An open discussion list for topics related to the eduGAIN interfederation service.

[Brook Schofield <schofield AT terena.org>]

Following up on Glenn's example... there are (at least) 19 services within eduGAIN that use Private IPv4 Addresses (RFC1918 https://tools.ietf.org/html/rfc1918 ) and 14 are from Newcastle University (a further 4 seem to be from UK Federation).

They don't have a corresponding IPv6 address - so they are entirely internal to the organisational LAN or datacentre.

Maybe that is something else for federation operators to look at when deciding to publish entities to an interfederation environment.

-Brook

On 28 November 2014 at 14:49, Glenn Wearen <glenn.wearen AT heanet.ie> wrote:

Hi,

For the federations using opt-out, have you made any efforts to promote private campus services to opt-out?

I know this was discussed in the context of discovery with DFN-AAI’a opt-out some time ago, but since the UK switch the problem is exacerbated.

Take for example Newcastle University, it has exposed 100 entities, most of which are used by Newcastle only. I feel that at this rate we are going the limits of our IdP metadata processing limits (whether Shibboleth IdP’s or otherwise) sooner than I considered during the DFN discussion.

Regards

Glenn Wearen

HEAnet Ltd. 5 Georges Dock, I.F.S.C, Dublin 1

® Ireland, No. 275301
☎+353 1 6609040  www.edugate.ie @EdugateIE

--

===================================================
Brook Schofield, Project Development Officer
GÉANT Association, Singel 468 D, 1017 AW Amsterdam, The Netherlands

Tel +31 20 530 4488    Fax +31 20 530 4499    Mob +31 65 155 3991
www.géant.org