Reminder: Changes to Reg-RWS scheduled for 2 December [Archived]

OUT OF DATE?

Here in the Vault, information is published in its final form and then not changed or updated. As a result, some content, specifically links to other pages and other references, may be out-of-date or no longer available.

Posted: Wednesday, 30 October 2019

As we originally announced on 16 July 2019, ARIN will implement changes to its RESTful API on 2 December 2019. These changes may impact the way you interface with ARIN Online for sending reassignment information and receiving reports through ARIN’s Registration RESTful Service (Reg-RWS). The changes are:

  1. The base URL https://www.arin.net/REST will be no longer be available for Reg-RWS. You must change your base URL to https://reg.arin.net to interface with ARIN’s Reg-RWS service. The reg.arin.net service has been available for over seven years.
  2. ARIN will no longer be supporting TLS 1.0 for Reg-RWS’s transport layer. There are well-known security issues with this protocol. We will continue to support TLS 1.1 and 1.2. Please make sure your client implementation will support TLS 1.1 or 1.2. Read https://datatracker.ietf.org/doc/draft-ietf-tls-oldversions-deprecate/ for further details.

Because these changes will be implemented in about 30 days, we recommend that you review your clients that interface with the Reg-RWS service and make any required configuration or code changes now. Both TLS 1.1 and TLS 1.2 are available now on reg.arin.net and we encourage you to make these changes so you will have no operational impact when we disable https://www.arin.net/REST and the vulnerable transport protocols.

So that you can plan your upgrades accordingly, we would also like to inform you of future planned events for this service. We will be adding TLS 1.3 support to Reg-RWS in the near future. We also anticipate announcing end-of-service support for TLS 1.1, with another corresponding 120 day warning notice.

Regards,

Mark Kosters
Chief Technology Officer

American Registry for Internet Numbers (ARIN)

OUT OF DATE?

Here in the Vault, information is published in its final form and then not changed or updated. As a result, some content, specifically links to other pages and other references, may be out-of-date or no longer available.