . . . . . . . . . . . . . . 23 5.2 Server Authentication . . . . . . . . . . . . . . . . . . . 23 6. URI Resolution . . . . . . . . . . . . . . . . . . . . . . . 24 7. Internationalization Considerations . . . . . . . . . . . . 25 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . 26 9. Security Considerations . . . . . . . . . . . . . . . . . . 27 References . . . . . . . . . . . . . . . . . . . . . . . . . 28 Author's Address . . . . . . . . . . . . . . . . . . . . . . 29 A. An Example Request and Response . . . . . . . . . . . . . . 30 B. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 35 Intellectual Property and Copyright Statements . . . . . . . 36 Newton Expires December 5, 2003 [Page 2] Internet-Draft iris-areg June 2003 1. Introduction This document describes an IRIS namespace for Internet address registries using an XML Schema [5] derived from and using the IRIS [9] schema. This schema and registry type are provided to demonstrate the extensibility of the IRIS framework beyond the use of domains, a criteria defined in CRISP [11]. The schema given is this document is specified using the Extensible Markup Language (XML) 1.0 as described in XML [2], XML Schema notation as described in XML_SD [4] and XML_SS [5], and XML Namespaces as described in XML_NS [3]. Newton Expires December 5, 2003 [Page 3] Internet-Draft iris-areg June 2003 2. Document Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC2119 [8]. Newton Expires December 5, 2003 [Page 4] Internet-Draft iris-areg June 2003 3. Schema Description IRIS requires the derivation of both query and result elements by a registry schema. These descriptions follow. The descriptions contained within this section refer to XML elements and attributes and their relation to the exchange of data within the protocol. These descriptions also contain specifications outside the scope of the formal XML syntax. Therefore, this section will use terms defined by RFC 2119 [8] to describe the specification outside the scope of the formal XML syntax. While reading this section, please reference Section 4 for needed details on the formal XML syntax. 3.1 Query Derivatives 3.1.1 Query searches for contacts given search constraints. The child elements , , and allow the search to be constrained against the name of the contact. These elements may either have as children the element or the and elements. contrains the query based on the e-mail address of the contact. This may be done by an exact e-mail address using the element or by any e-mail address in a domain using the element. The element MUST only contain a valid domain according to RFC 1035 [1] (i.e. no '@' symbol). 3.1.2 , , and The , , and elements allow for searches by name of organizations, autonomous systems, and networks, respectively. All three have the same format. The child element may either have as children the element or the and elements. 3.1.3 The element is a query for a network given the IP address. It contains one of the two elements and , which contain an IPv4 and IPv6 address, respectively. The results from this query MUST be either the result or the result. More than one network result MAY be Newton Expires December 5, 2003 [Page 5] Internet-Draft iris-areg June 2003 returned. 3.1.4 The element is a query to find the children of a network, or its subnetworks, given the handle to the parent. It has a sole child element of containing the handle of the parent network. 3.2 Result Derivatives 3.2.1 Result The element represents a name server. It contains elements for the fully qualified domain name of the name server, the IP addresses of the name server, and references to the name server contacts. The element contains multiple children. Each child is an element as described by IRIS [9]. The referent of each element MUST be a (Section 3.2.5) result. The element contains elements specifying entities that are indirectly associated with the name server. 3.2.2 Result The element is a result representing an IPv4 network. It has the following child elements: o contains the registry-unique assigned handle for this network. o contains a human friendly name for the network. o contains the network address of the network in CIDR notation form. o contains the first IPv4 address of the network. o contains the last IPv4 address of the network. o One of , , or signifying the assignment and allocation status of the network. o contains an reference to the organization assigned this network. The referent MUST be an Newton Expires December 5, 2003 [Page 6] Internet-Draft iris-areg June 2003 (Section 3.2.6) result. o contains an reference to the parent network of this network. The referent MUST be an (Section 3.2.2) result. o contains element references to the name servers doing reverse DNS resolution for the addresses in this network. The referents MUST be (Section 3.2.1) results. o contains element references to the contacts for this network. The referents MUST be (Section 3.2.5) results. o contains the date when the network was first registered. o contains the date when information about this network was last updated. o The element contains elements specifying entities that are indirectly associated with this network. 3.2.3 Result The element is a result representing an IPv6 network. It has the following child elements: o contains the registry-unique assigned handle for this network. o contains a human friendly name for the network. o contains the network address of the network in CIDR notation form. o contains the first IPv6 address of the network. o contains the last IPv6 address of the network. o One of , , or signifying the assignment and allocation status of the network. o contains an reference to the organization assigned this network. The referent MUST be an Newton Expires December 5, 2003 [Page 7] Internet-Draft iris-areg June 2003 (Section 3.2.6) result. o contains an reference to the parent network of this network. The referent MUST be an (Section 3.2.3) result. o contains element references to the name servers doing reverse DNS resolution for the addresses in this network. The referents MUST be (Section 3.2.1) results. o contains element references to the contacts for this network. The referents MUST be (Section 3.2.5) results. o contains the date when the network was first registered. o contains the date when information about this network was last updated. o The element contains elements specifying entities that are indirectly associated with this network. 3.2.4 Result The element represents an assigned autonomous system. It has the following children: o contains a registry-unqiue assigned handle for this autonomous system. o contains the globally unique autonomous system number. o contains a human friendly name of this autonomous system. o contains an reference to the organization assigned this autonomous system. The referent MUST be an (Section 3.2.6) result. o contains element references to the contacts for this autonomous system. The referents MUST be (Section 3.2.5) results. o The element contains elements specifying entities that are indirectly associated with this Newton Expires December 5, 2003 [Page 8] Internet-Draft iris-areg June 2003 autonomous system. 3.2.5 Result The element represents the registration of a point of contact. It has the following child elements: o contains the registry-unique assigned handle for this contact. o Either , , and or . The first three elements specify the name of the contact broken down into the common components of a persons name. The latter element, , specifies that the contact is a group of people given the responsibility described by this element. o contains the email address for this contact. o contains an reference to the organization associated with this contact. The referent MUST be an (Section 3.2.6) result. o contains child elements describing the phone number of the contact. The child elements are , , and . o The element contains elements specifying entities that are indirectly associated with this contact. 3.2.6 Result The element represents an organization responsible for network resources. It has the following child elements: o contains the name of the organization. o contains a registry-unique identifier for this organization. o
contains the street address for this organization. o contains the city where this organization is located. o contains the national region where this organization is located. Newton Expires December 5, 2003 [Page 9] Internet-Draft iris-areg June 2003 o contains the postal code where this organization is located. o contains the country code where this organization is located. o contains element references to the administrative contacts for this organization. The referents MUST be (Section 3.2.5) results. o contains element references to the technical contacts for this organization. The referents MUST be (Section 3.2.5) results. o contains element references to the abuse contacts for this organization. The referents MUST be (Section 3.2.5) results. o contains element references to the NOC contacts for this organization. The referents MUST be (Section 3.2.5) results. o The element contains elements specifying entities that are indirectly associated with this contact. 3.3 Support for The following types of entity classes are recognized by the query of IRIS for this registry: o name-server - the fully qualified domains names of nameservers. Queries with these names will yield a result. A host may be multi-homed and therefore known by many domain names. o ns-handle - a registry unique identifier of a nameserver. Yields a result. o ipv4-ns - the IPv4 address of a nameserver. Yields a result. o ipv6-ns - the IPv6 address of a nameserver. Yields a result. o ipv4-address - a network for which an IPv4 address resides. Queries with these names will yield a result. Newton Expires December 5, 2003 [Page 10] Internet-Draft iris-areg June 2003 o ipv6-address - a network for which an IPv6 address resides. Queries with these names will yield a result. o ipv4-handle - a registry unique identifier specifying an IPv4 network. Queries with these names will yield a result. o ipv6-handle - a registry unique identifier specifying an IPv6 network. Queries with these names will yield a result. o autonomous-system - the positive integer (ASN) specifying an autonomous system. It yields a result of . o as-handle - a registry unique identifier specifying an autonomous system. It yields a result of . o contact-handle - a registry unique identifier of a contact. Yields a result of . o organization-id - a registry unique identifier of an organization. Yields a result of . o The entity names of these entity classes are case insensitive. Newton Expires December 5, 2003 [Page 11] Internet-Draft iris-areg June 2003 4. Formal XML Syntax This IP address registry is specified in the XML Schema notation. The formal syntax presented here is a complete schema representation suitable for automated validation of an XML instance when combined with the formal schema syntax of IRIS. IP address registry schema derived from IRIS schema Newton Expires December 5, 2003 [Page 13] Internet-Draft iris-areg June 2003 Newton Expires December 5, 2003 [Page 14] Internet-Draft iris-areg June 2003 Newton Expires December 5, 2003 [Page 15] Internet-Draft iris-areg June 2003 Newton Expires December 5, 2003 [Page 16] Internet-Draft iris-areg June 2003 Newton Expires December 5, 2003 [Page 18] Internet-Draft iris-areg June 2003 Newton Expires December 5, 2003 [Page 19] Internet-Draft iris-areg June 2003 Figure 1 Newton Expires December 5, 2003 [Page 22] Internet-Draft iris-areg June 2003 5. BEEP Transport Compliance IRIS allows several extensions of the core capabilities. This section outlines those extensions allowable by IRIS-BEEP [10]. 5.1 Message Pattern This registry type uses the default message pattern as described in IRIS-BEEP [10]. 5.2 Server Authentication This registry type uses the default server authentication method as described in IRIS-BEEP [10]. Newton Expires December 5, 2003 [Page 23] Internet-Draft iris-areg June 2003 6. URI Resolution The authority resolution of an IRIS URI for this registry type is similar to the default resolution spelled out in IRIS [9]. The default authority resolution process allows for the authority to be o a domain name o a domain name accompanied by a port number o an IP address o an IP address accompanied by a port number The resolution process for this registry only differs if the authority is only an IP address (i.e. without the port number). The process for this condition is as follows: 1. The IP address is converted into a domain name appropriate for the reverse DNS tree mapping. For instance, 64.83.37.226 is 226.37.83.64.in-addr.arpa. 2. The IRIS [9] default resolution process is tried on this reverse-map domain name. 3. If no records are found, then the left-most component of the reverse-map domain name is removed, and the second step is repeated again (e.g. "37.83.64.in-addr.arpa" ) 4. If all the components of the reverse-map domain name from step one are removed and no records are found, then the original IP address is used and the port number used is the well-known port for the default protocol of IRIS. The application service label associated with this registry type MUST be "XP-IP". This label has no significance other than "XP" is short for "CRISP" and "IP" is short for "Internet Protocol Address". Because the service field, of which this label is just one of many components, is limited to 32 characters, this label is purposefully meaningful but short. Newton Expires December 5, 2003 [Page 24] Internet-Draft iris-areg June 2003 7. Internationalization Considerations This document lays out no new considerations for internationalization beyond that specified in IRIS [9]. Newton Expires December 5, 2003 [Page 25] Internet-Draft iris-areg June 2003 8. IANA Considerations The following URN will need to be registered with IANA according to the IANA considerations defined in IRIS [9]: urn:ietf:params:xml:ns:areg1 The following NAPSTR application service label will need to be registered with IANA according to the IANA considerations defined in IRIS [9]: XP-IP Newton Expires December 5, 2003 [Page 26] Internet-Draft iris-areg June 2003 9. Security Considerations This document lays out no new considerations for security precautions beyond that specified in IRIS [9]. Newton Expires December 5, 2003 [Page 27] Internet-Draft iris-areg June 2003 References [1] Mockapetris, P., "Domain names - implementation and specification", STD 13, RFC 1035, November 1987. [2] World Wide Web Consortium, "Extensible Markup Language (XML) 1.0", W3C XML, February 1998, . [3] World Wide Web Consortium, "Namespaces in XML", W3C XML Namespaces, January 1999, . [4] World Wide Web Consortium, "XML Schema Part 2: Datatypes", W3C XML Schema, October 2000, . [5] World Wide Web Consortium, "XML Schema Part 1: Structures", W3C XML Schema, October 2000, . [6] Reynolds, J. and J. Postel, "ASSIGNED NUMBERS", RFC 1700, STD 2, October 1994. [7] Narten, T. and H. Alvestrand, "Guidelines for Writing an IANA Considerations Section in RFCs", RFC 2434, BCP 26, October 1998. [8] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", RFC 2119, BCP 14, March 1997. [9] Newton, A., "Internet Registry Information Service", draft-ietf-crisp-iris-core-01 (work in progress), November 2002. [10] Newton, A., "Internet Registry Information Service (IRIS) over the Blocks Extensible Exchange Protocol (BEEP)", draft-ietf-crisp-iris-beep-01 (work in progress), November 2002. [11] Newton, A., "Cross Registry Internet Service Protocol (CRISP) Requirements", draft-ietf-crisp-requirements-01 (work in progress), October 2002. Newton Expires December 5, 2003 [Page 28] Internet-Draft iris-areg June 2003 Author's Address Andrew L. Newton VeriSign, Inc. 21345 Ridgetop Circle Sterling, VA 20166 USA Phone: +1 703 948 3382 EMail: anewton@verisignlabs.com; anewton@ecotroph.net URI: http://www.verisignlabs.com/ Newton Expires December 5, 2003 [Page 29] Internet-Draft iris-areg June 2003 Appendix A. An Example Request and Response The following is an example of an IRIS request and response using this registry schema. This XML instance is a request to find a network given an IP address. 65.201.175.9 AAAAB3NzaC1yc2EAAAABIwAAAIEA0ddD+W3Agl0Lel98G1r77fZ c3nBl8CHdkmKuVGUy/ijmvdO5QxuSlU0R4BoCLZk/Sob22RApTn T+ROMbXFQBrxGH08daAOy98WqpfAutWJri61JLpubIbaqhGyB48 Qt69V6OhYfFsJjvoNEOh1k2dgzXhSlzP3OMVSKRlBzGcO8= Figure 2: areg-request.xml This XML instance is a response from Figure 2. Newton Expires December 5, 2003 [Page 30] Internet-Draft iris-areg June 2003 NET-65-201-175-0-1 UU-65-201-175-D6 65.201.175.0/24 65.201.175.0 65.201.175.255 VeriSign, Inc. Newton Expires December 5, 2003 [Page 31] Internet-Draft iris-areg June 2003 Niland, John 2002-11-18 2002-11-18 NET-65-192-0-0-1 UUNET65 65.192.0.0/11 65.192.0.0 65.223.255.255 UUNET Technologies, Inc. 2000-10-27 2002-02-13 Addresses within this block are non-portable. AAAAB3NzaC1yc2EAAAABIwAAAIEA0ddD+W3Agl0Lel98G1r77fZ c3nBl8CHdkmKuVGUy/ijmvdO5QxuSlU0R4BoCLZk/Sob22RApTn T+ROMbXFQBrxGH08daAOy98WqpfAutWJri61JLpubIbaqhGyB48 Qt69V6OhYfFsJjvoNEOh1k2dgzXhSlzP3OMVSKRlBzGcO8= Newton Expires December 5, 2003 [Page 33] Internet-Draft iris-areg June 2003 Figure 3: areg-response.xml Newton Expires December 5, 2003 [Page 34] Internet-Draft iris-areg June 2003 Appendix B. Acknowledgements Many of the concepts concerning the use of SRV records for step-wise refinement towards finding authoritative servers and many of the details of result objects in this draft were originally created by Eric A. Hall in his memos regarding the use of LDAP to satisfy the CRISP requirements. These concepts have contributed significantly to the development of this protocol. Newton Expires December 5, 2003 [Page 35] Internet-Draft iris-areg June 2003 Intellectual Property Statement The IETF takes no position regarding the validity or scope of any intellectual property or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; neither does it represent that it has made any effort to identify any such rights. Information on the IETF's procedures with respect to rights in standards-track and standards-related documentation can be found in BCP-11. Copies of claims of rights made available for publication and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementors or users of this specification can be obtained from the IETF Secretariat. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights which may cover technology that may be required to practice this standard. Please address the information to the IETF Executive Director. Full Copyright Statement Copyright (C) The Internet Society (2003). All Rights Reserved. This document and translations of it may be copied and furnished to others, and derivative works that comment on or otherwise explain it or assist in its implementation may be prepared, copied, published and distributed, in whole or in part, without restriction of any kind, provided that the above copyright notice and this paragraph are included on all such copies and derivative works. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as needed for the purpose of developing Internet standards in which case the procedures for copyrights defined in the Internet Standards process must be followed, or as required to translate it into languages other than English. The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assignees. This document and the information contained herein is provided on an "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION Newton Expires December 5, 2003 [Page 36] Internet-Draft iris-areg June 2003 HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Acknowledgement Funding for the RFC Editor function is currently provided by the Internet Society. Newton Expires December 5, 2003 [Page 37]