howto/Getting-started.md
... ...
@@ -24,7 +24,7 @@ The registry is a git repository, so objects are created by forking the main rep
24 24
25 25
When submitting your pull request, please squash your commits. It makes the request easier to read and simplifies the change history. See this [StackOverflow question](https://stackoverflow.com/questions/5189560/squash-my-last-x-commits-together-using-git) for a simple guide on how to do this.
26 26
27
-Do browse through the registry and look at the [pull request queue](https://git.dn42.us/dn42/registry/pulls) to see examples, understand how the process works and see the types of questions asked by the registry maintainers.
27
+Remember to add authentication to your `mntner` object, and [sign your commit](/howto/Registry-Authentication)
28 28
29 29
The registry includes a number of scripts to help check your request:
30 30
... ...
@@ -34,7 +34,9 @@ The registry includes a number of scripts to help check your request:
34 34
35 35
The registry maintainers run all three scripts against each request, so please run these yourself first to check for simple errors.
36 36
37
-*Whilst it is possible to use the web interface to edit files, you are encouraged to clone your repo locally and use the command line git tools. It's easy to do and learning how to use git is a skill worth knowing. Using the web interface creates a large number of commits making changes more difficult to track*
37
+Do browse through the registry and look at the [pull request queue](https://git.dn42.us/dn42/registry/pulls) to see examples, understand how the process works and see the types of questions asked by the registry maintainers.
38
+
39
+*Whilst it is possible to use the web interface to edit files, you are encouraged to clone your repo locally and use the command line git tools. It's easy to do and learning how to use git is a skill worth knowing. Using the web interface creates a large number of commits and prevents you from checking your changes with the registry scripts*
38 40
39 41
---
40 42
... ...
@@ -53,7 +55,10 @@ Create a `mntner` object in `data/mntner/` named `<FOO>-MNT`. It will be used to
53 55
54 56
- use `<FOO>-MNT` as `mnt-by`, otherwise, you won't be able to edit your maintainer object.
55 57
- Add an 'auth' attribute so that changes to your objects can be verified.
56
- Common authentication methods are:
58
+
59
+The `auth` attribute is used to verify changes to your object. There is a separate page on [registry authentication](/howto/Registry-Authentication) which details what to include in your mntner object, how to sign and verify your commits.
60
+
61
+Common authentication methods are:
57 62
- PGP Key: `auth: pgp-fingerprint <pgp-fingerprint>`
58 63
- SSH Key: `auth: ssh-{rsa,ed25519} <key>`
59 64
... ...
@@ -175,12 +180,14 @@ source: DN42
175 180
176 181
#### IPv4 (Legacy)
177 182
178
-If you also want to register an IPv4 network prefix, simply create an `inetnum` object.
183
+If you also want to register an IPv4 network prefix, simply create an `inetnum` object.
179 184
180 185
You may choose your network prefix in one of the currently open netblocks. You can get a list of unassigned subnets on the following site, please mind the allocation guideline below.
181 186
182 187
* [Open Netblocks](https://dn42.us/peers/free)
183 188
189
+Check the registry (data/inetnum) to make sure no-one else has allocated the same prefix. There are some IP ranges that are not open for assignments or are reserved for specific uses, so you should also check that the parent block has an 'open' policy. A quick and simple way to see the block policies is to run `grep "^policy" data/inetnum/*`.
190
+
184 191
| Size | Comment |
185 192
|-----:|:-------------------------|
186 193
| /29 | starter pack |
... ...
@@ -190,9 +197,11 @@ You may choose your network prefix in one of the currently open netblocks. You c
190 197
| /25 | still a lot of IPs! |
191 198
| /24 | are you an organization? |
192 199
193
-The current guideline is to allocate a /27 or smaller by default, keeping space for up to a /26 if possible. Don't allocate more than a /25 worth of addresses and please **think before you allocate**. dn42 typically uses point-to-point addressing in VPN tunnels, so a single IP address per host should be enough. If you are going to have 2-3 servers, a /28 is more than enough to suit your needs; Same will go for most home-networks. dn42 is not the public internet, but our IPv4-space is valuable too! If you need a /24 or larger, please ask in the IRC chan or on the mailing list.
200
+The current guideline is to allocate a /27 or smaller by default, keeping space for up to a /26 if possible. Don't allocate more than a /25 worth of addresses and please **think before you allocate**.
194 201
195
-To register for example 172.20.150.0/27, you need to fill in 172.20.150.0-172.20.150.31.
202
+dn42 typically uses point-to-point addressing in VPN tunnels making transit network unnecessary, a single IP address per host should be sufficient. If you are going to have 2-3 servers, a /28 is plenty; same will go for most home-networks. dn42 is not the public internet, but our IPv4-space is valuable too!
203
+
204
+If you need a /24 or larger, please ask in the IRC chan or on the mailing list and expect to provide justification. You should also ensure the range you've requested is in a suitable block.
196 205
197 206
**Note:** Reverse DNS works with _any_ prefix length, as long as your [recursive nameserver](/services/DNS) supports [RFC 2317](https://www.ietf.org/rfc/rfc2317.txt). Don't go for a /24 _just to have RDNS_.
198 207
... ...
@@ -224,7 +233,7 @@ source: DN42
224 233
example data/route/172.20.150.0_27:
225 234
```
226 235
route: 172.20.150.0/27
227
-origin: AS4242420092
236
+origin: AS4242423999
228 237
mnt-by: FOO-MNT
229 238
source: DN42
230 239
```
... ...
@@ -314,6 +323,6 @@ See [Services DNS](/Services/DNS).
314 323
315 324
# Use and provide services
316 325
317
-See [internal](/internal) for internal services.
326
+See [internal](/internal/Internal-Services) for internal services.
318 327
319 328
Don't hesitate to provide interesting services, but *please*, document them on the wiki! Otherwise, nobody will use them because nobody can guess they even exist.